$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: 0yqm8fvtn9gfGwb/V7x7Hbi1dKy51jYhq6R4kwAr3Uc= Subject key identifier: BA:9B:51:3B:5B:8C:BB:C1:0B:65:74:94:B0:CD:D2:F5:AA:35:F2:85 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019D98868024718460A98C94E9A5AF99E011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 117E Signing time: Thu 16 Apr 2026 23:00:44 +0000 Manifest this update: Thu 16 Apr 2026 23:00:44 +0000 Manifest next update: Fri 17 Apr 2026 23:00:44 +0000 Files and hashes: 1: B3LQrbE0D8oQ4aL3oL7prkhZdyg.roa (hash: DlK6M5zssqdBfWBogBRgB1KWMlUPTeM22cLgGd9OR+E=) 2: EblpiwRL9HlLzK24T8oP9IND1vQ.roa (hash: xm23w0o3y4eEG4Z/X+VeKtyIUdl513KI04Rcim87iI8=) 3: H96_Qc9SsITA0naiCSVL6y7VEJM.roa (hash: Rixat+/GKfD+/Qc5Q1rAIKjAt7zVyl2ONWoiw+w/7aY=) 4: KkqMLgVSOl4C9gkiDIZV5IAys_A.roa (hash: yUWuR1LKMlNOOPlPCHzgsf5Jj1BpkzuEJuF1kFFXOiw=) 5: Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa (hash: pvzrnsOI9tdcc9ULSntzOOVe3GikcQWZKLx+48F0nCc=) 6: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: aP6bY6x65J2gUNzBRKPn0PWLLXwdCHXVz1MsJ015DHc=) 7: _5dPGZCcsdHmpRhCTkOU-sos5GE.roa (hash: /u2/VDIfFnty31Q0Cg5Ee6PvdpGvq/sk0Sz5/j6Z4z4=) 8: _XOkat_tVbZSyUJD4uuRenyP92k.roa (hash: MO61vUIPE4xYG1HoXyKAbuzO/+H56vWiFpAKuIhdAOU=) 9: pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa (hash: Fe3L3094CE69Fi+Zh6n4NgsG3bWV3oT1EQEavw3p2f4=) 10: qXcS6OI26rFTLi_T2I0DI0xKoyk.roa (hash: 7rGGuHEL+nQFILlUsjH4I+jgvUwVxc2dc664sGkuKo4=) 11: tz7F4eng4GbKZrftZOga_11upMA.roa (hash: pkYGrfaCo0zVxHfUdGVs2eZr/bDW6rBfCQtsQyDfE4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:86:80:24:71:84:60:a9:8c:94:e9:a5:af:99:e0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Apr 16 23:00:44 2026 GMT Not After : Apr 17 23:00:44 2026 GMT Subject: CN=ba9b513b5b8cbbc10b657494b0cdd2f5aa35f285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:2e:4c:62:16:5f:72:f7:8e:8c:84:41:6b: 5d:40:31:d5:a8:ab:19:6a:1e:d6:8b:e9:80:56:f3: 80:31:ef:02:f5:f7:36:1a:65:b0:0e:7b:dd:9b:09: a8:3a:9c:4e:9f:6e:42:2c:73:a7:59:40:c9:d6:43: ce:41:91:5e:c4:28:07:17:34:43:9a:1c:ff:13:27: 2b:a3:f9:c5:a9:ad:22:52:3b:07:58:51:e3:64:a1: b5:29:e8:a8:ba:d7:fd:a0:4f:ec:2c:70:99:c6:9b: e6:ec:35:18:60:1c:1e:c8:ba:5d:2a:fc:c2:10:d9: ac:3c:08:a9:6f:53:60:dc:c7:38:4f:96:07:50:bb: 5c:ee:57:1e:fd:16:65:e5:96:17:80:59:ce:9e:01: 2d:65:a4:a2:1d:de:34:3c:24:e2:ed:f8:9c:4d:75: fc:fb:14:54:51:9a:e6:0f:c0:69:36:18:53:2d:16: 3e:8f:94:19:51:c9:76:63:08:b2:58:e2:c6:59:10: ef:3d:48:6c:34:7e:b5:fa:a4:ff:27:d7:ce:46:15: 17:18:ba:77:e8:70:8b:ac:1c:58:a2:31:4a:42:1e: cb:09:aa:54:32:b5:c8:e5:68:64:10:47:67:a4:7e: 16:67:1b:8c:7f:94:13:55:19:63:c5:41:d4:c5:0c: 61:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9B:51:3B:5B:8C:BB:C1:0B:65:74:94:B0:CD:D2:F5:AA:35:F2:85 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b1:fc:07:40:d1:fc:28:c3:4a:07:68:dc:ab:d4:db:38:4e: 86:47:19:a7:b3:e8:78:20:cb:9d:52:93:eb:95:77:5b:08:91: 3c:92:9e:8e:eb:18:4a:4f:bd:b5:65:fc:21:05:6f:a5:4f:1e: de:ce:b6:9f:c6:0f:de:62:2d:40:aa:54:32:e2:92:af:35:b2: 93:c9:45:f4:8b:f9:d9:d0:cc:04:30:f2:2a:da:48:2f:46:c5: 90:d1:c9:13:34:5d:cb:4f:05:a3:88:c0:fc:2a:e8:e2:ee:67: d6:77:30:09:41:b2:2e:d4:11:da:e6:41:ca:19:37:1d:61:f1: 40:d4:37:15:d2:a6:b8:3c:05:c8:4b:a6:cb:85:0f:a8:b2:38: 2d:c3:e4:52:17:07:bd:5f:7b:6a:64:57:95:bc:11:68:50:02: e1:6b:aa:f1:7c:d0:b2:9f:78:50:4b:c2:8d:b3:98:9a:f8:2b: 83:df:53:4f:a9:05:d4:3d:a3:b5:22:67:da:5e:60:de:7d:31: f5:8f:63:11:3d:79:3a:96:5d:79:06:0a:94:b2:28:a6:90:89: 85:bb:b4:fe:bf:6a:bd:5d:c6:10:92:c4:bc:0d:57:bf:79:50: b5:83:25:f8:ce:37:eb:c5:7e:31:b9:f0:8c:b7:ad:6e:7c:50: c9:7d:a9:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YhoAkcYRgqYyU6aWvmeARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwNDE2MjMwMDQ0WhcNMjYwNDE3MjMwMDQ0WjAzMTEwLwYDVQQD EyhiYTliNTEzYjViOGNiYmMxMGI2NTc0OTRiMGNkZDJmNWFhMzVmMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUIuTGIWX3L3joyEQWtdQDHVqKsZ ah7Wi+mAVvOAMe8C9fc2GmWwDnvdmwmoOpxOn25CLHOnWUDJ1kPOQZFexCgHFzRD mhz/Eycro/nFqa0iUjsHWFHjZKG1Keioutf9oE/sLHCZxpvm7DUYYBweyLpdKvzC ENmsPAipb1Ng3Mc4T5YHULtc7lce/RZl5ZYXgFnOngEtZaSiHd40PCTi7ficTXX8 +xRUUZrmD8BpNhhTLRY+j5QZUcl2YwiyWOLGWRDvPUhsNH61+qT/J9fORhUXGLp3 6HCLrBxYojFKQh7LCapUMrXI5WhkEEdnpH4WZxuMf5QTVRljxUHUxQxhWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqbUTtbjLvBC2V0lLDN0vWqNfKFMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrH8B0DR /CjDSgdo3KvU2zhOhkcZp7PoeCDLnVKT65V3WwiRPJKejusYSk+9tWX8IQVvpU8e 3s62n8YP3mItQKpUMuKSrzWyk8lF9Iv52dDMBDDyKtpIL0bFkNHJEzRdy08Fo4jA /Cro4u5n1ncwCUGyLtQR2uZByhk3HWHxQNQ3FdKmuDwFyEumy4UPqLI4LcPkUhcH vV97amRXlbwRaFAC4Wuq8XzQsp94UEvCjbOYmvgrg99TT6kF1D2jtSJn2l5g3n0x 9Y9jET15OpZdeQYKlLIoppCJhbu0/r9qvV3GEJLEvA1Xv3lQtYMl+M4368V+Mbnw jLetbnxQyX2puQ== -----END CERTIFICATE-----Generated at Fri Apr 17 07:49:30 2026 by rpki-client