$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: qOTok4pS4H7IZy4laSTH+4QnPjXexJQqyMUrT0ZSaVo= Subject key identifier: F5:B5:3D:6C:01:30:75:F6:E5:DD:B3:26:3D:01:0B:05:77:B9:ED:4F Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019EE2F9CEAFB735C5D17423BF88947F14B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 128E Signing time: Sat 20 Jun 2026 03:01:22 +0000 Manifest this update: Sat 20 Jun 2026 03:01:22 +0000 Manifest next update: Sun 21 Jun 2026 03:01:22 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: 9ocHb+bvmBNREjhX7DLZ+31bzqp/+b4IdIwnNJjJU/c=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Jun 2026 23:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:e2:f9:ce:af:b7:35:c5:d1:74:23:bf:88:94:7f:14:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jun 20 03:01:22 2026 GMT Not After : Jun 21 03:01:22 2026 GMT Subject: CN=f5b53d6c013075f6e5ddb3263d010b0577b9ed4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:a1:0c:3a:c2:9c:c6:16:05:7a:bb:7b:48: c7:dc:e8:17:24:57:42:52:f0:32:ea:9e:fa:c9:b6: 7d:01:59:e2:02:94:fd:99:c9:8c:f1:b1:21:b0:99: 8a:2e:5a:da:02:8f:e5:b7:a1:58:b5:a8:73:d5:0a: f8:27:19:f1:af:03:20:e1:45:72:87:78:18:17:aa: b3:64:a1:64:95:d6:39:23:fd:97:c7:37:d5:c0:c5: 0f:f2:ef:5a:92:32:4d:01:78:70:7b:61:ee:42:f5: 6a:0b:58:2f:7f:50:84:07:c5:b7:70:d4:4c:71:8d: 7d:ea:35:c0:d4:20:7e:30:01:eb:19:7b:f2:03:b4: 8b:ee:ab:d6:1a:f8:51:7a:b2:d6:99:f4:eb:48:1e: 3b:5d:d3:8d:6d:16:1b:e1:26:7b:56:92:8c:be:07: 26:4f:b5:26:1e:15:46:0d:dd:f0:af:b4:14:50:c9: f4:f4:2c:e0:94:8c:9c:87:43:49:99:a8:b3:66:52: 13:d8:31:8b:a1:17:69:a0:20:fb:1b:10:69:09:f3: ab:bb:a7:1a:b1:a3:d7:59:33:93:02:df:84:75:31: 20:ec:f7:3e:a9:cd:ce:04:1c:4c:05:ea:e8:19:93: 27:26:bc:48:20:bf:1b:a2:ea:38:18:25:c5:5a:fe: ad:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B5:3D:6C:01:30:75:F6:E5:DD:B3:26:3D:01:0B:05:77:B9:ED:4F X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:39:49:2c:92:62:74:04:ed:74:3e:a0:91:e9:cc:fd:7b:43: d8:5b:29:0c:4d:0c:35:8b:b0:f5:c4:f4:13:bc:5c:c1:17:6b: 1f:6f:52:3e:fe:af:21:36:14:fe:83:4b:ed:d9:cd:df:bd:7e: 94:e1:ed:90:4c:b7:22:41:dd:e9:6f:cb:cc:59:25:8d:b5:c1: 18:5d:4a:ab:bd:11:82:62:b4:7a:e1:60:4e:41:29:1d:37:26: 3b:b1:91:ef:5e:19:b6:4c:ee:95:14:7e:0b:cc:b7:a6:b0:83: 16:22:81:a6:4d:5b:7f:b4:08:9b:46:6d:cb:53:23:ad:5f:b7: 9d:07:54:34:cc:bb:37:cb:67:18:d6:30:f5:82:35:62:d6:69: f0:7c:70:dc:f6:9d:e6:63:ca:65:43:19:9f:96:a0:5b:fb:ec: 43:03:88:e5:8b:f6:28:58:e1:77:ce:b7:f3:19:28:50:45:dd: 2b:0f:8c:fa:42:7f:8e:66:01:27:6f:56:b9:58:f4:af:11:53: e0:fd:75:55:26:bc:1b:2e:e9:14:7d:98:6a:fc:11:16:04:ab: 75:25:71:79:ca:9b:a9:1f:bf:0e:27:24:d0:70:11:97:d2:be: cd:52:f5:78:27:33:c9:21:3f:d5:e8:65:0b:01:58:97:22:9d: 23:bf:75:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7i+c6vtzXF0XQjv4iUfxS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNjIwMDMwMTIyWhcNMjYwNjIxMDMwMTIyWjAzMTEwLwYDVQQD EyhmNWI1M2Q2YzAxMzA3NWY2ZTVkZGIzMjYzZDAxMGIwNTc3YjllZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjqhDDrCnMYWBXq7e0jH3OgXJFdC UvAy6p76ybZ9AVniApT9mcmM8bEhsJmKLlraAo/lt6FYtahz1Qr4JxnxrwMg4UVy h3gYF6qzZKFkldY5I/2XxzfVwMUP8u9akjJNAXhwe2HuQvVqC1gvf1CEB8W3cNRM cY196jXA1CB+MAHrGXvyA7SL7qvWGvhRerLWmfTrSB47XdONbRYb4SZ7VpKMvgcm T7UmHhVGDd3wr7QUUMn09CzglIych0NJmaizZlIT2DGLoRdpoCD7GxBpCfOru6ca saPXWTOTAt+EdTEg7Pc+qc3OBBxMBeroGZMnJrxIIL8bouo4GCXFWv6tsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPW1PWwBMHX25d2zJj0BCwV3ue1PMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjlJLJJi dATtdD6gkenM/XtD2FspDE0MNYuw9cT0E7xcwRdrH29SPv6vITYU/oNL7dnN371+ lOHtkEy3IkHd6W/LzFkljbXBGF1Kq70RgmK0euFgTkEpHTcmO7GR714ZtkzulRR+ C8y3prCDFiKBpk1bf7QIm0Zty1MjrV+3nQdUNMy7N8tnGNYw9YI1YtZp8Hxw3Pad 5mPKZUMZn5agW/vsQwOI5Yv2KFjhd8638xkoUEXdKw+M+kJ/jmYBJ29WuVj0rxFT 4P11VSa8Gy7pFH2YavwRFgSrdSVxecqbqR+/Dick0HARl9K+zVL1eCczySE/1ehl CwFYlyKdI791UQ== -----END CERTIFICATE-----Generated at Sat Jun 20 06:49:14 2026 by rpki-client