$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: sdPgLm7Jud1O5sUu735lXfAniQyte5mI3ue1l+2Nbpc= Subject key identifier: 0B:02:4C:77:D8:B3:C2:56:5E:6B:23:4E:57:B4:93:F6:5E:9F:B5:FC Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019D6A64978D707991BDCA18B66F6084C47B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 11CB Signing time: Wed 08 Apr 2026 00:01:10 +0000 Manifest this update: Wed 08 Apr 2026 00:01:10 +0000 Manifest next update: Thu 09 Apr 2026 00:01:10 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: 3rS/i1CAgxXjOHxTl81ARgvglf5SoySVSB8y+qsLz/E=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 08 Apr 2026 21:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:6a:64:97:8d:70:79:91:bd:ca:18:b6:6f:60:84:c4:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Apr 8 00:01:10 2026 GMT Not After : Apr 9 00:01:10 2026 GMT Subject: CN=0b024c77d8b3c2565e6b234e57b493f65e9fb5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:80:fa:b9:fe:6a:17:2d:8e:4d:19:5b:e5: be:e0:33:f0:6a:f1:4a:1b:e6:4a:37:28:6f:72:f3: 56:d5:f8:0b:91:66:b8:eb:51:3b:82:86:ae:5e:6f: 9b:72:b2:4d:08:43:d5:dc:a1:63:e1:f4:c7:ba:ba: 3a:3c:02:40:9e:38:b0:95:f7:72:99:21:bb:58:5b: b7:04:11:e9:8c:f3:f9:46:44:87:de:85:9b:c6:cd: 1b:06:78:59:1d:08:d5:3e:7e:52:ae:df:ea:2f:a5: 40:74:52:99:87:99:3c:da:03:aa:df:f4:0d:23:0a: 30:5e:1d:c2:63:bf:ca:31:c9:83:55:f2:5f:85:de: 5c:1a:8c:06:3f:a2:43:bf:f0:c0:c0:96:77:a0:30: 40:92:98:f4:c1:d6:bc:78:57:57:52:20:33:d1:b8: c6:94:4d:0c:bf:a8:49:1a:e9:14:c6:d2:78:15:7a: 52:ac:39:91:10:c4:c4:57:4b:1a:9b:ff:8b:dd:38: 8e:a1:86:a7:b0:6c:64:80:88:9e:b2:c5:c0:9e:32: 0e:16:da:c2:30:9e:f2:7a:53:14:e9:fe:48:85:e2: 73:c8:e3:c1:90:f3:64:f2:6a:9c:64:ac:8e:d4:c5: cf:94:e8:ca:2c:49:bd:13:da:46:71:62:6d:ec:96: 3f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:02:4C:77:D8:B3:C2:56:5E:6B:23:4E:57:B4:93:F6:5E:9F:B5:FC X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:39:6f:be:8b:f4:dd:ab:59:8a:60:c4:45:dd:ac:0f:2e:51: 3a:b8:0a:fa:c5:7b:a0:c7:ee:8b:cd:b7:a3:12:62:61:a4:3c: 86:93:b4:ba:ba:b3:1f:4f:86:b0:12:fa:59:ac:28:e9:65:66: 60:ce:8b:5c:07:c3:51:3e:19:26:7d:3a:49:ba:33:b8:b9:48: 11:19:5a:a3:f8:3d:b4:22:25:85:b6:1d:47:74:3a:7a:f3:c5: 72:13:c7:ff:98:4e:87:b4:ff:bb:ee:2a:32:a8:5a:89:c0:25: 47:31:b1:06:f5:05:d1:c5:b4:57:be:74:cd:83:17:04:af:94: 12:b5:c5:96:9f:cc:c6:c7:3d:1c:cd:f3:b1:f2:b2:03:22:55: d2:a3:e3:b4:0d:4b:1c:9c:b0:d5:22:df:4b:27:9b:ec:1a:67: 56:eb:8a:de:b4:3d:89:02:60:52:2f:ef:a6:5a:67:c5:a4:3b: c1:1f:61:7e:3f:53:34:1b:8d:39:58:8f:0a:e6:0a:f9:b4:3d: 86:ce:65:97:7b:4e:1f:4e:f7:b3:24:2c:e0:2e:c8:56:27:3e: fb:ca:9e:67:d2:f8:b2:d2:93:74:27:20:e4:ba:8d:fa:c0:e7: 11:84:dc:5c:df:a5:9e:fc:1b:6d:6c:a8:b9:2c:b1:52:c4:4f: 2e:b3:af:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1qZJeNcHmRvcoYtm9ghMR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNDA4MDAwMTEwWhcNMjYwNDA5MDAwMTEwWjAzMTEwLwYDVQQD EygwYjAyNGM3N2Q4YjNjMjU2NWU2YjIzNGU1N2I0OTNmNjVlOWZiNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssSA+rn+ahctjk0ZW+W+4DPwavFK G+ZKNyhvcvNW1fgLkWa461E7goauXm+bcrJNCEPV3KFj4fTHuro6PAJAnjiwlfdy mSG7WFu3BBHpjPP5RkSH3oWbxs0bBnhZHQjVPn5Srt/qL6VAdFKZh5k82gOq3/QN IwowXh3CY7/KMcmDVfJfhd5cGowGP6JDv/DAwJZ3oDBAkpj0wda8eFdXUiAz0bjG lE0Mv6hJGukUxtJ4FXpSrDmREMTEV0sam/+L3TiOoYansGxkgIiessXAnjIOFtrC MJ7yelMU6f5IheJzyOPBkPNk8mqcZKyO1MXPlOjKLEm9E9pGcWJt7JY/5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsCTHfYs8JWXmsjTle0k/Zen7X8MB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjlvvov0 3atZimDERd2sDy5ROrgK+sV7oMfui823oxJiYaQ8hpO0urqzH0+GsBL6Wawo6WVm YM6LXAfDUT4ZJn06SbozuLlIERlao/g9tCIlhbYdR3Q6evPFchPH/5hOh7T/u+4q MqhaicAlRzGxBvUF0cW0V750zYMXBK+UErXFlp/Mxsc9HM3zsfKyAyJV0qPjtA1L HJyw1SLfSyeb7BpnVuuK3rQ9iQJgUi/vplpnxaQ7wR9hfj9TNBuNOViPCuYK+bQ9 hs5ll3tOH073syQs4C7IVic++8qeZ9L4stKTdCcg5LqN+sDnEYTcXN+lnvwbbWyo uSyxUsRPLrOvyw== -----END CERTIFICATE-----Generated at Wed Apr 8 03:45:37 2026 by rpki-client