$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: n+D22heGpJodZXyQT/Lnis8nn7sFdSi2yrjBoYnF4eo= Subject key identifier: 1A:69:72:A0:48:6C:1A:C9:A9:1E:AD:B9:E6:8E:8B:46:C4:4E:E0:69 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019CDB7BE33C0AD13D1D0339592C0E59245A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1181 Signing time: Wed 11 Mar 2026 06:00:55 +0000 Manifest this update: Wed 11 Mar 2026 06:00:55 +0000 Manifest next update: Thu 12 Mar 2026 06:00:55 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: X9PY0J5RrRJ4mtSWzghcmD52RRE7h2ojziYHML3weD0=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Mar 2026 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:db:7b:e3:3c:0a:d1:3d:1d:03:39:59:2c:0e:59:24:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Mar 11 06:00:55 2026 GMT Not After : Mar 12 06:00:55 2026 GMT Subject: CN=1a6972a0486c1ac9a91eadb9e68e8b46c44ee069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:42:1a:e3:49:8e:93:7a:1a:27:76:bc:07:53: 72:8e:08:d5:fa:66:0d:e4:e1:5b:f8:6b:65:79:4b: b8:6e:a4:85:f8:59:cb:8e:7d:ef:13:dd:5e:f5:c2: d4:26:16:e7:19:af:63:41:a8:b4:8d:3f:6e:3d:0e: 47:98:08:6e:5d:32:16:ea:21:83:fc:bf:d3:0c:64: 84:46:6b:18:fb:74:29:d3:98:94:69:1a:4f:18:2d: 8d:04:02:0e:41:9c:c2:30:7f:ad:4e:b8:c9:02:e8: 09:b5:5b:4f:97:a5:4e:c8:9b:34:69:bc:b0:2c:16: 0c:c5:6e:36:4e:33:48:4e:12:38:ec:4c:ab:c9:2f: e0:7a:6f:b1:83:62:a9:bf:3e:0c:3a:ad:ae:95:e2: 88:6e:d7:44:c1:f5:52:64:98:aa:9c:90:4e:a4:b5: 6d:1b:3c:e1:c6:47:6b:76:55:46:92:ed:ad:17:b2: 0e:32:e8:75:70:d3:2d:d1:8b:bb:3c:da:01:40:49: b7:86:82:73:ea:e4:d6:7e:e7:96:8d:b8:5d:fc:8d: c5:3f:5c:fd:92:c6:5a:5c:b1:d2:ed:49:60:48:d4: 4a:dd:24:b9:d6:5e:94:eb:cb:72:df:99:a3:1f:fd: e0:c8:c9:03:b0:29:da:83:7c:d8:fc:ae:2b:0d:89: 52:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:69:72:A0:48:6C:1A:C9:A9:1E:AD:B9:E6:8E:8B:46:C4:4E:E0:69 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:88:0c:f0:4b:8a:6c:ea:94:56:1e:d2:36:4a:a1:e4:5a:98: f9:08:61:3d:99:52:4e:4c:8c:07:f5:66:9b:7e:79:c0:b3:49: a0:02:49:7e:9e:a7:ca:e2:9d:26:86:64:70:c6:b8:40:53:d1: 71:6a:e1:07:97:a0:98:9f:4d:0e:e3:4c:25:07:a2:30:91:01: b3:48:c6:58:04:ab:9e:56:ae:85:be:ca:d1:6f:94:ed:3c:8c: 38:2a:db:3a:5f:f8:45:e1:59:85:05:66:c9:8b:b0:a5:59:c8: 9a:a6:ea:47:b7:65:ef:f0:85:27:b6:cd:88:37:af:73:0b:a6: b2:c9:1f:68:ad:1e:25:2d:77:22:76:db:d4:ad:92:3d:74:87: d6:10:05:84:ef:b3:cd:7f:9f:cc:5d:02:4d:dd:5c:f4:79:e5: ed:36:a7:ae:5b:d1:15:5d:4e:3f:cf:89:04:05:b9:9e:08:52: b1:30:dc:43:54:ff:02:07:13:88:af:90:54:86:3f:0e:40:1a: 1d:ee:7c:6f:f2:42:ef:32:2f:6e:2a:5a:14:2c:6d:7d:f3:4c: 81:a4:b9:02:f5:6a:74:9f:83:3c:37:e1:b4:60:ea:c8:b3:5a: 8d:f7:ab:f5:4e:bd:c4:a8:bf:0a:bd:2a:2d:e9:4e:b5:6a:f1: 9e:1a:3d:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzbe+M8CtE9HQM5WSwOWSRaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMzExMDYwMDU1WhcNMjYwMzEyMDYwMDU1WjAzMTEwLwYDVQQD EygxYTY5NzJhMDQ4NmMxYWM5YTkxZWFkYjllNjhlOGI0NmM0NGVlMDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EIa40mOk3oaJ3a8B1NyjgjV+mYN 5OFb+GtleUu4bqSF+FnLjn3vE91e9cLUJhbnGa9jQai0jT9uPQ5HmAhuXTIW6iGD /L/TDGSERmsY+3Qp05iUaRpPGC2NBAIOQZzCMH+tTrjJAugJtVtPl6VOyJs0abyw LBYMxW42TjNIThI47EyryS/gem+xg2Kpvz4MOq2uleKIbtdEwfVSZJiqnJBOpLVt GzzhxkdrdlVGku2tF7IOMuh1cNMt0Yu7PNoBQEm3hoJz6uTWfueWjbhd/I3FP1z9 ksZaXLHS7UlgSNRK3SS51l6U68ty35mjH/3gyMkDsCnag3zY/K4rDYlSTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBppcqBIbBrJqR6tueaOi0bETuBpMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4gM8EuK bOqUVh7SNkqh5FqY+QhhPZlSTkyMB/Vmm355wLNJoAJJfp6nyuKdJoZkcMa4QFPR cWrhB5egmJ9NDuNMJQeiMJEBs0jGWASrnlauhb7K0W+U7TyMOCrbOl/4ReFZhQVm yYuwpVnImqbqR7dl7/CFJ7bNiDevcwumsskfaK0eJS13Inbb1K2SPXSH1hAFhO+z zX+fzF0CTd1c9Hnl7TanrlvRFV1OP8+JBAW5nghSsTDcQ1T/AgcTiK+QVIY/DkAa He58b/JC7zIvbipaFCxtffNMgaS5AvVqdJ+DPDfhtGDqyLNajfer9U69xKi/Cr0q LelOtWrxnho9+w== -----END CERTIFICATE-----Generated at Wed Mar 11 08:42:03 2026 by rpki-client