$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: cDIJpICm3Me/lGVns4zi3Sw9BbvzoI6o/AKuSPbjoXA= Subject key identifier: 47:0C:B8:19:D6:C0:74:A5:75:19:F5:69:61:59:A2:CF:90:43:44:BD Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019CAA215F1142176BEE8EC116357AD2C0C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 1423 Signing time: Sun 01 Mar 2026 16:00:39 +0000 Manifest this update: Sun 01 Mar 2026 16:00:39 +0000 Manifest next update: Mon 02 Mar 2026 16:00:39 +0000 Files and hashes: 1: 3h1CXl7HYMWmLGwBh3ONd5rS3hc.roa (hash: Xuejav4fss+XVZMTSOqx2d21V8VUJ6E3micJYPsKn7s=) 2: 6x8_lobLoVhuOkMPbJ37tyo730k.roa (hash: frU4mbSkgCyRaUyYfKiF6eXm6Dyg76kmIZLBN+kqhOQ=) 3: 7ItMpX2jLTwyH9XpO5jp7SzIWSg.roa (hash: J9SJjSKqLYuFsUDjJoCt3JIVxoO5phlJCjXL8OymbCw=) 4: G6j6G54eI6PykBhSQs9rNNcS6hw.roa (hash: laEXgXrT36Ynj7L9LkdaNFFej1PJ+rq5ig2aomYZyl4=) 5: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=) 6: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 7: TSjFM1kyGeGyo2PAsR0WSG_oqns.roa (hash: TMlFjOXacwLKIABcDzQq377NOlMddVoF+Xggh2q6las=) 8: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 9: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: 6Ssh5coghvNcEQWwTDtm0y5E8UsCLeoZZUX0utp9DIM=) 10: mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa (hash: sXvWRa0cGZ0eH2CssCaF8CgkrXf1U+VjrI6hfvsrHmA=) 11: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 12: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:21:5f:11:42:17:6b:ee:8e:c1:16:35:7a:d2:c0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Mar 1 16:00:39 2026 GMT Not After : Mar 2 16:00:39 2026 GMT Subject: CN=470cb819d6c074a57519f5696159a2cf904344bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:49:d1:ee:8f:8b:b1:49:9f:e9:43:da:18: 11:88:7a:ca:12:67:57:a8:7e:e1:29:68:41:11:a1: f1:3e:81:5c:13:0a:6c:8b:8e:50:82:4b:ed:62:ba: dc:0e:b3:7b:0b:88:57:c4:8c:47:89:24:38:63:dd: 36:64:dc:1f:b7:9c:3d:ae:af:cc:ed:e7:28:16:9f: e1:9d:93:70:31:f6:e7:3e:07:e8:67:04:e2:a9:8b: ee:9f:35:c9:b1:e9:40:3f:66:2d:25:f6:69:4f:7a: fb:52:25:50:4c:26:0a:ef:88:91:b0:a8:06:9f:78: a8:fd:8d:0d:46:ed:87:42:ec:86:71:39:3b:61:08: e6:9a:e5:69:c9:3a:86:7f:e2:e8:e1:06:2f:b1:66: 91:4f:d8:ab:9a:8d:2c:23:3a:9b:93:6f:fe:f3:80: 9f:ab:7a:22:91:d8:c4:21:e6:fa:3d:f1:c8:2a:f0: ac:81:7c:6a:3a:ac:ef:31:24:9b:8d:32:ab:42:5b: ac:09:b4:38:b5:b1:7c:1b:51:94:3c:24:ef:ce:4c: 7c:b1:dd:8f:60:fd:6f:93:5c:c5:5b:de:27:15:99: 91:1d:13:c9:5e:d4:c2:85:26:b6:a8:20:10:88:72: 18:1a:39:a9:4e:5c:e7:0b:a7:8c:54:c6:7f:70:24: af:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0C:B8:19:D6:C0:74:A5:75:19:F5:69:61:59:A2:CF:90:43:44:BD X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ef:97:f6:7e:6e:5a:97:1f:80:9e:ee:20:aa:6f:b4:af:38: 28:4f:d1:4f:c1:66:73:49:cc:f1:9a:7b:21:b5:39:06:f9:ae: 35:96:5c:04:9f:5a:e5:ab:5e:6f:1f:f6:66:26:98:27:08:60: 19:95:7c:e6:dd:b6:86:4a:2e:d3:cc:20:af:65:14:32:81:c6: ba:d2:a8:7f:f5:16:09:50:e0:f8:53:14:b0:fe:36:26:35:9a: 0d:0d:6b:1e:7b:b6:e2:97:1a:3a:d8:23:f4:b8:d4:b6:14:4b: 1f:3a:ef:20:ea:7b:06:cc:f9:1d:33:69:83:ed:32:db:84:44: 63:35:e4:ce:23:03:09:8f:e4:36:7e:2a:ec:6b:76:ad:e3:b3: 54:ed:b1:db:c5:9f:2d:a3:c2:4f:9b:1b:f7:39:a9:8e:a5:12: 0d:94:dd:27:37:44:e6:1a:34:7b:ac:6a:16:43:94:72:a8:6e: 82:69:31:c8:0b:65:50:dd:39:5d:9f:bc:e6:d6:12:29:8f:10: bf:2b:15:76:05:52:a1:34:b3:f5:ab:89:95:be:c6:65:52:b0: cf:6b:27:fb:0d:3c:2d:a9:00:43:06:2b:44:9b:98:8a:3d:26: 5f:f7:8b:f2:0d:54:70:53:22:cf:53:a9:64:dd:2d:8d:67:52: ce:b3:c4:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqIV8RQhdr7o7BFjV60sDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMzAxMTYwMDM5WhcNMjYwMzAyMTYwMDM5WjAzMTEwLwYDVQQD Eyg0NzBjYjgxOWQ2YzA3NGE1NzUxOWY1Njk2MTU5YTJjZjkwNDM0NGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+lJ0e6Pi7FJn+lD2hgRiHrKEmdX qH7hKWhBEaHxPoFcEwpsi45QgkvtYrrcDrN7C4hXxIxHiSQ4Y902ZNwft5w9rq/M 7ecoFp/hnZNwMfbnPgfoZwTiqYvunzXJselAP2YtJfZpT3r7UiVQTCYK74iRsKgG n3io/Y0NRu2HQuyGcTk7YQjmmuVpyTqGf+Lo4QYvsWaRT9irmo0sIzqbk2/+84Cf q3oikdjEIeb6PfHIKvCsgXxqOqzvMSSbjTKrQlusCbQ4tbF8G1GUPCTvzkx8sd2P YP1vk1zFW94nFZmRHRPJXtTChSa2qCAQiHIYGjmpTlznC6eMVMZ/cCSvWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcMuBnWwHSldRn1aWFZos+QQ0S9MB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgu+X9n5u WpcfgJ7uIKpvtK84KE/RT8Fmc0nM8Zp7IbU5BvmuNZZcBJ9a5atebx/2ZiaYJwhg GZV85t22hkou08wgr2UUMoHGutKof/UWCVDg+FMUsP42JjWaDQ1rHnu24pcaOtgj 9LjUthRLHzrvIOp7Bsz5HTNpg+0y24REYzXkziMDCY/kNn4q7Gt2reOzVO2x28Wf LaPCT5sb9zmpjqUSDZTdJzdE5ho0e6xqFkOUcqhugmkxyAtlUN05XZ+85tYSKY8Q vysVdgVSoTSz9auJlb7GZVKwz2sn+w08LakAQwYrRJuYij0mX/eL8g1UcFMiz1Op ZN0tjWdSzrPEHQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:42:54 2026 by rpki-client