$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: 4KheoZ90HKpjZJBp3MPMbo0sn+WZ25S2VRkC0uaHh3I= Subject key identifier: 0E:3D:E1:D3:FB:AD:A1:5F:BD:A9:DF:B4:28:0E:EA:8B:94:60:DE:4E Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 01A0C2C446527250864EDE5DEACAFCC9E6C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 1A86 Signing time: Mon 21 Sep 2026 07:00:37 +0000 Manifest this update: Mon 21 Sep 2026 07:00:37 +0000 Manifest next update: Tue 22 Sep 2026 07:00:37 +0000 Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=) 2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=) 3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=) 4: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=) 5: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=) 6: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=) 7: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=) 8: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=) 9: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=) 10: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=) 11: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=) 12: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=) 13: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=) 14: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=) 15: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=) 16: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=) 17: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=) 18: cIzWNeNZbGQqB6PaAUfFk04qwpw.roa (hash: qXYjYaptAMpe3dpSUVYLnaW4A2Txz8KndGthhN4noC0=) 19: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=) 20: efwlLLHqb-bdy8PqwUcM4smevIk.roa (hash: dziFMotDF0gnY460BoEIQb6O67mGB4C/hN9W6acAk18=) 21: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=) 22: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=) 23: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=) 24: iPKJwckHS7fTX2BYHqvx9q3JA4g.roa (hash: 2bHm3BwYJ52KpSHXTQlcz+x91m3fEq3PirchX6IlyGw=) 25: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=) 26: jXlPjmax2D6xk6xk15LqeUs2Fa8.roa (hash: ZUhfEbcBqZVUtm9r9VeW3nIknnrUSnVpiKVvjVmMjCA=) 27: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=) 28: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=) 29: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=) 30: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=) 31: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=) 32: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=) 33: x3ERDAaeO48LeOr6lKQKB6Ey2mM.roa (hash: Y+nAlXRY4txRKWouCnodtOhRL0mCZVwY0SjTTDgCeMQ=) 34: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: EzgeiEZmSolpZqJv/D6ovvAYRnAWXp9tQZY3fNSYX7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:c4:46:52:72:50:86:4e:de:5d:ea:ca:fc:c9:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Sep 21 07:00:37 2026 GMT Not After : Sep 22 07:00:37 2026 GMT Subject: CN=0e3de1d3fbada15fbda9dfb4280eea8b9460de4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:06:8d:4a:d7:96:8f:66:3b:00:f3:94:6a:c5: 0c:2b:18:de:e7:96:43:ab:c8:a1:4b:a3:a2:f6:48: 2d:d6:ba:a8:ed:9c:33:8d:45:1f:79:b5:69:1a:5c: 2f:78:44:e1:22:66:4e:7f:cc:0b:17:be:ec:54:83: 08:46:a4:c0:84:06:63:d3:3e:7f:22:36:83:c4:12: c9:0d:6d:b7:3f:22:ab:43:4a:e6:ae:62:ca:2e:46: 6a:c7:7f:b0:e8:c9:ca:0a:fa:79:b1:f7:17:33:a0: bf:ce:99:c9:94:b6:57:27:ae:80:cf:d9:52:a0:cd: 07:b4:60:2c:6c:01:2d:8e:25:d2:e3:5c:3b:e9:e2: 02:7d:2c:2b:68:4e:09:5f:1e:cc:be:0f:fc:1d:76: da:26:af:e1:a9:7f:71:81:c9:1a:bc:e5:b9:72:9d: 10:51:8b:79:1b:12:5e:38:f3:5b:20:65:76:a0:5e: 4f:27:fc:68:52:d2:a4:6c:47:81:83:10:31:4f:8b: bd:cc:3c:5f:81:ce:55:7c:89:75:6c:f9:60:6f:50: a3:c6:15:69:5d:b1:63:10:eb:d3:4b:e1:c6:0c:fa: e2:11:30:b8:65:25:a3:2d:8a:8c:8b:fd:8e:0d:d8: 57:b2:c9:33:00:80:e8:9e:6c:88:fa:60:1e:76:49: 54:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3D:E1:D3:FB:AD:A1:5F:BD:A9:DF:B4:28:0E:EA:8B:94:60:DE:4E X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:97:b1:74:0c:c7:f6:3c:60:aa:6d:0c:8e:b6:db:09:1e:7f: 89:84:90:74:f8:4e:9a:92:43:b8:d4:3f:22:cb:d3:32:ff:72: 89:b4:83:0b:76:ce:17:0a:3b:ae:f5:61:09:e4:56:72:4d:3f: d1:dd:a2:f8:85:ab:8f:9e:76:eb:62:ce:ea:8f:5f:91:7b:0c: 01:1d:eb:70:bd:e2:e4:94:93:93:84:0c:f2:d1:fd:75:e9:54: 2c:fe:c4:c8:a3:8e:e1:fa:e5:68:78:d7:b6:36:37:50:94:e9: 02:95:f5:16:51:8e:8d:8f:c3:26:16:c1:94:23:08:48:6d:09: 24:6b:e0:bf:37:6d:cc:d7:13:89:32:42:e4:37:cf:dd:4b:d6: f5:3a:07:ba:7f:a5:ff:11:f1:07:e2:e3:54:74:64:db:20:76: cf:90:01:45:f9:a5:94:6f:23:67:08:ef:ac:55:48:e1:0f:05: 92:02:6d:e3:3c:9d:76:ab:f4:77:31:02:18:5b:67:02:ba:52: af:5b:a6:8f:3c:c4:81:7c:84:a1:c9:df:10:2d:eb:cc:a7:49: 10:5f:0c:3c:c9:81:4b:16:66:d3:b9:d1:59:1c:51:a2:54:68: b9:47:d7:2c:da:44:93:49:d1:a9:d6:85:64:5c:3f:25:e8:85: ce:ba:a0:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCxEZSclCGTt5d6sr8yebAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwOTIxMDcwMDM3WhcNMjYwOTIyMDcwMDM3WjAzMTEwLwYDVQQD EygwZTNkZTFkM2ZiYWRhMTVmYmRhOWRmYjQyODBlZWE4Yjk0NjBkZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwaNSteWj2Y7APOUasUMKxje55ZD q8ihS6Oi9kgt1rqo7ZwzjUUfebVpGlwveEThImZOf8wLF77sVIMIRqTAhAZj0z5/ IjaDxBLJDW23PyKrQ0rmrmLKLkZqx3+w6MnKCvp5sfcXM6C/zpnJlLZXJ66Az9lS oM0HtGAsbAEtjiXS41w76eICfSwraE4JXx7Mvg/8HXbaJq/hqX9xgckavOW5cp0Q UYt5GxJeOPNbIGV2oF5PJ/xoUtKkbEeBgxAxT4u9zDxfgc5VfIl1bPlgb1CjxhVp XbFjEOvTS+HGDPriETC4ZSWjLYqMi/2ODdhXsskzAIDonmyI+mAedklUxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA494dP7raFfvanftCgO6ouUYN5OMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJexdAzH 9jxgqm0MjrbbCR5/iYSQdPhOmpJDuNQ/IsvTMv9yibSDC3bOFwo7rvVhCeRWck0/ 0d2i+IWrj55262LO6o9fkXsMAR3rcL3i5JSTk4QM8tH9delULP7EyKOO4frlaHjX tjY3UJTpApX1FlGOjY/DJhbBlCMISG0JJGvgvzdtzNcTiTJC5DfP3UvW9ToHun+l /xHxB+LjVHRk2yB2z5ABRfmllG8jZwjvrFVI4Q8FkgJt4zyddqv0dzECGFtnArpS r1umjzzEgXyEocnfEC3rzKdJEF8MPMmBSxZm07nRWRxRolRouUfXLNpEk0nRqdaF ZFw/JeiFzrqgvg== -----END CERTIFICATE-----Generated at Mon Sep 21 11:03:59 2026 by rpki-client