$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: Y6pHYxUosIp+O2pwM+g8rc+aNBkAdyx1i1a251hNlyc= Subject key identifier: C0:62:13:8A:FB:30:EE:B1:12:97:71:82:C1:56:F8:AD:9E:5A:B4:D9 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 01A0BD66E02059EACAAA6BF5349EF14F0718 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 1A7E Signing time: Sun 20 Sep 2026 06:00:30 +0000 Manifest this update: Sun 20 Sep 2026 06:00:30 +0000 Manifest next update: Mon 21 Sep 2026 06:00:30 +0000 Files and hashes: 1: 1-l4RaLfBJyd2MPQTNrHgHOb738I.asa (hash: 7p+VWBjLWtE4REi9BbdzkPj1Ve0U1PFZBt+RJ3xIr6c=) 2: 56tuRDz3a2YTFgeWS1NrR18OXkg.roa (hash: 1nNgHHZdgSddhmbVFpAOLV/4EiXUghshKvJclDsKVmQ=) 3: 5MrbF5bNGEPF9upXfBtS4A4wDl4.roa (hash: cuTzNTZt0vxLLk58kaLIpL4TUhhDviNmQSTtCDK4SsY=) 4: GTSmnG0PAVTq_ZIe3OqYIPLnDko.roa (hash: qe+WDGTjMvxnPuiz5zKe63b6ayHJKcpH5bKiSm9lucU=) 5: JFWICVCDQ0-5n6Qon8fcHbGHC1c.roa (hash: zytsTfDYZZwrcpQaDSmmhp6xyQ2RMRRVWWyPiD2yWTY=) 6: KCBoMxNAGr3ol6s6RM6pJTYa9E0.roa (hash: FunXZj+wtacs6pD/kFNFcLd6gqmej6YgcTSrFfpXd0I=) 7: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: xK37Tq5EK1gua5GHiOV0cnYph/FJCbi3poThKwCgxfg=) 8: YbqOfaiEzhYbZf1v7kxnJ5oWDdI.roa (hash: K1/J1u+fYdGovmZqt2ux5U8mWlfYB0TiDE6Xjf+a840=) 9: Yeq657xhQdSGU8ozMoBAHWz1c7o.roa (hash: R/IQB+JYvEApcpK9ekXgPiUzLmKHajFNMuKejVzFsKs=) 10: _5mSAKagSlrWqcFH7TXH0W26og4.roa (hash: 32J2xduAEK4/SsGh6SuDbhyqyhh7XlyF7binO4R80Wc=) 11: _CYFplyxe0M8AGr1RbZtWaBJCec.roa (hash: ySL4S7eZ51S8plbBqZUtXVpCREgkLAcEZfRUYmcl9sw=) 12: pw7UY5cxtDgJd7dLAtwYGNvRcpo.roa (hash: g4uEePdexAW53FzeUPyjdIrDSmjkq/x7/+0BrdOJwdU=) 13: ubBrtzGmGbSO-WUwJl4ceatGG7s.roa (hash: HzJ4FfYId8f62Ds2rGoMX1JffixOL9SOPWiVHisDEAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bd:66:e0:20:59:ea:ca:aa:6b:f5:34:9e:f1:4f:07:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Sep 20 06:00:30 2026 GMT Not After : Sep 21 06:00:30 2026 GMT Subject: CN=c062138afb30eeb112977182c156f8ad9e5ab4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ca:2f:e7:fe:34:a1:a9:7c:f7:07:d1:7a:4c: 62:9a:b4:f4:18:ab:ba:31:2e:db:37:1b:e5:85:41: e2:e4:9c:24:76:0d:cc:a1:f3:7d:c6:a3:e3:7d:37: 7c:9b:8c:7f:bb:bc:c4:d1:3e:b8:04:a6:e7:92:68: 5c:c9:26:bb:8e:d8:7a:cc:55:60:3e:f4:a0:e6:d2: 68:96:86:cc:31:c8:2e:b5:bb:c9:dc:e5:8c:87:d5: d4:5e:b6:00:8a:26:1d:b9:6e:9f:d3:5c:d8:91:87: d8:1f:bb:7f:9f:0a:a7:05:68:3b:61:2b:a6:03:9b: a2:9f:f6:dd:4f:60:08:ee:c4:a4:1f:71:e0:12:a5: 77:a4:3f:2d:95:dc:d4:f5:fd:ac:70:4c:08:ef:31: 9e:11:c1:2f:b1:50:ff:55:f8:ff:8f:26:b1:3c:45: 5f:5f:c0:91:33:1e:1a:9d:59:11:b2:b0:53:f9:b0: b4:8e:c1:a9:d8:99:bf:e2:85:09:5b:51:fa:95:7f: 70:ce:d8:a6:22:6f:d9:5e:9d:6e:f5:29:db:78:91: 3f:6b:06:75:ad:9b:44:4b:6c:5e:1a:16:ea:39:22: 46:2d:72:cf:85:4b:0e:43:74:95:01:d3:12:49:58: 9e:ec:6d:7b:04:09:fe:e9:b1:b5:31:00:a1:6f:c3: 38:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:62:13:8A:FB:30:EE:B1:12:97:71:82:C1:56:F8:AD:9E:5A:B4:D9 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:37:21:40:87:60:ef:e4:fc:34:da:0f:be:68:df:87:d6:c0: 94:c6:3a:5e:0a:58:01:3f:1a:f7:71:48:ee:7d:eb:ca:02:a8: ef:2a:b2:99:9d:e2:07:5e:8f:84:a9:34:79:ec:fc:b1:9e:4a: a6:d3:e9:08:23:3e:a8:46:44:33:91:f2:aa:2f:8c:8b:35:55: 11:87:5b:ca:d9:fb:60:97:37:c9:6c:91:e9:1f:a8:7e:ff:a6: 2c:2d:99:c7:cd:ee:63:48:eb:74:d0:ad:37:34:3c:7d:4b:3b: a1:59:66:92:74:eb:b8:6a:c2:38:7b:ab:49:2f:7e:57:55:3f: 8f:88:c3:a1:30:88:b3:86:9a:b5:eb:c4:13:d7:e5:21:07:45: dd:07:10:e7:4f:29:86:0c:5f:b5:7e:dd:7d:24:69:eb:2b:69: 03:e7:de:9e:70:5d:db:00:81:25:fa:db:ec:11:21:bd:04:26: 33:00:5c:a7:1a:fa:1f:ea:a6:2d:27:9a:73:86:a2:13:73:56: 93:ff:81:80:9f:8a:b9:f9:5a:57:3f:d9:29:2c:ce:4f:f4:4d: 35:12:6d:98:ec:c5:d5:cd:80:22:02:71:bf:00:aa:a9:72:0f: 1a:28:36:be:a1:a6:c4:28:71:25:9e:83:e8:59:c1:65:b9:17: 52:88:49:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC9ZuAgWerKqmv1NJ7xTwcYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjYwOTIwMDYwMDMwWhcNMjYwOTIxMDYwMDMwWjAzMTEwLwYDVQQD EyhjMDYyMTM4YWZiMzBlZWIxMTI5NzcxODJjMTU2ZjhhZDllNWFiNGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsov5/40oal89wfRekximrT0GKu6 MS7bNxvlhUHi5Jwkdg3MofN9xqPjfTd8m4x/u7zE0T64BKbnkmhcySa7jth6zFVg PvSg5tJolobMMcgutbvJ3OWMh9XUXrYAiiYduW6f01zYkYfYH7t/nwqnBWg7YSum A5uin/bdT2AI7sSkH3HgEqV3pD8tldzU9f2scEwI7zGeEcEvsVD/Vfj/jyaxPEVf X8CRMx4anVkRsrBT+bC0jsGp2Jm/4oUJW1H6lX9wztimIm/ZXp1u9SnbeJE/awZ1 rZtES2xeGhbqOSJGLXLPhUsOQ3SVAdMSSVie7G17BAn+6bG1MQChb8M4QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBiE4r7MO6xEpdxgsFW+K2eWrTZMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzchQIdg 7+T8NNoPvmjfh9bAlMY6XgpYAT8a93FI7n3rygKo7yqymZ3iB16PhKk0eez8sZ5K ptPpCCM+qEZEM5Hyqi+MizVVEYdbytn7YJc3yWyR6R+ofv+mLC2Zx83uY0jrdNCt NzQ8fUs7oVlmknTruGrCOHurSS9+V1U/j4jDoTCIs4aatevEE9flIQdF3QcQ508p hgxftX7dfSRp6ytpA+fennBd2wCBJfrb7BEhvQQmMwBcpxr6H+qmLSeac4aiE3NW k/+BgJ+KuflaVz/ZKSzOT/RNNRJtmOzF1c2AIgJxvwCqqXIPGig2vqGmxChxJZ6D 6FnBZbkXUohJ8A== -----END CERTIFICATE-----Generated at Sun Sep 20 15:49:42 2026 by rpki-client