$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: brSqzL/s4ybxTJ1rqeZABc0LqshYLxLP6OqxrB/x9lc= Subject key identifier: 7D:F1:DE:17:F4:7B:78:B5:82:D2:AA:9D:11:BE:E0:0F:FE:D7:30:87 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019D9BF58EFA5C45050862C29064F46E6F80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 17A5 Signing time: Fri 17 Apr 2026 15:00:54 +0000 Manifest this update: Fri 17 Apr 2026 15:00:54 +0000 Manifest next update: Sat 18 Apr 2026 15:00:54 +0000 Files and hashes: 1: 47SPVD5eRBRtQOdhkPJLtKlWVtw.roa (hash: bKkMN0a5lRYs5L43ucFGHo3R0nOeIgw+eg3xKbAgfAc=) 2: 5nKxR0LJgs98nQ711prCkE12LNA.roa (hash: JIisZ4jB4MLoM1hM7ofWzH6YaAn+TmQso/C3gjZUBsg=) 3: Fa0yONavCjEAe1Eohi0yspGlhxQ.roa (hash: 3eZFK3rqXv1duhuoTsoGkRZWH46FcIWfv4LFjn6GgpQ=) 4: G9wXGz-V7z9N06IYkFQbWaikBuw.roa (hash: ubDv7Y8gDrp5CpRZSNK8ngDSPY4+mdKXB2Ipp8o2szI=) 5: S713gcjdnkNzN7yc5DeAIIBw450.roa (hash: o4Y3l1bMTiDxCyLlapaxwgYpQHnFJpp2OPyiWQGZU7Y=) 6: Uhtjh5h2mIHR4xqSRaIoSxiMlak.roa (hash: W2vJvNYSDyVMMDF76X044/wyGHHTKZcbe3dNyRLN5sw=) 7: WlUxWyqXuixA56b_z1i_j2g049k.roa (hash: D1Aaq4FWu3ElR+k2lZzxzPcMWSdaLUSSN7wh4AD3Jps=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: AhvK2SRrbYCxU9MNDsKNZuewPh7ukvVldCoOcpQCQT0=) 9: cO3L_O9iH3CpAb6wfKqnzexaiZw.roa (hash: pj94KMfhjICUsVaoxZhEfK8uuBzuqSDVbcY5a+83gKk=) 10: icZTPv9OR5OTnhr1rHGcxCJ58Ak.roa (hash: arprUL7p8dPltybL9Ima2iSVJ5V28bMQjBY9hAOORcM=) 11: t79xap_1Ai1eIDAVN_obgOAxh8I.roa (hash: SQqzbufQ2nobJI4V5WArtaMZb1xgFTHwnAl8dSm/a14=) 12: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (hash: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo=) 13: yjtEzt4tnzwXqCj-rSCSkNIP_AU.roa (hash: ZAuaryY8xWTB7SixfOw56hlgIMJUsLPsIWvOz+XwlGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:f5:8e:fa:5c:45:05:08:62:c2:90:64:f4:6e:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Apr 17 15:00:54 2026 GMT Not After : Apr 18 15:00:54 2026 GMT Subject: CN=7df1de17f47b78b582d2aa9d11bee00ffed73087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:c5:b1:35:57:53:48:79:f7:e1:83:7c:e0: cb:33:46:bf:be:d6:8d:a9:e0:d8:c7:4c:dd:04:0d: cd:cf:15:e9:a0:02:15:b7:50:f4:55:b7:15:7d:f4: a6:13:2d:64:44:f2:4f:c0:07:29:39:e2:a2:1e:b1: d3:5c:49:b0:4c:7d:8a:05:9d:51:e7:0a:8d:53:6f: 16:a6:ba:79:62:90:4e:1b:ce:71:0c:eb:63:a5:d3: 81:ce:f2:ba:e3:9a:db:c2:ad:b5:55:63:ed:c0:b1: 1b:5e:8d:96:05:96:ff:ae:10:b8:1a:8b:50:e0:2f: e2:1c:f2:0b:e3:ef:4d:87:aa:cd:5d:a9:d3:94:ae: 88:37:43:b0:b5:72:53:be:ee:70:59:e8:7e:eb:08: f9:4b:74:7d:a5:4d:06:e7:4f:55:08:10:0f:ab:1e: d3:68:5d:71:3b:36:a6:4b:01:18:3d:59:1f:35:7a: 3b:4f:59:f9:68:85:9d:8b:48:2d:ba:1f:e5:90:07: e7:d1:c1:de:99:12:88:c4:91:52:69:ca:29:4f:89: e0:58:ee:38:ba:0d:0d:a1:26:a1:b7:14:78:ab:87: 75:11:b4:a4:10:2e:fb:80:e7:f3:35:8b:73:a9:80: e6:b3:50:bc:15:76:56:80:1c:5f:6e:ef:59:48:17: 8b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F1:DE:17:F4:7B:78:B5:82:D2:AA:9D:11:BE:E0:0F:FE:D7:30:87 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0a:fa:ea:74:d0:04:f7:b8:a2:bd:31:48:77:56:76:91:ba: 53:e1:35:55:05:f1:6f:99:63:77:a7:4c:60:83:70:a0:0d:f0: 37:a1:50:55:ea:e3:7d:c5:53:e8:af:cf:56:cd:0b:7c:fd:e8: ab:79:ca:c6:af:94:2c:28:df:3b:f1:81:3d:fd:41:46:44:c5: 12:6a:40:d7:1c:5b:30:cc:4e:05:89:92:9f:a1:37:73:bd:c6: d8:77:ae:39:0b:ec:66:ce:04:68:2c:03:ed:f4:fc:24:31:c1: ac:d3:41:99:e6:46:e8:97:31:88:b7:d0:af:cd:09:44:96:89: be:97:91:99:56:23:64:9b:29:48:30:51:53:c6:97:21:fc:59: a4:cb:16:2c:e8:52:a8:b8:f1:e5:24:ff:95:0e:60:38:57:5c: 3d:fd:44:7c:77:d0:f2:b4:a6:8c:37:3a:48:84:af:2c:dd:76: 1a:79:10:b1:1a:e6:2d:b3:5d:be:bb:8a:e6:d7:fc:dd:df:80: 97:0d:e8:fa:3b:00:58:82:7b:88:18:39:eb:50:08:c0:a7:5d: cf:01:38:8d:32:6e:6f:4b:80:25:4e:93:51:4e:03:fe:a4:7b: 7c:6d:7c:ed:f8:89:08:5a:6c:59:e1:22:b7:49:18:4f:b2:92: c7:48:54:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2b9Y76XEUFCGLCkGT0bm+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwNDE3MTUwMDU0WhcNMjYwNDE4MTUwMDU0WjAzMTEwLwYDVQQD Eyg3ZGYxZGUxN2Y0N2I3OGI1ODJkMmFhOWQxMWJlZTAwZmZlZDczMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYPFsTVXU0h59+GDfODLM0a/vtaN qeDYx0zdBA3NzxXpoAIVt1D0VbcVffSmEy1kRPJPwAcpOeKiHrHTXEmwTH2KBZ1R 5wqNU28Wprp5YpBOG85xDOtjpdOBzvK645rbwq21VWPtwLEbXo2WBZb/rhC4GotQ 4C/iHPIL4+9Nh6rNXanTlK6IN0OwtXJTvu5wWeh+6wj5S3R9pU0G509VCBAPqx7T aF1xOzamSwEYPVkfNXo7T1n5aIWdi0gtuh/lkAfn0cHemRKIxJFSacopT4ngWO44 ug0NoSahtxR4q4d1EbSkEC77gOfzNYtzqYDms1C8FXZWgBxfbu9ZSBeLvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3x3hf0e3i1gtKqnRG+4A/+1zCHMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwr66nTQ BPe4or0xSHdWdpG6U+E1VQXxb5ljd6dMYINwoA3wN6FQVerjfcVT6K/PVs0LfP3o q3nKxq+ULCjfO/GBPf1BRkTFEmpA1xxbMMxOBYmSn6E3c73G2HeuOQvsZs4EaCwD 7fT8JDHBrNNBmeZG6JcxiLfQr80JRJaJvpeRmVYjZJspSDBRU8aXIfxZpMsWLOhS qLjx5ST/lQ5gOFdcPf1EfHfQ8rSmjDc6SISvLN12GnkQsRrmLbNdvruK5tf83d+A lw3o+jsAWIJ7iBg561AIwKddzwE4jTJub0uAJU6TUU4D/qR7fG187fiJCFpsWeEi t0kYT7KSx0hUTg== -----END CERTIFICATE-----Generated at Sat Apr 18 01:42:48 2026 by rpki-client