$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: 18wiq5VXh1z4GQ5qpa/R+J9slc/A0u/MhWKcv/y34k4= Subject key identifier: FB:31:45:EA:6B:ED:F5:2E:8A:3C:6C:93:C9:75:EB:0B:C5:CB:C6:CB Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019DCB611936F9A1031F82B4534D3D0C8019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 18F5 Signing time: Sun 26 Apr 2026 20:00:31 +0000 Manifest this update: Sun 26 Apr 2026 20:00:31 +0000 Manifest next update: Mon 27 Apr 2026 20:00:31 +0000 Files and hashes: 1: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (hash: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0=) 2: 37plEvr9_SAxpS24SOyNrKA9Ebo.roa (hash: T+3X8+kwm0mxKJkDFOwSTGKX5y/yChg7gIfBo7o4fzc=) 3: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (hash: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y=) 4: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (hash: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE=) 5: 9KcHIAUvzuR2GWge4D-VK2067f8.roa (hash: 9sijw09CpBSxcD1XyR49IxKSXJ+lbUtfOT6XCsfhPs4=) 6: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (hash: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI=) 7: BmKkxsvsllYGRv2VQUx8x8IPybM.roa (hash: iJVvCwQgSkbFGgNZWYbEzkgvbnxvQYXvysN7fV/Jo/I=) 8: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (hash: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA=) 9: CybUaoE-1zIBrxVRyCGND427ieM.roa (hash: 8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=) 10: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (hash: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=) 11: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (hash: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s=) 12: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (hash: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ=) 13: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (hash: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI=) 14: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (hash: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI=) 15: TEEJpugeYt1F43E2tJGuUV3FeZA.roa (hash: DLdME2cAIv/rSNCUPiFiPYf01huYXXEj3+nEaRucgYU=) 16: Tg7LpYV7I-GpxinThcktcQRnm_4.roa (hash: BbXoN3AQWQv407qJGvIy6QX/6IL8zec6zQB0QjsD6HA=) 17: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (hash: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE=) 18: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (hash: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo=) 19: lUbooQJTqUPsGNWs9whSoRmQ9io.roa (hash: kluWa3I7Ato5aw2LG6KL/4iV6N2sUDy3GUsBbZKsEa8=) 20: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (hash: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ=) 21: sMNPbaJ2swpQDptjsmEdLRBAjsE.roa (hash: wMrNQ1Dt9RdtalTcVqalUbl+Cb5VgC4Yw+MpJfT4roY=) 22: sWFQ2639y5fQaDmU5ThRk6YSWFs.roa (hash: YXKPoBXjKE1eqIFJiy/DtB2fJyWSkDcytdS8/Lx36Lc=) 23: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (hash: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY=) 24: v1XAMryHcbVYBLXiFz1wOW3tUKk.roa (hash: JN1atA5xt1OyKxkpHh4rNxtPiXKSK2GbqwVySmKSgl0=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: NWsATQ53pyMQYQNHCyLvtn88UvSgnoMzo8wmoda/RHk=) 26: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (hash: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 20:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cb:61:19:36:f9:a1:03:1f:82:b4:53:4d:3d:0c:80:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Apr 26 20:00:31 2026 GMT Not After : Apr 27 20:00:31 2026 GMT Subject: CN=fb3145ea6bedf52e8a3c6c93c975eb0bc5cbc6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3e:75:db:34:2e:60:31:76:d4:cc:c2:26:1e: 1f:15:5d:f4:f1:b1:a4:b0:69:0e:55:df:e2:a1:ea: 26:95:56:26:ee:5d:97:d4:ca:98:5d:23:00:21:26: 38:d0:40:c3:c0:82:88:8c:24:b1:a9:00:e0:87:9c: 9c:01:90:82:cc:46:20:f2:07:83:4c:4d:ca:27:9c: 06:1d:78:11:71:be:f5:51:a1:eb:0a:16:d7:b1:7f: 37:f5:60:8a:fb:c7:ae:d1:6f:62:a7:fa:ee:09:56: db:c4:5b:4f:40:b7:90:45:23:8b:ab:6c:99:98:70: ad:26:d5:6d:a5:8a:af:06:12:ce:41:8f:9d:79:1a: ab:0a:a4:f2:69:e6:de:ba:38:fc:dc:af:c5:c2:d1: c9:eb:69:4f:38:71:43:d5:3c:56:8e:5a:4c:85:1a: 5c:8a:4e:bf:eb:d8:0e:7a:4c:e2:ef:50:0a:1b:95: d8:29:41:d2:b2:5f:fb:ac:2f:ce:1f:1e:ed:bd:0b: 14:2e:8f:dd:08:71:b7:64:6c:85:74:16:95:9d:27: f3:28:ff:ca:52:a2:8d:88:d5:6e:0c:35:13:1e:8e: 06:ca:41:de:0e:75:3c:a7:f4:6a:85:9d:77:12:d3: 2c:b5:4e:f0:a5:01:dc:0c:3d:e5:2b:d1:a9:0b:55: 8d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:31:45:EA:6B:ED:F5:2E:8A:3C:6C:93:C9:75:EB:0B:C5:CB:C6:CB X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e1:c8:22:89:99:3b:f2:59:a2:a1:fe:f1:73:5f:6c:ed:54: 85:8c:21:fa:a0:f1:2d:16:d7:6c:98:1a:d2:6d:df:fb:a9:a1: 07:19:73:6f:6a:fa:f7:2f:2e:5c:41:bc:dd:4b:20:a2:da:b5: f6:38:c7:58:96:11:33:11:5a:c3:b2:1c:4e:50:13:1c:24:9c: 72:be:62:27:c9:be:ab:cb:99:16:1e:94:84:18:ef:ff:b9:6b: 8a:c5:b0:f9:65:7c:49:ff:19:de:ab:0a:44:01:84:a8:8b:f8: e9:f1:35:d0:ef:75:ae:09:96:20:0e:2b:43:1f:0c:aa:f7:8e: 35:ec:3c:b5:fe:98:a5:e9:7a:de:bb:f2:49:9a:f2:0f:e5:60: 58:b5:de:92:26:44:d0:ed:85:d4:3a:c8:fc:51:d4:48:35:c6: 50:94:ab:1c:ae:7f:e4:c8:90:a2:8a:fc:fc:44:85:d7:20:e9: eb:d2:6b:0e:35:c7:e4:b4:6b:70:e4:2d:75:41:d4:71:92:14: 68:d6:b4:a5:4b:24:7f:2b:4b:67:be:5f:53:7a:48:4c:7d:17: d8:64:ab:71:fa:4d:90:e3:22:41:f0:d9:a9:cf:54:88:53:b1: af:7b:ed:ad:33:1a:18:5d:dd:fc:e0:df:c5:60:2b:8f:11:04: 74:c8:0a:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3LYRk2+aEDH4K0U009DIAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwNDI2MjAwMDMxWhcNMjYwNDI3MjAwMDMxWjAzMTEwLwYDVQQD EyhmYjMxNDVlYTZiZWRmNTJlOGEzYzZjOTNjOTc1ZWIwYmM1Y2JjNmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj512zQuYDF21MzCJh4fFV308bGk sGkOVd/ioeomlVYm7l2X1MqYXSMAISY40EDDwIKIjCSxqQDgh5ycAZCCzEYg8geD TE3KJ5wGHXgRcb71UaHrChbXsX839WCK+8eu0W9ip/ruCVbbxFtPQLeQRSOLq2yZ mHCtJtVtpYqvBhLOQY+deRqrCqTyaebeujj83K/FwtHJ62lPOHFD1TxWjlpMhRpc ik6/69gOekzi71AKG5XYKUHSsl/7rC/OHx7tvQsULo/dCHG3ZGyFdBaVnSfzKP/K UqKNiNVuDDUTHo4GykHeDnU8p/RqhZ13EtMstU7wpQHcDD3lK9GpC1WNewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsxRepr7fUuijxsk8l16wvFy8bLMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOHIIomZ O/JZoqH+8XNfbO1UhYwh+qDxLRbXbJga0m3f+6mhBxlzb2r69y8uXEG83Usgotq1 9jjHWJYRMxFaw7IcTlATHCSccr5iJ8m+q8uZFh6UhBjv/7lrisWw+WV8Sf8Z3qsK RAGEqIv46fE10O91rgmWIA4rQx8MqveONew8tf6Ypel63rvySZryD+VgWLXekiZE 0O2F1DrI/FHUSDXGUJSrHK5/5MiQoor8/ESF1yDp69JrDjXH5LRrcOQtdUHUcZIU aNa0pUskfytLZ75fU3pITH0X2GSrcfpNkOMiQfDZqc9UiFOxr3vtrTMaGF3d/ODf xWArjxEEdMgKsQ== -----END CERTIFICATE-----Generated at Mon Apr 27 04:19:57 2026 by rpki-client