$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: zkDGq1o2zEz/ikPPpismWOU9c4e/x4j3e6TqpnQO/4c= Subject key identifier: 51:9F:84:BC:BD:F6:DE:AE:B8:A6:E3:E6:6C:5C:52:FC:B6:62:41:B4 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019D8F16F4B91EFFE9413A00109D7E1D4B5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 11DE Signing time: Wed 15 Apr 2026 03:02:19 +0000 Manifest this update: Wed 15 Apr 2026 03:02:19 +0000 Manifest next update: Thu 16 Apr 2026 03:02:19 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: qh4v4RDwR/4A0O0KXrk4LSpe1+MIWy/QKvt35/Ie6Yo=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 15 Apr 2026 22:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:8f:16:f4:b9:1e:ff:e9:41:3a:00:10:9d:7e:1d:4b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Apr 15 03:02:19 2026 GMT Not After : Apr 16 03:02:19 2026 GMT Subject: CN=519f84bcbdf6deaeb8a6e3e66c5c52fcb66241b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fe:1d:08:23:6c:28:8b:67:55:4d:28:07:75: ee:5f:24:3d:7a:30:6e:d2:2d:05:f1:9a:50:4d:14: 6b:5b:c4:0a:d1:fe:24:a1:8b:e0:de:1e:ce:67:cb: 39:73:f4:2d:04:56:4c:da:a8:10:9d:70:8a:e3:17: 3e:7b:23:a3:0e:c8:80:1d:a6:d1:53:2e:7e:17:83: 0d:01:8d:9b:52:2c:8e:01:a6:a2:33:6c:61:4f:d4: d9:9c:47:19:10:c8:36:56:08:1d:bd:d7:df:70:34: 1f:87:e6:6a:02:54:54:1f:28:9b:a9:e6:ac:15:1a: 33:2a:7a:8c:c9:ff:2f:c0:08:50:8f:13:e3:b6:7e: a0:e4:c3:ec:3c:e1:34:61:b7:03:f5:ae:98:94:31: 7a:5c:00:22:2b:09:e7:04:25:ba:13:36:78:16:5c: 51:41:59:63:43:fc:d9:ed:8a:59:7b:df:03:e1:7f: 08:ec:78:7d:d8:b8:31:27:f8:9c:85:2a:df:5d:e5: 28:13:ca:d1:22:21:57:0b:df:3d:f0:5a:cd:87:81: da:fc:bb:ad:03:c3:65:fa:13:78:27:ff:b9:34:dd: 06:a8:54:54:e5:4d:f8:8f:0d:ac:3f:bd:ac:84:90: 40:73:a8:59:7d:24:dd:79:03:5b:6e:80:ad:25:c9: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9F:84:BC:BD:F6:DE:AE:B8:A6:E3:E6:6C:5C:52:FC:B6:62:41:B4 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:6d:af:35:35:e3:d0:0a:d4:bf:0e:c0:7c:e4:37:69:8d:52: b2:9d:46:2b:d8:4f:9f:53:f7:56:6e:ee:a3:81:81:29:c1:ad: 6d:46:f5:23:85:98:e5:0b:11:60:77:10:0b:51:56:0a:b8:1e: ac:b3:db:4d:6b:0a:6b:b5:7e:46:f5:bb:d2:b7:c3:c5:56:e2: 13:38:a8:f3:30:7c:7e:09:34:eb:52:3f:7c:9b:bc:11:ea:16: d6:d2:54:51:ac:1d:02:30:a9:87:7e:3d:e6:17:43:db:c2:f1: 26:90:bd:a3:e0:df:a4:34:83:d6:cd:9c:41:26:6c:2a:61:14: 51:95:b3:0d:38:32:e8:c0:f7:32:8b:30:9e:84:ad:f8:30:20: 6d:60:2d:c3:95:4c:38:7b:e4:1f:9d:8d:fb:3c:ee:c9:68:79: fe:9f:4a:cc:4a:95:41:a5:72:0d:2d:b5:3e:5d:14:d5:39:d3: 32:93:dc:fe:d7:64:09:4c:24:2b:9f:cd:1e:03:0f:27:d0:d8: 9a:ee:a4:a4:c0:a9:9a:9b:b5:f9:6a:fd:b1:fa:38:1e:41:3d: f2:bd:d4:16:f3:89:37:1a:59:b6:a0:5f:8f:db:c4:a9:60:1a: 75:05:87:d2:e8:89:05:3a:7e:96:1a:4a:a3:32:30:c7:34:00: 88:d3:e2:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2PFvS5Hv/pQToAEJ1+HUtaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNDE1MDMwMjE5WhcNMjYwNDE2MDMwMjE5WjAzMTEwLwYDVQQD Eyg1MTlmODRiY2JkZjZkZWFlYjhhNmUzZTY2YzVjNTJmY2I2NjI0MWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P4dCCNsKItnVU0oB3XuXyQ9ejBu 0i0F8ZpQTRRrW8QK0f4koYvg3h7OZ8s5c/QtBFZM2qgQnXCK4xc+eyOjDsiAHabR Uy5+F4MNAY2bUiyOAaaiM2xhT9TZnEcZEMg2VggdvdffcDQfh+ZqAlRUHyibqeas FRozKnqMyf8vwAhQjxPjtn6g5MPsPOE0YbcD9a6YlDF6XAAiKwnnBCW6EzZ4FlxR QVljQ/zZ7YpZe98D4X8I7Hh92LgxJ/ichSrfXeUoE8rRIiFXC9898FrNh4Ha/Lut A8Nl+hN4J/+5NN0GqFRU5U34jw2sP72shJBAc6hZfSTdeQNbboCtJclW0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGfhLy99t6uuKbj5mxcUvy2YkG0MB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVm2vNTXj 0ArUvw7AfOQ3aY1Ssp1GK9hPn1P3Vm7uo4GBKcGtbUb1I4WY5QsRYHcQC1FWCrge rLPbTWsKa7V+RvW70rfDxVbiEzio8zB8fgk061I/fJu8EeoW1tJUUawdAjCph349 5hdD28LxJpC9o+DfpDSD1s2cQSZsKmEUUZWzDTgy6MD3MoswnoSt+DAgbWAtw5VM OHvkH52N+zzuyWh5/p9KzEqVQaVyDS21Pl0U1TnTMpPc/tdkCUwkK5/NHgMPJ9DY mu6kpMCpmpu1+Wr9sfo4HkE98r3UFvOJNxpZtqBfj9vEqWAadQWH0uiJBTp+lhpK ozIwxzQAiNPiKQ== -----END CERTIFICATE-----Generated at Wed Apr 15 08:34:47 2026 by rpki-client