$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: /6xj/4T5uvDPYPpX3I4u2Xk3nFy0hOAjznUZHc8D5FY= Subject key identifier: C3:67:0A:62:B5:42:84:6B:40:C9:3A:C4:40:18:86:8B:F8:00:39:22 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019D43C4601D6C206CE303B70F2ABBD839B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 11B7 Signing time: Tue 31 Mar 2026 12:00:36 +0000 Manifest this update: Tue 31 Mar 2026 12:00:36 +0000 Manifest next update: Wed 01 Apr 2026 12:00:36 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: hHnMpa1YIZ2wfvfowab+yVOgFsBlwXB7wwRpmlZX7Kk=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Apr 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:43:c4:60:1d:6c:20:6c:e3:03:b7:0f:2a:bb:d8:39:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Mar 31 12:00:36 2026 GMT Not After : Apr 1 12:00:36 2026 GMT Subject: CN=c3670a62b542846b40c93ac44018868bf8003922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bf:02:5a:ea:59:78:07:90:e0:9e:7f:c9:0a: 36:f8:45:04:db:6a:86:44:7e:c6:ea:a0:ae:9c:46: c6:0f:2d:9f:e8:56:66:43:b2:ed:28:eb:1d:a2:7f: 6c:db:15:39:db:fe:f7:26:d2:f4:9f:9c:d0:26:64: 47:6d:d6:50:63:43:26:6a:05:b8:57:d7:8e:8e:a2: 46:cc:03:ff:4c:2e:ce:1c:96:a4:4d:b7:a6:c9:7f: a9:da:22:44:5e:31:07:2c:19:9c:3d:16:3c:77:6d: a6:f4:07:8c:fc:36:32:a3:78:21:42:65:6c:06:17: f7:ac:34:71:88:2b:fd:2f:50:9c:36:9c:28:05:48: b4:43:bd:03:9b:14:77:9e:3f:65:31:81:b8:7d:30: 49:42:b5:63:16:22:96:13:c5:bb:49:f2:c2:98:1f: 43:2f:55:58:7b:ca:72:12:d0:4a:b5:a5:02:d3:f6: 50:a4:dd:25:c3:c8:bb:bd:d8:4c:64:d2:f0:3f:db: d6:f5:d3:07:78:31:63:03:7f:60:d5:71:01:a8:2f: 2b:f0:24:16:64:ea:fe:20:d1:1d:33:77:74:ea:87: 49:3c:44:45:2a:48:c9:72:d3:3c:d9:f9:6a:e1:b8: 75:50:e8:8b:b3:2b:06:1c:3a:74:d2:32:1a:1a:b8: db:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:67:0A:62:B5:42:84:6B:40:C9:3A:C4:40:18:86:8B:F8:00:39:22 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2f:b6:22:4e:b9:61:61:34:e6:c5:cd:2a:61:7e:64:e7:38: cf:2c:0b:de:94:f8:bc:bb:c0:97:42:59:07:97:c3:34:74:92: 42:19:c1:f7:d4:bf:70:25:81:b5:91:63:44:77:54:ab:80:8c: b0:9f:ae:cc:22:08:41:6a:4e:09:56:2f:81:fd:13:2b:a7:5c: 1a:14:d0:71:ae:8c:be:df:26:db:aa:3b:33:2c:67:42:39:5a: 59:4a:df:41:50:ff:3a:68:1a:03:b7:2b:e9:95:16:de:b8:51: 56:d1:17:2f:76:da:3c:b8:f4:d8:9d:fb:b4:c4:76:05:57:d5: f7:e3:65:1e:12:b2:47:40:05:a1:ef:a9:cc:59:3d:fb:c9:b4: 36:c1:71:4e:fd:c4:dc:9a:88:b8:96:bb:0b:c8:13:49:e1:e0: 1f:9f:dc:b7:57:da:56:5b:f7:ad:f1:9c:fc:ec:97:17:ec:87: fa:16:1b:17:0c:ea:6b:4e:9a:37:91:8f:0e:57:8d:22:40:69: 0b:e3:d2:8d:2f:42:c8:c5:4d:b7:ca:46:b0:cb:94:27:45:eb: 37:4b:33:9e:6a:51:7f:e7:1b:e1:76:2f:00:46:16:7f:39:b9: 76:6a:b7:c3:74:ff:5e:c6:18:c0:11:9f:e0:42:00:c3:09:fc: 01:3a:77:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1DxGAdbCBs4wO3Dyq72Dm1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMzMxMTIwMDM2WhcNMjYwNDAxMTIwMDM2WjAzMTEwLwYDVQQD EyhjMzY3MGE2MmI1NDI4NDZiNDBjOTNhYzQ0MDE4ODY4YmY4MDAzOTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L8CWupZeAeQ4J5/yQo2+EUE22qG RH7G6qCunEbGDy2f6FZmQ7LtKOsdon9s2xU52/73JtL0n5zQJmRHbdZQY0MmagW4 V9eOjqJGzAP/TC7OHJakTbemyX+p2iJEXjEHLBmcPRY8d22m9AeM/DYyo3ghQmVs Bhf3rDRxiCv9L1CcNpwoBUi0Q70DmxR3nj9lMYG4fTBJQrVjFiKWE8W7SfLCmB9D L1VYe8pyEtBKtaUC0/ZQpN0lw8i7vdhMZNLwP9vW9dMHeDFjA39g1XEBqC8r8CQW ZOr+INEdM3d06odJPERFKkjJctM82flq4bh1UOiLsysGHDp00jIaGrjb+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNnCmK1QoRrQMk6xEAYhov4ADkiMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXy+2Ik65 YWE05sXNKmF+ZOc4zywL3pT4vLvAl0JZB5fDNHSSQhnB99S/cCWBtZFjRHdUq4CM sJ+uzCIIQWpOCVYvgf0TK6dcGhTQca6Mvt8m26o7MyxnQjlaWUrfQVD/OmgaA7cr 6ZUW3rhRVtEXL3baPLj02J37tMR2BVfV9+NlHhKyR0AFoe+pzFk9+8m0NsFxTv3E 3JqIuJa7C8gTSeHgH5/ct1faVlv3rfGc/OyXF+yH+hYbFwzqa06aN5GPDleNIkBp C+PSjS9CyMVNt8pGsMuUJ0XrN0sznmpRf+cb4XYvAEYWfzm5dmq3w3T/XsYYwBGf 4EIAwwn8ATp3wg== -----END CERTIFICATE-----Generated at Tue Mar 31 16:09:14 2026 by rpki-client