$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: I9jITzrNCs7NWqKm1jKseeVBGAvNxkamLV//ScXTBig= Subject key identifier: CC:1E:D1:AA:CD:D2:9E:97:C6:74:9A:2B:1D:B7:B4:69:99:27:D8:AC Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019D8D27327FFDA7C61CB5F5B97C144F3BDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 11DD Signing time: Tue 14 Apr 2026 18:00:49 +0000 Manifest this update: Tue 14 Apr 2026 18:00:49 +0000 Manifest next update: Wed 15 Apr 2026 18:00:49 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: qgzYYxebobbMrnnKvu4TwK14a//DkwIAdJUwrBK5fqE=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 15 Apr 2026 13:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:8d:27:32:7f:fd:a7:c6:1c:b5:f5:b9:7c:14:4f:3b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Apr 14 18:00:49 2026 GMT Not After : Apr 15 18:00:49 2026 GMT Subject: CN=cc1ed1aacdd29e97c6749a2b1db7b4699927d8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d9:f2:27:9d:95:50:04:91:56:dd:34:5a:4c: 0f:c0:a5:18:11:ff:af:c7:c2:1a:fe:fa:c3:49:fb: 01:f4:51:5d:72:95:fc:d2:75:20:2e:3e:58:c0:52: e6:e5:85:c2:26:a7:1b:6a:46:d3:8c:0a:26:29:bf: d5:78:0f:00:67:7a:99:eb:43:5b:18:ba:ed:51:b3: 22:f0:e6:95:ba:df:7b:2f:07:36:24:32:2b:8e:96: 5b:d1:52:3d:e7:4e:7e:a7:b2:28:e9:5d:3f:5d:3a: b6:98:9c:9a:d8:33:53:4d:e4:c6:dc:77:de:7c:c8: 1b:1f:6f:5a:28:d3:d3:b9:bf:90:ed:56:fb:d4:ca: 55:75:3b:17:85:cf:20:b4:03:bd:bc:74:1d:c9:08: 8a:b2:d2:aa:13:7b:13:28:4a:21:e6:43:e3:19:10: a6:46:77:db:1a:09:ea:7d:10:38:d7:0f:ea:29:a5: 19:86:52:54:e9:07:f3:b3:3a:cb:0b:1a:92:88:31: 66:dd:78:ac:76:e0:9d:c6:eb:6c:b1:0c:d3:9c:64: 2d:8d:4e:09:64:a9:52:9a:4a:5e:e0:f4:ef:05:a1: 02:57:67:3a:d7:75:4b:a9:18:c5:b6:ab:9a:81:4b: b3:f3:31:03:79:22:29:3a:c1:d1:d8:b7:76:6a:59: 06:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1E:D1:AA:CD:D2:9E:97:C6:74:9A:2B:1D:B7:B4:69:99:27:D8:AC X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5e:ed:9e:78:6d:0f:3e:9c:78:fa:5a:3b:10:87:55:35:11: 72:05:40:e8:d3:36:8e:6f:57:bd:f7:31:74:2c:94:a8:5c:a3: 1e:61:b0:57:a5:04:0a:05:21:16:96:a0:63:c2:78:2e:d2:27: df:47:14:0e:60:0e:2f:bb:8c:23:4d:27:f6:f6:40:96:10:cc: e1:c5:94:79:fc:6a:e4:2f:28:96:b6:9e:e3:e7:8a:05:39:27: 6b:67:49:26:8f:d6:18:93:91:28:70:36:e3:f2:e6:06:e8:b3: 11:74:e7:03:31:cb:b6:53:21:57:35:0a:d0:a4:cf:ab:9c:90: 82:6b:93:10:1b:1c:0d:b1:b1:41:fa:12:78:8e:e9:ca:37:ff: 67:37:bd:77:2a:e5:5f:57:e9:1f:c9:61:82:7d:5c:c8:1a:d3: 6c:e6:24:74:2d:68:73:2b:78:c1:94:28:1a:b1:d6:05:c4:db: 80:bc:2e:e3:3e:af:c7:64:bf:d7:2a:c0:5c:dc:ce:73:f2:24: b9:b4:68:60:ea:28:ab:e1:fe:21:04:54:a0:c5:92:6b:7c:6b: 3f:a4:21:48:a4:e5:cc:59:53:f1:b0:57:04:8b:c4:e0:2d:8b: 5c:22:6f:23:4a:65:09:b1:2b:94:ef:b3:87:07:b0:7c:b7:a6: 52:ec:1d:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2NJzJ//afGHLX1uXwUTzvbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNDE0MTgwMDQ5WhcNMjYwNDE1MTgwMDQ5WjAzMTEwLwYDVQQD EyhjYzFlZDFhYWNkZDI5ZTk3YzY3NDlhMmIxZGI3YjQ2OTk5MjdkOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNnyJ52VUASRVt00WkwPwKUYEf+v x8Ia/vrDSfsB9FFdcpX80nUgLj5YwFLm5YXCJqcbakbTjAomKb/VeA8AZ3qZ60Nb GLrtUbMi8OaVut97Lwc2JDIrjpZb0VI9505+p7Io6V0/XTq2mJya2DNTTeTG3Hfe fMgbH29aKNPTub+Q7Vb71MpVdTsXhc8gtAO9vHQdyQiKstKqE3sTKEoh5kPjGRCm RnfbGgnqfRA41w/qKaUZhlJU6QfzszrLCxqSiDFm3XisduCdxutssQzTnGQtjU4J ZKlSmkpe4PTvBaECV2c613VLqRjFtquagUuz8zEDeSIpOsHR2Ld2alkG7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwe0arN0p6XxnSaKx23tGmZJ9isMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfV7tnnht Dz6cePpaOxCHVTURcgVA6NM2jm9XvfcxdCyUqFyjHmGwV6UECgUhFpagY8J4LtIn 30cUDmAOL7uMI00n9vZAlhDM4cWUefxq5C8olrae4+eKBTkna2dJJo/WGJORKHA2 4/LmBuizEXTnAzHLtlMhVzUK0KTPq5yQgmuTEBscDbGxQfoSeI7pyjf/Zze9dyrl X1fpH8lhgn1cyBrTbOYkdC1ocyt4wZQoGrHWBcTbgLwu4z6vx2S/1yrAXNzOc/Ik ubRoYOooq+H+IQRUoMWSa3xrP6QhSKTlzFlT8bBXBIvE4C2LXCJvI0plCbErlO+z hwewfLemUuwdug== -----END CERTIFICATE-----Generated at Tue Apr 14 21:46:02 2026 by rpki-client