$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: 0P0/bOVQj5QaNV3w5MlFEuGtSRdCyQlVWQdGmRDKFyc= Subject key identifier: BC:8E:C8:01:24:72:00:9D:3B:C5:95:B1:7E:3C:83:6C:2D:A4:EC:AF Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 01A127D5E7472BBEB3C99F4EBF9AF0DD9B7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 12FF Signing time: Sat 10 Oct 2026 22:01:32 +0000 Manifest this update: Sat 10 Oct 2026 22:01:32 +0000 Manifest next update: Sun 11 Oct 2026 22:01:32 +0000 Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=) 2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=) 3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=) 4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=) 5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=) 6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=) 7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=) 8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: Mn62iR4sS7Kt9dDXwih/JNTS221zzfpIShJ1Zd2SojY=) 9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=) 10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=) 11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=) 12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=) 13: lFVnv43JGFMjXUtMDg1t8_wpiXE.roa (hash: YLYniFH+If3bpoeshgJ5j5KDhpm+zPn+w+d9vNOzd7M=) 14: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=) 15: ryuLKef_IroC7PFQdKy3-YDqSJA.roa (hash: RsW64+NIzEg1i7l38AMRGxCtDbntws+JXmRcjIu9krk=) 16: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=) 17: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=) 18: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=) 19: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=) 20: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=) 21: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 22:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:27:d5:e7:47:2b:be:b3:c9:9f:4e:bf:9a:f0:dd:9b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Oct 10 22:01:32 2026 GMT Not After : Oct 11 22:01:32 2026 GMT Subject: CN=bc8ec8012472009d3bc595b17e3c836c2da4ecaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8b:79:0c:40:c0:ad:1d:2e:4a:fb:79:10:3f: 3f:58:9f:e8:a7:ec:b3:b5:25:85:25:06:83:a2:4f: bd:6b:e8:5a:64:b6:d4:0a:9a:0f:ef:99:5f:2a:e1: 41:1a:e3:a2:ff:00:86:fd:dd:8a:45:90:23:19:7e: 00:f2:71:34:54:c6:11:72:22:d6:d7:31:f3:0f:ff: cf:e2:cc:18:6c:17:03:60:f4:c1:33:f7:3d:86:76: 9e:bd:b3:c3:93:c7:f3:dc:a8:98:e2:9d:fa:31:ba: ed:17:2f:5c:1a:28:d5:e2:1a:b5:91:77:6e:c0:f1: cf:4a:da:2d:8c:b4:a6:84:cb:fc:bf:63:a3:fd:75: 80:85:e1:14:91:5e:e0:96:32:a4:67:f3:bf:37:91: 9a:66:8d:93:30:c4:07:7c:47:38:7c:e0:8d:f7:95: b2:f7:2f:96:00:a8:8a:bc:08:f4:a3:34:d9:9c:13: 4d:73:27:e1:37:72:3d:64:76:0f:5c:f4:3e:0c:a2: af:6b:a9:41:88:97:5f:09:38:3c:ac:c0:e7:25:89: 30:49:f1:ed:c0:3f:2d:f0:64:c2:e3:77:8e:9b:12: db:cd:80:1e:44:4d:51:1d:7b:86:4c:00:de:ee:15: a0:26:f5:66:a8:1e:ea:f9:a1:80:52:a8:7a:2d:63: df:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8E:C8:01:24:72:00:9D:3B:C5:95:B1:7E:3C:83:6C:2D:A4:EC:AF X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:93:df:d2:9c:a9:e5:74:9a:8f:99:a1:51:09:d2:27:83:27: 8a:b3:e2:0f:18:d2:93:80:be:25:a3:af:bc:fa:b7:5f:50:0c: 36:a4:e3:45:20:65:7e:83:e5:bf:b8:65:6b:df:a1:44:cd:70: 41:24:da:75:d9:9d:2f:8b:c3:2e:eb:32:b2:09:2e:b3:93:9d: 52:47:09:68:a8:d0:af:91:bd:23:1e:b8:70:ef:58:c4:a8:66: 8c:b9:65:4d:89:0c:b4:d1:a8:76:3d:e1:dd:aa:61:15:1f:fb: 22:19:03:1f:3a:fd:bc:37:cd:f6:ad:bc:f5:3e:2f:b5:fa:98: 99:80:f8:b2:4e:77:87:ca:f9:5c:2c:b6:8c:97:35:ca:b9:ee: a2:a6:08:da:c4:d3:d5:4c:60:4a:05:a1:c0:3f:60:54:7c:c5: b8:d9:5a:3a:4e:70:7c:75:85:52:07:63:c3:bf:26:8b:be:10: 13:10:8f:0a:b6:41:88:68:6b:61:83:c0:4b:24:02:72:71:2c: a4:46:eb:ad:1e:43:ca:9a:7c:9c:8e:f3:a8:6f:75:a3:de:0c: 04:ee:27:22:c8:cb:aa:fa:5b:32:d6:27:82:00:39:f7:de:17: 4c:5e:b1:a1:9f:57:9b:e9:f1:e2:f8:07:1b:b7:8e:e2:bf:f3: c1:e5:5b:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEn1edHK76zyZ9Ov5rw3Zt6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYxMDEwMjIwMTMyWhcNMjYxMDExMjIwMTMyWjAzMTEwLwYDVQQD EyhiYzhlYzgwMTI0NzIwMDlkM2JjNTk1YjE3ZTNjODM2YzJkYTRlY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzot5DEDArR0uSvt5ED8/WJ/op+yz tSWFJQaDok+9a+haZLbUCpoP75lfKuFBGuOi/wCG/d2KRZAjGX4A8nE0VMYRciLW 1zHzD//P4swYbBcDYPTBM/c9hnaevbPDk8fz3KiY4p36MbrtFy9cGijV4hq1kXdu wPHPStotjLSmhMv8v2Oj/XWAheEUkV7gljKkZ/O/N5GaZo2TMMQHfEc4fOCN95Wy 9y+WAKiKvAj0ozTZnBNNcyfhN3I9ZHYPXPQ+DKKva6lBiJdfCTg8rMDnJYkwSfHt wD8t8GTC43eOmxLbzYAeRE1RHXuGTADe7hWgJvVmqB7q+aGAUqh6LWPfawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyOyAEkcgCdO8WVsX48g2wtpOyvMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApPf0pyp 5XSaj5mhUQnSJ4MnirPiDxjSk4C+JaOvvPq3X1AMNqTjRSBlfoPlv7hla9+hRM1w QSTaddmdL4vDLusysgkus5OdUkcJaKjQr5G9Ix64cO9YxKhmjLllTYkMtNGodj3h 3aphFR/7IhkDHzr9vDfN9q289T4vtfqYmYD4sk53h8r5XCy2jJc1yrnuoqYI2sTT 1UxgSgWhwD9gVHzFuNlaOk5wfHWFUgdjw78mi74QExCPCrZBiGhrYYPASyQCcnEs pEbrrR5Dypp8nI7zqG91o94MBO4nIsjLqvpbMtYnggA5994XTF6xoZ9Xm+nx4vgH G7eO4r/zweVbGQ== -----END CERTIFICATE-----Generated at Sun Oct 11 09:27:37 2026 by rpki-client