$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: cV6w5cnrQvagyhWEwduwfYZzJ7u/kz2dFywmiFGdQ9A= Subject key identifier: 4F:21:A3:1B:89:A3:33:BE:CD:86:86:50:E5:E8:13:14:16:F6:44:AA Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019ED763A6EEA606E0BDA35345F3BEB40549 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1288 Signing time: Wed 17 Jun 2026 21:01:32 +0000 Manifest this update: Wed 17 Jun 2026 21:01:32 +0000 Manifest next update: Thu 18 Jun 2026 21:01:32 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: HZaIqYGxYxjN2azP+BkqwkfbrGP4+UYS3TwYauwrQx4=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Jun 2026 19:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:d7:63:a6:ee:a6:06:e0:bd:a3:53:45:f3:be:b4:05:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jun 17 21:01:32 2026 GMT Not After : Jun 18 21:01:32 2026 GMT Subject: CN=4f21a31b89a333becd868650e5e8131416f644aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:b7:95:e2:6e:ca:54:69:0e:81:32:b4:1a: 28:0a:ad:bf:44:e3:24:15:a6:c4:05:7e:a1:dd:ca: fb:b5:d6:bb:64:34:18:c0:c0:51:8e:36:ce:c1:cd: 1c:65:45:5e:61:14:2a:01:05:84:8d:13:c3:6c:af: 06:1a:06:83:29:32:ff:79:22:f3:90:07:95:bb:59: a9:68:8a:52:6f:59:3b:be:c7:53:c0:25:c2:02:dc: dd:28:e9:b6:d6:69:7d:79:2a:bb:3e:2a:ae:0c:49: b8:10:b0:c7:70:c5:81:7d:a7:4b:31:b6:66:fb:90: 00:89:1b:a1:6d:a2:19:27:ae:6b:d8:88:42:bd:4b: 9a:de:17:c6:4b:10:60:34:b2:94:33:74:fe:ad:04: 0d:cf:b8:6b:db:4f:84:70:6c:f1:82:3f:a4:de:c0: f1:ed:a0:34:f2:42:cb:32:a7:18:82:7d:26:cb:12: 46:ff:35:16:82:ff:fe:2c:59:0e:31:c6:33:93:b6: 49:fc:c9:b1:e0:9d:ea:03:f0:de:30:46:6f:b6:d1: 3e:ae:1b:b5:ef:ca:a0:9d:03:59:13:cc:e9:c3:72: fb:60:85:d7:89:12:79:4c:d8:56:c9:25:b8:d1:55: 4d:01:a5:22:8b:82:64:fa:63:e0:9e:30:4f:3a:e4: 1f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:21:A3:1B:89:A3:33:BE:CD:86:86:50:E5:E8:13:14:16:F6:44:AA X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:09:8a:c6:4a:47:fc:98:2d:f4:2a:bc:92:9c:8a:0c:9d:84: 17:11:0a:6f:c1:ee:7f:63:db:0c:1f:94:1b:a6:c1:03:fa:92: 02:a5:05:4e:14:69:c5:ee:c5:9e:37:25:9c:54:56:02:57:af: 5e:85:76:ed:a4:b3:62:70:52:83:98:e3:4a:53:ea:6b:eb:22: 36:33:89:f9:b7:76:04:c1:f9:b9:19:16:93:e9:12:26:dd:b6: 0d:ca:01:fa:2b:36:25:d8:33:7d:6c:26:31:88:29:06:61:28: 61:7b:81:74:ec:a7:84:ee:e6:7d:58:1a:72:85:79:dd:9c:38: ad:b4:b6:e5:49:dd:ab:b1:75:81:f7:c4:ee:9f:c9:df:f4:bd: 2b:81:95:a8:80:56:2c:9f:f7:d7:4f:0a:b7:90:64:95:37:01: 17:3b:11:ba:43:f2:05:0d:ad:7f:49:d7:f9:7f:d7:41:12:a5: 77:38:47:fa:48:ce:aa:64:d4:be:f7:d4:27:18:c3:a3:9f:05: 92:6d:ad:d7:ae:5c:f8:44:7f:02:f9:3d:62:3d:3a:14:42:2a: 50:93:6e:17:bf:db:9c:ee:58:a5:28:91:ed:d0:52:97:e4:53: 43:b8:44:f5:ad:b6:2b:15:f9:cc:62:2d:53:d9:f9:e2:20:cd: 49:eb:06:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7XY6bupgbgvaNTRfO+tAVJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNjE3MjEwMTMyWhcNMjYwNjE4MjEwMTMyWjAzMTEwLwYDVQQD Eyg0ZjIxYTMxYjg5YTMzM2JlY2Q4Njg2NTBlNWU4MTMxNDE2ZjY0NGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/G3leJuylRpDoEytBooCq2/ROMk FabEBX6h3cr7tda7ZDQYwMBRjjbOwc0cZUVeYRQqAQWEjRPDbK8GGgaDKTL/eSLz kAeVu1mpaIpSb1k7vsdTwCXCAtzdKOm21ml9eSq7PiquDEm4ELDHcMWBfadLMbZm +5AAiRuhbaIZJ65r2IhCvUua3hfGSxBgNLKUM3T+rQQNz7hr20+EcGzxgj+k3sDx 7aA08kLLMqcYgn0myxJG/zUWgv/+LFkOMcYzk7ZJ/Mmx4J3qA/DeMEZvttE+rhu1 78qgnQNZE8zpw3L7YIXXiRJ5TNhWySW40VVNAaUii4Jk+mPgnjBPOuQflQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8hoxuJozO+zYaGUOXoExQW9kSqMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAmKxkpH /Jgt9Cq8kpyKDJ2EFxEKb8Huf2PbDB+UG6bBA/qSAqUFThRpxe7FnjclnFRWAlev XoV27aSzYnBSg5jjSlPqa+siNjOJ+bd2BMH5uRkWk+kSJt22DcoB+is2JdgzfWwm MYgpBmEoYXuBdOynhO7mfVgacoV53Zw4rbS25Undq7F1gffE7p/J3/S9K4GVqIBW LJ/3108Kt5BklTcBFzsRukPyBQ2tf0nX+X/XQRKldzhH+kjOqmTUvvfUJxjDo58F km2t165c+ER/Avk9Yj06FEIqUJNuF7/bnO5YpSiR7dBSl+RTQ7hE9a22KxX5zGIt U9n54iDNSesGrA== -----END CERTIFICATE-----Generated at Thu Jun 18 04:32:41 2026 by rpki-client