$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: CpLlBe5gfYvNxVjhTQ3fQj9NTpb5wfDfyPXm8KUx8QM= Subject key identifier: 19:73:CE:D1:76:4B:81:B8:FC:99:1A:82:E6:4E:D2:98:93:DD:CA:4A Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019D5337AFC1B17E6BD82A24327213235E0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 11BF Signing time: Fri 03 Apr 2026 12:00:51 +0000 Manifest this update: Fri 03 Apr 2026 12:00:51 +0000 Manifest next update: Sat 04 Apr 2026 12:00:51 +0000 Files and hashes: 1: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (hash: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro=) 2: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (hash: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho=) 3: 3t7MGPFMuBSxJLCxDF_3n50KStc.roa (hash: 6GS3fb7DEXDLSqf4y4y0SrlWtV5NF4pu8OcshRbE90U=) 4: 4epOeDhcnpBTi2g4YcisvFWMAa4.roa (hash: +2jkFhE3n0xcPuUcbVnaPwBBTRX7qOSg8rWKC4wCay8=) 5: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: ptKNMueLxdY3iMQvKKu/LlUH1YabdeQKljlotmoGxUA=) 6: BYsn1N5gP2JO3UfQxO-E-V2e0co.roa (hash: 6igu0zYuxX+N38bsBkkYKxt8Fvp/P+aUhF4rJG443fk=) 7: F2c42ybkIwQUeCQqNVp_C3yFlro.roa (hash: KrIMAe6Zw/sJbSu3dokUorq0Itj56++s8jIbDFuR90Q=) 8: FHmKT3d93phBQ2sJCe6iypixWE4.roa (hash: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk=) 9: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (hash: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4=) 10: LVLHCbJcyDZSnlN60YzfQsK0HpA.roa (hash: vgdjHgNRPC/reweQCNlxL1k3EIbDFAOPreXZsrVrnu4=) 11: NSS0gU9xsQcOZEIfKkpLsjZuNB0.roa (hash: VyQiUIVUgwwIcEoE5kv5MX8wQDctr6SkpBRpe02j4L4=) 12: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (hash: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o=) 13: S9FfJCycMQRA7bahC5rfE0YQTSg.roa (hash: 8MejBWKBQixvCnUzb1LPtqAMZdROfL9yfHkcMqfZHKY=) 14: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (hash: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko=) 15: ZRxBI6--3WcDP6y0WoOf_vAd2NE.roa (hash: tzOhUp8auz5616T4WhpBy1GjZZJ7rOEJ1FCyRQX+r8M=) 16: ZweD9hSO-FjSNgRjYiWP5ozqgiM.roa (hash: tLzdWZNv79sT3YaekBIw1EK7WtYQTy+aDzxkObz61k4=) 17: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (hash: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ=) 18: iyx4iGSqz3YL_BqXzYoasBlGIOs.roa (hash: tcdJGjSX6zqPJW45F+GkjDvmD1FBoeYzAmLsGXVBq0c=) 19: xX_eayIur3ayUrNMcGn9ChpnHec.roa (hash: U/ut0MWz8oiiYflyyyeRjSx1ThmGKeCsH/L5YDP+UgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 Apr 2026 10:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:53:37:af:c1:b1:7e:6b:d8:2a:24:32:72:13:23:5e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Apr 3 12:00:51 2026 GMT Not After : Apr 4 12:00:51 2026 GMT Subject: CN=1973ced1764b81b8fc991a82e64ed29893ddca4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e4:70:54:3e:64:0c:1d:a4:ab:d7:ea:17:21: 08:77:a8:a3:94:bb:23:85:38:9f:0f:47:50:83:84: 76:27:85:9e:79:aa:df:aa:7e:29:ef:97:a2:1b:11: 2d:c7:b2:c4:08:95:4f:eb:d4:0e:a8:36:93:b3:7d: 46:dd:d4:ec:1e:15:4e:9f:10:6a:76:4a:3c:a1:4e: 88:70:96:61:35:63:93:1a:97:81:c2:f2:62:5a:87: 4f:d3:8c:21:a2:72:6d:0b:7e:8b:4d:1e:11:31:f2: 3e:64:09:d5:00:1c:59:34:09:2f:7c:f0:ff:1f:42: d0:3d:53:be:24:18:ab:56:09:19:de:89:66:e5:d2: ae:93:24:dc:ab:19:9b:d8:18:c5:31:72:b0:f7:7b: aa:da:6f:09:05:30:bb:71:2f:fd:f2:c4:d1:2c:18: bf:1c:db:20:3b:81:47:55:7c:54:be:ba:d7:11:9d: a2:90:a1:49:1c:3d:c8:9c:18:0e:57:5e:9b:61:9e: 40:89:28:7f:b0:d3:c6:e9:18:8d:da:48:c8:6e:38: 3c:ca:90:3e:ba:e7:12:0a:1d:8a:20:7f:2e:39:45: d9:04:16:c9:5a:43:ac:0e:c1:a6:98:e3:2e:53:11: 87:e1:7d:e6:09:bf:14:57:fc:95:8e:fd:59:2b:4e: 35:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:73:CE:D1:76:4B:81:B8:FC:99:1A:82:E6:4E:D2:98:93:DD:CA:4A X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:03:69:c0:f1:84:3b:50:37:5b:d3:12:ac:1f:ab:5d:f9:00: eb:79:a5:4d:e5:a2:bb:c0:28:95:50:b4:b8:be:ed:ba:3c:5a: eb:4f:eb:94:3f:d2:16:4c:1b:83:b3:94:96:14:ee:9a:22:60: 0d:ce:64:fb:89:23:d8:74:19:9c:b6:a2:cb:22:51:56:ea:87: 39:fa:bb:f8:7c:18:dc:59:f8:13:58:fe:64:40:8d:d2:3d:03: ac:2a:f2:db:3f:fc:5f:8c:cc:8b:ef:cb:6f:5f:db:68:0b:54: 78:f6:bc:e0:2e:b9:17:49:5c:fe:84:04:18:e3:bd:34:a1:15: f7:a2:04:e2:39:dd:34:fa:78:26:87:80:3a:37:25:69:1e:e5: 45:77:59:1c:84:62:34:7a:af:1a:ae:bc:dd:fa:87:04:9a:58: aa:be:f3:f5:06:5a:c3:59:cc:f3:d8:2d:3e:74:a4:01:de:16: 77:fc:ae:da:f3:d4:19:25:b1:4d:ca:1a:56:78:8d:35:60:3c: 5c:d0:ad:2a:47:3e:82:19:15:cf:7f:b9:57:65:7d:f2:b7:23: 4c:10:52:20:ae:e8:21:52:5e:82:28:ab:77:70:ce:31:4f:99: 53:1d:aa:0d:70:c1:11:d4:29:33:5b:af:92:ae:1d:63:6a:e7: 8a:c3:a2:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1TN6/BsX5r2CokMnITI14MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwNDAzMTIwMDUxWhcNMjYwNDA0MTIwMDUxWjAzMTEwLwYDVQQD EygxOTczY2VkMTc2NGI4MWI4ZmM5OTFhODJlNjRlZDI5ODkzZGRjYTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eRwVD5kDB2kq9fqFyEId6ijlLsj hTifD0dQg4R2J4Weearfqn4p75eiGxEtx7LECJVP69QOqDaTs31G3dTsHhVOnxBq dko8oU6IcJZhNWOTGpeBwvJiWodP04whonJtC36LTR4RMfI+ZAnVABxZNAkvfPD/ H0LQPVO+JBirVgkZ3olm5dKukyTcqxmb2BjFMXKw93uq2m8JBTC7cS/98sTRLBi/ HNsgO4FHVXxUvrrXEZ2ikKFJHD3InBgOV16bYZ5AiSh/sNPG6RiN2kjIbjg8ypA+ uucSCh2KIH8uOUXZBBbJWkOsDsGmmOMuUxGH4X3mCb8UV/yVjv1ZK0413wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlzztF2S4G4/JkaguZO0piT3cpKMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPANpwPGE O1A3W9MSrB+rXfkA63mlTeWiu8AolVC0uL7tujxa60/rlD/SFkwbg7OUlhTumiJg Dc5k+4kj2HQZnLaiyyJRVuqHOfq7+HwY3Fn4E1j+ZECN0j0DrCry2z/8X4zMi+/L b1/baAtUePa84C65F0lc/oQEGOO9NKEV96IE4jndNPp4JoeAOjclaR7lRXdZHIRi NHqvGq683fqHBJpYqr7z9QZaw1nM89gtPnSkAd4Wd/yu2vPUGSWxTcoaVniNNWA8 XNCtKkc+ghkVz3+5V2V98rcjTBBSIK7oIVJegiird3DOMU+ZUx2qDXDBEdQpM1uv kq4dY2rnisOiTA== -----END CERTIFICATE-----Generated at Fri Apr 3 17:58:05 2026 by rpki-client