$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: 1PDyvMCPeYS5KJrL91N9o+62vnnA0Dq1rP3nMQ2+Cbc= Subject key identifier: 2E:B0:C5:AD:95:E3:06:0E:7F:52:37:B9:4C:AD:DB:91:2D:E6:D0:45 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019CCFE56C368D74BC68FDCBBB48DFA33729 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 117B Signing time: Mon 09 Mar 2026 00:00:44 +0000 Manifest this update: Mon 09 Mar 2026 00:00:44 +0000 Manifest next update: Tue 10 Mar 2026 00:00:44 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: JAgFtckE08gKwwy1oWhUdd03gOciVevpyTyPTTTZ+nQ=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Mar 2026 22:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:cf:e5:6c:36:8d:74:bc:68:fd:cb:bb:48:df:a3:37:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Mar 9 00:00:44 2026 GMT Not After : Mar 10 00:00:44 2026 GMT Subject: CN=2eb0c5ad95e3060e7f5237b94caddb912de6d045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:86:be:45:42:66:78:d3:43:0e:e9:60:07: b8:98:e5:fb:bd:92:e5:a2:db:f8:1f:a6:78:3d:fb: 7a:39:56:c7:0b:f7:45:b5:56:73:47:c9:32:28:20: 7e:54:ba:e1:87:3a:fd:ab:07:af:5f:8f:88:73:d7: a1:72:e9:c4:69:f8:b8:ec:f5:0d:56:d6:ca:32:0c: 61:8d:74:72:eb:e8:1c:a0:1e:ab:89:9c:41:93:f4: 88:67:eb:87:41:10:9a:16:00:de:d8:c0:d6:88:14: 3f:1a:01:93:4d:d7:24:39:80:df:ad:a7:d9:92:9e: cf:fd:24:24:7d:0f:33:5d:65:35:af:80:92:ea:54: 20:a0:83:35:b0:3e:f9:e2:b5:47:32:5a:ac:fd:48: 61:12:85:fe:36:db:81:c5:48:59:90:a3:bf:a0:d5: 94:e1:61:42:d7:69:5a:65:6e:13:02:2e:a5:d5:94: 87:f5:b3:8a:f9:b5:e1:cb:f3:0b:ef:ee:c7:ac:45: 68:40:26:20:a1:c4:6c:22:f5:00:c5:2a:a1:72:01: 01:20:6b:0b:41:c7:f1:43:21:24:05:f9:39:fb:ac: 58:43:bb:1e:66:56:e8:e8:83:04:1d:74:4b:c4:61: e0:10:76:67:e6:03:16:b1:4f:24:5c:a9:2d:c7:c1: 32:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B0:C5:AD:95:E3:06:0E:7F:52:37:B9:4C:AD:DB:91:2D:E6:D0:45 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:46:2f:5b:00:0c:cb:db:08:27:20:1c:ec:3b:a1:a2:91:0d: f4:00:f9:e3:aa:60:88:c8:a8:1d:db:62:07:fc:f1:f3:d6:e8: f5:57:16:a2:ae:2c:f5:be:b9:6e:19:b6:94:32:8b:cb:7a:c3: ed:9e:20:3c:7c:52:d3:6c:b6:f0:97:33:82:37:86:25:c6:91: c5:5e:c9:7d:ea:7f:87:a9:bf:f1:7f:49:9d:e5:c3:c0:10:bf: 3f:a3:e4:24:a9:72:c6:5e:8b:4e:79:d1:1b:9b:52:b6:e8:21: 44:7e:1b:22:18:4c:a7:9e:5a:27:b8:c3:d1:8c:ac:25:88:4e: 04:8a:e7:61:66:96:6c:44:49:97:ef:90:3c:d8:2f:26:53:5f: 23:a4:84:50:9e:94:d0:e5:a1:91:1d:86:34:42:51:a4:a2:05: 33:e4:bf:c2:54:66:1c:f4:99:2f:c9:e3:2c:e7:32:f3:da:c0: 9a:c6:74:88:5f:df:f5:29:9c:2f:14:92:87:73:31:f5:7f:3a: bc:a7:a3:89:6f:35:8d:76:ff:60:88:45:77:59:f1:c8:be:a7: 84:3a:f2:0d:dd:f9:c0:34:06:5a:82:e8:9d:66:65:02:f9:7f: ed:89:de:f0:93:b5:b3:ca:6a:02:48:1b:22:71:d8:ee:a8:e2: c1:5d:06:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzP5Ww2jXS8aP3Lu0jfozcpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMzA5MDAwMDQ0WhcNMjYwMzEwMDAwMDQ0WjAzMTEwLwYDVQQD EygyZWIwYzVhZDk1ZTMwNjBlN2Y1MjM3Yjk0Y2FkZGI5MTJkZTZkMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB6GvkVCZnjTQw7pYAe4mOX7vZLl otv4H6Z4Pft6OVbHC/dFtVZzR8kyKCB+VLrhhzr9qwevX4+Ic9ehcunEafi47PUN VtbKMgxhjXRy6+gcoB6riZxBk/SIZ+uHQRCaFgDe2MDWiBQ/GgGTTdckOYDfrafZ kp7P/SQkfQ8zXWU1r4CS6lQgoIM1sD754rVHMlqs/UhhEoX+NtuBxUhZkKO/oNWU 4WFC12laZW4TAi6l1ZSH9bOK+bXhy/ML7+7HrEVoQCYgocRsIvUAxSqhcgEBIGsL QcfxQyEkBfk5+6xYQ7seZlbo6IMEHXRLxGHgEHZn5gMWsU8kXKktx8EycQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6wxa2V4wYOf1I3uUyt25Et5tBFMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUYvWwAM y9sIJyAc7DuhopEN9AD546pgiMioHdtiB/zx89bo9VcWoq4s9b65bhm2lDKLy3rD 7Z4gPHxS02y28JczgjeGJcaRxV7Jfep/h6m/8X9JneXDwBC/P6PkJKlyxl6LTnnR G5tStughRH4bIhhMp55aJ7jD0YysJYhOBIrnYWaWbERJl++QPNgvJlNfI6SEUJ6U 0OWhkR2GNEJRpKIFM+S/wlRmHPSZL8njLOcy89rAmsZ0iF/f9SmcLxSSh3Mx9X86 vKejiW81jXb/YIhFd1nxyL6nhDryDd35wDQGWoLonWZlAvl/7Yne8JO1s8pqAkgb InHY7qjiwV0G+g== -----END CERTIFICATE-----Generated at Mon Mar 9 07:01:59 2026 by rpki-client