$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft File: xCzMCbGKriXcamxXk_m5IMj2oZA.mft (raw, json) Hash identifier: 61TZbrjlHi/hfrruATy6Vuhc73RK4ytpKPU5E1W//h8= Subject key identifier: 40:6B:EB:BB:C3:47:31:BC:68:B1:B1:5D:15:6E:AF:A4:52:11:76:19 Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90 Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190 Certificate serial: 01A0E363A51E4B569399CB9738E811920ACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft Manifest number: EF Signing time: Sun 27 Sep 2026 15:02:33 +0000 Manifest this update: Sun 27 Sep 2026 15:02:33 +0000 Manifest next update: Mon 28 Sep 2026 15:02:33 +0000 Files and hashes: 1: 0EqH53VKbjCBwptRrMrgE491HhQ.roa (hash: hlOlUUZZiEuddmv9KYC5nE6Vh5F6OtggwbOcesZb7ew=) 2: 5o0i3iMYhKiDSsjJw2IO_CJCyRI.roa (hash: cLWDRlb5at0aBAH980evnabI9atanrKNEOAJh0qjBjM=) 3: 9_lEI-YO-xsNbdJzpz_Zj20rYco.roa (hash: oMnrwxFfNZp1LGwhuhUfXcc2UVGqfAbo9ZJKmysRQV0=) 4: E8IDfbPJ-ASUqOO7Y_PebCnfcG8.roa (hash: Y97cV5mLD6OdoMRNkkIiqZ3KZIjQpuOlelMU9OFPxmA=) 5: H9L6_6x2hId55TmALa95rri1bEE.roa (hash: 9r2y4hipyP45iIbJJm1kWRG0SgwtjIdEoYjDvubCc0w=) 6: YpPmYf6zgICwfjz8NuAopnzNieM.roa (hash: Wfroa7HPPkCm63Ywbw+5nQxutBW2wjmxATyJS+4COgo=) 7: Z5KCSZVXGCrp9dNdx67dsrIqMQs.roa (hash: OByLdhjOZ0YIarl8arWqnOnJBvbgrJT1GS2f+GSHfp4=) 8: c4_Bhf2_gp-Hy5KN9JDfGFYxZ78.roa (hash: 1JGwg63mXrikqzD+c6YLgxnjzd6dRLDZcHOVSYL/I9U=) 9: f2uUPGNXC_pxdPQmPP-DpsHFtOQ.roa (hash: mFFk7nFev+G1oGZg2IbBid7J61ARFJ8OWPLRJsrECIA=) 10: w9Z_kQBpH-mdA7iwzKTWMENR2To.roa (hash: rlA3z5HMnFFWQ/5n7/7EQ6au3c+5eK2aDkiGB8PIifk=) 11: xCzMCbGKriXcamxXk_m5IMj2oZA.crl (hash: AEEwbGGhIAPm+l4oipM1i3WGJmWN5ivr35235dD/8j8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 10:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e3:63:a5:1e:4b:56:93:99:cb:97:38:e8:11:92:0a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190 Validity Not Before: Sep 27 15:02:33 2026 GMT Not After : Sep 28 15:02:33 2026 GMT Subject: CN=406bebbbc34731bc68b1b15d156eafa452117619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:06:dc:74:5b:d2:fd:1b:fd:5e:2d:a9:df: 75:e9:71:ee:5a:ce:19:ee:1d:9e:0e:ad:b1:68:5a: 9b:18:40:1c:2f:52:39:3c:01:5a:9c:ec:e7:8c:c1: 8d:ac:cd:d9:fe:d1:1d:f3:87:45:62:5d:32:e4:d4: e5:fa:06:d3:31:8b:b7:de:12:12:53:68:51:45:6b: 5f:ca:c3:24:da:d5:f4:e4:79:30:af:5a:e6:4f:18: b6:5f:61:93:59:03:47:be:54:4f:45:6f:f3:92:78: a1:51:e3:bf:7b:52:78:88:28:84:a7:19:93:63:60: af:23:da:f7:a5:24:c7:40:62:5c:12:7b:c3:28:99: e3:c7:8c:ba:1b:a1:2a:3f:d6:a8:ab:e0:fe:48:a9: f4:20:16:92:93:7b:b6:aa:d4:75:80:7e:6a:97:4f: 07:73:c4:2d:9a:35:ac:b4:5a:6f:6d:97:a4:f2:98: e8:4e:15:18:6f:60:4c:f2:f6:e5:8d:ca:f6:66:9b: c7:24:00:ee:6b:91:a5:50:d3:f2:e0:31:df:4a:da: 2c:71:68:19:8b:bb:02:f4:63:20:41:ce:b4:9a:49: 0c:bf:1b:ce:b7:cc:cb:60:48:2e:54:86:c4:d5:a4: 88:a8:aa:b5:58:90:49:d7:47:ce:d3:48:64:f3:fe: 07:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6B:EB:BB:C3:47:31:BC:68:B1:B1:5D:15:6E:AF:A4:52:11:76:19 X509v3 Authority Key Identifier: keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b5:7d:1b:ad:88:4e:a8:f5:ca:bf:b7:10:b1:64:b4:f5:2d: ba:b2:c5:e7:b3:0f:70:d1:89:12:87:2f:86:d0:c4:2d:9c:1f: 44:4c:db:fa:49:cc:93:7d:cc:f0:71:20:ba:30:2f:b4:8a:c0: 92:3b:c1:76:4c:e0:74:1e:9e:76:a4:f0:5c:66:98:14:42:c9: 17:d2:af:9b:f0:80:bb:84:43:d4:99:03:bf:68:44:fa:b4:de: dd:cd:3f:44:5c:d5:2d:64:2f:73:b7:a3:6c:41:a1:0e:9a:fc: a5:e8:55:7c:46:b1:c7:e4:7c:4a:a8:3e:eb:fd:66:44:5a:be: 2e:c6:f0:50:57:d6:cd:a6:b4:5a:79:2e:29:37:bf:80:97:44: 6e:e5:b5:cb:1b:19:fd:02:e8:b6:ab:8d:64:dd:43:0b:e5:09: b9:58:8f:d2:92:95:2a:2d:6e:48:93:2e:05:3e:91:37:03:9d: 21:84:f5:04:83:8c:7c:7f:be:a3:a3:c7:ab:f1:2d:7d:1f:20: 6f:48:45:ea:30:e5:7d:b0:78:8e:96:e6:e9:79:bd:dd:d5:98: 70:64:ea:db:fc:c5:06:16:26:be:15:66:fb:21:7b:f3:fd:e9: 31:a4:13:49:44:7c:a5:d6:76:ec:28:ff:d9:07:a8:79:02:34: 8f:a1:28:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDjY6UeS1aTmcuXOOgRkgrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MmNjYzA5YjE4YWFlMjVkYzZhNmM1NzkzZjliOTIwYzhm NmExOTAwHhcNMjYwOTI3MTUwMjMzWhcNMjYwOTI4MTUwMjMzWjAzMTEwLwYDVQQD Eyg0MDZiZWJiYmMzNDczMWJjNjhiMWIxNWQxNTZlYWZhNDUyMTE3NjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZgG3HRb0v0b/V4tqd916XHuWs4Z 7h2eDq2xaFqbGEAcL1I5PAFanOznjMGNrM3Z/tEd84dFYl0y5NTl+gbTMYu33hIS U2hRRWtfysMk2tX05Hkwr1rmTxi2X2GTWQNHvlRPRW/zknihUeO/e1J4iCiEpxmT Y2CvI9r3pSTHQGJcEnvDKJnjx4y6G6EqP9aoq+D+SKn0IBaSk3u2qtR1gH5ql08H c8QtmjWstFpvbZek8pjoThUYb2BM8vbljcr2ZpvHJADua5GlUNPy4DHfStoscWgZ i7sC9GMgQc60mkkMvxvOt8zLYEguVIbE1aSIqKq1WJBJ10fO00hk8/4HUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBr67vDRzG8aLGxXRVur6RSEXYZMB8GA1UdIwQY MBaAFMQszAmxiq4l3GpsV5P5uSDI9qGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbV9G62I Tqj1yr+3ELFktPUturLF57MPcNGJEocvhtDELZwfREzb+knMk33M8HEgujAvtIrA kjvBdkzgdB6edqTwXGaYFELJF9Kvm/CAu4RD1JkDv2hE+rTe3c0/RFzVLWQvc7ej bEGhDpr8pehVfEaxx+R8Sqg+6/1mRFq+LsbwUFfWzaa0WnkuKTe/gJdEbuW1yxsZ /QLotquNZN1DC+UJuViP0pKVKi1uSJMuBT6RNwOdIYT1BIOMfH++o6PHq/EtfR8g b0hF6jDlfbB4jpbm6Xm93dWYcGTq2/zFBhYmvhVm+yF78/3pMaQTSUR8pdZ27Cj/ 2QeoeQI0j6EoXg== -----END CERTIFICATE-----Generated at Sun Sep 27 19:27:32 2026 by rpki-client