$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: XR+i9XdMP22D38DwqpeYQ+xP6gUZQdZvZO6FyDoFheo= Subject key identifier: 8B:4B:E5:C7:20:B6:CD:83:09:B2:9B:C9:C9:94:25:7A:42:20:64:D9 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019EBFFF0CCDEC87972B535B71D2E8034454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 1217 Signing time: Sat 13 Jun 2026 08:00:23 +0000 Manifest this update: Sat 13 Jun 2026 08:00:23 +0000 Manifest next update: Sun 14 Jun 2026 08:00:23 +0000 Files and hashes: 1: B3LQrbE0D8oQ4aL3oL7prkhZdyg.roa (hash: DlK6M5zssqdBfWBogBRgB1KWMlUPTeM22cLgGd9OR+E=) 2: EblpiwRL9HlLzK24T8oP9IND1vQ.roa (hash: xm23w0o3y4eEG4Z/X+VeKtyIUdl513KI04Rcim87iI8=) 3: H96_Qc9SsITA0naiCSVL6y7VEJM.roa (hash: Rixat+/GKfD+/Qc5Q1rAIKjAt7zVyl2ONWoiw+w/7aY=) 4: KkqMLgVSOl4C9gkiDIZV5IAys_A.roa (hash: yUWuR1LKMlNOOPlPCHzgsf5Jj1BpkzuEJuF1kFFXOiw=) 5: Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa (hash: pvzrnsOI9tdcc9ULSntzOOVe3GikcQWZKLx+48F0nCc=) 6: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: ZydLBZJrrtQfm0vkrjO0qGeqD3u6OZ/zkCmTCmEG8WY=) 7: _5dPGZCcsdHmpRhCTkOU-sos5GE.roa (hash: /u2/VDIfFnty31Q0Cg5Ee6PvdpGvq/sk0Sz5/j6Z4z4=) 8: _XOkat_tVbZSyUJD4uuRenyP92k.roa (hash: MO61vUIPE4xYG1HoXyKAbuzO/+H56vWiFpAKuIhdAOU=) 9: pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa (hash: Fe3L3094CE69Fi+Zh6n4NgsG3bWV3oT1EQEavw3p2f4=) 10: qXcS6OI26rFTLi_T2I0DI0xKoyk.roa (hash: 7rGGuHEL+nQFILlUsjH4I+jgvUwVxc2dc664sGkuKo4=) 11: tz7F4eng4GbKZrftZOga_11upMA.roa (hash: pkYGrfaCo0zVxHfUdGVs2eZr/bDW6rBfCQtsQyDfE4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:ff:0c:cd:ec:87:97:2b:53:5b:71:d2:e8:03:44:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jun 13 08:00:23 2026 GMT Not After : Jun 14 08:00:23 2026 GMT Subject: CN=8b4be5c720b6cd8309b29bc9c994257a422064d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:df:9b:8f:e3:52:33:fa:49:c6:d6:9d:a7:f1: 88:bf:55:8b:46:b3:32:67:77:c4:3a:7b:7c:a0:3f: 52:c1:45:cd:15:27:cc:1f:66:66:f0:8c:ec:3a:38: 1c:20:79:bb:67:47:4c:c1:71:55:d4:18:f1:58:df: e7:c3:33:f5:6c:91:f8:55:43:e3:f6:26:b8:ce:43: 7b:8b:26:4e:8f:cd:4d:9b:0e:3b:94:5f:45:40:92: 3c:b7:60:af:9a:14:a4:81:79:35:80:9b:20:db:15: a1:f5:d4:0d:6f:42:a2:a5:ab:9f:12:06:ae:a9:3b: 98:1c:a4:bf:59:08:75:da:b9:cd:72:07:93:a7:fe: 1a:27:23:88:1b:ec:a0:1f:c4:8c:fd:50:b6:ed:7e: e7:e4:6a:ad:e9:5e:29:a0:68:22:da:fe:85:2d:1f: 3a:4e:31:d5:2b:b7:33:8c:78:66:77:5d:33:93:f9: e4:b6:18:8f:ba:f0:55:28:1b:8e:bc:f5:a0:06:ac: a8:50:d7:d9:00:b7:fe:27:42:e4:97:42:aa:f9:c7: 39:2e:5b:90:19:47:67:d0:f8:5b:fb:01:ce:56:9e: e3:4b:d3:de:d4:ed:39:b8:da:ce:e4:b7:b7:fb:8a: 19:0b:dc:e8:ec:00:73:e2:7d:bb:0e:38:06:87:e7: e8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4B:E5:C7:20:B6:CD:83:09:B2:9B:C9:C9:94:25:7A:42:20:64:D9 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ba:e7:56:fe:c7:12:c4:7e:ec:64:02:27:66:71:a6:bd:6a: 90:93:18:bf:90:f8:33:27:82:8f:38:e7:8a:cf:4e:cf:a8:f4: 7d:30:4a:92:73:75:c1:35:1c:ef:76:fe:74:24:4b:47:a3:1c: 87:12:a9:f8:a0:b6:56:96:32:56:8a:7a:b6:6d:39:62:10:4b: 24:55:82:e6:8d:3c:07:04:dc:0b:c7:fc:f9:a9:83:14:f3:2b: 9a:08:80:3f:24:e3:f6:df:bd:d3:0d:1a:9f:a2:a2:74:99:22: b6:9e:44:d1:d2:a4:25:1e:e7:51:48:82:cf:9b:36:97:86:14: b8:6e:ed:bb:a0:d4:c8:da:7f:b1:f4:2b:db:6b:bf:9b:06:41: d3:78:72:65:6b:f5:be:fc:7d:06:99:42:1e:61:f4:fd:2c:4d: 3d:7a:dd:41:07:b1:7d:88:ae:de:ad:51:e8:6c:fe:67:c4:ab: c1:e1:2b:d1:84:92:e4:b9:b3:f1:69:d9:98:c9:fc:7e:c1:7f: 37:c9:cb:0f:79:a0:40:8b:70:92:5c:94:8c:88:c8:90:fd:00: 41:f5:8b:69:53:73:ff:35:c1:e2:89:67:d7:1a:7a:22:5c:01: 07:4a:78:cc:6b:53:9c:bb:e0:6a:d0:34:1b:a4:a6:79:14:02: 4e:ce:b6:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6//wzN7IeXK1NbcdLoA0RUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwNjEzMDgwMDIzWhcNMjYwNjE0MDgwMDIzWjAzMTEwLwYDVQQD Eyg4YjRiZTVjNzIwYjZjZDgzMDliMjliYzljOTk0MjU3YTQyMjA2NGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt+bj+NSM/pJxtadp/GIv1WLRrMy Z3fEOnt8oD9SwUXNFSfMH2Zm8IzsOjgcIHm7Z0dMwXFV1BjxWN/nwzP1bJH4VUPj 9ia4zkN7iyZOj81Nmw47lF9FQJI8t2CvmhSkgXk1gJsg2xWh9dQNb0KipaufEgau qTuYHKS/WQh12rnNcgeTp/4aJyOIG+ygH8SM/VC27X7n5Gqt6V4poGgi2v6FLR86 TjHVK7czjHhmd10zk/nkthiPuvBVKBuOvPWgBqyoUNfZALf+J0Lkl0Kq+cc5LluQ GUdn0Phb+wHOVp7jS9Pe1O05uNrO5Le3+4oZC9zo7ABz4n27DjgGh+fovwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItL5ccgts2DCbKbycmUJXpCIGTZMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrrnVv7H EsR+7GQCJ2Zxpr1qkJMYv5D4MyeCjzjnis9Oz6j0fTBKknN1wTUc73b+dCRLR6Mc hxKp+KC2VpYyVop6tm05YhBLJFWC5o08BwTcC8f8+amDFPMrmgiAPyTj9t+90w0a n6KidJkitp5E0dKkJR7nUUiCz5s2l4YUuG7tu6DUyNp/sfQr22u/mwZB03hyZWv1 vvx9BplCHmH0/SxNPXrdQQexfYiu3q1R6Gz+Z8SrweEr0YSS5Lmz8WnZmMn8fsF/ N8nLD3mgQItwklyUjIjIkP0AQfWLaVNz/zXB4oln1xp6IlwBB0p4zGtTnLvgatA0 G6SmeRQCTs62Eg== -----END CERTIFICATE-----Generated at Sat Jun 13 15:23:31 2026 by rpki-client