$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: UpZbs+rHsfC/LTjnj2qMXHN/nOz4KSsKWjoKEijnDsU= Subject key identifier: 85:B6:5A:7A:D3:95:DF:E9:D7:74:88:59:26:BE:B4:D4:BF:D5:97:A4 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019EC17FBE60A881D701BA7BB61AA4BC2D46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 183D Signing time: Sat 13 Jun 2026 15:00:34 +0000 Manifest this update: Sat 13 Jun 2026 15:00:34 +0000 Manifest next update: Sun 14 Jun 2026 15:00:34 +0000 Files and hashes: 1: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (hash: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc=) 2: 5nKxR0LJgs98nQ711prCkE12LNA.roa (hash: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg=) 3: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (hash: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ=) 4: G9wXGz-V7z9N06IYkFQbWaikBuw.roa (hash: ubDv7Y8gDrp5CpRZSNK8ngDSPY4+mdKXB2Ipp8o2szI=) 5: S713gcjdnkNzN7yc5DeAIIBw450.roa (hash: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y=) 6: Uhtjh5h2mIHR4xqSRaIoSxiMlak.roa (hash: W2vJvNYSDyVMMDF76X044/wyGHHTKZcbe3dNyRLN5sw=) 7: WlUxWyqXuixA56b_z1i_j2g049k.roa (hash: D1Aaq4FWu3ElR+k2lZzxzPcMWSdaLUSSN7wh4AD3Jps=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: lx2YDX/3139gliBMCivQCNhTlZpyrNsyfwzS9XiMAkE=) 9: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (hash: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk=) 10: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (hash: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM=) 11: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (hash: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=) 12: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (hash: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo=) 13: yjtEzt4tnzwXqCj-rSCSkNIP_AU.roa (hash: ZAuaryY8xWTB7SixfOw56hlgIMJUsLPsIWvOz+XwlGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c1:7f:be:60:a8:81:d7:01:ba:7b:b6:1a:a4:bc:2d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jun 13 15:00:34 2026 GMT Not After : Jun 14 15:00:34 2026 GMT Subject: CN=85b65a7ad395dfe9d774885926beb4d4bfd597a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:57:40:6d:b8:b1:f7:1c:ea:1a:12:53:f4:10: 8f:63:fb:83:bd:ce:2d:46:d6:3e:1a:b3:36:72:f7: 1b:a7:85:e1:13:b6:85:bc:de:21:25:22:87:32:0c: f6:3c:62:31:99:a1:9d:a8:5c:36:3a:c8:d3:61:7f: 75:31:68:ee:98:b3:11:1d:7b:47:70:c4:20:96:44: d4:23:83:64:c0:63:69:fe:17:01:11:9e:47:8b:5d: 76:95:c9:e8:9c:d1:95:69:86:b8:af:21:e1:5e:b3: 75:5b:8f:7d:d8:20:02:e1:25:ad:64:b4:c4:57:ec: 84:51:d2:3d:00:e4:99:e3:36:b7:cc:4c:be:ca:40: eb:0a:e2:2b:44:99:21:59:cd:cb:da:96:0a:6d:ac: 29:a2:1d:df:62:a5:ce:29:33:c0:21:b9:4f:35:70: 63:24:e1:77:01:e8:1a:9b:56:2c:87:35:2f:f3:68: 63:8f:3a:2c:16:30:09:c6:63:25:7a:fa:7f:e1:0e: be:e4:b2:a6:a2:20:e2:1c:57:f5:c7:1f:a6:58:b0: 74:c7:99:42:71:2a:62:c2:80:d1:ef:fd:27:98:08: 4b:4f:a7:54:05:d6:64:d3:28:94:c1:68:3e:d0:dd: ea:7f:4d:d8:9b:df:67:fa:d8:87:ff:0d:c1:ef:1a: 6e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B6:5A:7A:D3:95:DF:E9:D7:74:88:59:26:BE:B4:D4:BF:D5:97:A4 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:eb:cb:f9:a5:85:24:a1:2b:7a:8f:d5:0d:ce:a8:0f:b2:17: 4e:bc:18:f7:7c:eb:66:66:b5:d5:cc:a1:5d:e4:97:bd:dc:13: 12:78:4f:a5:64:d3:05:5c:ac:51:71:55:45:1a:41:55:07:28: e7:f0:20:be:e3:fa:53:2c:8a:33:7a:67:bc:f8:32:b6:42:dc: d7:e3:1d:fc:ff:7b:75:b9:89:36:20:64:74:8e:67:3b:c4:92: 63:35:cb:e0:f1:43:2d:54:61:65:5e:a4:b0:50:65:da:fb:20: 67:15:0e:b7:61:3e:f4:e9:34:9b:ae:51:b1:0b:5d:c6:13:42: 98:d3:b2:c0:25:90:80:32:03:f7:b6:31:c2:0a:ec:0c:2b:5d: f2:b6:e7:5c:fe:08:1f:53:ef:cc:63:25:73:76:d9:07:df:4d: c6:e7:2d:50:bd:f8:55:e6:a8:64:f0:cc:4f:e3:dc:fb:be:36: 8a:5a:f0:3a:e9:ff:e2:ec:9b:10:2e:ba:56:ec:71:bb:16:5a: 6b:9f:75:52:97:1d:ac:f5:72:67:f6:1c:ed:1f:f4:c4:1d:6a: c0:c5:39:f7:59:87:e3:01:e7:d6:b9:21:09:db:d1:7c:5f:84: 7b:d1:01:90:75:b7:fe:4d:20:75:d4:7e:44:51:ed:d1:f8:7e: ba:4a:f2:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7Bf75gqIHXAbp7thqkvC1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwNjEzMTUwMDM0WhcNMjYwNjE0MTUwMDM0WjAzMTEwLwYDVQQD Eyg4NWI2NWE3YWQzOTVkZmU5ZDc3NDg4NTkyNmJlYjRkNGJmZDU5N2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VdAbbix9xzqGhJT9BCPY/uDvc4t RtY+GrM2cvcbp4XhE7aFvN4hJSKHMgz2PGIxmaGdqFw2OsjTYX91MWjumLMRHXtH cMQglkTUI4NkwGNp/hcBEZ5Hi112lcnonNGVaYa4ryHhXrN1W4992CAC4SWtZLTE V+yEUdI9AOSZ4za3zEy+ykDrCuIrRJkhWc3L2pYKbawpoh3fYqXOKTPAIblPNXBj JOF3Aegam1YshzUv82hjjzosFjAJxmMlevp/4Q6+5LKmoiDiHFf1xx+mWLB0x5lC cSpiwoDR7/0nmAhLT6dUBdZk0yiUwWg+0N3qf03Ym99n+tiH/w3B7xpuYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIW2WnrTld/p13SIWSa+tNS/1ZekMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAevL+aWF JKEreo/VDc6oD7IXTrwY93zrZma11cyhXeSXvdwTEnhPpWTTBVysUXFVRRpBVQco 5/AgvuP6UyyKM3pnvPgytkLc1+Md/P97dbmJNiBkdI5nO8SSYzXL4PFDLVRhZV6k sFBl2vsgZxUOt2E+9Ok0m65RsQtdxhNCmNOywCWQgDID97YxwgrsDCtd8rbnXP4I H1PvzGMlc3bZB99NxuctUL34VeaoZPDMT+Pc+742ilrwOun/4uybEC66VuxxuxZa a591UpcdrPVyZ/Yc7R/0xB1qwMU591mH4wHn1rkhCdvRfF+Ee9EBkHW3/k0gddR+ RFHt0fh+ukryVA== -----END CERTIFICATE-----Generated at Sat Jun 13 21:49:44 2026 by rpki-client