$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: 5ca8FB6xfUsAQ8KY6cra3HCEX6NfYJ+PR/mDyfAw/o4= Subject key identifier: 86:D6:91:EC:EE:7F:63:22:1E:25:4B:00:2F:A0:CE:F4:1E:FF:49:E2 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019D9C9A48740630FC2930FA656F04F3D058 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 11E5 Signing time: Fri 17 Apr 2026 18:00:49 +0000 Manifest this update: Fri 17 Apr 2026 18:00:49 +0000 Manifest next update: Sat 18 Apr 2026 18:00:49 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: osTZ6qw464Rwjt2dQl2oNuyLLpGxAsSOSRhkmty1PRI=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9c:9a:48:74:06:30:fc:29:30:fa:65:6f:04:f3:d0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Apr 17 18:00:49 2026 GMT Not After : Apr 18 18:00:49 2026 GMT Subject: CN=86d691ecee7f63221e254b002fa0cef41eff49e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b2:d1:99:63:8e:73:ca:24:46:35:c3:9b:6c: d0:63:1e:76:ef:ad:03:23:4e:10:52:ee:7a:4e:1c: 1a:cf:54:da:ee:98:79:57:63:26:bc:f3:cc:87:12: a9:7a:3f:6b:4d:24:13:67:a7:76:07:ca:bd:38:33: 32:98:44:20:0d:0d:da:9f:26:c5:01:9e:db:0f:3c: 8f:ba:8a:a1:f1:45:7c:e1:0b:bb:38:bb:35:4e:8a: 91:fb:ee:c9:12:5a:68:aa:32:6c:c1:e1:00:87:9b: 4c:26:e6:16:02:a8:45:2e:6c:04:79:d5:ad:3d:c3: d1:eb:e6:c4:f0:48:b5:17:41:6e:88:7c:be:1b:f2: d5:6b:d8:07:55:4a:c9:20:05:7b:d0:30:17:b2:43: 98:20:4d:12:38:3a:c2:7a:7f:57:25:10:85:80:76: c9:42:d6:73:9d:5d:8f:68:ab:d4:81:e3:00:c3:b1: 99:31:e8:31:a4:1c:9f:71:b6:22:d4:27:54:01:ef: e2:19:e9:b2:37:d6:0c:ec:51:75:a0:2e:6d:b2:97: 40:2c:e7:1b:a7:56:ad:96:b6:3f:5c:29:02:a3:83: c3:bc:bc:00:31:ed:05:dd:04:23:3e:45:64:fc:fa: 69:77:d4:05:0e:b6:8c:b2:fa:d6:b1:c4:ae:c6:07: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D6:91:EC:EE:7F:63:22:1E:25:4B:00:2F:A0:CE:F4:1E:FF:49:E2 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6c:64:88:42:9f:7e:d5:f9:6f:ca:43:ed:98:73:ba:c0:55: 6d:9f:09:63:fb:ea:3e:50:06:98:2d:8a:02:81:92:22:0a:9d: 66:05:6b:a7:58:49:3d:37:1c:c7:51:3a:d6:c1:a2:eb:58:ca: 45:eb:c1:3b:8a:b7:e8:7c:ba:57:cb:82:ec:6c:7a:46:24:01: 4f:6e:50:0b:6d:95:5c:5c:41:20:9f:b3:2f:a2:11:c6:f3:6a: 6d:8e:24:21:25:b0:0c:5a:32:08:db:f9:bd:ef:54:3e:44:69: e7:cd:58:80:90:0f:1d:51:c3:fe:43:20:96:bd:09:8a:dd:86: e1:24:00:ed:35:36:38:01:6d:5b:51:28:ad:49:ee:fc:af:a4: dd:83:0b:0c:5e:08:2c:12:73:46:94:f5:07:dc:a4:8a:d8:21: 98:c9:ca:aa:ad:2a:eb:b2:16:50:58:41:c9:d5:e7:90:e1:08: b3:52:17:88:e3:0b:4c:90:40:e8:84:2a:4e:65:21:b0:5d:3d: dd:d1:a8:2e:0e:e4:f0:68:db:f7:ba:9d:16:7e:9a:91:b3:62: 62:1e:f4:4f:34:1f:26:f4:02:20:a3:a9:48:8d:7d:c0:4d:22: 27:45:00:61:e9:43:8c:8f:dc:64:86:2d:4a:05:e2:86:18:08: 02:0d:04:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2cmkh0BjD8KTD6ZW8E89BYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNDE3MTgwMDQ5WhcNMjYwNDE4MTgwMDQ5WjAzMTEwLwYDVQQD Eyg4NmQ2OTFlY2VlN2Y2MzIyMWUyNTRiMDAyZmEwY2VmNDFlZmY0OWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLLRmWOOc8okRjXDm2zQYx52760D I04QUu56Thwaz1Ta7ph5V2MmvPPMhxKpej9rTSQTZ6d2B8q9ODMymEQgDQ3anybF AZ7bDzyPuoqh8UV84Qu7OLs1ToqR++7JElpoqjJsweEAh5tMJuYWAqhFLmwEedWt PcPR6+bE8Ei1F0FuiHy+G/LVa9gHVUrJIAV70DAXskOYIE0SODrCen9XJRCFgHbJ QtZznV2PaKvUgeMAw7GZMegxpByfcbYi1CdUAe/iGemyN9YM7FF1oC5tspdALOcb p1atlrY/XCkCo4PDvLwAMe0F3QQjPkVk/Pppd9QFDraMsvrWscSuxgenPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbWkezuf2MiHiVLAC+gzvQe/0niMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2xkiEKf ftX5b8pD7ZhzusBVbZ8JY/vqPlAGmC2KAoGSIgqdZgVrp1hJPTccx1E61sGi61jK RevBO4q36Hy6V8uC7Gx6RiQBT25QC22VXFxBIJ+zL6IRxvNqbY4kISWwDFoyCNv5 ve9UPkRp581YgJAPHVHD/kMglr0Jit2G4SQA7TU2OAFtW1EorUnu/K+k3YMLDF4I LBJzRpT1B9ykitghmMnKqq0q67IWUFhBydXnkOEIs1IXiOMLTJBA6IQqTmUhsF09 3dGoLg7k8Gjb97qdFn6akbNiYh70TzQfJvQCIKOpSI19wE0iJ0UAYelDjI/cZIYt SgXihhgIAg0Ezw== -----END CERTIFICATE-----Generated at Sat Apr 18 02:30:13 2026 by rpki-client