$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: /gu4/FnnTbrp3MYiaSj4KG3z7yemwv514asY4KpMVy0= Subject key identifier: DF:4D:E0:79:51:DD:ED:EB:2B:48:78:95:BB:03:00:CE:6C:E1:16:5B Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 01A0C7B39FB9904539E2CFA9C31E60D62673 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 1650 Signing time: Tue 22 Sep 2026 06:00:32 +0000 Manifest this update: Tue 22 Sep 2026 06:00:32 +0000 Manifest next update: Wed 23 Sep 2026 06:00:32 +0000 Files and hashes: 1: 4xVdYe0gRxz-uE-uYOx9q-_KZCk.roa (hash: AcFtBAJ8L85K3ER5s0exdifY6WeWVCgPuREiTI5SL1o=) 2: DaIOsBAUTocNWtQ487tz4YWipHI.roa (hash: N5y0DRMQWN6Af00LwwQvS7RkqXX2njRLKRlsnfJp9Do=) 3: FsUwTKEoeuKYMmnk_mWWy6-qdAo.roa (hash: kxhMJxapdCPykD+F2D9TyndT9oVuTTd+gUFsUUrezQc=) 4: NjjGyupk2EJG8TJjJA1Myg_WAwA.roa (hash: 1JLpN2xJETUSv+Ius8OCYEkY3ODiPgVoMCOqIZ1UHNY=) 5: R5S--utC9laYMZLaK8e5y0xU4YE.roa (hash: TDBMDGa2/0sxnlzLOujaeEN+d/Z+bRBFPSV66wTIH5k=) 6: Smw8KxULxNV1U3wUVaTgjVcAEN0.roa (hash: xaQVLJNe1R846qUde4wi8d2fl1ASkR/w9PUCNskHzmg=) 7: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 8: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 9: XKGUjZlD7tskIQ5vBU5XUtZBdFU.roa (hash: 4Dp/honokh4JVg16NS/ziIGrcbXgziNFinLk2g3lzv8=) 10: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: VSoxtCSb3O1KJ1Ffg3Y0DP66OMTyOkVslAxQHv/HN/s=) 11: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 12: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 13: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 05:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c7:b3:9f:b9:90:45:39:e2:cf:a9:c3:1e:60:d6:26:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Sep 22 06:00:32 2026 GMT Not After : Sep 23 06:00:32 2026 GMT Subject: CN=df4de07951ddedeb2b487895bb0300ce6ce1165b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a1:04:e7:bd:3a:bb:85:55:b6:b6:b1:b9:ba: 01:72:82:ad:c8:31:a0:9a:4c:db:ba:e5:fd:ce:3c: 7a:af:50:b9:a3:4e:e6:db:18:24:af:eb:f3:8f:8f: 57:e5:92:fd:8b:98:62:59:5a:68:28:c5:20:eb:13: 1f:04:a8:c5:ad:58:f5:ee:ec:3b:5c:e7:1d:6c:d8: bf:ba:76:2f:28:4c:39:d1:9c:bb:98:4a:9e:5f:e1: 3f:8b:88:25:02:89:aa:6b:92:03:8a:67:e9:1f:84: f2:25:7f:ef:3f:f1:ae:91:f3:f2:b3:e7:34:30:b9: 1a:3a:95:81:79:42:41:b5:4d:3b:6d:e9:7f:82:65: 6a:e8:10:b5:e2:fc:94:a1:e3:9d:46:ad:28:b7:cb: 39:83:d2:20:11:75:8c:f8:31:ca:5b:c3:37:f0:08: e1:26:38:9b:55:3d:1d:bb:08:31:7c:cc:be:f7:6e: 19:0b:73:ed:16:21:3f:5e:27:59:1e:a7:c4:6e:c1: 2a:bb:dc:cc:f5:4d:0f:32:5a:22:a8:72:61:d6:e3: 0f:47:2a:cc:8e:99:95:eb:3f:78:32:4e:69:7a:f0: 4f:17:c7:45:c2:d0:97:7f:7d:8a:0e:13:bc:5b:7f: 18:f5:1a:0c:50:5f:0e:bc:57:ba:6c:5d:12:04:03: b0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4D:E0:79:51:DD:ED:EB:2B:48:78:95:BB:03:00:CE:6C:E1:16:5B X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d6:f6:d6:58:3f:e5:90:9b:ea:2f:59:03:c4:2f:92:60:fa: aa:ae:5e:06:f5:c6:7a:3f:2b:bb:8b:b8:eb:25:0f:38:6b:ef: 67:b6:eb:44:73:d6:a7:8b:4a:58:d8:6b:8d:10:b8:ad:f1:ef: ad:e1:4c:0b:f4:86:c7:98:ad:77:9f:eb:8a:08:90:c5:80:e6: 52:32:43:a9:54:f3:94:a9:bb:87:86:8f:31:60:1a:21:ab:7c: a6:a6:f2:29:37:3b:cb:00:a4:bb:70:e2:b4:80:ab:0c:36:a7: 01:1b:49:b4:8f:b1:02:1c:83:ba:03:9d:ca:f8:d2:ff:4e:08: 09:4e:2b:88:c0:c4:19:68:14:b4:67:03:14:74:f3:1c:5d:30: 5e:cf:a6:fc:ff:5e:7d:72:ba:3b:b6:65:24:ec:de:ac:9a:83: 7a:bc:8f:e8:2e:9f:b2:9c:42:a6:52:dd:72:ad:bd:40:1f:8d: 42:78:a1:80:13:40:06:94:7d:55:b3:0e:bb:07:1f:12:92:a5: ea:ed:3b:4c:4a:f2:12:a8:d4:44:f8:be:d2:f0:81:86:93:1a: e5:24:d8:49:96:ee:07:d7:77:99:00:e7:40:63:8c:66:22:d2: 7e:07:88:75:16:1c:13:16:15:7c:ca:69:df:c9:f1:e0:71:75: 77:37:8a:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDHs5+5kEU54s+pwx5g1iZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwOTIyMDYwMDMyWhcNMjYwOTIzMDYwMDMyWjAzMTEwLwYDVQQD EyhkZjRkZTA3OTUxZGRlZGViMmI0ODc4OTViYjAzMDBjZTZjZTExNjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaEE5706u4VVtraxuboBcoKtyDGg mkzbuuX9zjx6r1C5o07m2xgkr+vzj49X5ZL9i5hiWVpoKMUg6xMfBKjFrVj17uw7 XOcdbNi/unYvKEw50Zy7mEqeX+E/i4glAomqa5IDimfpH4TyJX/vP/GukfPys+c0 MLkaOpWBeUJBtU07bel/gmVq6BC14vyUoeOdRq0ot8s5g9IgEXWM+DHKW8M38Ajh JjibVT0duwgxfMy+924ZC3PtFiE/XidZHqfEbsEqu9zM9U0PMloiqHJh1uMPRyrM jpmV6z94Mk5pevBPF8dFwtCXf32KDhO8W38Y9RoMUF8OvFe6bF0SBAOwjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9N4HlR3e3rK0h4lbsDAM5s4RZbMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9b21lg/ 5ZCb6i9ZA8QvkmD6qq5eBvXGej8ru4u46yUPOGvvZ7brRHPWp4tKWNhrjRC4rfHv reFMC/SGx5itd5/rigiQxYDmUjJDqVTzlKm7h4aPMWAaIat8pqbyKTc7ywCku3Di tICrDDanARtJtI+xAhyDugOdyvjS/04ICU4riMDEGWgUtGcDFHTzHF0wXs+m/P9e fXK6O7ZlJOzerJqDeryP6C6fspxCplLdcq29QB+NQnihgBNABpR9VbMOuwcfEpKl 6u07TEryEqjURPi+0vCBhpMa5STYSZbuB9d3mQDnQGOMZiLSfgeIdRYcExYVfMpp 38nx4HF1dzeKuw== -----END CERTIFICATE-----Generated at Tue Sep 22 12:55:46 2026 by rpki-client