$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: iAFKG7rkpuaFxS24IjT/PIqfWL5yPf2AqzTKGgtkhzY= Subject key identifier: F7:5B:82:C8:E4:96:68:21:06:24:96:E0:48:EF:3C:27:F2:50:91:E6 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019CACB5690EEA7B1E9E2ABC4FD319286C7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 10A8 Signing time: Mon 02 Mar 2026 04:01:35 +0000 Manifest this update: Mon 02 Mar 2026 04:01:35 +0000 Manifest next update: Tue 03 Mar 2026 04:01:35 +0000 Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=) 2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=) 3: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=) 4: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=) 5: U85M-8Lcl66rBLJ0Rg82xwdkDKI.roa (hash: dzpvd72uVrPjmVZuHFaWm57eN2RjfUP62VYST73g2PE=) 6: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=) 7: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: 6sqKGsC8ua3SzErebVsEe6SP8QmN8UibklJujVyMNq8=) 8: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=) 9: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=) 10: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=) 11: lghuLDymBAtVV8bMgyPVXddGVW0.roa (hash: B36YhYDgnjsRZPrOKTnsUPdD0R4neS1yQGS5w0kCMHw=) 12: m3QG645Jxe5JU10VjtLZCAwTzqE.roa (hash: qQhuxCc/6YQx1PHrhefGoXSV5uHGKCWCPmjs33OuAHk=) 13: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=) 14: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=) 15: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=) 16: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=) 17: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=) 18: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=) 19: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:b5:69:0e:ea:7b:1e:9e:2a:bc:4f:d3:19:28:6c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Mar 2 04:01:35 2026 GMT Not After : Mar 3 04:01:35 2026 GMT Subject: CN=f75b82c8e4966821062496e048ef3c27f25091e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:08:8e:42:da:9a:e7:50:e4:f7:e3:a5:f2:a5: c7:f5:1a:a8:a6:9f:a3:c9:76:cf:8b:f2:c3:0f:4e: 01:82:2a:72:9b:a0:73:82:ca:eb:b7:79:93:de:74: c8:f3:65:1e:f3:d8:9d:8b:d8:e5:13:f5:d7:0f:ea: 3d:66:3d:6c:0e:0a:11:cb:f0:32:3d:ff:9e:d6:d1: 39:bf:b5:74:b2:99:c3:f5:b7:93:d8:46:bd:c5:f1: 88:47:54:d2:91:c2:ff:ff:3d:10:65:40:7b:81:56: cc:44:1c:94:a6:73:24:83:e1:34:09:a2:24:1f:ad: d9:44:6b:12:58:50:77:9b:ad:5e:a0:4f:c6:f2:be: d6:eb:c1:bb:c4:78:50:a6:c0:a5:2b:dd:f3:4f:71: 74:c6:52:1e:a0:8c:83:ef:b4:11:21:e2:83:3d:f7: 90:c2:32:d7:82:39:d8:84:1c:54:7a:48:cc:9b:bb: 44:e3:e3:de:e4:1e:c3:2c:64:41:7e:47:14:28:e4: 96:1f:f4:b6:f4:a1:56:f1:c2:f1:46:03:5b:60:50: f5:39:6f:a9:05:0f:b4:f6:ef:28:85:f9:96:47:41: ea:03:46:ec:f4:89:3f:57:d9:de:b7:60:d9:e9:81: 3b:57:c8:80:24:b5:a6:f1:b2:51:a2:14:b3:ce:59: 9f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5B:82:C8:E4:96:68:21:06:24:96:E0:48:EF:3C:27:F2:50:91:E6 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:2d:b1:a3:ab:2b:bb:41:c0:41:3b:88:fa:e7:47:72:9f:58: 7b:c3:21:74:51:90:e5:5c:d8:6c:6f:82:bd:7c:a9:2c:c5:e9: 31:f5:85:1e:e8:cc:d4:df:02:bb:3d:d6:40:ff:f1:56:97:68: 5f:66:d1:b7:df:92:a8:67:4b:42:c7:be:ff:de:60:ea:76:bc: 88:c2:3f:02:7c:3c:0a:82:ab:f7:e6:64:4a:ba:27:f9:e3:9b: 98:72:c1:8e:1e:23:4e:e3:0a:fe:e3:25:ae:ac:89:52:52:08: af:78:f8:1a:26:99:9c:ff:66:ac:d8:d9:78:f0:e9:c5:d6:fe: 93:50:99:7a:3a:5e:cf:c0:49:5d:73:f5:b1:26:25:26:44:40: db:0e:3d:03:97:e4:bc:fa:65:7b:6b:54:87:96:63:7d:71:b1: 4f:9c:28:b2:44:ec:66:8c:e5:c1:07:f8:2e:cd:30:9c:5b:7e: 8d:5c:ca:98:65:cd:68:63:5a:cf:ff:ee:df:e0:e4:cd:f7:4a: 75:93:6b:09:d4:10:55:95:c9:bb:82:97:96:a7:4c:46:bc:b7: 57:74:b3:b1:f1:b8:1a:3b:12:b7:f4:38:5a:10:0f:f9:b9:bb: 59:20:78:2d:c8:7f:e7:a9:25:d3:7d:15:a4:0c:a2:76:b0:30: 24:83:7d:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZystWkO6nseniq8T9MZKGx7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMzAyMDQwMTM1WhcNMjYwMzAzMDQwMTM1WjAzMTEwLwYDVQQD EyhmNzViODJjOGU0OTY2ODIxMDYyNDk2ZTA0OGVmM2MyN2YyNTA5MWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QiOQtqa51Dk9+Ol8qXH9Rqopp+j yXbPi/LDD04Bgipym6Bzgsrrt3mT3nTI82Ue89idi9jlE/XXD+o9Zj1sDgoRy/Ay Pf+e1tE5v7V0spnD9beT2Ea9xfGIR1TSkcL//z0QZUB7gVbMRByUpnMkg+E0CaIk H63ZRGsSWFB3m61eoE/G8r7W68G7xHhQpsClK93zT3F0xlIeoIyD77QRIeKDPfeQ wjLXgjnYhBxUekjMm7tE4+Pe5B7DLGRBfkcUKOSWH/S29KFW8cLxRgNbYFD1OW+p BQ+09u8ohfmWR0HqA0bs9Ik/V9net2DZ6YE7V8iAJLWm8bJRohSzzlmfZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdbgsjklmghBiSW4EjvPCfyUJHmMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZy2xo6sr u0HAQTuI+udHcp9Ye8MhdFGQ5VzYbG+CvXypLMXpMfWFHujM1N8Cuz3WQP/xVpdo X2bRt9+SqGdLQse+/95g6na8iMI/Anw8CoKr9+ZkSron+eObmHLBjh4jTuMK/uMl rqyJUlIIr3j4GiaZnP9mrNjZePDpxdb+k1CZejpez8BJXXP1sSYlJkRA2w49A5fk vPple2tUh5ZjfXGxT5woskTsZozlwQf4Ls0wnFt+jVzKmGXNaGNaz//u3+DkzfdK dZNrCdQQVZXJu4KXlqdMRry3V3SzsfG4GjsSt/Q4WhAP+bm7WSB4Lch/56kl030V pAyidrAwJIN9GA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:52:01 2026 by rpki-client