$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft File: xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json) Hash identifier: xLNnMHecw9DXL44IFYO492FLiivfs5lDHFnuh45Usvg= Subject key identifier: CC:3F:A0:8A:C5:44:02:FB:69:39:47:DE:86:5C:E7:E2:8C:DA:25:14 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019CAB33E403CB908097AD164D02EE5281A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft Manifest number: 18AE Signing time: Sun 01 Mar 2026 21:00:30 +0000 Manifest this update: Sun 01 Mar 2026 21:00:30 +0000 Manifest next update: Mon 02 Mar 2026 21:00:30 +0000 Files and hashes: 1: 0OuuyqY3IwdsfAtd88x0rLTDEmc.roa (hash: Qq6wGpoV1AfHrD9+W3Yp1kNkuV/yBgqjGqUUQJ0ciVY=) 2: 2g3YqagtveoXivlimUOijGK4Sw4.roa (hash: ygC6oN+dOsYHf4Cjh6O/E1qqcFKMCRFPzFyAC5l12yw=) 3: 5B28Ei4KPuBfMPCYz_CdjunmzfA.roa (hash: Fh0fY9vBoWA1h/GgmdDXwKoDcv0YIku/VzyUipmtScY=) 4: 65v9LHi_MDiJFfxsRpTQKZGQtKQ.roa (hash: AD4zC7meiWbh1Y7ei46GISC0uTS4fKqWlAroEgp7qMg=) 5: D7uQ99DLK4WMkw1fHpYfJKmTzvI.roa (hash: LbOMXXB9u8cO6PHdvqyPMdpNy795D8V7gOQlri0kebI=) 6: DeLLhmnL8UGopy5KKmx7aJEcegM.roa (hash: MiHnbQkuo0f/Ih4buFqhTcosJDlqA6PQQ++HZPqmd5w=) 7: ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa (hash: lKK5rdzCjZE0+7rICMxRWAfKpw9HWxpCs96nQPbHzso=) 8: F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa (hash: S7WFcWfal2pVRy/GM+kUJ9lEuF9xQr0ct0tz3YBvyhU=) 9: GBoQQ8Yn-SioOyNoTDKqDla9z4o.roa (hash: v9SK5mh7PmHOJWi3iJx6YpyA3GIGwSntwdY41a/SlEI=) 10: JNM-7wwm3QhYYC0nIPsX8CdxBRA.roa (hash: UMtm5NsMwoDqBk1AdmB+70baCvbkR79TUj4KCkxO3RI=) 11: NJV8waBsLUaoGLKI4jOQ12y_154.roa (hash: zy+s0FwJ70UvNcy6TEvBfYURXcENeGYoESLAOkXvxpY=) 12: PdDHdpbPpbKYuTECocykq4914hM.roa (hash: OqAak7Fi70YK8BmuGNS/s8KqFkZrFfNHxhvYdFiVlco=) 13: SuktG5ygfNWoaIU5AmVI9f2QHqc.roa (hash: njMvgmOx4SGfZ8RPEr0/GOcVp5Xe/qHE6LYm5ovrTVQ=) 14: VXP_uFqv54kn5PXeZcQj6-zBdWM.roa (hash: RmWBZcHSSZvH3KKmvnz7cJeoXnECiQumgZ2zixWZ+YE=) 15: YF--vA_L6zCcHJEBqR7jtaCGFfo.roa (hash: a3gFh25pMYpl+agwkJIHNpjKYlN2gnTlYe3HeVBoWTk=) 16: YYro5ffGY8__zi5PmVjqRei7Zi8.roa (hash: v6CR7E1/nVT3Cmi4Wb+H0VJhjtdKWQon2xJxBGFWHgY=) 17: dANCF-_ELvUXZe_N9iPSiuIBUYs.roa (hash: L7tV/7qxxRlCHwy6Cmc9dl/HlJ9PPDTVkduSLInAUZ0=) 18: gMYRXePhXBj5QEchP90fA4n6PTI.roa (hash: n3t3ay/80ZRLXPkmrmKkNg7PYGv+vXmzByKb6p1QvZ8=) 19: llmpvsJp6iJllq8aPzCHiXy7pDI.roa (hash: DANl4OSIWpehyMk+CpY4YG/h/rDOrMDg4VQVT2cFg7g=) 20: nPy5I6zb3QC7xw0J_IvJjR2hd9Y.roa (hash: b5roqxrC5hM3q/j7Y7kUe7Tu2I31wiF3qmJCqWlG9jo=) 21: nm-KZislIGz6wosxLU6C90OgEBY.roa (hash: eiBhQ/2d82wkJoJ8lwkynR/qT2+hnESyOr9AACLRf+E=) 22: tWR6de_y3YqQITSsFwOUQ9hgoS8.roa (hash: A85iHNufZIkn4yOU2pLKW3cxxsXEb4XDO37mWDui/7U=) 23: ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa (hash: aT3mMJhpwKfI0RkCBtFq/BKu85xA6+3aVTdjvSvqPZQ=) 24: w6gmNc7f_bvjPNIJjuhS3RSIpZQ.roa (hash: GdBjwBkJ4iGW3k1Xd7AiPym4634yoaPZu5TSA3ZGyx8=) 25: wfzgDMRxuyayBLQPPxPuYGao92s.roa (hash: XLNXyipW2bdTh0IJx7RRnlgyXVVw+Yp3FUwpSXwkVJs=) 26: xB8G2Wpa-bPT0379AYe1B0JaZCA.roa (hash: XnvuBDsm7nE5D21D99HgDtqbUAjTfFnm+Hp6IwSPINI=) 27: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: ct093tRpwBna3jVJmHnGU/LtN3QOmYMObGaeBWbUj2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:33:e4:03:cb:90:80:97:ad:16:4d:02:ee:52:81:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Mar 1 21:00:30 2026 GMT Not After : Mar 2 21:00:30 2026 GMT Subject: CN=cc3fa08ac54402fb693947de865ce7e28cda2514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:2d:ac:88:97:3a:1b:f9:7b:ad:75:78:22: b3:bf:c4:4c:ce:6c:c9:19:5b:76:f2:87:c0:13:4e: 2c:9d:35:ad:39:c7:3a:86:44:63:f6:8f:25:36:87: 00:59:1d:0e:0f:76:15:ee:59:14:db:6c:70:21:d5: e1:c7:fb:d5:f8:0d:38:b7:5b:ad:bc:34:8d:6b:e4: 92:2e:3a:69:c9:9e:b1:f1:74:88:9b:d2:09:10:65: cf:91:f5:52:42:af:3d:e7:de:e3:c1:cc:54:59:7e: e5:8f:7f:ac:e8:e8:ff:ca:b6:a2:d2:57:0f:b0:c3: d8:0e:20:13:ba:8b:d2:bf:f8:b2:65:db:9b:53:3c: e3:71:a3:f5:a4:33:6c:80:a7:d6:11:58:d1:38:85: 8d:43:8a:2b:ef:d6:68:a9:ab:51:67:71:b5:0a:e2: 32:e7:37:a4:5f:97:48:57:9a:72:c3:42:d2:86:df: 62:58:c1:7c:e6:4b:01:55:7f:62:c6:f4:fe:da:a0: 73:56:ab:16:cd:f0:4b:3c:01:a4:0b:3e:9a:22:d4: 4a:54:00:d5:e0:57:85:ce:ff:7e:10:7e:b8:fa:c2: 13:03:71:fb:d2:7d:25:b3:4b:d6:2e:d5:b9:4d:5d: 89:08:56:ab:8e:37:de:1f:26:28:8c:72:20:90:52: 83:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3F:A0:8A:C5:44:02:FB:69:39:47:DE:86:5C:E7:E2:8C:DA:25:14 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:eb:92:b5:61:2b:d3:4b:cf:1a:05:fd:f8:8d:62:9b:5b:8a: 2a:18:84:8f:9a:b9:25:bf:5b:ef:06:e0:03:dd:79:10:4c:e2: f4:de:2c:39:69:8c:dc:b9:58:3c:18:ba:46:7c:48:62:d3:27: 22:82:28:60:6b:9c:4a:35:49:5c:e1:e8:a6:bf:3d:56:66:a3: 20:5e:77:38:ba:00:bc:fc:66:c3:78:15:b4:7f:98:99:ff:28: c2:5c:36:09:aa:a0:0c:28:10:3c:a3:f0:54:e8:3b:11:4f:d6: 21:19:ea:83:ae:f9:cb:d5:33:27:c2:1c:07:54:0a:26:9f:34: b0:aa:4a:6d:60:9f:f2:80:bb:71:d9:39:94:70:40:d7:0d:c7: 4a:df:da:8c:2e:04:08:77:d2:ee:10:8c:17:34:03:d5:6a:20: a0:72:e2:a7:d0:a9:0f:f6:1d:d2:af:0d:38:c6:e4:0a:45:06: 99:01:6a:9c:32:67:f2:a8:0d:42:bf:32:2a:a1:e4:39:4f:fe: bc:a2:f8:7a:89:21:46:bd:e9:8e:12:ec:00:c1:41:64:2b:e4: 94:09:b1:c2:db:28:33:3b:a9:b0:05:c3:24:a2:59:25:7a:9c: d9:d6:0f:47:78:c8:85:f3:0a:85:2b:fa:87:8c:ab:ae:e2:3d: 8c:49:33:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrM+QDy5CAl60WTQLuUoGlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMzAxMjEwMDMwWhcNMjYwMzAyMjEwMDMwWjAzMTEwLwYDVQQD EyhjYzNmYTA4YWM1NDQwMmZiNjkzOTQ3ZGU4NjVjZTdlMjhjZGEyNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxewtrIiXOhv5e611eCKzv8RMzmzJ GVt28ofAE04snTWtOcc6hkRj9o8lNocAWR0OD3YV7lkU22xwIdXhx/vV+A04t1ut vDSNa+SSLjppyZ6x8XSIm9IJEGXPkfVSQq89597jwcxUWX7lj3+s6Oj/yrai0lcP sMPYDiATuovSv/iyZdubUzzjcaP1pDNsgKfWEVjROIWNQ4or79ZoqatRZ3G1CuIy 5zekX5dIV5pyw0LSht9iWMF85ksBVX9ixvT+2qBzVqsWzfBLPAGkCz6aItRKVADV 4FeFzv9+EH64+sITA3H70n0ls0vWLtW5TV2JCFarjjfeHyYojHIgkFKD2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMw/oIrFRAL7aTlH3oZc5+KM2iUUMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+uStWEr 00vPGgX9+I1im1uKKhiEj5q5Jb9b7wbgA915EEzi9N4sOWmM3LlYPBi6RnxIYtMn IoIoYGucSjVJXOHopr89VmajIF53OLoAvPxmw3gVtH+Ymf8owlw2CaqgDCgQPKPw VOg7EU/WIRnqg675y9UzJ8IcB1QKJp80sKpKbWCf8oC7cdk5lHBA1w3HSt/ajC4E CHfS7hCMFzQD1WogoHLip9CpD/Yd0q8NOMbkCkUGmQFqnDJn8qgNQr8yKqHkOU/+ vKL4eokhRr3pjhLsAMFBZCvklAmxwtsoMzupsAXDJKJZJXqc2dYPR3jIhfMKhSv6 h4yrruI9jEkzbQ== -----END CERTIFICATE-----Generated at Mon Mar 2 06:41:40 2026 by rpki-client