$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft File: xCzMCbGKriXcamxXk_m5IMj2oZA.mft (raw, json) Hash identifier: nxfR5zZfcTsiZxnrhdpa7Y7N3HsOJyHesFYLyeHQhTk= Subject key identifier: 3D:50:53:E5:3E:65:4F:98:FF:2B:2C:54:46:6A:83:23:2B:D1:DA:34 Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90 Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190 Certificate serial: 01A128432F679E4337D85062F5EB555A022E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft Manifest number: 0113 Signing time: Sun 11 Oct 2026 00:00:54 +0000 Manifest this update: Sun 11 Oct 2026 00:00:54 +0000 Manifest next update: Mon 12 Oct 2026 00:00:54 +0000 Files and hashes: 1: 0EqH53VKbjCBwptRrMrgE491HhQ.roa (hash: hlOlUUZZiEuddmv9KYC5nE6Vh5F6OtggwbOcesZb7ew=) 2: 5o0i3iMYhKiDSsjJw2IO_CJCyRI.roa (hash: cLWDRlb5at0aBAH980evnabI9atanrKNEOAJh0qjBjM=) 3: 9_lEI-YO-xsNbdJzpz_Zj20rYco.roa (hash: oMnrwxFfNZp1LGwhuhUfXcc2UVGqfAbo9ZJKmysRQV0=) 4: E8IDfbPJ-ASUqOO7Y_PebCnfcG8.roa (hash: Y97cV5mLD6OdoMRNkkIiqZ3KZIjQpuOlelMU9OFPxmA=) 5: H9L6_6x2hId55TmALa95rri1bEE.roa (hash: 9r2y4hipyP45iIbJJm1kWRG0SgwtjIdEoYjDvubCc0w=) 6: Rb5WxdniWZJi2uKGt5iSE3imuKY.roa (hash: cEzxV1Ej8qEgHXObAYowb4t+T2HG7fYTPhD2mGI4Ywc=) 7: YpPmYf6zgICwfjz8NuAopnzNieM.roa (hash: Wfroa7HPPkCm63Ywbw+5nQxutBW2wjmxATyJS+4COgo=) 8: Z5KCSZVXGCrp9dNdx67dsrIqMQs.roa (hash: OByLdhjOZ0YIarl8arWqnOnJBvbgrJT1GS2f+GSHfp4=) 9: c4_Bhf2_gp-Hy5KN9JDfGFYxZ78.roa (hash: 1JGwg63mXrikqzD+c6YLgxnjzd6dRLDZcHOVSYL/I9U=) 10: f2uUPGNXC_pxdPQmPP-DpsHFtOQ.roa (hash: mFFk7nFev+G1oGZg2IbBid7J61ARFJ8OWPLRJsrECIA=) 11: w9Z_kQBpH-mdA7iwzKTWMENR2To.roa (hash: rlA3z5HMnFFWQ/5n7/7EQ6au3c+5eK2aDkiGB8PIifk=) 12: xCzMCbGKriXcamxXk_m5IMj2oZA.crl (hash: lU05KjJ0U4oOTUrbHac4jHgiSoU7QA6X0ej7bUnpPi8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:28:43:2f:67:9e:43:37:d8:50:62:f5:eb:55:5a:02:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190 Validity Not Before: Oct 11 00:00:54 2026 GMT Not After : Oct 12 00:00:54 2026 GMT Subject: CN=3d5053e53e654f98ff2b2c54466a83232bd1da34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:75:60:45:7e:7b:82:cd:f3:eb:2b:13:e7:8c: 59:e8:35:bb:ff:67:79:39:0c:cf:b5:01:09:6b:24: 53:74:f8:7a:ca:26:b9:c1:0a:28:82:e6:75:2f:c0: 65:cc:b3:3c:a2:2e:d8:f5:ef:42:ef:ae:66:96:44: ce:4a:0f:6c:20:95:65:34:47:2b:cc:8d:31:32:ce: 92:c2:89:c8:3d:f2:e5:62:d5:ef:a1:0b:ca:39:ee: 96:13:1a:68:b0:6f:47:d8:50:5a:68:1a:56:7d:a8: 3a:c5:e4:78:19:d4:fe:6c:62:89:95:00:02:c9:a6: e7:0b:05:5b:d9:a0:36:96:3c:ea:c6:82:42:bb:1f: ab:94:92:ec:3b:75:72:d0:bc:54:d7:8b:9d:c7:44: 9b:29:1b:d4:37:3a:7b:d0:ab:89:c3:22:c3:72:67: af:c9:bd:3e:46:24:df:a3:a5:12:af:62:e7:c1:f3: ca:bb:fe:1c:84:de:fd:65:1f:d3:1d:50:eb:d6:a0: 8d:f0:49:98:84:19:b0:b4:46:3c:3c:4f:54:1f:be: 64:c5:48:0f:a4:ae:35:18:4c:87:60:40:99:c0:9e: ef:43:bd:8f:87:2c:3d:3d:51:ac:4b:06:69:61:5c: 1e:8f:2e:ae:91:7c:0e:b4:95:c6:9f:e7:fc:ac:d9: 24:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:50:53:E5:3E:65:4F:98:FF:2B:2C:54:46:6A:83:23:2B:D1:DA:34 X509v3 Authority Key Identifier: keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:a6:0a:f0:0f:33:0f:49:70:cb:8a:95:66:42:0c:0d:cd:44: fd:50:d2:7b:89:ec:c9:89:c3:2b:a2:2b:62:e7:49:6f:19:25: 46:fd:0d:1c:c5:97:cd:4d:81:66:a5:cd:35:53:9f:ff:29:40: b7:44:56:b6:29:f2:92:c9:37:d4:da:e4:91:1c:81:8e:5e:a9: d2:fa:4e:a7:af:63:44:98:6f:5b:a1:55:e6:94:e8:70:87:05: 1f:f3:32:be:2f:fe:80:2a:cd:db:47:70:69:be:06:9f:59:aa: c1:c5:ee:8e:31:21:b0:de:66:2d:cf:a2:da:c0:b8:aa:49:05: d0:f0:13:23:1a:50:ee:71:f5:64:41:bf:4b:5f:21:cf:4d:0b: 14:1a:44:e0:2f:aa:76:d7:2c:36:16:0a:15:7b:05:4b:f0:98: a5:b4:60:01:f0:8c:5e:f3:87:54:43:5e:ec:80:8f:6f:1a:49: 6e:ea:f6:51:cb:18:cd:db:b1:ff:d4:5e:6f:6b:f4:73:86:70: e0:9e:66:98:0e:8d:79:11:b8:13:6d:ef:5a:3b:36:c4:35:14: 5b:b0:75:38:a8:83:37:d7:f9:10:cb:d8:89:85:ec:4f:84:7a: 8b:cc:fe:e3:5c:5d:9b:20:b3:7b:fa:9c:d1:47:5c:11:81:1f: e0:07:51:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEoQy9nnkM32FBi9etVWgIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MmNjYzA5YjE4YWFlMjVkYzZhNmM1NzkzZjliOTIwYzhm NmExOTAwHhcNMjYxMDExMDAwMDU0WhcNMjYxMDEyMDAwMDU0WjAzMTEwLwYDVQQD EygzZDUwNTNlNTNlNjU0Zjk4ZmYyYjJjNTQ0NjZhODMyMzJiZDFkYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HVgRX57gs3z6ysT54xZ6DW7/2d5 OQzPtQEJayRTdPh6yia5wQooguZ1L8BlzLM8oi7Y9e9C765mlkTOSg9sIJVlNEcr zI0xMs6SwonIPfLlYtXvoQvKOe6WExposG9H2FBaaBpWfag6xeR4GdT+bGKJlQAC yabnCwVb2aA2ljzqxoJCux+rlJLsO3Vy0LxU14udx0SbKRvUNzp70KuJwyLDcmev yb0+RiTfo6USr2LnwfPKu/4chN79ZR/THVDr1qCN8EmYhBmwtEY8PE9UH75kxUgP pK41GEyHYECZwJ7vQ72Phyw9PVGsSwZpYVwejy6ukXwOtJXGn+f8rNkkywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1QU+U+ZU+Y/yssVEZqgyMr0do0MB8GA1UdIwQY MBaAFMQszAmxiq4l3GpsV5P5uSDI9qGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEveEN6TUNiR0tyaVhjYW14WGtfbTVJTWoyb1pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKYK8A8z D0lwy4qVZkIMDc1E/VDSe4nsyYnDK6IrYudJbxklRv0NHMWXzU2BZqXNNVOf/ylA t0RWtinyksk31NrkkRyBjl6p0vpOp69jRJhvW6FV5pTocIcFH/Myvi/+gCrN20dw ab4Gn1mqwcXujjEhsN5mLc+i2sC4qkkF0PATIxpQ7nH1ZEG/S18hz00LFBpE4C+q dtcsNhYKFXsFS/CYpbRgAfCMXvOHVENe7ICPbxpJbur2UcsYzdux/9Reb2v0c4Zw 4J5mmA6NeRG4E23vWjs2xDUUW7B1OKiDN9f5EMvYiYXsT4R6i8z+41xdmyCze/qc 0UdcEYEf4AdRjg== -----END CERTIFICATE-----Generated at Sun Oct 11 09:27:28 2026 by rpki-client