$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json) Hash identifier: R9KxzrnGHBlXObn/PA7oK0inHH6oA29RtYEQ2ThY5AY= Subject key identifier: CA:13:99:85:8C:53:0F:2A:10:D4:E1:9F:2B:99:89:91:09:DB:EF:A6 Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Certificate serial: 019D992B30AC287BFF65B8E1C02D9ADD97DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft Manifest number: 0667 Signing time: Fri 17 Apr 2026 02:00:37 +0000 Manifest this update: Fri 17 Apr 2026 02:00:37 +0000 Manifest next update: Sat 18 Apr 2026 02:00:37 +0000 Files and hashes: 1: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=) 2: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (hash: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=) 3: Gz_1bJto4c1yEF2Q0CAMMKyQM04.roa (hash: XtyCodmY8171cj6WcCGbm/ih1IwcnbUwaLWquFazgPc=) 4: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: 18Z2u82VV7nF9PJAA+Zj326/WNJhGvms+fQS5NmAgy0=) 5: Z1V5lwUUrZll1KmPOgWR8Eag8b4.roa (hash: xUsruNjtSsoiCiUtber3+Ze8kadAYwEP/UxnWmjwonA=) 6: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=) 7: klZpNcpkOEquqUsO-jju5O69v1E.roa (hash: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=) 8: qBdBxkrsMe-QAThbnuUqYyq9XxY.roa (hash: 21WM2SzHhwGMLLSoVXMeEp7KJQLIRB96uxsn5RrDRgw=) 9: y7rxPQXdQykP2HWundiTAhRuuNE.roa (hash: kwq12jPHanXZhrxqm5HaXAm17ns+Kl4rOD8Lx3F1wV8=) 10: yc0EM4Q7YegfvWHtUfZGE2JYYt8.asa (hash: YVzGGL9uGiyH33DfGylRpABv7Bt0LM4Hn9Ld7YwL2Nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 02:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:2b:30:ac:28:7b:ff:65:b8:e1:c0:2d:9a:dd:97:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Validity Not Before: Apr 17 02:00:37 2026 GMT Not After : Apr 18 02:00:37 2026 GMT Subject: CN=ca1399858c530f2a10d4e19f2b99899109dbefa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:ee:bf:42:f8:64:5b:c0:d6:62:d5:78:c7: 7c:59:a3:26:94:ce:ef:33:3d:e4:52:5e:f3:d5:44: e0:65:67:ab:4a:0b:87:b0:13:1d:a0:1d:4e:c3:ab: 96:2e:09:5e:80:bf:05:57:41:31:7e:a4:f7:19:b8: c3:f0:a2:df:ab:fc:1c:96:8f:b0:17:43:b6:60:af: 20:ff:3f:d3:03:68:06:d9:7b:7d:2a:01:0c:53:1c: 50:f2:17:57:c3:b3:6f:97:cc:61:96:be:82:db:86: b4:4b:f8:44:35:e8:71:93:29:84:a5:4a:33:70:bc: 20:77:ca:82:41:77:07:04:66:f0:19:41:c6:c9:7e: f9:d2:55:2c:ab:7d:ee:3c:73:6a:bc:cd:a8:2f:46: 5c:0c:6f:0f:1f:a5:24:1c:1f:7e:36:b9:31:c9:12: 56:59:a4:03:52:bf:e6:60:37:8e:ed:85:0f:92:cc: 0d:3d:22:ef:a2:25:5e:9a:3a:ef:2e:c7:9b:48:b8: e8:c3:35:f5:c7:8e:7a:fd:70:5e:0e:3b:da:2b:a8: d6:7c:d4:ce:0a:c7:d9:54:2b:8a:18:8f:98:7a:f0: b5:c7:b6:2c:3e:24:52:fe:35:f0:60:00:d8:c5:fa: 21:d4:ab:04:20:b2:fd:57:9d:a5:1b:87:26:95:62: ca:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:13:99:85:8C:53:0F:2A:10:D4:E1:9F:2B:99:89:91:09:DB:EF:A6 X509v3 Authority Key Identifier: keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:89:09:a8:90:b8:e9:de:57:4b:15:25:78:c3:4c:2a:9b:7f: 38:25:4c:46:46:9e:7b:b3:0f:57:19:49:89:a5:6b:75:3e:81: 4a:52:22:c6:15:6b:99:10:92:b3:c8:73:31:a4:ab:87:79:3f: 53:f2:01:f8:39:59:b3:6d:5b:33:86:ab:6c:74:16:f9:4d:ce: 1a:11:8e:39:90:3e:4e:2a:93:57:ef:62:ab:26:df:d8:44:68: 7f:60:28:ec:d4:0c:5b:6a:b3:44:7d:4d:6f:e2:67:fa:5c:88: c4:3f:c1:82:e8:b1:22:b1:c0:ff:b0:e7:e2:b2:a6:42:65:c1: 26:33:59:28:be:4f:4a:ab:07:c4:0c:eb:59:a1:c9:99:e8:04: 36:7f:a8:f4:e7:2b:3a:2d:91:fc:16:d1:fa:ba:27:d4:04:2a: 0f:9b:49:36:22:4c:9b:50:0d:9e:3d:c9:4f:80:75:de:a2:a0: 22:70:a1:e4:5d:ad:71:6c:f4:c6:73:42:e5:17:bb:93:aa:8a: bc:8b:1d:b6:f3:c9:e3:39:75:f4:a4:4b:1b:ea:df:7d:4e:cc: cb:dd:56:03:73:4b:7e:7d:9c:eb:89:01:db:a7:ac:29:88:b0: eb:8e:be:02:69:16:eb:6a:97:d6:08:93:d2:c1:92:3c:f7:1c: c5:93:0c:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZKzCsKHv/ZbjhwC2a3ZfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh NTc2ZDEwHhcNMjYwNDE3MDIwMDM3WhcNMjYwNDE4MDIwMDM3WjAzMTEwLwYDVQQD EyhjYTEzOTk4NThjNTMwZjJhMTBkNGUxOWYyYjk5ODk5MTA5ZGJlZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFHuv0L4ZFvA1mLVeMd8WaMmlM7v Mz3kUl7z1UTgZWerSguHsBMdoB1Ow6uWLglegL8FV0ExfqT3GbjD8KLfq/wclo+w F0O2YK8g/z/TA2gG2Xt9KgEMUxxQ8hdXw7Nvl8xhlr6C24a0S/hENehxkymEpUoz cLwgd8qCQXcHBGbwGUHGyX750lUsq33uPHNqvM2oL0ZcDG8PH6UkHB9+NrkxyRJW WaQDUr/mYDeO7YUPkswNPSLvoiVemjrvLsebSLjowzX1x456/XBeDjvaK6jWfNTO CsfZVCuKGI+YevC1x7YsPiRS/jXwYADYxfoh1KsEILL9V52lG4cmlWLKNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoTmYWMUw8qENThnyuZiZEJ2++mMB8GA1UdIwQY MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt YzgzMDJlODJlYTIyLzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIkJqJC4 6d5XSxUleMNMKpt/OCVMRkaee7MPVxlJiaVrdT6BSlIixhVrmRCSs8hzMaSrh3k/ U/IB+DlZs21bM4arbHQW+U3OGhGOOZA+TiqTV+9iqybf2ERof2Ao7NQMW2qzRH1N b+Jn+lyIxD/BguixIrHA/7Dn4rKmQmXBJjNZKL5PSqsHxAzrWaHJmegENn+o9Ocr Oi2R/BbR+ron1AQqD5tJNiJMm1ANnj3JT4B13qKgInCh5F2tcWz0xnNC5Re7k6qK vIsdtvPJ4zl19KRLG+rffU7My91WA3NLfn2c64kB26esKYiw646+AmkW62qX1giT 0sGSPPccxZMM9g== -----END CERTIFICATE-----Generated at Fri Apr 17 10:16:02 2026 by rpki-client