$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: NWNNU27zbxvsvNoc/566qsRATsQke3Ln4c0aL0myFBg= Subject key identifier: CE:84:3C:C3:8D:18:6A:5E:87:10:4E:4E:10:63:3A:53:C9:20:9C:50 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 01A0C331DF2BAFC0F91A79E2A6998DC76E76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 1A9D Signing time: Mon 21 Sep 2026 09:00:20 +0000 Manifest this update: Mon 21 Sep 2026 09:00:20 +0000 Manifest next update: Tue 22 Sep 2026 09:00:20 +0000 Files and hashes: 1: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (hash: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew=) 2: B3OeokPEIHVspK8KnB4E2xEIauA.roa (hash: IgRVHyKpEAbKVJK70h2CSNbYYj+I/cXKolUkU0Xoju4=) 3: FwbhXP-8NmRciDVYWAM8EtmEeGQ.roa (hash: uhNahwa7UM2PHvQnn2W5Ig6XYNN1X6M9iOv7kDjS3Os=) 4: H-cc_01X7HCeNBp36vW5EI8KQ1w.roa (hash: mxEHsfiCLi07ELQcE7gKcIOzH/MPPao30nURDU7XoEs=) 5: KzdQ6MYBCl2ir-P86lDTtzaCt6M.roa (hash: h0pLqI3V5xBNJ0ejZS7hNIXSpXsgRqsYEzH47nvj1rY=) 6: PMhUU73xUVC7raWhgd5q_EKF038.roa (hash: OeOOpBbMOncsU8LU1ef2r1FYUG+13eCeiPBILyjOPjQ=) 7: R5OP5KH_E7pdeQgFcU8ptZ10ArQ.roa (hash: lQn+RZNh55EMQdYaVWPd2fwMhR/rQtu4uCLQHJb06MY=) 8: VWMQVWn-fMxdyDNhNc6f7Kyy09Y.roa (hash: Z09Yv6W87TB4u/fOV8oJx/K3Cijv1Xqstm0UVafkQZs=) 9: ZyxzZp4gH4IwnodhpQuQPKxwDQQ.roa (hash: Z8QAW/Hd5difEMOxpKQPyuERzxUSGU8aVI2YVAh28b8=) 10: gTeAwB0zAhv2XTHYae4PaaRyjoM.roa (hash: MS9C7UzddXYoFF1xqwLUnRbqGqUbXjC0bbRjfKpJ/ws=) 11: re_1WedxziUW08jNtG4jbnB22Hw.roa (hash: WN7EZCyBh6j+RGSND8Ewl1yQ6L4gUHnT5X+q3+lz1/4=) 12: rkVDElT_F-DCm1oPC0mwIVTGhY4.roa (hash: vdCXeVOD8O0B19rOnnC+DJ+fxpHC8msfcHPlJHiPLvc=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: PVXTfEG0akRksUh3OLbIc9rl+U4useUvZKci8zXO+SQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 09:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:31:df:2b:af:c0:f9:1a:79:e2:a6:99:8d:c7:6e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Sep 21 09:00:20 2026 GMT Not After : Sep 22 09:00:20 2026 GMT Subject: CN=ce843cc38d186a5e87104e4e10633a53c9209c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:24:18:68:c6:5f:68:74:12:e4:2a:cd:68: c0:cd:e9:09:e0:cf:14:39:29:b9:22:a1:1d:73:7f: 84:c3:57:2f:2f:ca:ca:42:16:6f:46:54:06:a9:c5: d0:4c:f9:aa:e1:d1:d3:67:84:80:83:9f:38:97:2c: c1:12:79:bb:e9:87:f3:8e:80:16:e9:78:1e:4f:13: 0f:9f:26:0f:76:53:9f:72:30:9a:1d:45:de:36:b4: 19:e5:e5:a2:55:38:5d:f9:54:a3:ea:05:a9:3a:0b: 59:c7:0a:a3:06:c1:23:8e:60:18:5f:87:fd:cb:a1: 85:60:e1:01:d6:af:aa:77:ce:61:57:b7:5c:e3:09: 2d:ba:26:0a:97:8c:c9:e9:44:1d:60:75:01:69:ea: 51:f5:97:e9:83:06:78:d2:1a:52:35:70:d3:cd:3e: 51:e7:8e:b9:e2:61:5f:8f:bb:a4:5d:de:2a:67:66: 42:59:97:22:80:41:c6:c7:52:0f:d6:84:45:9a:5b: c6:30:56:5f:97:6a:3a:53:72:49:f9:1d:42:11:8b: 20:d8:7e:ef:c3:62:08:92:e2:ff:d7:09:db:f1:5a: bb:8e:bf:68:28:26:70:37:38:d0:d1:04:c0:f2:e0: 4d:5e:7f:08:8b:74:fb:bb:1e:77:f5:ad:1e:85:ae: 00:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:84:3C:C3:8D:18:6A:5E:87:10:4E:4E:10:63:3A:53:C9:20:9C:50 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:53:25:bf:25:64:01:42:16:3c:7e:17:39:cc:46:15:fe:06: c4:97:72:8a:e6:b5:6a:9d:04:8d:6f:02:ec:84:ea:71:6b:91: 83:08:a4:9b:1e:db:60:9f:d4:2c:33:16:63:c8:e0:0c:7d:e1: c6:32:19:9d:ae:50:c7:9c:d5:84:41:b0:76:db:3b:a5:b4:1c: c6:36:8c:9c:5d:62:ad:68:b9:da:3c:6b:48:42:d3:9d:e9:1e: 3b:46:bb:31:a0:4e:1b:66:1d:bf:8d:0a:f6:76:82:ed:71:cb: 27:56:da:8e:bb:bf:7b:e8:9b:9d:50:7b:3b:62:33:35:01:96: 83:1e:aa:7c:66:c7:68:1e:5c:b5:ef:c1:80:01:97:74:27:f2: 4c:68:42:58:54:6a:c5:a8:fe:04:82:46:88:57:e0:15:31:71: f2:4f:55:52:6c:2a:3c:dc:f8:1a:3c:f2:96:6f:00:1d:df:87: 40:e2:fc:33:b2:93:cc:60:e7:40:d6:91:64:ee:af:39:d3:af: 1e:3b:59:1e:7a:1e:a4:51:75:b2:b2:a7:46:94:aa:ed:dd:c0: 4a:fc:9e:6b:40:27:eb:65:ce:f7:28:fe:5c:9a:c3:ea:39:d0: 13:82:78:2b:ac:48:f3:db:99:34:4a:55:17:d4:d6:72:a3:a9: d0:a5:28:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDMd8rr8D5GnnippmNx252MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwOTIxMDkwMDIwWhcNMjYwOTIyMDkwMDIwWjAzMTEwLwYDVQQD EyhjZTg0M2NjMzhkMTg2YTVlODcxMDRlNGUxMDYzM2E1M2M5MjA5YzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuckGGjGX2h0EuQqzWjAzekJ4M8U OSm5IqEdc3+Ew1cvL8rKQhZvRlQGqcXQTPmq4dHTZ4SAg584lyzBEnm76YfzjoAW 6XgeTxMPnyYPdlOfcjCaHUXeNrQZ5eWiVThd+VSj6gWpOgtZxwqjBsEjjmAYX4f9 y6GFYOEB1q+qd85hV7dc4wktuiYKl4zJ6UQdYHUBaepR9ZfpgwZ40hpSNXDTzT5R 54654mFfj7ukXd4qZ2ZCWZcigEHGx1IP1oRFmlvGMFZfl2o6U3JJ+R1CEYsg2H7v w2IIkuL/1wnb8Vq7jr9oKCZwNzjQ0QTA8uBNXn8Ii3T7ux539a0eha4A+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6EPMONGGpehxBOThBjOlPJIJxQMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVMlvyVk AUIWPH4XOcxGFf4GxJdyiua1ap0EjW8C7ITqcWuRgwikmx7bYJ/ULDMWY8jgDH3h xjIZna5Qx5zVhEGwdts7pbQcxjaMnF1irWi52jxrSELTnekeO0a7MaBOG2Ydv40K 9naC7XHLJ1bajru/e+ibnVB7O2IzNQGWgx6qfGbHaB5cte/BgAGXdCfyTGhCWFRq xaj+BIJGiFfgFTFx8k9VUmwqPNz4Gjzylm8AHd+HQOL8M7KTzGDnQNaRZO6vOdOv HjtZHnoepFF1srKnRpSq7d3ASvyea0An62XO9yj+XJrD6jnQE4J4K6xI89uZNEpV F9TWcqOp0KUoGA== -----END CERTIFICATE-----Generated at Mon Sep 21 17:57:27 2026 by rpki-client