$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft File: x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json) Hash identifier: FfeGSOZfOtcOTQwGqp5kdfEnKnBWF6GxspXetLGkZeo= Subject key identifier: 95:35:D9:D0:FA:65:3C:91:44:E3:CB:1C:29:5C:5C:D9:24:FD:2D:7D Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 01A0C3698306D39C2E5D9E37192653338D5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft Manifest number: 15A2 Signing time: Mon 21 Sep 2026 10:01:06 +0000 Manifest this update: Mon 21 Sep 2026 10:01:06 +0000 Manifest next update: Tue 22 Sep 2026 10:01:06 +0000 Files and hashes: 1: 0-d96R17ltUSy8fr0RUugwI-BVw.roa (hash: T+9pJSDxipOo4VQ90dksmKw5tDBPPo/BiqzTM/apWGc=) 2: 6MXPr8n2FVwdA-Vt6oqBdRGu_Mg.roa (hash: NZX54zdIf0Wm5ZnYmNdMli+Cz2MVmUZnuyAev1D/9/E=) 3: 94VCH5-yUsBwicojbjgImHgRoJA.roa (hash: JkHlAtKE0WPUSQeAnVh91wdkspZbKJDK7LSBm6EyhHc=) 4: BFdJc-7yBxarSw_UwCSCI2_nZzY.roa (hash: Mfwh/Ri4oMFWHDOwaf0KLrBxq/7lyDjZHbminSO7kww=) 5: FlKDqhsB-kDJgOhLmCv4DNUnsd8.roa (hash: JZ21wYzfPfkSwGCQh1OtjrZna2xAaeFagGp1aClwZy0=) 6: GQwQ4NJBvyg0S5cirOINdsK2QUo.roa (hash: hPCA2eD/WAsZM79tgjhqtOTZx90myfRAeK+dN2Vg5Wo=) 7: GWOMCgc6frfuXzWmR3iYp-MVmSA.roa (hash: Anj9LGw2xp0TmbMPDVVyvGqohtYkFBACqEE6N9Y1dWM=) 8: Itg1prYwWRPhF5zNIUnOGVNFGeM.roa (hash: nAsp415Ngb0XOA9HboUId94jZhl5oTnXqu3QjJfj8KU=) 9: KwEEYIOx6dCBO8O6EXuJrP2SxEA.roa (hash: FJXGRBaEUrnNNyE8GBPLymN44URpQA1gYBmnWCwP478=) 10: Mg1D6QC_g63JPX2rdrLMPwpxCSY.roa (hash: Yh3tNT6+XfpBErn2NHfTJsOgi2In688uCxSwQz2Lk7o=) 11: MtY73m5Dy7Z-8IkMEEvtPhwun6o.asa (hash: YVP7j6bXOWilQyVf5GWPEBF5i8ugo1QMSomNFKB/BjY=) 12: MuWQfO3mJklCU15dVw9qdJGgipk.roa (hash: mwuJdo4EA83qSqYe63WUHWpcqAseygQza4cwnZrRl6Q=) 13: Opa484uAlsVB9CtOuyZoIiqmIy8.roa (hash: 6u4ASe0ldiNjEJ3vKFZgisfLG676P+RimGMZcC3Ur7M=) 14: XpQW9Vko4NnnhhqSe6YnUmv4WzE.roa (hash: 1hl0BmRk0nZLkQjPQnXw86SjORpjVK0UnQhzFB2uADI=) 15: YjIsM4Uno7ILYs53JtLji9bmdRM.roa (hash: T20Rm6nai402HDN+LFukerdCiUhxMnqEcLW4G63DHyI=) 16: _QfreQ9EqD9ss46rDX_UENkjJZk.roa (hash: zfUdwflwTagWZ9n75pKYGfQVwgMmnMON42g7fWb4fZ4=) 17: bjtqDJXlOz7pCpEjOBsxaBiuwec.roa (hash: NF7IuS5ng6fRX6mAKKyUm5b/IR1xDvuUmKt4bVjV978=) 18: e0CW_4oZRrryGAZlyRnhpcoXNPo.roa (hash: 7QHbtai0zkaLG8Cn4EhJepZwZsFysU2qR4KGXEevHnE=) 19: kd2-Thgfb2MvE6yw6VsCA8zzSfQ.roa (hash: yP3N4xFcOT8W3j9k2ZJ+fBiTsgbDKcU1wngastwJJcc=) 20: qOxZbeQcH3nmMujSCPVKvHl_hII.asa (hash: ASwjCTML65AJz8INpKtIJ9HsxUbvMPMUPCfyNp/UqwE=) 21: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: JX77rYrI6EvNUjNWFNrb36cw3Zy8VHRJY+qCjqZO0x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:69:83:06:d3:9c:2e:5d:9e:37:19:26:53:33:8d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Sep 21 10:01:06 2026 GMT Not After : Sep 22 10:01:06 2026 GMT Subject: CN=9535d9d0fa653c9144e3cb1c295c5cd924fd2d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:a7:81:17:8c:44:13:46:1a:cb:57:44:9b: df:11:58:41:54:f3:8c:bb:54:20:1a:a5:e3:2f:1d: e4:31:6e:95:31:55:63:a1:fe:c7:f2:b6:fd:f0:c2: d5:b7:ff:3d:58:3f:d5:61:ae:41:36:44:c1:df:57: ba:43:f2:0b:21:df:49:7c:7d:fc:09:58:f1:77:41: 8e:5a:11:58:fa:73:7e:97:8f:59:1b:f8:68:6d:59: fe:a4:af:15:aa:00:e5:75:e9:1c:61:5f:55:56:9f: 6a:62:c9:a3:a7:04:6d:39:b0:27:a3:96:ac:86:6d: db:5c:3e:fe:fb:52:69:3f:a2:e8:af:c9:29:e4:eb: 62:46:90:85:80:62:be:a4:c5:79:03:d7:fa:75:d8: ec:7e:e6:8d:1d:c8:eb:47:41:66:1e:e7:e6:3c:c4: 8d:a5:b9:7b:3e:8f:99:fc:b5:54:70:0a:8a:e4:b0: 59:bb:c8:75:d1:2f:ca:84:8d:dc:aa:6f:7c:01:6a: d9:9e:54:bb:32:8b:6e:3e:8b:cf:6f:ac:43:d5:1f: 9b:3e:1f:95:81:aa:7e:bc:94:73:f4:11:cc:93:bf: 95:dc:e7:48:37:42:62:ae:d5:dd:da:39:af:63:83: 59:57:10:db:a8:34:6e:3b:5d:1c:df:87:94:5c:d3: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:35:D9:D0:FA:65:3C:91:44:E3:CB:1C:29:5C:5C:D9:24:FD:2D:7D X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5e:49:dd:ab:4c:2c:e9:2e:0c:70:12:50:dc:26:97:a5:f8: 45:bf:5f:9b:b3:71:dc:8c:0c:df:a0:54:73:5c:9e:a8:f1:a4: 0c:13:ce:57:b1:f7:3a:6e:4e:89:e4:bf:4e:ee:ac:a1:cc:74: 8d:e9:05:ae:7d:f8:47:f9:c0:c7:66:e5:12:6f:25:46:22:fa: 39:3c:1d:3f:7f:97:de:23:27:d3:3e:9e:e7:d0:9a:38:98:c7: f9:21:bc:96:4e:b3:5c:99:d2:5c:e0:cd:8b:0b:0c:45:06:15: 5d:04:d4:ed:b5:02:3e:c1:3c:9f:eb:b8:14:44:b8:23:54:e8: 15:af:2e:26:9b:29:92:cd:36:56:0b:8d:12:91:f1:bc:de:5f: 69:79:50:db:7a:3e:8a:20:b3:ac:de:69:2d:3c:fa:f1:12:aa: 52:4e:32:50:45:36:7d:37:d5:37:f1:cf:ba:a8:c0:b0:4c:9e: 0e:35:ce:a7:a3:2d:cb:a4:69:1b:47:af:7a:6e:0e:40:1c:83: a4:44:f6:c9:d3:e3:a6:dc:d3:2b:bf:68:f5:1d:a7:21:fe:6a: 73:f6:5f:ee:72:b5:7e:b9:12:69:90:0d:9e:aa:1b:df:ef:b3: eb:9a:9a:53:f2:9e:4e:06:2f:03:1d:e1:c4:6e:59:e4:73:a4: 2a:d8:5f:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDaYMG05wuXZ43GSZTM41dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwOTIxMTAwMTA2WhcNMjYwOTIyMTAwMTA2WjAzMTEwLwYDVQQD Eyg5NTM1ZDlkMGZhNjUzYzkxNDRlM2NiMWMyOTVjNWNkOTI0ZmQyZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2ingReMRBNGGstXRJvfEVhBVPOM u1QgGqXjLx3kMW6VMVVjof7H8rb98MLVt/89WD/VYa5BNkTB31e6Q/ILId9JfH38 CVjxd0GOWhFY+nN+l49ZG/hobVn+pK8VqgDldekcYV9VVp9qYsmjpwRtObAno5as hm3bXD7++1JpP6Lor8kp5OtiRpCFgGK+pMV5A9f6ddjsfuaNHcjrR0FmHufmPMSN pbl7Po+Z/LVUcAqK5LBZu8h10S/KhI3cqm98AWrZnlS7MotuPovPb6xD1R+bPh+V gap+vJRz9BHMk7+V3OdIN0JirtXd2jmvY4NZVxDbqDRuO10c34eUXNPZ3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJU12dD6ZTyRROPLHClcXNkk/S19MB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhl5J3atM LOkuDHASUNwml6X4Rb9fm7Nx3IwM36BUc1yeqPGkDBPOV7H3Om5OieS/Tu6socx0 jekFrn34R/nAx2blEm8lRiL6OTwdP3+X3iMn0z6e59CaOJjH+SG8lk6zXJnSXODN iwsMRQYVXQTU7bUCPsE8n+u4FES4I1ToFa8uJpspks02VguNEpHxvN5faXlQ23o+ iiCzrN5pLTz68RKqUk4yUEU2fTfVN/HPuqjAsEyeDjXOp6Mty6RpG0evem4OQByD pET2ydPjptzTK79o9R2nIf5qc/Zf7nK1frkSaZANnqob3++z65qaU/KeTgYvAx3h xG5Z5HOkKthfQw== -----END CERTIFICATE-----Generated at Mon Sep 21 14:30:06 2026 by rpki-client