$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: adATu0uX3/kOHKzYDbWPZPOVDiC2qqoDBWUfCDbVWt4= Subject key identifier: A2:1B:D6:BE:AA:C5:CF:C7:DE:BD:B6:C7:18:45:EB:02:3B:41:B2:25 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 01A0D50266D917CCC0C347C4655EDABAD40D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 132B Signing time: Thu 24 Sep 2026 20:01:39 +0000 Manifest this update: Thu 24 Sep 2026 20:01:39 +0000 Manifest next update: Fri 25 Sep 2026 20:01:39 +0000 Files and hashes: 1: B3LQrbE0D8oQ4aL3oL7prkhZdyg.roa (hash: DlK6M5zssqdBfWBogBRgB1KWMlUPTeM22cLgGd9OR+E=) 2: EblpiwRL9HlLzK24T8oP9IND1vQ.roa (hash: xm23w0o3y4eEG4Z/X+VeKtyIUdl513KI04Rcim87iI8=) 3: H96_Qc9SsITA0naiCSVL6y7VEJM.roa (hash: Rixat+/GKfD+/Qc5Q1rAIKjAt7zVyl2ONWoiw+w/7aY=) 4: KkqMLgVSOl4C9gkiDIZV5IAys_A.roa (hash: yUWuR1LKMlNOOPlPCHzgsf5Jj1BpkzuEJuF1kFFXOiw=) 5: Rb5hHaoWK42HVqMlLmdL2Q_tqs4.roa (hash: pvzrnsOI9tdcc9ULSntzOOVe3GikcQWZKLx+48F0nCc=) 6: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: CoiCOKUQkmDDe4uqZdxOlgENvNnX9EzpxZklEMzsSIk=) 7: _5dPGZCcsdHmpRhCTkOU-sos5GE.roa (hash: /u2/VDIfFnty31Q0Cg5Ee6PvdpGvq/sk0Sz5/j6Z4z4=) 8: _XOkat_tVbZSyUJD4uuRenyP92k.roa (hash: MO61vUIPE4xYG1HoXyKAbuzO/+H56vWiFpAKuIhdAOU=) 9: pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa (hash: Fe3L3094CE69Fi+Zh6n4NgsG3bWV3oT1EQEavw3p2f4=) 10: qXcS6OI26rFTLi_T2I0DI0xKoyk.roa (hash: 7rGGuHEL+nQFILlUsjH4I+jgvUwVxc2dc664sGkuKo4=) 11: tz7F4eng4GbKZrftZOga_11upMA.roa (hash: pkYGrfaCo0zVxHfUdGVs2eZr/bDW6rBfCQtsQyDfE4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d5:02:66:d9:17:cc:c0:c3:47:c4:65:5e:da:ba:d4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Sep 24 20:01:39 2026 GMT Not After : Sep 25 20:01:39 2026 GMT Subject: CN=a21bd6beaac5cfc7debdb6c71845eb023b41b225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:cc:0b:bb:b4:ad:44:b2:43:04:91:14:53:a3: 81:77:da:d9:83:0b:64:9e:3b:3c:49:b2:d2:1c:5b: a2:05:47:ed:1f:26:d4:70:ae:50:7a:34:79:1f:22: 06:3a:f0:a6:eb:ce:49:51:6a:58:2a:fd:79:4a:f6: dd:ef:2f:37:05:cd:14:18:6e:9f:cf:a8:3b:b0:d7: ea:83:3b:9b:19:c0:e7:14:d0:f0:b1:b3:2d:81:97: 6a:4e:11:2d:38:a0:1b:62:44:eb:40:d6:56:5a:63: 88:82:ad:5f:ac:cf:55:1d:fa:16:e0:9f:b5:41:a2: 22:11:b2:1b:77:bd:15:17:0f:88:02:f5:2d:d3:e5: c0:d5:be:13:9f:4a:64:8d:a0:d3:51:56:ad:b8:76: c9:a1:79:1f:ac:3a:d3:a5:6d:a2:fc:48:e4:0a:8a: e2:06:12:a0:73:74:8e:0f:ce:58:c5:b9:f5:e6:ae: 2c:65:4f:bd:c5:36:6e:6e:c3:d7:09:d8:70:f4:f2: 54:2c:a1:d2:32:8a:7b:a0:60:6b:98:b2:65:30:f2: 4e:33:d0:ad:a0:96:ee:ba:71:63:43:03:f8:20:ee: aa:91:f9:d3:c6:48:a5:d2:c0:eb:8a:3c:f1:65:28: 26:92:2b:49:16:98:ac:65:6e:82:f5:34:38:d5:24: 77:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1B:D6:BE:AA:C5:CF:C7:DE:BD:B6:C7:18:45:EB:02:3B:41:B2:25 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:0c:d2:42:5c:57:b4:72:20:72:61:f7:d5:67:2b:eb:a3:c0: 2e:19:05:f0:91:17:54:67:b4:04:e9:ee:ec:a2:15:69:4d:3e: 0c:a8:be:0a:ff:ee:26:e9:90:c4:75:82:6b:38:91:7c:38:5c: 5f:37:22:1f:a7:06:d0:5e:fc:e4:61:58:04:f3:19:95:23:bd: 34:ae:f0:57:bb:a6:8b:20:7e:51:7e:90:4e:69:b9:89:f8:dd: 46:b2:5c:b8:02:25:3a:cc:29:1c:40:24:d5:52:14:ed:49:61: 00:bd:55:9f:63:72:46:dc:80:e2:5f:8a:af:6e:41:8b:70:a0: f5:be:89:ef:9a:04:3a:83:67:59:c4:ac:65:66:b3:c0:7c:0e: 2c:2b:36:e3:4d:ac:85:50:33:a1:b0:ae:97:cd:c9:71:cf:2e: 8e:f6:70:a2:ec:b9:61:f0:31:84:8e:f2:8a:9b:a7:d7:a5:20: 09:e5:a3:ec:07:a1:bb:4f:26:6e:4f:f6:b9:5d:2b:6d:4d:47: 24:8f:bf:c6:cd:44:f3:4d:75:63:8d:16:db:a9:56:d4:29:fa: 69:42:8c:d8:36:f1:9f:95:6d:16:65:5f:f6:6f:53:70:49:0f: 38:48:7d:8c:18:9d:0d:f8:3c:97:9a:ee:a3:3d:b8:4e:4e:04: 4e:3f:22:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDVAmbZF8zAw0fEZV7autQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwOTI0MjAwMTM5WhcNMjYwOTI1MjAwMTM5WjAzMTEwLwYDVQQD EyhhMjFiZDZiZWFhYzVjZmM3ZGViZGI2YzcxODQ1ZWIwMjNiNDFiMjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+MwLu7StRLJDBJEUU6OBd9rZgwtk njs8SbLSHFuiBUftHybUcK5QejR5HyIGOvCm685JUWpYKv15Svbd7y83Bc0UGG6f z6g7sNfqgzubGcDnFNDwsbMtgZdqThEtOKAbYkTrQNZWWmOIgq1frM9VHfoW4J+1 QaIiEbIbd70VFw+IAvUt0+XA1b4Tn0pkjaDTUVatuHbJoXkfrDrTpW2i/EjkCori BhKgc3SOD85Yxbn15q4sZU+9xTZubsPXCdhw9PJULKHSMop7oGBrmLJlMPJOM9Ct oJbuunFjQwP4IO6qkfnTxkil0sDrijzxZSgmkitJFpisZW6C9TQ41SR3YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIb1r6qxc/H3r22xxhF6wI7QbIlMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgzSQlxX tHIgcmH31Wcr66PALhkF8JEXVGe0BOnu7KIVaU0+DKi+Cv/uJumQxHWCaziRfDhc XzciH6cG0F785GFYBPMZlSO9NK7wV7umiyB+UX6QTmm5ifjdRrJcuAIlOswpHEAk 1VIU7UlhAL1Vn2NyRtyA4l+Kr25Bi3Cg9b6J75oEOoNnWcSsZWazwHwOLCs2402s hVAzobCul83Jcc8ujvZwouy5YfAxhI7yipun16UgCeWj7Aehu08mbk/2uV0rbU1H JI+/xs1E8011Y40W26lW1Cn6aUKM2Dbxn5VtFmVf9m9TcEkPOEh9jBidDfg8l5ru oz24Tk4ETj8iyw== -----END CERTIFICATE-----Generated at Fri Sep 25 00:47:28 2026 by rpki-client