$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: dxCBSsfRcbMf8x4j3NG+cdNTjRWsLEjFuNINkJicZS8= Subject key identifier: BC:78:94:7D:12:18:9D:53:FE:91:51:3A:6B:3F:3C:F2:54:D9:1B:F6 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019D70306AF09B3B27E9AF7C7FEE911044A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 11CE Signing time: Thu 09 Apr 2026 03:01:54 +0000 Manifest this update: Thu 09 Apr 2026 03:01:54 +0000 Manifest next update: Fri 10 Apr 2026 03:01:54 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: HXGA9S+iWlSPZBx7VUXCIIN5kaI1336DLvUwmR+KOC4=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 00:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:70:30:6a:f0:9b:3b:27:e9:af:7c:7f:ee:91:10:44:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Apr 9 03:01:54 2026 GMT Not After : Apr 10 03:01:54 2026 GMT Subject: CN=bc78947d12189d53fe91513a6b3f3cf254d91bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:9d:43:b4:38:66:bb:72:99:cc:c3:fd:78: 4d:8b:cb:05:b4:6d:66:23:3f:ad:e8:b8:f3:44:32: 7e:22:90:4a:10:ca:d2:b2:cc:66:af:f0:fb:75:0d: 0e:79:cd:a7:39:e1:d6:4b:4e:d3:20:82:b1:2d:35: d3:61:55:97:dd:05:a7:b6:cc:02:9c:96:3d:7e:ab: 44:d6:59:8d:40:92:dd:f6:18:70:ea:b1:5c:7a:6f: e7:15:55:4e:bf:89:97:ab:55:fe:c2:7f:77:06:18: ca:ef:e5:29:6e:aa:b6:96:07:0c:08:95:d3:5f:78: 04:12:ce:e6:1c:17:a0:75:45:0b:9b:7e:20:ae:90: 3f:a7:d2:0f:57:97:81:03:39:68:79:02:a4:ae:53: 39:55:0f:c6:ab:3c:d2:9c:c4:16:c3:d2:ac:35:87: 31:85:59:69:0a:ce:b2:20:98:1e:76:87:d6:48:f6: 3e:54:dd:0f:6e:24:c9:d9:df:3b:c5:ad:d2:94:a3: 71:28:92:2f:4c:bd:47:bb:8c:99:28:88:c2:40:3a: c8:e9:8c:a0:1a:ba:a4:84:d4:e0:f1:19:36:4e:3d: 91:8d:8a:03:de:e7:ef:5a:cc:de:a7:17:84:2d:1e: 56:37:6d:06:c6:d1:e8:63:03:91:b9:e8:28:99:9c: 81:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:78:94:7D:12:18:9D:53:FE:91:51:3A:6B:3F:3C:F2:54:D9:1B:F6 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b6:f0:ce:9d:24:c3:d2:6c:20:e8:4f:24:8b:2f:31:d4:53: df:c5:1c:68:4c:31:21:81:54:b7:10:5a:6f:dd:a6:68:fa:1b: 3e:8a:f1:c8:d4:55:8a:29:5f:59:22:dd:e1:37:b6:66:ec:2f: 89:75:47:a7:9a:2f:db:60:e0:8e:7a:9b:28:19:43:7f:bd:20: 82:ca:6d:2d:30:cd:e8:80:74:86:b5:c6:fb:49:57:59:e5:5e: 0e:59:84:4b:88:33:82:53:c1:4c:14:5f:e5:48:32:b4:c6:67: a7:85:4e:f7:b2:63:44:61:61:21:0e:b5:ca:46:d6:ec:a6:79: f9:82:57:c3:2c:87:26:c7:98:29:bf:d6:7e:97:61:0a:34:9c: 9e:fd:93:49:f8:71:37:8e:4a:b3:76:42:fa:13:30:e4:86:2b: b5:94:27:76:1b:ba:13:16:a5:18:95:3b:08:f4:e5:ad:f1:68: 38:b5:c0:b9:18:c4:ec:83:26:3f:11:8b:df:2e:ab:dd:4b:b8: 4e:72:d8:7e:8f:16:46:09:4e:cb:f9:f3:75:06:ec:79:c3:e4: ca:f1:c9:d0:0a:52:8e:18:a5:9f:6e:88:60:d7:90:cb:d3:a6: 0c:e3:c4:a4:b1:9a:06:47:a1:3b:ad:21:7b:28:ec:3b:03:03: b7:b8:45:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1wMGrwmzsn6a98f+6REESlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNDA5MDMwMTU0WhcNMjYwNDEwMDMwMTU0WjAzMTEwLwYDVQQD EyhiYzc4OTQ3ZDEyMTg5ZDUzZmU5MTUxM2E2YjNmM2NmMjU0ZDkxYmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPKdQ7Q4ZrtymczD/XhNi8sFtG1m Iz+t6LjzRDJ+IpBKEMrSssxmr/D7dQ0Oec2nOeHWS07TIIKxLTXTYVWX3QWntswC nJY9fqtE1lmNQJLd9hhw6rFcem/nFVVOv4mXq1X+wn93BhjK7+Upbqq2lgcMCJXT X3gEEs7mHBegdUULm34grpA/p9IPV5eBAzloeQKkrlM5VQ/GqzzSnMQWw9KsNYcx hVlpCs6yIJgedofWSPY+VN0PbiTJ2d87xa3SlKNxKJIvTL1Hu4yZKIjCQDrI6Yyg GrqkhNTg8Rk2Tj2RjYoD3ufvWszepxeELR5WN20GxtHoYwORuegomZyBewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLx4lH0SGJ1T/pFROms/PPJU2Rv2MB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7bwzp0k w9JsIOhPJIsvMdRT38UcaEwxIYFUtxBab92maPobPorxyNRViilfWSLd4Te2Zuwv iXVHp5ov22DgjnqbKBlDf70ggsptLTDN6IB0hrXG+0lXWeVeDlmES4gzglPBTBRf 5UgytMZnp4VO97JjRGFhIQ61ykbW7KZ5+YJXwyyHJseYKb/WfpdhCjScnv2TSfhx N45Ks3ZC+hMw5IYrtZQndhu6ExalGJU7CPTlrfFoOLXAuRjE7IMmPxGL3y6r3Uu4 TnLYfo8WRglOy/nzdQbsecPkyvHJ0ApSjhiln26IYNeQy9OmDOPEpLGaBkehO60h eyjsOwMDt7hFlQ== -----END CERTIFICATE-----Generated at Thu Apr 9 06:51:59 2026 by rpki-client