$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: xhqow8YxasSWHcY/t/E7A1ea6InbGXdSMizq0DhRywI= Subject key identifier: A1:7D:1B:80:E6:DF:6E:BA:C2:6B:69:EC:D5:3B:5D:C8:73:A7:B7:1A Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 01A1279EB94345FB8F7A320F1FAC48EC108E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 197B Signing time: Sat 10 Oct 2026 21:01:15 +0000 Manifest this update: Sat 10 Oct 2026 21:01:15 +0000 Manifest next update: Sun 11 Oct 2026 21:01:15 +0000 Files and hashes: 1: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (hash: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc=) 2: 5nKxR0LJgs98nQ711prCkE12LNA.roa (hash: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg=) 3: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (hash: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ=) 4: G9wXGz-V7z9N06IYkFQbWaikBuw.roa (hash: ubDv7Y8gDrp5CpRZSNK8ngDSPY4+mdKXB2Ipp8o2szI=) 5: S713gcjdnkNzN7yc5DeAIIBw450.roa (hash: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y=) 6: Uhtjh5h2mIHR4xqSRaIoSxiMlak.roa (hash: W2vJvNYSDyVMMDF76X044/wyGHHTKZcbe3dNyRLN5sw=) 7: WlUxWyqXuixA56b_z1i_j2g049k.roa (hash: D1Aaq4FWu3ElR+k2lZzxzPcMWSdaLUSSN7wh4AD3Jps=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: 1HAoyFrdIhpXPPSAIHh0RC/rpb8eigrQcNaBUeC1moo=) 9: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (hash: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk=) 10: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (hash: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM=) 11: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (hash: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=) 12: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (hash: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo=) 13: yjtEzt4tnzwXqCj-rSCSkNIP_AU.roa (hash: ZAuaryY8xWTB7SixfOw56hlgIMJUsLPsIWvOz+XwlGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:27:9e:b9:43:45:fb:8f:7a:32:0f:1f:ac:48:ec:10:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Oct 10 21:01:15 2026 GMT Not After : Oct 11 21:01:15 2026 GMT Subject: CN=a17d1b80e6df6ebac26b69ecd53b5dc873a7b71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:66:b4:ef:17:4d:e5:4c:c1:99:23:30:b3: 3a:7d:f5:55:68:ae:57:c2:17:2d:65:d0:63:64:ea: cb:41:bc:2c:04:5a:d0:1d:52:56:4f:2d:22:8f:3e: 58:6c:62:cb:66:a8:91:82:14:71:46:9e:64:ef:b3: 27:19:d7:60:3d:c1:20:e6:b9:08:1e:fe:3e:33:32: 04:b1:6f:5c:cb:b2:ab:d9:51:df:5b:ca:59:88:bf: a7:18:fc:13:19:e1:f1:00:c8:73:bf:c1:05:cf:ed: 9c:57:6b:fb:14:0c:32:b8:b3:8e:5c:16:5e:b2:8f: 8f:6e:5b:6f:b2:9a:46:85:0e:b7:83:69:51:1a:c2: 7f:c8:bf:ff:8f:50:b1:2f:a8:7e:2f:af:10:fa:0e: aa:cb:80:e7:2e:50:31:e1:2a:19:93:25:20:35:ba: 10:d7:b4:82:9b:02:07:87:f0:e4:e0:ea:8a:6d:74: 4e:54:88:21:9b:bc:79:bd:af:f0:f2:a3:d7:44:ed: 36:1c:7e:e9:5d:c4:cd:95:43:de:87:c1:dc:11:37: ff:cb:fc:00:d4:8a:31:c8:e4:77:91:d5:e6:c9:32: 96:0c:23:ed:41:d3:55:ff:c5:44:18:3b:f6:29:4d: a5:28:16:74:d7:68:82:ec:c0:31:29:d3:29:05:75: 76:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7D:1B:80:E6:DF:6E:BA:C2:6B:69:EC:D5:3B:5D:C8:73:A7:B7:1A X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:fb:c9:ca:87:27:ad:15:90:8f:af:e8:60:b5:2e:be:84:c1: 31:e8:d6:09:cf:95:c9:65:04:6e:4a:0a:02:cb:92:9a:16:ea: 0b:3d:bb:24:51:9e:42:90:1d:3f:6b:60:79:a0:ea:1d:a5:e8: 30:86:57:fd:b8:f4:85:51:88:90:ba:12:07:9a:99:ed:6a:a2: 04:f7:16:5f:4e:27:4d:fa:82:9c:55:44:71:12:7d:b6:c9:7e: 6d:9c:cb:f8:08:0d:ae:c7:3a:d0:30:07:4d:75:da:74:13:cc: 53:8f:03:0e:11:14:43:76:96:9d:45:3c:25:4e:3f:b0:0d:9c: 29:fc:f6:ad:7e:77:9f:46:4c:1b:91:03:9a:96:f3:df:e2:5c: 8c:3e:62:2f:65:21:d7:ae:bb:25:f7:8a:ab:8a:1c:46:6a:c1: ab:9a:c1:3c:e9:a0:d0:37:e4:87:78:e3:88:c1:00:d7:b2:32: 7a:69:e2:1d:93:e6:69:58:73:8b:30:c8:35:3a:5d:19:71:24: 9a:6c:a6:d6:67:82:16:1b:e2:6a:e5:b5:e0:62:31:29:f5:7d: 9b:ba:87:b9:19:7a:f9:a3:c9:37:44:a7:f8:a3:d8:54:c8:30: b6:2a:70:fc:6a:61:f7:d6:7f:3f:e2:03:a8:d7:ca:80:3c:21: 98:c0:7c:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEnnrlDRfuPejIPH6xI7BCOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYxMDEwMjEwMTE1WhcNMjYxMDExMjEwMTE1WjAzMTEwLwYDVQQD EyhhMTdkMWI4MGU2ZGY2ZWJhYzI2YjY5ZWNkNTNiNWRjODczYTdiNzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi1mtO8XTeVMwZkjMLM6ffVVaK5X whctZdBjZOrLQbwsBFrQHVJWTy0ijz5YbGLLZqiRghRxRp5k77MnGddgPcEg5rkI Hv4+MzIEsW9cy7Kr2VHfW8pZiL+nGPwTGeHxAMhzv8EFz+2cV2v7FAwyuLOOXBZe so+PbltvsppGhQ63g2lRGsJ/yL//j1CxL6h+L68Q+g6qy4DnLlAx4SoZkyUgNboQ 17SCmwIHh/Dk4OqKbXROVIghm7x5va/w8qPXRO02HH7pXcTNlUPeh8HcETf/y/wA 1IoxyOR3kdXmyTKWDCPtQdNV/8VEGDv2KU2lKBZ012iC7MAxKdMpBXV2bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKF9G4Dm3266wmtp7NU7Xchzp7caMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfvJyocn rRWQj6/oYLUuvoTBMejWCc+VyWUEbkoKAsuSmhbqCz27JFGeQpAdP2tgeaDqHaXo MIZX/bj0hVGIkLoSB5qZ7WqiBPcWX04nTfqCnFVEcRJ9tsl+bZzL+AgNrsc60DAH TXXadBPMU48DDhEUQ3aWnUU8JU4/sA2cKfz2rX53n0ZMG5EDmpbz3+JcjD5iL2Uh 1667JfeKq4ocRmrBq5rBPOmg0Dfkh3jjiMEA17IyemniHZPmaVhzizDINTpdGXEk mmym1meCFhviauW14GIxKfV9m7qHuRl6+aPJN0Sn+KPYVMgwtipw/Gph99Z/P+ID qNfKgDwhmMB8Kw== -----END CERTIFICATE-----Generated at Sat Oct 10 23:18:37 2026 by rpki-client