$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: zg6ha9ztCjf0C9SEdKEXilIQm2aSQF7azfg/atHR+2E= Subject key identifier: 24:52:FB:C9:C7:65:92:81:12:78:E0:82:9E:87:51:29:CA:21:9A:9C Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019D9AE30C9F2D4522DFA34BCD32877ADBA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 18DE Signing time: Fri 17 Apr 2026 10:01:04 +0000 Manifest this update: Fri 17 Apr 2026 10:01:04 +0000 Manifest next update: Sat 18 Apr 2026 10:01:04 +0000 Files and hashes: 1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=) 2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=) 3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=) 4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=) 5: IsrXRGLVffEPsnHVbl_BeBHARaA.roa (hash: 2bYUOyrmy0HgRWN9bHIQfD3C31xnJN8Zzbysmp0r1Aw=) 6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=) 7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=) 8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=) 9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=) 10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=) 11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=) 12: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=) 13: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: fRNW8R/eCE+aYE9L/1CZ9KOdo9qKQUcTNzqB5BQQ5sc=) 14: zGuXwu3v-M9bXZipAlRCLhWgY9Y.roa (hash: q3HTdT+bmIS7eJfWEweBp4+RgfhLQ35j5qT2Y42OjrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:e3:0c:9f:2d:45:22:df:a3:4b:cd:32:87:7a:db:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Apr 17 10:01:04 2026 GMT Not After : Apr 18 10:01:04 2026 GMT Subject: CN=2452fbc9c76592811278e0829e875129ca219a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:f2:dd:34:b1:26:dd:53:f7:1f:b8:08:19: 90:cc:86:f8:f2:8b:98:97:cc:76:e0:77:88:19:f4: 5e:3c:dd:8d:b3:1a:04:f4:58:39:61:74:14:74:64: fc:c6:88:ed:29:e4:b2:2f:59:ea:c4:00:b9:ff:26: 18:ba:6b:b2:fd:40:b2:bd:b5:78:6d:34:a8:12:b7: 07:ea:9b:c9:7b:9f:96:c6:e4:b7:b2:b1:82:c1:c3: 48:89:51:ab:bf:81:2c:f3:be:07:42:c7:66:96:54: a5:77:35:7e:24:7a:5a:77:d3:39:2f:3b:ba:df:eb: 04:37:f7:84:45:eb:3f:2f:8d:85:ee:92:28:33:68: 50:97:fb:36:ac:32:19:d8:67:52:7a:f6:f1:2b:c9: 7d:cd:c2:90:39:1a:ab:0e:b1:d0:2b:c2:81:74:eb: 9a:39:5a:6b:55:f1:46:3d:09:f3:7a:f3:ba:c5:99: 18:2a:8d:5d:e8:54:36:5b:17:b3:d9:fd:51:4b:02: ad:5f:98:68:2e:f0:18:25:a4:d1:74:56:e3:b4:e5: 92:89:ea:e7:55:8c:d2:60:b5:10:fa:3f:d7:31:cf: 1e:60:70:f5:2d:44:6a:ee:c7:52:2e:31:e4:cf:8a: 6f:fc:de:6b:1f:6d:7f:67:40:c2:33:02:27:e7:5f: 43:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:52:FB:C9:C7:65:92:81:12:78:E0:82:9E:87:51:29:CA:21:9A:9C X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9d:46:e4:4e:a8:36:83:c1:ed:cc:9e:71:a9:71:da:a4:8a: 72:b8:79:e9:74:ae:f3:e2:ab:07:60:a9:4b:b7:54:af:55:52: 85:25:70:a1:df:9d:80:1c:07:f5:75:61:33:12:81:29:14:9a: ae:71:d1:ec:77:ea:10:e4:68:54:34:ab:ef:03:8a:de:ff:5d: 3d:b7:09:a0:cf:3f:3b:96:91:04:e9:53:a9:3e:04:57:d1:86: 4b:15:d8:73:ef:98:d3:fe:4c:ce:8b:4a:d3:4d:fb:31:68:36: b0:8c:d0:89:36:07:91:c4:74:cc:23:f3:33:8a:82:f7:41:88: bc:62:07:d8:73:b2:54:3f:d6:eb:85:ea:a3:dd:b6:6d:3e:1f: 85:df:4c:d0:9f:fd:bf:23:7c:0d:1e:4f:3c:cb:05:1b:3e:a8: a3:d2:f5:58:3f:df:66:32:e6:9d:bb:4a:7e:f4:bf:df:dc:15: 6b:0a:4c:d1:c9:e8:fc:28:3a:40:b8:97:e2:5d:39:b1:32:8c: 2e:4a:d1:42:07:aa:63:02:c9:64:8c:6a:fe:87:f2:e2:be:ab: 6e:b4:ee:b7:ea:73:c6:5b:5b:99:94:30:7d:c0:72:23:37:58: 5f:7b:de:56:20:26:94:2b:e1:31:d9:27:6a:c5:8f:5d:5b:4a: 55:44:d3:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2a4wyfLUUi36NLzTKHetupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwNDE3MTAwMTA0WhcNMjYwNDE4MTAwMTA0WjAzMTEwLwYDVQQD EygyNDUyZmJjOWM3NjU5MjgxMTI3OGUwODI5ZTg3NTEyOWNhMjE5YTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNPy3TSxJt1T9x+4CBmQzIb48ouY l8x24HeIGfRePN2NsxoE9Fg5YXQUdGT8xojtKeSyL1nqxAC5/yYYumuy/UCyvbV4 bTSoErcH6pvJe5+WxuS3srGCwcNIiVGrv4Es874HQsdmllSldzV+JHpad9M5Lzu6 3+sEN/eERes/L42F7pIoM2hQl/s2rDIZ2GdSevbxK8l9zcKQORqrDrHQK8KBdOua OVprVfFGPQnzevO6xZkYKo1d6FQ2Wxez2f1RSwKtX5hoLvAYJaTRdFbjtOWSiern VYzSYLUQ+j/XMc8eYHD1LURq7sdSLjHkz4pv/N5rH21/Z0DCMwIn519D9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRS+8nHZZKBEnjggp6HUSnKIZqcMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAp1G5E6o NoPB7cyecalx2qSKcrh56XSu8+KrB2CpS7dUr1VShSVwod+dgBwH9XVhMxKBKRSa rnHR7HfqEORoVDSr7wOK3v9dPbcJoM8/O5aRBOlTqT4EV9GGSxXYc++Y0/5MzotK 0037MWg2sIzQiTYHkcR0zCPzM4qC90GIvGIH2HOyVD/W64Xqo922bT4fhd9M0J/9 vyN8DR5PPMsFGz6oo9L1WD/fZjLmnbtKfvS/39wVawpM0cno/Cg6QLiX4l05sTKM LkrRQgeqYwLJZIxq/ofy4r6rbrTut+pzxltbmZQwfcByIzdYX3veViAmlCvhMdkn asWPXVtKVUTT3Q== -----END CERTIFICATE-----Generated at Fri Apr 17 12:41:16 2026 by rpki-client