$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: +Z1BSEFy+UYfHqbB1pR5qHEXbGcKST1e/L8GtL6hPXc= Subject key identifier: B5:78:36:E8:BD:10:B8:34:83:72:AE:85:4B:C5:DB:A8:E0:3C:EF:7B Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019EC17FB6F12CA18B0887420CFE4272E4A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 11C0 Signing time: Sat 13 Jun 2026 15:00:33 +0000 Manifest this update: Sat 13 Jun 2026 15:00:33 +0000 Manifest next update: Sun 14 Jun 2026 15:00:33 +0000 Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=) 2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=) 3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=) 4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=) 5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=) 6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=) 7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=) 8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: TrWWyXAVH7aaZRjgqW4Ckar/MZ7Bmo1GRp4V1RTTszQ=) 9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=) 10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=) 11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=) 12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=) 13: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=) 14: ryuLKef_IroC7PFQdKy3-YDqSJA.roa (hash: RsW64+NIzEg1i7l38AMRGxCtDbntws+JXmRcjIu9krk=) 15: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=) 16: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=) 17: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=) 18: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=) 19: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=) 20: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c1:7f:b6:f1:2c:a1:8b:08:87:42:0c:fe:42:72:e4:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jun 13 15:00:33 2026 GMT Not After : Jun 14 15:00:33 2026 GMT Subject: CN=b57836e8bd10b8348372ae854bc5dba8e03cef7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a1:1a:39:b3:2e:6b:6d:b2:d0:04:05:2c:b9: ce:b0:9d:44:91:02:71:ab:9e:0f:2e:4f:05:94:64: 90:f3:da:8c:52:7a:3d:5b:a0:28:33:45:21:be:5e: 61:25:3d:7e:80:4f:c1:3d:ee:16:78:36:c1:39:66: ee:6b:25:09:54:16:74:19:05:81:8c:6a:fc:30:1e: be:47:b8:71:d0:3f:d8:ba:3c:94:88:17:b4:1a:23: f0:f2:c9:d9:42:47:6a:20:77:eb:05:a0:36:7c:e8: 68:e7:53:a4:2a:44:62:e7:f7:37:75:36:35:ca:69: c9:b3:2a:99:eb:d4:bb:14:49:f6:c3:1f:2f:fb:36: 43:df:6a:bd:3a:46:9a:d7:e6:8b:8e:37:03:3c:ea: 89:0b:28:7e:4e:a1:fb:ea:a9:3d:5f:85:51:fa:da: fa:56:bf:32:45:14:c5:fd:f4:04:c8:9a:02:08:81: 70:37:60:78:18:b1:f2:f7:b7:03:19:1b:25:5a:e9: f0:78:f0:38:bc:71:b6:a9:cc:50:da:6c:99:ad:39: ec:8e:9c:a1:69:e8:80:f5:66:fe:0b:a7:31:c5:7b: 8f:e9:9f:ca:0d:bf:f8:93:42:64:59:ed:70:be:de: 1e:85:c2:bd:e6:86:90:f4:89:58:27:4c:83:60:e7: 07:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:78:36:E8:BD:10:B8:34:83:72:AE:85:4B:C5:DB:A8:E0:3C:EF:7B X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:07:fb:fe:00:1f:14:e1:de:cf:69:cc:8d:b9:c6:ca:d1:2f: f7:bc:e4:f4:7b:a7:85:c7:97:5e:69:9c:15:c9:f5:88:a2:c8: f0:de:5d:a6:52:a0:5e:39:47:dd:70:4c:98:39:0d:06:ca:43: 18:39:46:d3:d3:20:81:3c:c7:e8:16:53:f3:21:b8:47:46:6f: 19:8d:01:b0:a9:47:e9:86:fc:b4:9d:70:25:38:cc:44:d6:86: 75:4b:21:02:55:35:62:40:03:d0:1d:55:e9:4c:8e:17:00:a4: 7b:4f:3f:75:bc:01:11:98:66:70:36:3c:f5:6b:6e:b7:92:3b: 02:c9:56:10:45:c3:2d:b2:93:f5:d0:03:07:0c:44:fb:60:a4: 8a:ae:d8:16:77:c1:05:b7:e0:3e:da:23:1b:2f:d1:2f:62:27: 26:60:8c:83:a3:26:81:de:25:66:6d:9b:6b:69:52:73:88:a0: 0f:d6:1f:76:c8:de:e1:9e:a4:0c:20:38:13:b3:21:b4:87:ab: fb:65:1b:04:0e:4e:75:d4:48:88:b9:91:c6:89:ea:0f:e8:cf: 99:92:b3:e9:b2:ea:87:a0:51:4e:14:c0:80:ad:04:6a:f0:e8: 9d:e6:05:f9:da:46:3f:3d:bd:b6:73:e1:dd:95:0f:71:53:ee: c4:b1:33:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7Bf7bxLKGLCIdCDP5CcuSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwNjEzMTUwMDMzWhcNMjYwNjE0MTUwMDMzWjAzMTEwLwYDVQQD EyhiNTc4MzZlOGJkMTBiODM0ODM3MmFlODU0YmM1ZGJhOGUwM2NlZjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KEaObMua22y0AQFLLnOsJ1EkQJx q54PLk8FlGSQ89qMUno9W6AoM0Uhvl5hJT1+gE/BPe4WeDbBOWbuayUJVBZ0GQWB jGr8MB6+R7hx0D/YujyUiBe0GiPw8snZQkdqIHfrBaA2fOho51OkKkRi5/c3dTY1 ymnJsyqZ69S7FEn2wx8v+zZD32q9Okaa1+aLjjcDPOqJCyh+TqH76qk9X4VR+tr6 Vr8yRRTF/fQEyJoCCIFwN2B4GLHy97cDGRslWunwePA4vHG2qcxQ2myZrTnsjpyh aeiA9Wb+C6cxxXuP6Z/KDb/4k0JkWe1wvt4ehcK95oaQ9IlYJ0yDYOcHdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLV4Nui9ELg0g3KuhUvF26jgPO97MB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgf7/gAf FOHez2nMjbnGytEv97zk9HunhceXXmmcFcn1iKLI8N5dplKgXjlH3XBMmDkNBspD GDlG09MggTzH6BZT8yG4R0ZvGY0BsKlH6Yb8tJ1wJTjMRNaGdUshAlU1YkAD0B1V 6UyOFwCke08/dbwBEZhmcDY89Wtut5I7AslWEEXDLbKT9dADBwxE+2Ckiq7YFnfB BbfgPtojGy/RL2InJmCMg6Mmgd4lZm2ba2lSc4igD9Yfdsje4Z6kDCA4E7MhtIer +2UbBA5OddRIiLmRxonqD+jPmZKz6bLqh6BRThTAgK0EavDoneYF+dpGPz29tnPh 3ZUPcVPuxLEzIw== -----END CERTIFICATE-----Generated at Sat Jun 13 21:35:59 2026 by rpki-client