$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: vDFPgIIDrySWAr7WZmna7mI0BMCdx8Jj3PcYHHYlE7c= Subject key identifier: D8:15:04:57:6D:3A:F2:45:97:64:7D:F2:1A:AC:2B:02:3A:A7:B0:77 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019D9A3F0BD48D9827851009947EE729C090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0F58 Signing time: Fri 17 Apr 2026 07:01:56 +0000 Manifest this update: Fri 17 Apr 2026 07:01:56 +0000 Manifest next update: Sat 18 Apr 2026 07:01:56 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 18LcGFaA85L2PFhGmCXVUOoWIl4.roa (hash: 4CfPxdyovYZLWsCd3zC7X3GJYkpt6Kyh3yiKuvnwRcQ=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 5: 5N9cmVoV6WWeeidTenKIIVrKZtU.asa (hash: nABPr08keyRH/GjiI7HNbXnUK1Rd0e6FNTyKcw+2e+8=) 6: 6DAgtZi47nehUjXXTU_IBnF5YW4.roa (hash: Dpma5XKqXI2J8Gsz1+CwwsgqLXij/CGgvv2gTyr8Lt8=) 7: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 8: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 9: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 10: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 11: VeJJmnC-8Q_0a1pLzST4jtM1Hq8.roa (hash: WP4UaUcxrdfBlAMFFsaXmggPZwSD/JcDZLDXI5e7by0=) 12: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 13: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 14: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 15: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 16: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: 7eLqGwJkSY1nMvQVi0vjDofYorWfgV69fMGENKALNNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:3f:0b:d4:8d:98:27:85:10:09:94:7e:e7:29:c0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Apr 17 07:01:56 2026 GMT Not After : Apr 18 07:01:56 2026 GMT Subject: CN=d81504576d3af24597647df21aac2b023aa7b077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:e1:7c:7c:d1:52:55:27:30:0f:81:65:1b: 8a:77:07:c3:7b:cb:ff:e4:1f:7b:de:60:1c:41:d8: 7b:45:dc:48:dd:7d:a5:67:43:9f:d9:e6:fb:d6:ac: d1:d8:f7:a4:bb:ed:76:ed:a2:5e:0a:8c:b3:48:7a: 5d:6c:c4:a2:7e:4e:b0:2f:85:52:aa:ea:fe:79:f5: 14:c6:4d:49:b4:a8:cd:26:b2:01:e3:a0:8d:c3:48: 4f:6d:92:90:93:68:1e:53:52:0a:e2:88:20:fd:d1: a1:4b:e4:44:75:84:04:77:e4:fc:1e:95:97:5d:64: cf:44:d6:ca:d2:60:1c:9e:91:df:97:6a:e7:cb:96: 8b:c0:45:27:3b:69:fa:7d:19:cd:84:36:6f:d7:e6: f7:bc:4f:a8:a4:f5:c6:61:53:71:e6:87:c9:72:37: df:99:aa:29:78:a0:38:b2:7e:01:9d:78:4f:7b:f7: 3c:c0:39:a5:ba:b5:fe:22:a4:0f:84:37:38:bd:fb: 2e:74:da:2f:92:27:fe:9b:92:00:25:bb:3d:b2:47: 14:1e:e3:85:f1:23:76:1b:70:4e:38:f3:f2:b9:f3: 7f:0e:a5:cb:84:b2:55:0c:4c:63:65:6a:82:9f:a7: 04:75:21:a2:5c:78:cf:7c:c0:18:8f:98:30:3c:0d: ca:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:15:04:57:6D:3A:F2:45:97:64:7D:F2:1A:AC:2B:02:3A:A7:B0:77 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1e:98:da:0c:4f:06:65:dd:eb:61:25:6a:ef:f9:25:ab:0f: 26:b3:cf:35:fb:65:1f:ab:f6:06:9f:3c:7c:22:34:a4:2d:1f: cf:3c:b7:48:49:02:dd:10:57:82:e5:b2:07:96:41:0c:d1:dc: c8:c9:b5:7e:2d:56:c5:b6:fb:f3:af:4c:1c:0b:ce:e5:bd:cf: ce:f3:a9:61:d8:41:84:e8:b4:3b:be:24:a2:c6:59:2c:89:c2: 29:91:7a:2e:37:20:05:af:65:37:cb:2a:00:55:ac:1c:67:67: bb:11:4f:8e:64:1c:f8:25:a5:e4:2f:24:19:6d:5f:8b:cf:5c: 44:e1:62:6e:f2:78:43:e5:7d:3c:28:3c:01:74:ed:2d:7e:06: 80:38:d5:02:e2:25:1d:4f:74:43:90:67:2d:00:2b:2b:da:3c: df:38:b4:3d:f3:96:39:39:ee:b4:66:77:c7:87:4e:2f:fa:27: 73:8c:51:02:99:34:c2:04:1e:bd:4d:c5:d1:71:b3:dc:e8:5e: a8:f3:e3:d9:49:c9:b4:1a:e0:36:3a:e1:29:23:9c:05:25:8d: 28:a6:e2:20:fa:5f:0c:12:78:a3:57:0f:df:c1:67:b4:f1:dd: bb:82:8a:57:77:47:16:83:27:78:bc:40:9f:54:1b:d0:b9:85: 97:01:34:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aPwvUjZgnhRAJlH7nKcCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwNDE3MDcwMTU2WhcNMjYwNDE4MDcwMTU2WjAzMTEwLwYDVQQD EyhkODE1MDQ1NzZkM2FmMjQ1OTc2NDdkZjIxYWFjMmIwMjNhYTdiMDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyInhfHzRUlUnMA+BZRuKdwfDe8v/ 5B973mAcQdh7RdxI3X2lZ0Of2eb71qzR2Peku+127aJeCoyzSHpdbMSifk6wL4VS qur+efUUxk1JtKjNJrIB46CNw0hPbZKQk2geU1IK4ogg/dGhS+REdYQEd+T8HpWX XWTPRNbK0mAcnpHfl2rny5aLwEUnO2n6fRnNhDZv1+b3vE+opPXGYVNx5ofJcjff maopeKA4sn4BnXhPe/c8wDmlurX+IqQPhDc4vfsudNovkif+m5IAJbs9skcUHuOF 8SN2G3BOOPPyufN/DqXLhLJVDExjZWqCn6cEdSGiXHjPfMAYj5gwPA3KtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgVBFdtOvJFl2R98hqsKwI6p7B3MB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAih6Y2gxP BmXd62Elau/5JasPJrPPNftlH6v2Bp88fCI0pC0fzzy3SEkC3RBXguWyB5ZBDNHc yMm1fi1Wxbb7869MHAvO5b3PzvOpYdhBhOi0O74kosZZLInCKZF6LjcgBa9lN8sq AFWsHGdnuxFPjmQc+CWl5C8kGW1fi89cROFibvJ4Q+V9PCg8AXTtLX4GgDjVAuIl HU90Q5BnLQArK9o83zi0PfOWOTnutGZ3x4dOL/onc4xRApk0wgQevU3F0XGz3Ohe qPPj2UnJtBrgNjrhKSOcBSWNKKbiIPpfDBJ4o1cP38FntPHdu4KKV3dHFoMneLxA n1Qb0LmFlwE0MA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:55:11 2026 by rpki-client