$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: ri3NXxTRX3ZT5IrtXhSHEMVJxV28QES1HcVmHrKTUEY= Subject key identifier: 27:BE:C8:D6:6A:94:37:17:67:28:7E:D3:BB:B2:66:31:FD:89:B3:92 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019DD0BE7AA24F685E40BF0406A5E8C7AC52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1200 Signing time: Mon 27 Apr 2026 21:00:37 +0000 Manifest this update: Mon 27 Apr 2026 21:00:37 +0000 Manifest next update: Tue 28 Apr 2026 21:00:37 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: gRyFxgXVaNd7OLfCGNb51CGzhJNkFADKncLUcaWiKSI=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d0:be:7a:a2:4f:68:5e:40:bf:04:06:a5:e8:c7:ac:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Apr 27 21:00:37 2026 GMT Not After : Apr 28 21:00:37 2026 GMT Subject: CN=27bec8d66a94371767287ed3bbb26631fd89b392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:84:6d:ed:0b:8c:78:5d:c7:81:35:c4:62:cf: 86:49:40:3c:8f:1d:3d:8c:86:55:03:cc:5e:19:44: 96:6e:39:fd:b1:6f:d7:46:2e:0a:e3:24:c9:d2:38: 81:dd:81:59:42:26:83:54:c0:4a:1f:7a:cd:92:42: 1e:ca:f9:89:e9:da:5e:31:cf:ba:ca:32:c1:a7:4f: 50:96:9c:42:23:b7:0a:c2:f4:3c:b7:13:1d:d3:6f: 1d:4d:f8:eb:d9:3d:8e:84:5f:8b:c8:75:08:4c:f8: 20:ee:53:62:68:42:9c:fb:d6:8d:b2:78:7b:d8:2f: 4e:04:c8:c0:e9:99:69:cf:3f:55:93:f3:9c:d2:d9: 5b:79:98:6c:67:06:c6:2b:16:87:42:c5:f8:8b:d6: 4f:b9:ae:2c:fb:78:da:33:28:52:c5:05:e7:b1:0b: c7:3e:43:20:a2:f8:c4:99:23:48:3d:f6:bd:e5:00: 88:13:de:f5:af:51:94:25:68:3a:15:41:bd:d3:d1: 28:91:e7:22:9f:63:a8:d1:99:3c:d2:be:1c:b3:9b: b4:c6:43:77:af:bd:99:9a:43:2b:f5:b2:37:3e:15: 2e:06:ce:de:ba:d5:e4:2a:b5:49:12:06:bd:ec:13: eb:84:06:fc:22:93:c4:76:e2:81:a2:b5:da:9e:b8: 95:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BE:C8:D6:6A:94:37:17:67:28:7E:D3:BB:B2:66:31:FD:89:B3:92 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:93:33:77:49:2a:fd:f6:54:7b:df:5d:8f:56:00:12:96:28: 30:22:7f:25:37:bb:eb:82:11:1a:d8:84:0e:f3:7c:3c:1a:dd: 1a:83:02:27:63:5d:f4:78:52:02:56:55:9e:b8:c7:19:ba:ec: ab:c3:6b:60:fb:d4:3f:de:21:4d:b7:c0:f6:05:19:a0:c4:9f: 4d:0c:8b:a9:d3:b4:93:72:ad:44:6e:7c:53:fa:f8:67:52:d4: 39:41:3b:16:9a:03:7e:67:d5:2e:36:05:d2:96:23:18:df:54: cd:5a:21:80:2e:32:d9:56:e4:b8:6e:6b:fc:1c:cc:ea:bf:a9: ad:d3:ab:1c:e9:aa:08:8d:e6:cb:d5:e4:95:f1:f6:e3:fb:f5: 27:a1:8a:94:d4:4e:3f:d5:95:07:c0:16:1e:c0:01:d6:9c:09: 75:86:0b:5e:09:e7:98:49:92:19:de:ad:f9:c9:92:67:a0:4a: 62:3d:2a:fe:b0:53:6f:cb:37:be:8d:c7:d9:01:52:b6:7d:ac: fa:e9:93:c2:60:4a:4b:6b:ca:23:36:41:9f:4d:88:40:51:29: 3c:51:c8:b0:10:77:98:48:4b:72:8d:43:4d:dc:89:db:a5:d2: 25:03:48:7a:04:5c:cb:a9:7c:db:ef:a0:35:3e:1a:69:5f:12: ce:c7:f1:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3QvnqiT2heQL8EBqXox6xSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNDI3MjEwMDM3WhcNMjYwNDI4MjEwMDM3WjAzMTEwLwYDVQQD EygyN2JlYzhkNjZhOTQzNzE3NjcyODdlZDNiYmIyNjYzMWZkODliMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIRt7QuMeF3HgTXEYs+GSUA8jx09 jIZVA8xeGUSWbjn9sW/XRi4K4yTJ0jiB3YFZQiaDVMBKH3rNkkIeyvmJ6dpeMc+6 yjLBp09QlpxCI7cKwvQ8txMd028dTfjr2T2OhF+LyHUITPgg7lNiaEKc+9aNsnh7 2C9OBMjA6Zlpzz9Vk/Oc0tlbeZhsZwbGKxaHQsX4i9ZPua4s+3jaMyhSxQXnsQvH PkMgovjEmSNIPfa95QCIE971r1GUJWg6FUG909Eokecin2Oo0Zk80r4cs5u0xkN3 r72ZmkMr9bI3PhUuBs7eutXkKrVJEga97BPrhAb8IpPEduKBorXanriV0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCe+yNZqlDcXZyh+07uyZjH9ibOSMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJMzd0kq /fZUe99dj1YAEpYoMCJ/JTe764IRGtiEDvN8PBrdGoMCJ2Nd9HhSAlZVnrjHGbrs q8NrYPvUP94hTbfA9gUZoMSfTQyLqdO0k3KtRG58U/r4Z1LUOUE7FpoDfmfVLjYF 0pYjGN9UzVohgC4y2VbkuG5r/BzM6r+prdOrHOmqCI3my9XklfH24/v1J6GKlNRO P9WVB8AWHsAB1pwJdYYLXgnnmEmSGd6t+cmSZ6BKYj0q/rBTb8s3vo3H2QFStn2s +umTwmBKS2vKIzZBn02IQFEpPFHIsBB3mEhLco1DTdyJ26XSJQNIegRcy6l82++g NT4aaV8SzsfxwQ== -----END CERTIFICATE-----Generated at Tue Apr 28 00:31:24 2026 by rpki-client