$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json) Hash identifier: 0UU7s0Qrcok2RCSp1Azc/CD0cfDCeqL4Tynilw4TPZQ= Subject key identifier: 88:5B:2B:F7:5A:E2:A7:31:78:F6:93:29:1E:F0:B4:FF:E0:DF:F9:3A Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019EC2924543CD89392D737319AA40D8F162 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft Manifest number: 1169 Signing time: Sat 13 Jun 2026 20:00:26 +0000 Manifest this update: Sat 13 Jun 2026 20:00:26 +0000 Manifest next update: Sun 14 Jun 2026 20:00:26 +0000 Files and hashes: 1: 0VXk7KxyGNBKoMzTYJumg3MOTyI.roa (hash: OtU0hvX0Vami3LTspcOPpks558imPCiHhI08tCDppGE=) 2: 8S2f0mMNsD7xxV7Ty48Yj_vXc24.roa (hash: bbt0XT/b4GdymMLqxvA9TWB6kuEszEh++apw2K2jMJo=) 3: 8w-IWf2lrtKPBt5qMeYx4vc1wIo.roa (hash: dmXJGV07k4HSNMpFyTWiKNXuMOxONHC1FWpZG/gmuUw=) 4: JaK5nEHPaQ0eg4QVia6pq3nQtT8.asa (hash: zedp2dasOOuQWUFRKt1kDWC26clgR3XYNTuR7fBJPis=) 5: K91Q4lr9fT2_HRFw2W2qOJCfHfw.asa (hash: S3HIvCfdHY15prwrA39u7TMubC1wO10vPZ16cT0joHY=) 6: P3ksiU6dR-MB5dwO9grj0b7EMXU.roa (hash: bIr8a6sPdRjwwSD8CC5kO5ixUwkkeuD93IkwxtBRKV4=) 7: V2_sT2jDOr8MNnfYkhj5mMdvMaM.asa (hash: wVzZdXFDBv7mOQErQUozopppuOlT1ZjyUfEdZpNO8vQ=) 8: oY3gdIV4n1fET7NwlgUgM7E2A58.roa (hash: 2nAz8MBR7//dDF2SyuP46QueU8MfTaGR1aKMQkQHzBo=) 9: plt_9sG7wtfK-X5IzTU2wQwMo9k.roa (hash: jDkUUlBe6ISyETczyYHxkJjtY7ZB3oieA1Lcm/dcjlE=) 10: t1mwU24RWx_QtHlt8VAyAaicScc.asa (hash: qul+FoGF3pEOmc/vqfxBeRQ9gtI1SffvAcYIByELYPs=) 11: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: spIUclIhGWON3iR0F1I9I1OY3A3LXlgjtDI0Wt9Vt0w=) 12: yjSw7EGM3wf6F5BYX5IX39SdB9g.roa (hash: W5I+pZbCjC+Wm9EnLWz0YxI4s3U4AfirO0LVljkjaHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c2:92:45:43:cd:89:39:2d:73:73:19:aa:40:d8:f1:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Jun 13 20:00:26 2026 GMT Not After : Jun 14 20:00:26 2026 GMT Subject: CN=885b2bf75ae2a73178f693291ef0b4ffe0dff93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:c5:9d:10:a3:0e:a4:4a:99:96:aa:1a:bc: c0:ad:94:ee:23:ea:77:d3:c3:9d:8d:c6:1f:3d:3b: 09:9a:98:c2:04:37:20:59:a4:0f:67:55:fd:b3:cf: 1b:f0:5a:a5:e7:a7:74:f7:fc:b8:1b:4c:85:2f:db: c4:17:65:98:d7:78:2d:71:23:41:4f:3b:57:e9:1d: c7:f2:8b:c6:99:03:98:00:d6:29:b0:80:32:82:a7: b0:f9:bc:a1:ae:d9:42:4a:ea:d1:a4:d7:bd:92:f9: f8:f9:8c:f3:89:18:53:7e:db:50:0c:49:58:a5:76: 91:ec:77:4b:e5:68:78:ba:5c:86:89:32:e5:84:80: b5:e3:10:e9:01:b1:a6:05:31:ee:17:9a:3f:a2:40: c2:1b:21:f0:70:b6:a1:6d:39:37:11:ec:e2:4e:45: 34:1a:bf:ab:5a:08:1f:4b:b0:39:7b:97:dc:b0:ec: 7b:90:d7:2d:21:b3:f3:c1:a2:fc:b4:28:3e:73:0e: 79:46:25:d0:47:3f:72:5a:4e:eb:6f:ee:a3:0b:a4: 12:12:73:d0:78:ef:3a:3f:de:a7:41:e6:b3:44:36: 94:56:26:12:86:fe:8e:47:c8:41:b3:e1:06:06:fc: bd:0f:2c:88:a2:f8:5b:01:aa:03:be:d5:15:12:18: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5B:2B:F7:5A:E2:A7:31:78:F6:93:29:1E:F0:B4:FF:E0:DF:F9:3A X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e1:0a:ca:aa:fc:49:81:cb:a6:6e:4d:d3:cc:93:d5:1c:53: b7:e1:5b:4e:a5:0d:2c:ae:13:c9:07:b0:f8:3e:53:b8:2a:51: 77:94:cd:31:be:aa:ac:f6:8f:be:73:4c:21:15:17:21:9c:2e: 32:ce:64:93:1e:6a:4f:fa:a8:03:14:b5:9e:34:2a:0d:73:22: 8b:d1:35:0c:b0:b9:b0:5c:f0:31:00:7c:07:11:9c:ba:4f:d9: d9:ed:63:b7:da:e4:fd:e4:11:cc:02:61:33:43:f3:04:fa:93: 13:58:84:84:ea:c7:20:17:f3:63:8d:9c:1c:13:a3:cb:51:b1: f5:72:34:e1:a4:c6:cd:88:0d:d4:90:77:a8:f3:7a:d7:2f:5e: 6c:2f:89:f0:ef:fa:22:9b:3b:07:2d:38:bd:ea:30:42:4e:15: 24:8d:ce:1b:78:09:4e:a6:d1:a5:f4:91:92:7e:3d:a7:65:84: f2:70:7d:d8:5f:1d:48:cf:f5:9c:ae:24:44:d8:d7:2c:5e:f0: 71:fc:21:4c:fc:66:f9:a0:dc:f8:69:b1:35:3d:1e:6b:2c:a8: fc:bc:c0:28:18:17:3f:de:24:8b:70:10:13:e1:12:2c:7d:6a: 84:8e:5d:da:10:b9:0e:92:50:c7:94:5c:70:3e:90:c8:e2:be: 93:a7:7b:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7CkkVDzYk5LXNzGapA2PFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjYwNjEzMjAwMDI2WhcNMjYwNjE0MjAwMDI2WjAzMTEwLwYDVQQD Eyg4ODViMmJmNzVhZTJhNzMxNzhmNjkzMjkxZWYwYjRmZmUwZGZmOTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNDFnRCjDqRKmZaqGrzArZTuI+p3 08OdjcYfPTsJmpjCBDcgWaQPZ1X9s88b8Fql56d09/y4G0yFL9vEF2WY13gtcSNB TztX6R3H8ovGmQOYANYpsIAygqew+byhrtlCSurRpNe9kvn4+YzziRhTfttQDElY pXaR7HdL5Wh4ulyGiTLlhIC14xDpAbGmBTHuF5o/okDCGyHwcLahbTk3EeziTkU0 Gr+rWggfS7A5e5fcsOx7kNctIbPzwaL8tCg+cw55RiXQRz9yWk7rb+6jC6QSEnPQ eO86P96nQeazRDaUViYShv6OR8hBs+EGBvy9DyyIovhbAaoDvtUVEhiOZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhbK/da4qcxePaTKR7wtP/g3/k6MB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOEKyqr8 SYHLpm5N08yT1RxTt+FbTqUNLK4TyQew+D5TuCpRd5TNMb6qrPaPvnNMIRUXIZwu Ms5kkx5qT/qoAxS1njQqDXMii9E1DLC5sFzwMQB8BxGcuk/Z2e1jt9rk/eQRzAJh M0PzBPqTE1iEhOrHIBfzY42cHBOjy1Gx9XI04aTGzYgN1JB3qPN61y9ebC+J8O/6 Ips7By04veowQk4VJI3OG3gJTqbRpfSRkn49p2WE8nB92F8dSM/1nK4kRNjXLF7w cfwhTPxm+aDc+GmxNT0eayyo/LzAKBgXP94ki3AQE+ESLH1qhI5d2hC5DpJQx5Rc cD6QyOK+k6d7Zw== -----END CERTIFICATE-----Generated at Sun Jun 14 00:34:16 2026 by rpki-client