$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: fGocpTx6zpbIbdDvzeyL3SuamHgk18AtmIQJEdu2vyo= Subject key identifier: BC:4B:18:36:BF:CD:78:8F:14:9E:0C:98:A3:51:6F:9A:77:69:E7:5C Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 01A0D80423F0E944F6240719A2AFEBDD88C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 1A7F Signing time: Fri 25 Sep 2026 10:02:25 +0000 Manifest this update: Fri 25 Sep 2026 10:02:25 +0000 Manifest next update: Sat 26 Sep 2026 10:02:25 +0000 Files and hashes: 1: 3Wnyz1QTSGCfnbdCaxBn0wvUFQE.roa (hash: 2t4MdegjvS7rP/iU7Hj7aColKHs5vThbvVnxW3FHn4E=) 2: 7Me5WXJix6bhmJacUAumrmlySgk.roa (hash: YrS81rUpK2c6Zib9l6JvC9RAlucS71SZij2OkYz09Wc=) 3: E_JIFXCdpHTYansz7Uag7XJbSgA.roa (hash: vrXsyINww9wzdu3W3f7WUvYM3ATh6Z+TuuA6xY/MZdM=) 4: ItZWQRkmls0VdU1nZishuLkd2eA.roa (hash: MAZ2gdn6yEjn53jWafviOI61qsnSQITSXZRf/tbFFMA=) 5: Rf1IRr7ln3MYijmbQD8SHel_MDs.roa (hash: +BoNoFKi0FqndtLU0znTacn8SBNepPAZnhdtF4/C/xc=) 6: b05E_Vve2D3HEly9RuClmeKIrnc.roa (hash: jAiLiRN3aJpdKIHHJepD10dCfO/MTNxTxutiEjOu3JM=) 7: hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa (hash: aS2aTaLKTapOqcPpZtmi37UtMDJpwWKs703ZEIp9zRU=) 8: liK1oYSYzTAoS7kAatnii2Wzx_E.roa (hash: gb2CbqJOVrEPYPGiLKPKwSB2WKz26ugg+uzkt83v7JE=) 9: sr7WacAmmZWiXvAsDGzYF2vtdAU.roa (hash: w9eNa2MvhIGo2u1BISjxj71+HEaSC/goxWqp1PF6zLU=) 10: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: Mquqj+DoG4aMPinoF5L3V77tmNyPMEwldDuY0ts2UYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d8:04:23:f0:e9:44:f6:24:07:19:a2:af:eb:dd:88:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Sep 25 10:02:25 2026 GMT Not After : Sep 26 10:02:25 2026 GMT Subject: CN=bc4b1836bfcd788f149e0c98a3516f9a7769e75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:f5:91:91:0b:29:de:3a:aa:f8:e1:fd:79: cc:51:de:c4:8b:a0:ac:b7:fb:c4:e1:cb:85:fa:65: bb:5e:07:b7:72:df:5e:20:68:7e:4d:a1:4e:39:06: 10:1a:24:17:36:42:8f:7f:9c:2f:95:00:4f:6f:b8: f2:78:b7:02:6a:0d:08:b9:8b:01:04:e4:eb:ee:fd: 25:8a:c9:45:f8:77:1c:20:d3:2d:b0:7e:c4:4b:f7: 0e:d6:03:2b:b3:c4:15:84:9f:20:36:db:e4:ed:a6: 2e:2f:e1:92:60:b1:77:b9:88:5b:ce:64:5f:7f:21: ce:84:88:ee:91:fa:90:d7:1d:cf:c7:cb:9a:c6:15: dc:8e:7c:99:b9:d3:07:f1:91:e0:12:c9:44:95:92: a6:dd:25:98:e0:18:08:3d:45:d7:0c:8c:0e:69:2b: 2f:ac:c9:81:e5:4d:57:59:20:e2:c5:86:6d:72:f6: 8c:80:4d:9d:9f:bd:29:0c:b7:0c:7d:e9:25:a0:02: df:75:dc:d1:9e:f4:ad:23:82:fa:16:95:0b:b3:30: b2:d4:13:ea:21:56:1f:94:60:92:fd:99:34:f7:67: cd:be:be:77:fc:f6:7c:3f:ed:68:bd:47:5f:3f:fd: a9:88:a5:f9:c2:e5:a9:f1:bd:fd:be:01:4a:af:bd: 1e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4B:18:36:BF:CD:78:8F:14:9E:0C:98:A3:51:6F:9A:77:69:E7:5C X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e5:ee:db:3e:c3:e8:00:3b:39:c0:61:10:5b:c7:51:93:4b: 3b:f3:94:70:b0:18:fb:f5:61:9f:d9:56:45:c4:8a:70:60:e9: 5e:40:eb:2d:68:d6:c7:1d:22:60:a1:c4:e2:dd:dc:cf:26:34: 5e:74:81:78:35:d1:6b:c8:a5:1c:60:f0:50:11:27:29:7a:d8: de:ea:7d:08:f3:b7:40:cb:14:bb:c8:ed:fb:35:a6:ef:c0:84: 70:b2:52:4e:cf:bb:dc:84:05:25:db:2b:e8:45:cf:96:e2:f0: 1c:9e:41:76:aa:be:70:ba:92:06:fd:39:a6:8d:39:02:57:5a: 46:6e:03:be:0c:ef:05:5f:ee:78:8f:56:db:b4:ce:e8:44:22: b8:70:37:7b:c5:38:a2:9d:92:09:ea:03:c2:23:f0:a5:9e:e1: 3f:eb:bf:9f:e9:55:21:56:03:06:6e:38:64:a0:74:64:aa:ab: ee:00:41:5e:81:a8:2c:af:79:a1:62:0c:2e:20:44:42:3a:ff: 87:af:44:70:9f:8b:57:fd:5b:aa:5b:42:e9:2a:17:5d:1b:6e: 53:f3:35:e5:3b:57:01:db:b0:46:b7:71:71:47:2f:3b:3a:84: 3c:0e:32:d2:14:7c:ab:14:9e:39:05:3c:aa:d3:a0:f8:6d:3c: cd:c2:ae:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDYBCPw6UT2JAcZoq/r3YjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYwOTI1MTAwMjI1WhcNMjYwOTI2MTAwMjI1WjAzMTEwLwYDVQQD EyhiYzRiMTgzNmJmY2Q3ODhmMTQ5ZTBjOThhMzUxNmY5YTc3NjllNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5n1kZELKd46qvjh/XnMUd7Ei6Cs t/vE4cuF+mW7Xge3ct9eIGh+TaFOOQYQGiQXNkKPf5wvlQBPb7jyeLcCag0IuYsB BOTr7v0lislF+HccINMtsH7ES/cO1gMrs8QVhJ8gNtvk7aYuL+GSYLF3uYhbzmRf fyHOhIjukfqQ1x3Px8uaxhXcjnyZudMH8ZHgEslElZKm3SWY4BgIPUXXDIwOaSsv rMmB5U1XWSDixYZtcvaMgE2dn70pDLcMfekloALfddzRnvStI4L6FpULszCy1BPq IVYflGCS/Zk092fNvr53/PZ8P+1ovUdfP/2piKX5wuWp8b39vgFKr70ecwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxLGDa/zXiPFJ4MmKNRb5p3aedcMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeXu2z7D 6AA7OcBhEFvHUZNLO/OUcLAY+/Vhn9lWRcSKcGDpXkDrLWjWxx0iYKHE4t3czyY0 XnSBeDXRa8ilHGDwUBEnKXrY3up9CPO3QMsUu8jt+zWm78CEcLJSTs+73IQFJdsr 6EXPluLwHJ5Bdqq+cLqSBv05po05AldaRm4DvgzvBV/ueI9W27TO6EQiuHA3e8U4 op2SCeoDwiPwpZ7hP+u/n+lVIVYDBm44ZKB0ZKqr7gBBXoGoLK95oWIMLiBEQjr/ h69EcJ+LV/1bqltC6SoXXRtuU/M15TtXAduwRrdxcUcvOzqEPA4y0hR8qxSeOQU8 qtOg+G08zcKuHA== -----END CERTIFICATE-----Generated at Fri Sep 25 18:06:37 2026 by rpki-client