$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: klg1vbVn8Z/9CzgQXkm2fNwbW573TxPFcyMcOtYzbYU= Subject key identifier: 94:F7:F8:5B:DA:2E:3C:FF:4E:EE:B8:A1:31:FE:79:58:24:97:ED:61 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019CAB6B2FADC37A5E4F9177774990CE8019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 1403 Signing time: Sun 01 Mar 2026 22:00:54 +0000 Manifest this update: Sun 01 Mar 2026 22:00:54 +0000 Manifest next update: Mon 02 Mar 2026 22:00:54 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 18Szc_NOHV7yuL-RPwFFVIdly00.roa (hash: ld/2o13pONoCjqn2WT6haOPdokqq4iF1vU3cu4RZBY4=) 3: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 4: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 5: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 6: P9iZqoxuCT_faQ_VmOItL5eeI3w.roa (hash: vyjNIFB4l6R6SblkqwaOxyYaaYx/koFd/Fz2EeWD6hY=) 7: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 8: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=) 9: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 10: oSKHmVNGFh3OpJke3WnxdXvCjgc.roa (hash: Jbe/LRuw53xo+FdeFOv1OWeqAR3sX4SCDTXs5bJaUEE=) 11: snU0F1xcSWMYFQ2eQd5gZYlccBE.roa (hash: JdJmPKAnAhiR1J0EFD0dsDA9MKwuUlfNp7RQdQdV3Wk=) 12: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: R9vAXpOVw7Nm69tlmPao/MDF9b4JgFY4wcHN1BcIu7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:6b:2f:ad:c3:7a:5e:4f:91:77:77:49:90:ce:80:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Mar 1 22:00:54 2026 GMT Not After : Mar 2 22:00:54 2026 GMT Subject: CN=94f7f85bda2e3cff4eeeb8a131fe79582497ed61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c8:d6:d8:be:9e:83:ab:ef:ab:7e:dc:0a:08: 70:9d:1b:29:60:a6:8f:e1:a1:52:b3:5e:ec:0d:91: 82:cb:43:5a:18:af:98:92:8d:67:c1:6f:dd:3d:37: 60:6f:c1:37:fa:7a:d3:b6:d3:4c:b2:54:77:8d:b6: 4a:61:38:fe:07:32:ad:c2:21:72:fb:b8:24:f4:64: 6a:6b:1e:5b:0b:c0:a9:a8:b9:c0:35:e3:2c:8c:f8: 11:a1:30:a7:11:51:b0:d1:27:7d:08:9e:71:74:bb: eb:a4:d4:36:87:f2:20:60:01:fe:63:ab:24:c8:86: 1e:90:a0:80:32:5e:9f:b8:47:a4:99:8f:fb:44:fa: c0:71:1b:ef:e7:42:84:38:3f:88:63:c9:b4:9d:57: 1e:7e:73:89:01:b4:12:9d:74:89:50:f3:aa:0d:f2: aa:34:b6:e0:f5:33:d7:50:95:07:06:e6:8a:0d:c3: 76:aa:b3:ab:2c:e7:57:c3:ee:ef:77:a4:59:10:8f: 7c:3f:2d:ae:a1:4a:d8:58:8a:51:74:1f:18:e6:6e: 1a:f4:bc:fa:7d:6b:b9:e7:cf:97:9c:82:65:84:64: 90:3b:48:35:45:c4:de:d1:12:03:70:c8:d4:f5:c2: 5d:22:31:a1:c4:c7:de:f7:6c:b2:55:bd:99:d9:3f: c4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F7:F8:5B:DA:2E:3C:FF:4E:EE:B8:A1:31:FE:79:58:24:97:ED:61 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f3:fc:a9:44:d5:c0:d1:e6:d4:d5:3e:d1:f2:31:d0:66:cc: f8:4c:e2:84:aa:0a:1b:15:3d:d1:db:7e:d3:10:67:e5:f1:87: c5:fb:94:97:c4:ac:96:76:b1:1f:83:52:fd:5d:b1:68:97:fb: 42:b6:02:9d:15:24:be:3c:a1:91:c3:10:3f:f1:5d:90:ab:5a: e7:98:0c:b3:c8:a9:0c:b1:0d:08:24:ef:13:38:bb:89:1d:bd: 3b:b5:ba:06:ab:4a:08:78:9a:21:f4:8f:c8:10:29:23:de:d2: d0:9f:6f:a2:fb:c9:bc:2e:cd:92:93:ee:4a:63:98:8b:99:cf: d8:04:b7:db:da:10:81:b1:21:38:e3:aa:00:4c:31:84:3d:68: 15:69:0d:8c:53:bd:9a:b9:a5:5b:f1:a3:7e:8c:df:0c:bc:ff: 75:3b:80:6c:81:c5:40:bb:6c:ba:1d:2d:59:99:78:a5:2e:b0: e7:45:08:ab:aa:f7:43:4d:21:e4:62:67:0b:76:c5:0d:91:14: 40:c4:41:9f:39:63:ba:3c:09:8c:18:d9:af:ad:75:ef:45:c7: ba:c7:2c:b8:b8:28:13:fe:0e:7a:1e:63:4f:40:75:c8:ae:58: 0d:1b:45:91:95:31:91:05:f3:55:0e:1b:98:7d:6c:13:04:d1: 94:f1:38:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyray+tw3peT5F3d0mQzoAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwMzAxMjIwMDU0WhcNMjYwMzAyMjIwMDU0WjAzMTEwLwYDVQQD Eyg5NGY3Zjg1YmRhMmUzY2ZmNGVlZWI4YTEzMWZlNzk1ODI0OTdlZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8jW2L6eg6vvq37cCghwnRspYKaP 4aFSs17sDZGCy0NaGK+Yko1nwW/dPTdgb8E3+nrTttNMslR3jbZKYTj+BzKtwiFy +7gk9GRqax5bC8CpqLnANeMsjPgRoTCnEVGw0Sd9CJ5xdLvrpNQ2h/IgYAH+Y6sk yIYekKCAMl6fuEekmY/7RPrAcRvv50KEOD+IY8m0nVcefnOJAbQSnXSJUPOqDfKq NLbg9TPXUJUHBuaKDcN2qrOrLOdXw+7vd6RZEI98Py2uoUrYWIpRdB8Y5m4a9Lz6 fWu558+XnIJlhGSQO0g1RcTe0RIDcMjU9cJdIjGhxMfe92yyVb2Z2T/E/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJT3+FvaLjz/Tu64oTH+eVgkl+1hMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/P8qUTV wNHm1NU+0fIx0GbM+EzihKoKGxU90dt+0xBn5fGHxfuUl8SslnaxH4NS/V2xaJf7 QrYCnRUkvjyhkcMQP/FdkKta55gMs8ipDLENCCTvEzi7iR29O7W6BqtKCHiaIfSP yBApI97S0J9vovvJvC7NkpPuSmOYi5nP2AS329oQgbEhOOOqAEwxhD1oFWkNjFO9 mrmlW/GjfozfDLz/dTuAbIHFQLtsuh0tWZl4pS6w50UIq6r3Q00h5GJnC3bFDZEU QMRBnzljujwJjBjZr61170XHuscsuLgoE/4Oeh5jT0B1yK5YDRtFkZUxkQXzVQ4b mH1sEwTRlPE4lg== -----END CERTIFICATE-----Generated at Mon Mar 2 08:07:53 2026 by rpki-client