$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft File: X-U8C_w8j7VrgRkTFxREQ-DinSU.mft (raw, json) Hash identifier: Ac7C83xJExOC1WA2kVFlfNSvJkpLb7AQKI4D8YtxadE= Subject key identifier: 16:3C:B8:78:EA:A2:C7:AF:A6:E8:85:68:AC:B4:FD:76:66:D6:8C:9B Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Certificate serial: 01A0DA75E4E9ACC45F30354B63A7D128A702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft Manifest number: 0327 Signing time: Fri 25 Sep 2026 21:25:54 +0000 Manifest this update: Fri 25 Sep 2026 21:25:54 +0000 Manifest next update: Sat 26 Sep 2026 21:25:54 +0000 Files and hashes: 1: 1-WRMeWAjzgb312ndWDBDDXMQ_vI.roa (hash: XzPUGdJfunU8R7/FSgEPmq2u3oT+muSY+llXKr6PBAw=) 2: 1UR7iOUK7d39VgLhHHYabfCLfOQ.roa (hash: oXZ47tHg5pSp0xSQ+s2LJEyC4fnJ8Z/RFiohj4q0860=) 3: 3D91aJc1b1Xugh3NpwokFVe9EHE.roa (hash: RPyCzjrPqhXSX0bgmE4+2E9x3ipWzKg8e+mZU3iZEOQ=) 4: 3Y-eHCCgunD3UqlvqBOXGz_h0B0.roa (hash: 5gPJOtrd7/FR9Rg8PU5TgNYEDSQkiUigOipqFHdBnGw=) 5: 64_DVKhgRZa50PRzVHzS-MDphcc.roa (hash: x0NJJwNguwUvUcOSX51gUnlCVVesftaz8k3Yekk+glY=) 6: 6Kn6KERntDi_4eNpvTRVmFsjPbs.roa (hash: S7y4QiK56lUGKhpEffmK8PyadtfZ3aD7k2+Jzek5K7Y=) 7: FONMbE7JQ_555_AhVQTIUm9lk_Y.roa (hash: GG4U0G3QeJ4kcb/w+WXTiBuOwG5JvNB4bAGnAM53Suc=) 8: INuj-mdGt6rVjs3vF-tqkz-ZTnY.roa (hash: +5qeByzEneEsC8OBCRKdqJbbnxdRus+dvidceYaX+Zw=) 9: JJSXlUjdgsXsxr441kL45vuNPlQ.roa (hash: RV4cugeNLggjz/BuldqDCL7PylisxFfq49zCoougTQc=) 10: LdkzKbOc6UBBYQHPpJdrnxEq4OU.roa (hash: S6QhP5xEUXEZ2xSFH+U8Yf9LI+j3ApeUra07WFUy0N0=) 11: MW7a5ozeRK7aTF0-v1kkuN3zmBw.roa (hash: v0rscB9FZzDyiyT/UQbPiAzxWoDQj9aXYnD+nqDYtG0=) 12: O8fDHPNLTZwX_qmdf9SxlFaFWP4.roa (hash: UJICWm/siXAH3HAjYmp8Fd0w20+HEeezizMeKw3NbcM=) 13: P4OtQvDUkCMuJskgBHh-vNxJu1I.roa (hash: yqqu/7j4s+Y4/ylDF+aywZRspIGl1aQhkK6q+AAIbdQ=) 14: SC9MOMjrqmbOVAWcGnRcQF-RFqE.roa (hash: eQcJ+zf8+aHLfgfb+8QPSi/V+ow88wMOF3ndX9/Y9o8=) 15: X-U8C_w8j7VrgRkTFxREQ-DinSU.crl (hash: FtLpe/xHK16Rb+YnXqyiyTAOLT2T6z6PCGODlHh5RmU=) 16: YR5NHny-H5eU5tgqNNy6P-03Z9Q.roa (hash: XN+oOCB4Fs/+me/Qvw4xaRoHKMmthIb2bcNRuvZmhx4=) 17: d3lmTr7PIEzpH3BI6BqiMMOZGzI.roa (hash: 5T88juZeJZkfQqxz39ljaMd8hJFf/Kn+i1imnzr2zME=) 18: fhBwAAAKsFClM1kXSXaAmjf7WA8.roa (hash: ABuKWxwbP2yN2IKq1ZVxmtzpWZDM6jME0HRhZj5X1YU=) 19: gmxsPG4cUoRDhGjGSFZpIBKC3Vc.roa (hash: 34TUxv9nfVy/jkSU3uZVSK5tEVV3b0jLrFwkZpgwR/I=) 20: jPHYOj_6LWYOivdVvMKC2HFIT4M.roa (hash: WNAYcfnTCYvXJjSjaYW8AjeZqY76pySAXbuH7yNIDFc=) 21: n6Cb7AJIjHdUwKjVZviwZnDYIhM.roa (hash: 9Q8TNAnTm2hfdhie9oH3Jcj9om1Q+4fMUBjWp/97vOg=) 22: niBnbMVkqFMwm26EVgCw4EKo_bU.roa (hash: JT24uuA3eMkhOdW2lEUEMqsdJUmG+tYUXEw08dTPMoY=) 23: ppZPPhs9Fk9KthHZECP8i1n-qRw.roa (hash: r3D9XGo0E46YnlFBTi6Wu1H+lI4vmSw50xc2xlIL764=) 24: s_8exuQTcAjiBuqj7Kb6yyZ3URY.roa (hash: 9D4USD9s5nLllsPvmxgsIDc6aBZr9W6ksocrmvoCt7c=) 25: sp_ETP2RaEyKONTOC69EWe73mcc.roa (hash: se3ZtZfgcOxHMacQP3qmA3MHEEjUOar/xVrhe71pNSc=) 26: y1YHL9stLW0EBSHIGE4wu7b_QNg.roa (hash: WD/77vOfUuYMZHL5B9Asts3xM0tFEHZv2a7HErfU5rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 21:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:da:75:e4:e9:ac:c4:5f:30:35:4b:63:a7:d1:28:a7:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Validity Not Before: Sep 25 21:25:54 2026 GMT Not After : Sep 26 21:25:54 2026 GMT Subject: CN=163cb878eaa2c7afa6e88568acb4fd7666d68c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:69:e6:dd:56:c1:4a:3c:20:0c:86:fc:61:d4: c8:c1:42:31:5c:1d:85:ec:b1:98:01:00:d4:f6:49: 17:0e:e8:29:40:19:46:59:68:c9:c1:0d:59:10:7a: 98:b7:9d:ab:7b:0d:d4:95:08:d8:69:5c:1c:72:2c: 40:df:bb:78:9c:dd:fd:db:00:f5:97:b5:c4:af:82: 69:95:24:aa:70:23:22:65:d9:99:c7:92:71:b0:be: f4:0a:8b:a6:8a:e2:15:1f:d6:6a:1e:04:47:9f:cc: ca:c7:03:b3:80:91:0c:2b:28:24:b4:af:3b:a4:c7: 25:21:e6:2e:df:27:e4:3c:2c:63:1b:2e:45:5e:fc: 7a:90:66:19:9e:7f:ea:61:26:0b:01:42:66:2d:92: 53:44:52:df:7e:01:e1:47:cb:74:4c:9f:9c:f2:db: e0:58:f1:36:3e:27:c0:12:05:ff:8b:b6:c5:4f:d5: 37:86:3b:17:05:8f:98:b4:a7:0f:6f:29:7d:30:a1: 44:54:77:9d:5c:8c:d9:dc:1d:f5:58:2e:99:88:bd: 84:4f:6b:9c:7b:29:f9:cf:59:32:f3:9d:29:e7:f3: 94:3e:7e:34:e7:75:b3:a6:15:2c:6e:3f:0f:7b:45: 49:e3:40:be:04:11:bc:c4:7e:fb:27:9c:4d:67:c6: 16:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3C:B8:78:EA:A2:C7:AF:A6:E8:85:68:AC:B4:FD:76:66:D6:8C:9B X509v3 Authority Key Identifier: keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2a:b3:9a:db:dd:4c:a1:ec:04:09:82:da:c6:45:bd:b5:6c: 03:2f:3a:dc:74:aa:d5:64:7c:f3:b2:67:1c:ae:92:c6:7d:a9: 49:36:e8:3a:68:08:0a:db:2b:f2:b1:bc:05:ee:2a:bd:7a:d1: 09:ac:40:45:f8:fa:e5:55:c8:53:ef:4d:ec:15:bf:d6:cd:b4: 57:7f:17:14:9b:bb:4f:38:b8:59:24:21:b3:73:a2:30:af:2a: b0:e4:ed:34:1c:be:3c:c6:f9:d2:d1:95:a0:ea:0e:fe:b2:28: 3c:6f:3b:89:95:50:45:bb:9d:d3:47:1a:e7:2b:1c:01:2c:89: 76:14:a2:8b:6d:4e:ff:3b:bd:33:fa:3a:6d:70:0f:a0:02:98: 3a:e7:ed:b2:16:40:b2:f2:b0:dc:76:e6:22:30:25:67:47:ff: 8f:76:11:e3:17:ec:3a:2e:d6:1c:7f:2e:c8:b2:02:a6:06:01: 53:29:08:c3:37:d8:c1:f0:58:2f:c4:8b:e6:ae:f9:9f:04:02: 39:0a:a3:cb:f0:4c:2a:00:19:05:a6:1f:fa:2f:bc:86:a9:34: 31:b0:81:9f:d5:29:d2:a7:a1:b4:3e:46:a7:8a:f5:b8:0d:03: 1f:41:6e:0f:7c:12:4b:ce:99:5f:19:cc:97:73:57:d9:a2:d4: eb:6b:40:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDadeTprMRfMDVLY6fRKKcCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl MjlkMjUwHhcNMjYwOTI1MjEyNTU0WhcNMjYwOTI2MjEyNTU0WjAzMTEwLwYDVQQD EygxNjNjYjg3OGVhYTJjN2FmYTZlODg1NjhhY2I0ZmQ3NjY2ZDY4YzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2nm3VbBSjwgDIb8YdTIwUIxXB2F 7LGYAQDU9kkXDugpQBlGWWjJwQ1ZEHqYt52rew3UlQjYaVwccixA37t4nN392wD1 l7XEr4JplSSqcCMiZdmZx5JxsL70CoumiuIVH9ZqHgRHn8zKxwOzgJEMKygktK87 pMclIeYu3yfkPCxjGy5FXvx6kGYZnn/qYSYLAUJmLZJTRFLffgHhR8t0TJ+c8tvg WPE2PifAEgX/i7bFT9U3hjsXBY+YtKcPbyl9MKFEVHedXIzZ3B31WC6ZiL2ET2uc eyn5z1ky850p5/OUPn4053WzphUsbj8Pe0VJ40C+BBG8xH77J5xNZ8YWrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBY8uHjqosevpuiFaKy0/XZm1oybMB8GA1UdIwQY MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct NWNmNTZlZTQzNWIzLzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCqzmtvd TKHsBAmC2sZFvbVsAy863HSq1WR887JnHK6Sxn2pSTboOmgICtsr8rG8Be4qvXrR CaxARfj65VXIU+9N7BW/1s20V38XFJu7Tzi4WSQhs3OiMK8qsOTtNBy+PMb50tGV oOoO/rIoPG87iZVQRbud00ca5yscASyJdhSii21O/zu9M/o6bXAPoAKYOuftshZA svKw3HbmIjAlZ0f/j3YR4xfsOi7WHH8uyLICpgYBUykIwzfYwfBYL8SL5q75nwQC OQqjy/BMKgAZBaYf+i+8hqk0MbCBn9Up0qehtD5Gp4r1uA0DH0FuD3wSS86ZXxnM l3NX2aLU62tA/Q== -----END CERTIFICATE-----Generated at Sat Sep 26 08:36:03 2026 by rpki-client