$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: bq1PLecdbpNEJbqAiMfxpc+W4cQiIhOghxflSODqdFg= Subject key identifier: 08:5F:CA:4A:AC:E6:7A:37:4E:41:73:39:3E:47:11:1F:82:22:7D:ED Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 01A1040050BB28D7571F501DEE446F848968 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 1649 Signing time: Sat 03 Oct 2026 23:01:31 +0000 Manifest this update: Sat 03 Oct 2026 23:01:31 +0000 Manifest next update: Sun 04 Oct 2026 23:01:31 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 3: 8B0ybuszrJP-SYemF-uQdt2SNk0.roa (hash: payoeKzJic32kfvM1q1SXaHj6ZYf16MvCGVAXHfXiqA=) 4: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 5: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 6: _XQtBPNeW_iuy40orAGtRGhMTSk.roa (hash: LAWDSlOuHdvhK5NcbfNOkabxOshrkg3NCFkUAyd9zsY=) 7: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 8: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=) 9: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 10: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: epQYvm7bjIyreN1eJ9NvS2LmUuwbtmJ7IxFTH1n/YVU=) 11: z6k43Q6Mlg6101zXMnQ3lKLqrZI.roa (hash: WKsgqY1IGIdnJy6vmh3A6PaJlhcqbIIJGjfXdiXAmvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 23:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:04:00:50:bb:28:d7:57:1f:50:1d:ee:44:6f:84:89:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Oct 3 23:01:31 2026 GMT Not After : Oct 4 23:01:31 2026 GMT Subject: CN=085fca4aace67a374e4173393e47111f82227ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b2:2b:0a:d5:5d:92:c5:40:3d:1b:45:2a:b2: 34:b7:40:69:3b:1e:a8:a9:97:f9:10:92:82:db:42: 60:52:9c:28:86:56:f1:a3:18:b6:31:ae:38:e4:f7: 78:e2:3e:b5:09:37:91:7e:c9:6c:ee:20:52:19:a8: 45:3b:2b:60:40:48:06:5f:6e:c0:0b:38:b6:c8:38: 2c:32:8f:b6:f7:f9:f7:57:34:7a:70:c0:ce:23:90: b2:8f:b9:f8:92:ed:8c:2b:d2:1f:91:de:a3:bc:4d: b7:f0:01:40:07:0e:61:7c:37:60:d5:10:2f:88:d0: 2a:74:d9:12:98:9f:bb:bf:89:23:9b:bf:26:60:9b: c3:5f:01:46:6d:71:09:3b:fc:c6:18:c0:e6:dd:09: 94:d6:4e:f4:38:06:ec:88:c3:89:3f:58:a4:45:f3: 4a:ad:1d:5c:b8:7d:b2:ec:ad:6a:19:71:0c:ce:f3: 15:5d:81:f8:68:41:26:d6:2b:d2:18:45:3b:6e:75: a8:6b:b7:3f:d6:83:84:5c:11:6e:dc:61:d5:34:3f: 7c:66:c3:f8:2b:1c:f4:69:3c:bf:d2:79:79:52:80: a2:ad:17:89:c0:18:6f:32:3e:42:17:3f:22:8d:ac: 21:96:26:71:c4:8d:43:bf:41:ed:68:1f:9d:3a:be: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5F:CA:4A:AC:E6:7A:37:4E:41:73:39:3E:47:11:1F:82:22:7D:ED X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6f:75:95:59:ff:82:73:65:c4:e2:d1:f6:f9:42:ca:90:1d: e7:8e:d6:5f:e6:73:ff:f1:0b:a8:ce:f5:01:69:b2:3a:40:7b: ce:23:26:85:d5:c7:ab:cc:1e:bf:92:44:2a:0a:19:62:f9:09: 8b:a9:77:d1:bc:ec:8e:19:a1:3b:e2:c3:69:c2:57:c0:cb:73: 59:c9:ca:20:a6:1f:0b:fc:ab:38:3b:93:09:c0:5d:bf:d6:2c: dd:1b:fb:b8:b1:8c:b9:63:a0:d7:e5:0c:c3:32:56:92:91:11: be:ff:35:2c:d7:ec:88:fc:dc:f0:4a:1a:05:8a:7d:8b:9d:1e: 6d:fe:5f:61:3e:f8:aa:23:84:ab:a0:ad:3d:8f:a4:e3:c4:7e: 87:4d:66:26:82:6a:7d:99:48:be:ae:c1:ec:72:77:e4:2e:44: e2:81:8f:d1:bc:6f:e8:9f:72:e2:f1:0b:8b:ed:df:96:1a:52: 6b:4e:c9:a0:40:09:b9:a3:53:6d:6c:3d:ab:4c:78:e7:b9:49: f4:e1:bb:e6:52:3f:5b:77:9a:92:82:85:96:ef:38:28:ce:80: 5a:39:d3:34:e5:66:ea:1a:d7:e2:06:69:50:ca:d4:93:47:4b: 2f:e0:2e:6b:5a:42:ad:77:89:d5:1e:af:26:96:e8:36:b2:0e: 8b:04:c0:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEEAFC7KNdXH1Ad7kRvhIloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYxMDAzMjMwMTMxWhcNMjYxMDA0MjMwMTMxWjAzMTEwLwYDVQQD EygwODVmY2E0YWFjZTY3YTM3NGU0MTczMzkzZTQ3MTExZjgyMjI3ZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47IrCtVdksVAPRtFKrI0t0BpOx6o qZf5EJKC20JgUpwohlbxoxi2Ma445Pd44j61CTeRfsls7iBSGahFOytgQEgGX27A Czi2yDgsMo+29/n3VzR6cMDOI5Cyj7n4ku2MK9Ifkd6jvE238AFABw5hfDdg1RAv iNAqdNkSmJ+7v4kjm78mYJvDXwFGbXEJO/zGGMDm3QmU1k70OAbsiMOJP1ikRfNK rR1cuH2y7K1qGXEMzvMVXYH4aEEm1ivSGEU7bnWoa7c/1oOEXBFu3GHVND98ZsP4 Kxz0aTy/0nl5UoCirReJwBhvMj5CFz8ijawhliZxxI1Dv0HtaB+dOr7zJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhfykqs5no3TkFzOT5HER+CIn3tMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf291lVn/ gnNlxOLR9vlCypAd547WX+Zz//ELqM71AWmyOkB7ziMmhdXHq8wev5JEKgoZYvkJ i6l30bzsjhmhO+LDacJXwMtzWcnKIKYfC/yrODuTCcBdv9Ys3Rv7uLGMuWOg1+UM wzJWkpERvv81LNfsiPzc8EoaBYp9i50ebf5fYT74qiOEq6CtPY+k48R+h01mJoJq fZlIvq7B7HJ35C5E4oGP0bxv6J9y4vELi+3flhpSa07JoEAJuaNTbWw9q0x457lJ 9OG75lI/W3eakoKFlu84KM6AWjnTNOVm6hrX4gZpUMrUk0dLL+Aua1pCrXeJ1R6v JpboNrIOiwTAtA== -----END CERTIFICATE-----Generated at Sun Oct 4 11:13:06 2026 by rpki-client