$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: UYbapc6cCfUHioOXot1h3w79X5XZW4nCMsT1gZVZPzM= Subject key identifier: 8B:8E:4B:8D:A1:7E:56:39:C3:1A:CE:B4:B8:59:79:1F:53:CA:2D:6A Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019CAAFD411890843BEE01F9E0A0471705C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 1103 Signing time: Sun 01 Mar 2026 20:00:49 +0000 Manifest this update: Sun 01 Mar 2026 20:00:49 +0000 Manifest next update: Mon 02 Mar 2026 20:00:49 +0000 Files and hashes: 1: B3LQrbE0D8oQ4aL3oL7prkhZdyg.roa (hash: DlK6M5zssqdBfWBogBRgB1KWMlUPTeM22cLgGd9OR+E=) 2: EblpiwRL9HlLzK24T8oP9IND1vQ.roa (hash: xm23w0o3y4eEG4Z/X+VeKtyIUdl513KI04Rcim87iI8=) 3: H96_Qc9SsITA0naiCSVL6y7VEJM.roa (hash: Rixat+/GKfD+/Qc5Q1rAIKjAt7zVyl2ONWoiw+w/7aY=) 4: KkqMLgVSOl4C9gkiDIZV5IAys_A.roa (hash: yUWuR1LKMlNOOPlPCHzgsf5Jj1BpkzuEJuF1kFFXOiw=) 5: Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa (hash: pvzrnsOI9tdcc9ULSntzOOVe3GikcQWZKLx+48F0nCc=) 6: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: 2ervJatjasOySgf0G0PCJQjTM52TkyR3NfiIkW70OjM=) 7: _5dPGZCcsdHmpRhCTkOU-sos5GE.roa (hash: /u2/VDIfFnty31Q0Cg5Ee6PvdpGvq/sk0Sz5/j6Z4z4=) 8: _XOkat_tVbZSyUJD4uuRenyP92k.roa (hash: MO61vUIPE4xYG1HoXyKAbuzO/+H56vWiFpAKuIhdAOU=) 9: pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa (hash: Fe3L3094CE69Fi+Zh6n4NgsG3bWV3oT1EQEavw3p2f4=) 10: qXcS6OI26rFTLi_T2I0DI0xKoyk.roa (hash: 7rGGuHEL+nQFILlUsjH4I+jgvUwVxc2dc664sGkuKo4=) 11: tz7F4eng4GbKZrftZOga_11upMA.roa (hash: pkYGrfaCo0zVxHfUdGVs2eZr/bDW6rBfCQtsQyDfE4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fd:41:18:90:84:3b:ee:01:f9:e0:a0:47:17:05:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Mar 1 20:00:49 2026 GMT Not After : Mar 2 20:00:49 2026 GMT Subject: CN=8b8e4b8da17e5639c31aceb4b859791f53ca2d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d7:df:db:bc:1a:e1:94:12:65:84:49:c5:06: 9f:b7:2c:33:94:64:0f:c0:02:af:80:8e:95:48:17: 49:e6:4c:11:9d:53:28:a6:d5:fc:8f:00:70:37:d6: ed:fb:7f:08:bd:7e:ac:68:fb:05:8a:f5:ca:8c:5a: 37:09:83:ba:68:8a:15:19:4e:8a:7e:e2:ad:74:a7: b2:66:ab:a8:67:e6:85:d1:a9:c1:85:db:eb:5c:31: eb:13:b1:2d:bb:cc:4f:69:29:1f:c9:a2:2f:46:f2: 0c:d4:2b:70:79:03:15:d8:69:91:18:88:b2:27:7c: f4:a7:14:42:2d:35:aa:bb:bc:35:09:0a:58:8e:18: 48:24:c9:c6:3d:3b:97:d7:05:b8:a8:26:2e:3f:4e: 31:c9:60:fa:3d:37:c2:b4:8f:c7:d7:aa:b4:40:42: 16:d5:a2:eb:87:ea:a6:72:8a:07:fb:88:d1:92:d3: 2f:a8:9a:b4:a8:2f:0e:ee:59:60:4b:91:ad:f7:eb: 79:40:f6:3b:bc:96:e2:79:7f:d8:b0:40:a2:10:33: 52:4a:ec:0f:df:25:51:c6:cc:d5:9f:82:be:73:fc: bd:6f:3a:ed:95:2f:6b:5e:b6:b9:5f:4b:be:0c:ed: 55:b9:6d:42:43:1c:7f:ae:c8:11:74:0f:e0:00:1c: 2f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8E:4B:8D:A1:7E:56:39:C3:1A:CE:B4:B8:59:79:1F:53:CA:2D:6A X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ac:02:67:93:8b:a4:b3:b1:2d:d8:de:37:e9:15:bd:38:92: 43:8d:4b:70:f3:7f:4e:15:a0:ab:1d:b8:34:bb:05:0c:12:cf: 15:10:10:a5:35:d7:76:8e:d9:9e:4a:9c:8b:95:dc:3b:e0:c8: 48:d6:d2:49:bf:28:01:b6:55:a2:00:cb:9c:dd:e9:93:47:64: cc:f8:10:52:c2:3c:95:20:c2:70:d0:08:01:3f:3d:58:90:41: 87:e7:f4:b3:17:36:dd:17:a2:15:99:6e:aa:d7:e9:ff:3c:e2: a7:51:66:ef:c5:d6:a4:5e:58:0d:9d:31:b0:97:bc:c0:f3:38: b1:c5:c2:3f:04:d0:5f:82:33:a8:3b:fe:b1:fd:c3:a6:dc:cc: c8:5d:6e:21:9a:3d:9e:76:36:79:a2:5d:01:6c:a6:47:43:5c: 43:29:f2:7c:00:6f:1f:13:51:2c:26:54:39:34:e3:64:0c:9f: b6:f1:a6:65:db:5f:02:6a:ad:97:9a:1b:9d:e8:2d:4f:57:02: 67:7f:66:a3:52:32:16:0c:0f:2e:69:ee:0f:60:f7:4d:36:92: 19:b5:51:82:51:a6:0d:25:ff:dc:ea:d7:4b:f2:7b:20:fe:27: 39:20:8b:d0:79:f4:77:3d:a1:04:3d:e1:52:cd:51:c7:b6:d9: b0:29:cc:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/UEYkIQ77gH54KBHFwXDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwMzAxMjAwMDQ5WhcNMjYwMzAyMjAwMDQ5WjAzMTEwLwYDVQQD Eyg4YjhlNGI4ZGExN2U1NjM5YzMxYWNlYjRiODU5NzkxZjUzY2EyZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtff27wa4ZQSZYRJxQaftywzlGQP wAKvgI6VSBdJ5kwRnVMoptX8jwBwN9bt+38IvX6saPsFivXKjFo3CYO6aIoVGU6K fuKtdKeyZquoZ+aF0anBhdvrXDHrE7Etu8xPaSkfyaIvRvIM1CtweQMV2GmRGIiy J3z0pxRCLTWqu7w1CQpYjhhIJMnGPTuX1wW4qCYuP04xyWD6PTfCtI/H16q0QEIW 1aLrh+qmcooH+4jRktMvqJq0qC8O7llgS5Gt9+t5QPY7vJbieX/YsECiEDNSSuwP 3yVRxszVn4K+c/y9bzrtlS9rXra5X0u+DO1VuW1CQxx/rsgRdA/gABwvzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuOS42hflY5wxrOtLhZeR9Tyi1qMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKawCZ5OL pLOxLdjeN+kVvTiSQ41LcPN/ThWgqx24NLsFDBLPFRAQpTXXdo7Znkqci5XcO+DI SNbSSb8oAbZVogDLnN3pk0dkzPgQUsI8lSDCcNAIAT89WJBBh+f0sxc23ReiFZlu qtfp/zzip1Fm78XWpF5YDZ0xsJe8wPM4scXCPwTQX4IzqDv+sf3DptzMyF1uIZo9 nnY2eaJdAWymR0NcQynyfABvHxNRLCZUOTTjZAyftvGmZdtfAmqtl5obnegtT1cC Z39mo1IyFgwPLmnuD2D3TTaSGbVRglGmDSX/3OrXS/J7IP4nOSCL0Hn0dz2hBD3h Us1Rx7bZsCnMLw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:19:46 2026 by rpki-client