$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: arYdFhi4S/KHOyaY/ntnyk+OWh/F+udeobPTAcdh6+M= Subject key identifier: C2:AD:E2:F5:74:01:72:D1:CC:9B:29:DD:35:86:4F:47:3A:AC:5A:96 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019D9998EF85EA6E1F9502BE326288989AF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 14A2 Signing time: Fri 17 Apr 2026 04:00:30 +0000 Manifest this update: Fri 17 Apr 2026 04:00:30 +0000 Manifest next update: Sat 18 Apr 2026 04:00:30 +0000 Files and hashes: 1: 6x8_lobLoVhuOkMPbJ37tyo730k.roa (hash: frU4mbSkgCyRaUyYfKiF6eXm6Dyg76kmIZLBN+kqhOQ=) 2: G6j6G54eI6PykBhSQs9rNNcS6hw.roa (hash: laEXgXrT36Ynj7L9LkdaNFFej1PJ+rq5ig2aomYZyl4=) 3: HhvDcRGxYktP-ooZD2Di0b_W1uE.roa (hash: fg1gEV9lRdq6PNRyrfFXchNYcjeZSbgEM15KK+dTco0=) 4: JRP5ovn---EWtL-bZCGivGnYETo.roa (hash: eCnq4mLeF8zhsMi0H+sOPhfOpIVevs9iRcwDBx1K8J4=) 5: N2mIezuMwglH5z9Sw394yPABh_Y.roa (hash: yGQ16rD5VkDHl88O+y0XucdcYEVXoD+T2CoyV9LtCBE=) 6: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=) 7: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 8: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 9: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: zuMi+Njquw7ww4kzl4FvGS5qLsfr3D9WmjTa+jTkzmw=) 10: mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa (hash: sXvWRa0cGZ0eH2CssCaF8CgkrXf1U+VjrI6hfvsrHmA=) 11: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 12: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 13: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:98:ef:85:ea:6e:1f:95:02:be:32:62:88:98:9a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Apr 17 04:00:30 2026 GMT Not After : Apr 18 04:00:30 2026 GMT Subject: CN=c2ade2f5740172d1cc9b29dd35864f473aac5a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:19:44:1f:70:98:b6:6d:f8:25:b8:e1:c2:bb: 04:8a:4b:b7:7a:e8:0e:65:e6:d4:ed:a6:17:59:e9: d2:9e:aa:d1:e5:f0:a9:b2:dd:6c:7e:54:3d:a7:3f: 0a:9a:df:31:6f:be:b2:6a:64:47:9b:71:7f:5d:92: 42:19:78:3c:51:b9:27:93:d0:bc:d3:02:28:5b:4e: e2:3c:d0:99:0f:e3:bd:bf:11:a6:76:35:7f:eb:65: 7b:e9:0f:c0:c5:ae:77:5d:86:9b:82:d9:d2:ec:55: c5:8e:10:f6:21:3a:c1:02:3a:63:84:9a:e2:1b:aa: 42:e7:ef:70:14:d0:1f:5d:ae:ce:7b:98:f5:f9:c6: e3:8c:30:36:09:69:0a:0e:79:20:70:03:ef:56:f0: 37:93:31:ac:92:15:c1:73:26:f0:c7:05:4d:4a:c6: dd:d8:99:f0:20:8e:f1:3c:f4:db:d1:3a:4b:30:bb: a4:b6:08:1c:5a:34:7a:10:e2:f4:54:1d:e2:1b:34: d1:c6:8f:c9:d9:e8:24:94:98:00:61:23:8e:75:2c: ff:cf:f1:26:26:0a:9c:5f:40:8f:42:ed:f0:41:99: 23:92:90:61:c8:59:c8:43:c2:93:b2:7c:f5:ff:32: 2f:9a:9e:ea:c8:59:9e:97:0b:df:cc:e7:d4:35:a3: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AD:E2:F5:74:01:72:D1:CC:9B:29:DD:35:86:4F:47:3A:AC:5A:96 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4b:03:b6:02:8c:53:69:ea:f5:a9:f3:c2:ed:de:c3:45:e7: 14:e1:1d:76:9b:6a:93:9c:75:14:c0:be:01:2d:83:04:11:fe: 52:34:2a:a4:d2:3f:98:92:33:42:16:07:15:b5:2a:72:37:55: 32:6c:3f:45:d5:a6:da:33:53:43:8f:7e:a5:9e:b4:33:75:5a: 30:10:73:99:1d:47:24:8a:46:d9:e7:d6:39:30:ee:fa:d1:66: 73:79:50:57:bb:9a:55:88:99:71:fd:8e:50:86:6c:77:0b:da: 8c:c0:29:df:e2:f4:2b:f2:b5:79:64:f1:3c:6c:2f:f9:72:79: 5f:00:10:68:73:60:4f:9f:05:76:a6:30:9e:e8:8b:6e:f8:4f: 1d:17:22:3d:82:85:d0:3e:46:8e:1b:0d:c3:c9:d2:ee:b4:ed: 52:87:29:af:41:62:03:fd:3f:59:cd:f4:de:4f:15:9b:af:b1: 1d:08:45:b0:45:d8:a1:ba:6e:ab:3c:83:fd:a3:a6:85:94:b1: 36:d4:5e:54:d6:dd:30:e7:79:bb:90:cb:fe:47:98:ee:dd:ba: 0d:19:48:cd:6c:5b:e0:11:0e:29:a9:55:f9:80:62:d8:eb:12: 96:cc:bc:e2:a1:dc:7f:d3:af:9a:7e:10:3f:18:d3:e4:01:8c: 52:36:b8:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmO+F6m4flQK+MmKImJr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwNDE3MDQwMDMwWhcNMjYwNDE4MDQwMDMwWjAzMTEwLwYDVQQD EyhjMmFkZTJmNTc0MDE3MmQxY2M5YjI5ZGQzNTg2NGY0NzNhYWM1YTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRlEH3CYtm34JbjhwrsEiku3eugO ZebU7aYXWenSnqrR5fCpst1sflQ9pz8Kmt8xb76yamRHm3F/XZJCGXg8Ubknk9C8 0wIoW07iPNCZD+O9vxGmdjV/62V76Q/Axa53XYabgtnS7FXFjhD2ITrBAjpjhJri G6pC5+9wFNAfXa7Oe5j1+cbjjDA2CWkKDnkgcAPvVvA3kzGskhXBcybwxwVNSsbd 2JnwII7xPPTb0TpLMLuktggcWjR6EOL0VB3iGzTRxo/J2egklJgAYSOOdSz/z/Em JgqcX0CPQu3wQZkjkpBhyFnIQ8KTsnz1/zIvmp7qyFmelwvfzOfUNaPpXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKt4vV0AXLRzJsp3TWGT0c6rFqWMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0sDtgKM U2nq9anzwu3ew0XnFOEddptqk5x1FMC+AS2DBBH+UjQqpNI/mJIzQhYHFbUqcjdV Mmw/RdWm2jNTQ49+pZ60M3VaMBBzmR1HJIpG2efWOTDu+tFmc3lQV7uaVYiZcf2O UIZsdwvajMAp3+L0K/K1eWTxPGwv+XJ5XwAQaHNgT58FdqYwnuiLbvhPHRciPYKF 0D5GjhsNw8nS7rTtUocpr0FiA/0/Wc303k8Vm6+xHQhFsEXYobpuqzyD/aOmhZSx NtReVNbdMOd5u5DL/keY7t26DRlIzWxb4BEOKalV+YBi2OsSlsy84qHcf9Ovmn4Q PxjT5AGMUja4eA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:52:40 2026 by rpki-client