$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: 75gRpV6WAIkdM2kxVL+/DOYllYbnFJNdKao/RRzOk/w= Subject key identifier: 3A:29:65:33:08:99:4F:FA:BD:B8:B7:01:B3:C9:22:FC:4B:32:1A:F8 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019D2101EE516C60FA0AF5E9203A9D503EFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 11A5 Signing time: Tue 24 Mar 2026 18:01:07 +0000 Manifest this update: Tue 24 Mar 2026 18:01:07 +0000 Manifest next update: Wed 25 Mar 2026 18:01:07 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: d/yR0d7pb7ODPzbhri/naaYDLURTd0oK/+8AvJKKYOU=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 25 Mar 2026 15:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:21:01:ee:51:6c:60:fa:0a:f5:e9:20:3a:9d:50:3e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Mar 24 18:01:07 2026 GMT Not After : Mar 25 18:01:07 2026 GMT Subject: CN=3a29653308994ffabdb8b701b3c922fc4b321af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e8:fa:38:bf:7b:60:64:01:a0:d8:77:a0:76: bc:3e:e0:2b:b8:19:fd:c9:c3:fd:cd:66:c6:c8:9e: 2e:18:01:55:15:bf:69:21:24:f0:4a:a1:f4:bf:05: 3d:a0:65:f3:1b:a7:ca:1f:fd:12:ca:41:c2:61:b1: 54:16:2c:d1:71:24:4a:6b:df:b5:e0:20:09:d7:a9: c3:db:a6:07:85:75:5e:d2:20:e6:3b:0d:90:0d:b7: bd:75:b7:3e:86:65:e3:b6:d9:e6:04:e4:2b:20:4d: ef:9b:ff:e1:32:5e:77:ad:a8:8a:1d:83:62:13:7b: 17:7f:d8:37:2e:5a:d9:99:a1:02:df:6c:74:55:ab: 14:1e:cf:45:1c:20:49:c6:37:e6:c8:49:af:66:85: a6:0c:3a:57:7a:4b:60:47:d5:80:d9:7c:65:9b:34: 48:6d:9b:55:31:0f:5c:d3:32:97:95:21:e8:43:6f: 4a:6b:e8:d2:9f:6e:0b:00:1b:38:9e:e9:fe:4a:f0: 81:8e:a4:77:b4:bf:83:95:e5:e4:38:80:cf:b1:7b: 93:15:82:97:8e:94:22:3a:35:fc:53:ae:da:b2:3c: 35:65:26:71:79:99:ea:7c:62:91:ff:e9:31:62:85: 02:7e:81:65:1f:b6:03:bf:0e:75:bd:27:c3:da:24: af:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:29:65:33:08:99:4F:FA:BD:B8:B7:01:B3:C9:22:FC:4B:32:1A:F8 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:31:ed:0a:2a:83:35:6c:99:ac:e5:7c:2f:01:d6:cc:be:96: f3:ec:b0:0b:10:42:92:c4:ed:1e:c1:9e:66:5c:c3:54:92:38: 77:25:fa:45:b7:19:26:79:5d:f9:0d:c6:55:3e:a3:1a:64:27: 1d:ae:fb:d7:02:c4:a0:9e:23:95:b3:26:54:ec:25:9b:df:99: c1:49:61:87:72:e9:28:8a:fe:9e:2b:9f:a9:1a:50:54:e3:1e: 5c:3c:ad:17:5b:16:95:59:0d:67:7c:52:bf:88:a5:f9:21:db: e6:9c:de:40:57:90:0e:e9:7e:5b:51:61:f4:2e:51:7d:7e:bc: c5:48:48:7d:9b:fc:28:6f:74:24:0a:95:6c:c9:4f:18:62:42: 47:b7:e9:a1:6d:91:2a:00:65:46:59:16:4e:2c:97:a0:ce:0e: ef:69:f8:be:cb:48:7f:69:07:77:00:55:ec:91:0e:33:04:31: df:d1:dc:a9:41:a0:4e:f0:98:8a:eb:5d:87:f4:39:5a:74:df: c5:aa:dd:8c:3e:17:12:6f:b2:9e:85:03:1a:77:68:d1:99:10: 1f:30:cb:c3:f0:7c:f5:47:ff:0b:1c:1b:c1:4f:9a:2a:61:c2: b4:48:16:66:c4:27:25:dd:d8:23:5d:e2:ff:22:d2:68:73:48: 9f:54:78:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0hAe5RbGD6CvXpIDqdUD78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMzI0MTgwMTA3WhcNMjYwMzI1MTgwMTA3WjAzMTEwLwYDVQQD EygzYTI5NjUzMzA4OTk0ZmZhYmRiOGI3MDFiM2M5MjJmYzRiMzIxYWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+j6OL97YGQBoNh3oHa8PuAruBn9 ycP9zWbGyJ4uGAFVFb9pISTwSqH0vwU9oGXzG6fKH/0SykHCYbFUFizRcSRKa9+1 4CAJ16nD26YHhXVe0iDmOw2QDbe9dbc+hmXjttnmBOQrIE3vm//hMl53raiKHYNi E3sXf9g3LlrZmaEC32x0VasUHs9FHCBJxjfmyEmvZoWmDDpXektgR9WA2XxlmzRI bZtVMQ9c0zKXlSHoQ29Ka+jSn24LABs4nun+SvCBjqR3tL+DleXkOIDPsXuTFYKX jpQiOjX8U67asjw1ZSZxeZnqfGKR/+kxYoUCfoFlH7YDvw51vSfD2iSvYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDopZTMImU/6vbi3AbPJIvxLMhr4MB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTHtCiqD NWyZrOV8LwHWzL6W8+ywCxBCksTtHsGeZlzDVJI4dyX6RbcZJnld+Q3GVT6jGmQn Ha771wLEoJ4jlbMmVOwlm9+ZwUlhh3LpKIr+niufqRpQVOMeXDytF1sWlVkNZ3xS v4il+SHb5pzeQFeQDul+W1Fh9C5RfX68xUhIfZv8KG90JAqVbMlPGGJCR7fpoW2R KgBlRlkWTiyXoM4O72n4vstIf2kHdwBV7JEOMwQx39HcqUGgTvCYiutdh/Q5WnTf xardjD4XEm+ynoUDGndo0ZkQHzDLw/B89Uf/CxwbwU+aKmHCtEgWZsQnJd3YI13i /yLSaHNIn1R4MA== -----END CERTIFICATE-----Generated at Tue Mar 24 20:35:40 2026 by rpki-client