$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: YzWYy85XFlbBsSWljGJXRKt/Wmv6dq4K6nU/sx0JIsQ= Subject key identifier: E0:6A:11:D6:81:BA:5D:59:FC:C7:83:2E:B1:5A:AB:6F:A8:E3:D7:7A Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019D98BDEF03D5B40ABB44B6606BD770DBBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 18DA Signing time: Fri 17 Apr 2026 00:01:17 +0000 Manifest this update: Fri 17 Apr 2026 00:01:17 +0000 Manifest next update: Sat 18 Apr 2026 00:01:17 +0000 Files and hashes: 1: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (hash: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ=) 2: 6dKud0rBgn68px5_CQ8NbiAhK5I.roa (hash: c4iMueJ7H9gjm+Sm3ki0CfZIxEQXW4+lG2MfIuaVr6U=) 3: 93F83tT2Wunj2ibLPRWbOwsrgjw.roa (hash: JbaoQPD70k3GYUMe5PmYVrd4g7l0SgbWLphprt9qBGY=) 4: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (hash: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU=) 5: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (hash: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY=) 6: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: nSwyNts+m8rO6ZLSniuCJwV1HlKTaVQA4qIpateP2/8=) 7: YbqOfaiEzhYbZf1v7kxnJ5oWDdI.roa (hash: K1/J1u+fYdGovmZqt2ux5U8mWlfYB0TiDE6Xjf+a840=) 8: _5mSAKagSlrWqcFH7TXH0W26og4.roa (hash: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc=) 9: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (hash: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw=) 10: hB5dwzE-8jl9eMnVeqctFOx2T7M.roa (hash: aOmUGLttRikI04KddCkVaiXTdQZBZHrIgCYCo3rRy5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:bd:ef:03:d5:b4:0a:bb:44:b6:60:6b:d7:70:db:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Apr 17 00:01:17 2026 GMT Not After : Apr 18 00:01:17 2026 GMT Subject: CN=e06a11d681ba5d59fcc7832eb15aab6fa8e3d77a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ec:f4:76:2a:53:de:f4:30:a7:d5:96:23:3d: 9a:f2:ff:fe:b0:bc:81:a1:20:f6:ce:66:f1:16:cd: e5:32:a4:5b:5a:cc:eb:b8:8c:a8:55:5f:13:3c:6c: 85:fd:d6:9a:10:c0:d6:12:cf:b3:fc:b8:3e:2a:07: 21:47:ce:18:d3:f3:c1:89:b0:47:9e:5a:70:13:6d: 51:0f:a5:6d:b1:67:b3:90:5a:82:20:69:26:d9:ab: a9:b9:bd:c1:fd:1c:f0:d2:1d:7d:40:4b:b0:75:10: 31:05:68:c9:46:d2:f4:aa:8e:73:7e:f2:83:db:cb: 1a:4f:69:28:36:1d:a9:c7:74:31:8d:ff:02:d9:03: f5:7e:f1:4e:69:e4:f9:ab:11:f7:54:00:ee:ba:f1: 0f:e6:8d:f1:16:45:6c:85:27:60:77:bf:33:f8:f5: 68:58:fe:02:81:aa:d4:58:6a:7e:c3:02:8c:d7:33: 71:fc:9f:ec:6e:32:31:be:eb:da:80:f1:c5:ba:15: 1d:30:8c:c1:84:65:9d:b2:d1:cd:f8:67:bc:5f:5d: ba:7b:3f:2b:23:50:26:1c:cd:a0:f8:3f:02:4a:6e: 41:dc:90:23:6d:8c:88:b5:55:f9:d8:1f:23:c3:b8: c0:d8:d4:fc:a7:3d:36:86:5b:20:24:29:11:8c:40: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6A:11:D6:81:BA:5D:59:FC:C7:83:2E:B1:5A:AB:6F:A8:E3:D7:7A X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:0b:7e:63:97:2c:6b:64:11:53:65:4b:46:7a:d6:68:26:b9: b7:14:0e:e0:fe:60:f7:33:46:c0:59:6a:e0:a7:01:c9:82:d9: c7:ac:d7:39:db:cd:09:b3:f4:df:83:4b:c2:64:70:99:8e:25: 00:9d:fc:e7:73:89:f5:b3:ba:23:dc:a7:91:0f:6a:77:ea:e1: db:97:51:15:03:24:66:dd:02:99:10:6e:62:73:28:30:ad:c6: 9a:b8:34:52:1a:c9:80:18:ea:ef:d9:4e:08:66:73:9a:58:19: 2d:ff:fb:12:1b:ab:e4:64:74:7f:5b:5b:56:94:74:3e:69:61: f7:10:bc:41:33:da:e9:53:db:b2:6a:f2:6a:d2:16:c9:1b:9a: 9d:d2:b0:f9:8e:94:3f:d2:21:b4:23:29:56:7b:e0:b9:20:a1: 00:b0:e8:78:77:93:8a:60:a5:5e:ff:13:38:7f:21:db:93:4e: f6:63:18:d0:4b:5f:74:54:94:ef:78:6d:12:e1:4f:99:95:a2: 5d:6f:92:57:33:e3:3a:30:c9:7a:9d:d2:9a:cd:c0:e8:00:34: b4:a8:ce:63:d4:5a:8b:b3:9d:5e:72:ea:8e:8d:fd:ee:ad:c6: e4:04:51:f6:9e:fa:02:df:42:af:60:f6:d2:42:e4:d3:50:85: e2:7f:da:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Yve8D1bQKu0S2YGvXcNu8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwNDE3MDAwMTE3WhcNMjYwNDE4MDAwMTE3WjAzMTEwLwYDVQQD EyhlMDZhMTFkNjgxYmE1ZDU5ZmNjNzgzMmViMTVhYWI2ZmE4ZTNkNzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqez0dipT3vQwp9WWIz2a8v/+sLyB oSD2zmbxFs3lMqRbWszruIyoVV8TPGyF/daaEMDWEs+z/Lg+KgchR84Y0/PBibBH nlpwE21RD6VtsWezkFqCIGkm2aupub3B/Rzw0h19QEuwdRAxBWjJRtL0qo5zfvKD 28saT2koNh2px3Qxjf8C2QP1fvFOaeT5qxH3VADuuvEP5o3xFkVshSdgd78z+PVo WP4CgarUWGp+wwKM1zNx/J/sbjIxvuvagPHFuhUdMIzBhGWdstHN+Ge8X126ez8r I1AmHM2g+D8CSm5B3JAjbYyItVX52B8jw7jA2NT8pz02hlsgJCkRjEDufQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBqEdaBul1Z/MeDLrFaq2+o49d6MB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAt+Y5cs a2QRU2VLRnrWaCa5txQO4P5g9zNGwFlq4KcByYLZx6zXOdvNCbP034NLwmRwmY4l AJ3853OJ9bO6I9ynkQ9qd+rh25dRFQMkZt0CmRBuYnMoMK3Gmrg0UhrJgBjq79lO CGZzmlgZLf/7Ehur5GR0f1tbVpR0Pmlh9xC8QTPa6VPbsmryatIWyRuandKw+Y6U P9IhtCMpVnvguSChALDoeHeTimClXv8TOH8h25NO9mMY0EtfdFSU73htEuFPmZWi XW+SVzPjOjDJep3Sms3A6AA0tKjOY9Rai7OdXnLqjo397q3G5ARR9p76At9Cr2D2 0kLk01CF4n/aLA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:34:11 2026 by rpki-client