$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: +wFFPKe3KeFRKBIZy8cySJA+xpyjiMIAQsfRO8aPm8U= Subject key identifier: 25:02:1D:62:E8:A5:D6:9B:A5:2E:BD:1E:D1:DC:1A:7F:E3:3D:C5:D5 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019FA93DF9C2F88097ED40B2D9DB0A5D4F16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 18B5 Signing time: Tue 28 Jul 2026 15:00:38 +0000 Manifest this update: Tue 28 Jul 2026 15:00:38 +0000 Manifest next update: Wed 29 Jul 2026 15:00:38 +0000 Files and hashes: 1: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (hash: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc=) 2: 5nKxR0LJgs98nQ711prCkE12LNA.roa (hash: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg=) 3: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (hash: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ=) 4: G9wXGz-V7z9N06IYkFQbWaikBuw.roa (hash: ubDv7Y8gDrp5CpRZSNK8ngDSPY4+mdKXB2Ipp8o2szI=) 5: S713gcjdnkNzN7yc5DeAIIBw450.roa (hash: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y=) 6: Uhtjh5h2mIHR4xqSRaIoSxiMlak.roa (hash: W2vJvNYSDyVMMDF76X044/wyGHHTKZcbe3dNyRLN5sw=) 7: WlUxWyqXuixA56b_z1i_j2g049k.roa (hash: D1Aaq4FWu3ElR+k2lZzxzPcMWSdaLUSSN7wh4AD3Jps=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: QhAoc6FuQClmumhdhugaAjX+3thlg06c8O0xG/qqgmU=) 9: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (hash: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk=) 10: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (hash: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM=) 11: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (hash: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=) 12: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (hash: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo=) 13: yjtEzt4tnzwXqCj-rSCSkNIP_AU.roa (hash: ZAuaryY8xWTB7SixfOw56hlgIMJUsLPsIWvOz+XwlGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3d:f9:c2:f8:80:97:ed:40:b2:d9:db:0a:5d:4f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jul 28 15:00:38 2026 GMT Not After : Jul 29 15:00:38 2026 GMT Subject: CN=25021d62e8a5d69ba52ebd1ed1dc1a7fe33dc5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6c:54:b5:1a:ff:33:27:45:99:51:d9:c6:07: 8f:a7:90:cc:42:08:1c:27:37:ea:dc:87:74:26:26: e2:d6:52:38:da:ce:b5:88:01:39:3f:be:3c:06:88: c1:c7:69:3a:60:11:13:0c:9e:aa:b7:95:85:4c:03: d7:af:7a:00:88:3c:1f:b5:b1:a8:4b:d0:a2:70:31: 7c:98:e0:d9:01:af:66:29:e3:de:0f:bf:55:42:4a: 18:8c:f7:dd:20:f7:93:9f:52:40:45:a3:f7:38:bf: 14:29:73:10:3b:dd:a4:c7:30:dd:c7:2a:45:2d:40: 4a:c4:98:2d:5c:0d:a3:f3:86:78:a9:18:13:4c:f9: ca:ca:55:f7:e6:24:a4:54:b4:3e:b6:f0:28:7b:a4: ae:5b:f0:b5:20:e5:55:1b:af:bd:0a:27:db:52:f5: 6b:5c:26:fe:d1:60:bd:65:58:c0:08:0d:fb:f8:0d: 76:56:95:1b:aa:a2:ab:ab:cd:7f:5e:71:80:b1:e9: 40:2b:74:9a:68:cf:2d:d0:0f:20:61:1e:cd:ad:97: 56:e6:ae:8c:d6:b8:49:86:22:c6:43:42:8f:15:b4: e2:3c:71:13:c6:d2:3d:83:c1:d1:e6:f0:b5:e1:a8: 46:da:02:35:f5:6f:df:b3:d6:3b:65:73:8e:8e:51: 35:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:02:1D:62:E8:A5:D6:9B:A5:2E:BD:1E:D1:DC:1A:7F:E3:3D:C5:D5 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:ab:8e:ba:60:70:70:4e:1d:8d:62:33:24:2e:3a:ac:14:56: 09:76:b8:28:ed:28:b1:ef:e9:64:e4:cf:cf:b0:90:3b:ef:f8: 0b:a4:77:05:07:e4:f1:b4:63:fc:b5:a1:bf:09:5f:bc:95:93: 05:2a:d4:49:75:64:c2:38:5e:df:ed:88:e8:d2:8f:36:27:3b: 82:f7:a5:93:9e:f0:b3:0f:92:f9:54:61:3c:31:37:4d:1a:70: 91:99:78:74:c0:c3:5b:13:35:78:66:c4:c7:38:a7:53:80:1e: f5:e0:84:2d:a5:43:1c:d3:96:7b:b1:b0:20:96:32:c7:74:cc: 8f:f0:43:76:5f:9a:98:19:bb:4b:8e:fd:3d:2c:d4:75:e1:57: 26:d3:67:19:dd:5b:ae:a1:d4:40:33:0a:3e:a1:80:ab:b4:ce: 5f:bb:dc:e4:b5:fb:3d:e9:81:a1:c4:c0:35:42:78:fb:f6:cb: 6f:62:f7:f5:55:4e:0b:c8:33:f0:c8:91:f4:71:a2:fa:91:17: 55:61:98:59:18:ea:c0:11:94:f6:06:7f:dd:c1:20:37:f2:ea: d2:b5:d4:35:c0:d8:ef:88:61:1a:d1:47:1a:7a:17:e7:2d:f4: a6:09:8c:72:25:f8:74:9c:b4:95:65:e4:02:2f:20:a8:3a:d1: 3b:f7:77:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPfnC+ICX7UCy2dsKXU8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwNzI4MTUwMDM4WhcNMjYwNzI5MTUwMDM4WjAzMTEwLwYDVQQD EygyNTAyMWQ2MmU4YTVkNjliYTUyZWJkMWVkMWRjMWE3ZmUzM2RjNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimxUtRr/MydFmVHZxgePp5DMQggc Jzfq3Id0Jibi1lI42s61iAE5P748BojBx2k6YBETDJ6qt5WFTAPXr3oAiDwftbGo S9CicDF8mODZAa9mKePeD79VQkoYjPfdIPeTn1JARaP3OL8UKXMQO92kxzDdxypF LUBKxJgtXA2j84Z4qRgTTPnKylX35iSkVLQ+tvAoe6SuW/C1IOVVG6+9CifbUvVr XCb+0WC9ZVjACA37+A12VpUbqqKrq81/XnGAselAK3SaaM8t0A8gYR7NrZdW5q6M 1rhJhiLGQ0KPFbTiPHETxtI9g8HR5vC14ahG2gI19W/fs9Y7ZXOOjlE1DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUCHWLopdabpS69HtHcGn/jPcXVMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyKuOumBw cE4djWIzJC46rBRWCXa4KO0ose/pZOTPz7CQO+/4C6R3BQfk8bRj/LWhvwlfvJWT BSrUSXVkwjhe3+2I6NKPNic7gvelk57wsw+S+VRhPDE3TRpwkZl4dMDDWxM1eGbE xzinU4Ae9eCELaVDHNOWe7GwIJYyx3TMj/BDdl+amBm7S479PSzUdeFXJtNnGd1b rqHUQDMKPqGAq7TOX7vc5LX7PemBocTANUJ4+/bLb2L39VVOC8gz8MiR9HGi+pEX VWGYWRjqwBGU9gZ/3cEgN/Lq0rXUNcDY74hhGtFHGnoX5y30pgmMciX4dJy0lWXk Ai8gqDrRO/d3nA== -----END CERTIFICATE-----Generated at Wed Jul 29 01:16:10 2026 by rpki-client