$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: u/cnikuxGuWOmP7iBuVR44YQth06gzqX07kbbyEDSxA= Subject key identifier: 20:AD:E0:5B:0C:AF:80:E6:B1:BB:75:8C:37:F5:EB:6E:BE:E7:6A:86 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019D98F4A60DD1D46A36DD845B9ECBE9217B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 18DD Signing time: Fri 17 Apr 2026 01:01:03 +0000 Manifest this update: Fri 17 Apr 2026 01:01:03 +0000 Manifest next update: Sat 18 Apr 2026 01:01:03 +0000 Files and hashes: 1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=) 2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=) 3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=) 4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=) 5: IsrXRGLVffEPsnHVbl_BeBHARaA.roa (hash: 2bYUOyrmy0HgRWN9bHIQfD3C31xnJN8Zzbysmp0r1Aw=) 6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=) 7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=) 8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=) 9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=) 10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=) 11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=) 12: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=) 13: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: OjZhJYhnop4+cgopIPmEvR+KaZYgGCGISg8vEc1bvj8=) 14: zGuXwu3v-M9bXZipAlRCLhWgY9Y.roa (hash: q3HTdT+bmIS7eJfWEweBp4+RgfhLQ35j5qT2Y42OjrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:f4:a6:0d:d1:d4:6a:36:dd:84:5b:9e:cb:e9:21:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Apr 17 01:01:03 2026 GMT Not After : Apr 18 01:01:03 2026 GMT Subject: CN=20ade05b0caf80e6b1bb758c37f5eb6ebee76a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cb:04:c0:96:db:4b:e5:3f:be:79:ca:9a:de: 29:71:f0:3d:2a:8a:6c:d7:f1:06:20:2d:1c:bf:4a: ff:87:a3:43:af:99:d1:61:83:4e:35:1c:39:14:c9: 98:93:1a:00:31:f8:c9:58:85:45:cf:41:18:41:5f: a9:22:76:65:c3:72:e7:7b:38:b1:7e:a5:f2:6c:cc: 40:92:dd:71:d1:e2:30:1d:83:64:e4:39:6e:2b:20: 5e:02:4f:a9:dd:73:27:7c:94:40:95:ef:b9:92:78: 21:79:15:01:18:e5:0b:c4:94:9f:e4:95:6c:e3:11: ae:08:f9:23:63:c7:50:42:c2:08:54:89:f7:24:3d: b9:10:a0:40:7d:b7:c7:89:bb:5f:37:03:95:fd:a0: 73:2d:18:42:a0:3c:f5:d0:81:48:55:c6:42:66:3e: 4a:28:8d:4a:b1:4a:fa:42:59:20:e8:98:d7:53:83: f4:db:ef:6c:6e:62:5a:7c:fc:69:38:9b:a7:55:b4: f5:c6:d9:4a:c2:c7:a6:f8:02:00:90:b2:71:96:e2: f3:39:4b:4d:27:b4:52:db:7c:ed:e0:b2:90:74:cd: 15:7e:c5:8d:37:b0:9c:a1:65:a4:1c:64:02:4a:d9: df:e4:c8:f2:1f:27:ca:90:36:f4:8a:57:ee:ae:7b: 73:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AD:E0:5B:0C:AF:80:E6:B1:BB:75:8C:37:F5:EB:6E:BE:E7:6A:86 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f5:c9:f0:8d:ae:ae:52:92:d4:a8:20:24:d7:74:80:e7:99: f9:4e:56:ef:04:43:ce:a7:a9:e0:bc:e2:dd:41:0d:7e:8a:e0: b9:c4:24:7f:bc:44:a0:57:fa:6e:b6:63:be:b7:66:2a:08:d2: 35:d2:4c:8f:f5:7d:f8:cf:69:06:b2:a7:0c:79:8c:e8:a2:25: 79:61:86:26:f3:3d:5d:30:87:b6:8c:74:3d:5a:29:0b:22:4c: a1:3b:fa:d9:c3:86:48:97:ef:16:f3:d7:67:b3:34:4e:3f:8c: 0d:6c:d7:27:71:11:21:1b:df:2d:7e:d8:ae:14:49:a9:a6:5a: dc:52:39:0f:5d:5f:c2:dd:bc:5b:97:c1:47:2c:f5:7e:5f:36: bc:1f:f0:c0:c6:7f:34:b8:2d:bc:47:c4:4c:c6:5a:a6:53:c3: d6:65:a7:99:46:93:2d:19:fd:ca:39:69:cc:f4:7c:d5:1b:b2: 8c:66:b8:fd:79:78:8d:23:f8:1c:57:4f:fe:58:31:27:51:93: 5a:92:bc:58:34:95:85:24:bb:eb:e0:e4:7c:64:5f:9d:6b:67: ca:74:8c:93:e2:43:5a:4e:d7:dc:4a:17:05:a6:d6:9a:b5:82: d1:11:f2:5d:f0:7a:f9:92:35:d1:89:88:48:4c:fa:c3:ee:bf: 31:14:6d:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Y9KYN0dRqNt2EW57L6SF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwNDE3MDEwMTAzWhcNMjYwNDE4MDEwMTAzWjAzMTEwLwYDVQQD EygyMGFkZTA1YjBjYWY4MGU2YjFiYjc1OGMzN2Y1ZWI2ZWJlZTc2YTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ssEwJbbS+U/vnnKmt4pcfA9Kops 1/EGIC0cv0r/h6NDr5nRYYNONRw5FMmYkxoAMfjJWIVFz0EYQV+pInZlw3Lnezix fqXybMxAkt1x0eIwHYNk5DluKyBeAk+p3XMnfJRAle+5kngheRUBGOULxJSf5JVs 4xGuCPkjY8dQQsIIVIn3JD25EKBAfbfHibtfNwOV/aBzLRhCoDz10IFIVcZCZj5K KI1KsUr6Qlkg6JjXU4P02+9sbmJafPxpOJunVbT1xtlKwsem+AIAkLJxluLzOUtN J7RS23zt4LKQdM0VfsWNN7CcoWWkHGQCStnf5MjyHyfKkDb0ilfurntzuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCt4FsMr4Dmsbt1jDf1626+52qGMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/XJ8I2u rlKS1KggJNd0gOeZ+U5W7wRDzqep4Lzi3UENforgucQkf7xEoFf6brZjvrdmKgjS NdJMj/V9+M9pBrKnDHmM6KIleWGGJvM9XTCHtox0PVopCyJMoTv62cOGSJfvFvPX Z7M0Tj+MDWzXJ3ERIRvfLX7YrhRJqaZa3FI5D11fwt28W5fBRyz1fl82vB/wwMZ/ NLgtvEfETMZaplPD1mWnmUaTLRn9yjlpzPR81RuyjGa4/Xl4jSP4HFdP/lgxJ1GT WpK8WDSVhSS76+DkfGRfnWtnynSMk+JDWk7X3EoXBabWmrWC0RHyXfB6+ZI10YmI SEz6w+6/MRRteQ== -----END CERTIFICATE-----Generated at Fri Apr 17 11:24:12 2026 by rpki-client