$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: Yr892Dtonj9jz8XVOUBCtwnDYZNh3Z7BOfaHPmM+wzc= Subject key identifier: B8:D1:B5:5F:A0:5F:85:A0:F3:C6:13:A2:82:88:16:C6:FE:DF:F9:61 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019CE3A2A383B10DAFF27A5C984AC3E328D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 187D Signing time: Thu 12 Mar 2026 20:00:12 +0000 Manifest this update: Thu 12 Mar 2026 20:00:12 +0000 Manifest next update: Fri 13 Mar 2026 20:00:12 +0000 Files and hashes: 1: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (hash: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0=) 2: 37plEvr9_SAxpS24SOyNrKA9Ebo.roa (hash: T+3X8+kwm0mxKJkDFOwSTGKX5y/yChg7gIfBo7o4fzc=) 3: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (hash: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y=) 4: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (hash: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE=) 5: 9KcHIAUvzuR2GWge4D-VK2067f8.roa (hash: 9sijw09CpBSxcD1XyR49IxKSXJ+lbUtfOT6XCsfhPs4=) 6: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (hash: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI=) 7: BmKkxsvsllYGRv2VQUx8x8IPybM.roa (hash: iJVvCwQgSkbFGgNZWYbEzkgvbnxvQYXvysN7fV/Jo/I=) 8: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (hash: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA=) 9: CybUaoE-1zIBrxVRyCGND427ieM.roa (hash: 8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=) 10: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (hash: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=) 11: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (hash: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s=) 12: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (hash: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ=) 13: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (hash: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI=) 14: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (hash: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI=) 15: TEEJpugeYt1F43E2tJGuUV3FeZA.roa (hash: DLdME2cAIv/rSNCUPiFiPYf01huYXXEj3+nEaRucgYU=) 16: Tg7LpYV7I-GpxinThcktcQRnm_4.roa (hash: BbXoN3AQWQv407qJGvIy6QX/6IL8zec6zQB0QjsD6HA=) 17: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (hash: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE=) 18: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (hash: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo=) 19: lUbooQJTqUPsGNWs9whSoRmQ9io.roa (hash: kluWa3I7Ato5aw2LG6KL/4iV6N2sUDy3GUsBbZKsEa8=) 20: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (hash: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ=) 21: sMNPbaJ2swpQDptjsmEdLRBAjsE.roa (hash: wMrNQ1Dt9RdtalTcVqalUbl+Cb5VgC4Yw+MpJfT4roY=) 22: sWFQ2639y5fQaDmU5ThRk6YSWFs.roa (hash: YXKPoBXjKE1eqIFJiy/DtB2fJyWSkDcytdS8/Lx36Lc=) 23: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (hash: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY=) 24: v1XAMryHcbVYBLXiFz1wOW3tUKk.roa (hash: JN1atA5xt1OyKxkpHh4rNxtPiXKSK2GbqwVySmKSgl0=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: TbELagucDj1cPry0yx1lHzuszpP6ST1uiAqPiR5Fz28=) 26: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (hash: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 15:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e3:a2:a3:83:b1:0d:af:f2:7a:5c:98:4a:c3:e3:28:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Mar 12 20:00:12 2026 GMT Not After : Mar 13 20:00:12 2026 GMT Subject: CN=b8d1b55fa05f85a0f3c613a2828816c6fedff961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:58:85:3c:53:3b:2b:03:1a:93:c0:4a:ec:7b: 38:03:0f:d6:26:94:99:ab:a5:a8:d1:b3:2b:a9:64: 09:12:3d:06:86:47:50:f9:0d:9d:5b:ff:43:0b:88: 9a:f7:e9:30:39:58:3b:00:51:0e:b8:56:3e:f2:61: a0:34:1c:88:ee:64:73:56:01:c4:3f:fb:07:6b:d8: 0d:45:10:8d:8a:4e:44:06:63:30:48:8a:52:7f:1c: 3b:a8:c3:12:ad:40:4f:25:b3:8c:86:ec:a4:68:01: 60:d4:93:a9:58:98:50:c6:99:80:7e:cb:5a:f9:37: 61:dc:96:58:cb:a5:c5:15:fd:65:6e:c3:b1:07:da: a0:90:0b:99:4f:0b:37:4c:91:a6:7d:8e:2b:80:c2: 6d:a1:72:da:42:fd:8c:6a:41:57:63:06:22:de:59: ba:52:a9:a1:f0:c3:a5:99:86:3f:61:ef:ce:cc:69: 86:b6:b3:2c:fc:01:2c:b5:cc:1a:78:6d:5b:18:49: 9f:83:0c:42:7e:7b:cb:1e:8c:f3:fe:35:28:c2:43: 8f:93:18:0d:25:e1:18:19:db:30:6b:f3:97:e7:73: d7:3c:37:50:54:ea:69:7a:b5:84:1a:90:13:87:ed: ac:03:27:55:65:aa:24:3c:3d:9a:fd:c2:e3:29:92: 72:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D1:B5:5F:A0:5F:85:A0:F3:C6:13:A2:82:88:16:C6:FE:DF:F9:61 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0f:fe:5c:2e:b4:5b:ab:02:f4:29:41:7b:2c:51:e3:4c:0e: fb:46:f7:03:70:9c:a1:27:77:60:90:d8:af:49:45:fc:f3:6d: 0a:fe:b5:79:1a:ee:a5:18:6d:c9:fd:5a:5b:37:ec:af:e8:e2: 00:7e:c1:49:d8:9a:e2:74:b8:91:41:1f:41:56:09:77:90:32: 3a:b9:49:76:84:ee:9e:82:76:c2:ef:72:3a:08:ee:dc:77:a1: eb:50:94:5f:4a:69:43:ea:91:e9:0a:3a:13:d5:3c:01:3b:8b: bc:53:73:75:e4:3f:ce:25:95:91:7b:d9:c8:f5:c4:8c:9a:a7: 4e:1d:29:66:7f:a7:2e:ab:28:e7:7c:42:4e:3c:cd:db:18:61: 3c:46:2a:6a:38:b8:93:45:82:9f:96:e8:67:e4:8d:71:91:59: c2:b7:eb:d0:48:1c:f7:b4:b3:d0:67:62:1f:cb:5c:8e:32:64: b7:99:47:80:d6:d9:29:a1:7b:80:62:d9:1e:9a:de:9a:62:1f: b5:07:ba:63:e6:0d:cc:2b:43:3c:4e:cb:0a:74:4c:67:04:8b: 87:24:f3:e6:5f:d5:03:f7:6f:34:ab:8c:eb:25:c0:bc:a3:65: 4a:9a:7a:21:f9:f9:ad:1f:c8:f3:7f:94:be:cc:40:f7:40:a6: bb:c5:5d:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzjoqODsQ2v8npcmErD4yjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMzEyMjAwMDEyWhcNMjYwMzEzMjAwMDEyWjAzMTEwLwYDVQQD EyhiOGQxYjU1ZmEwNWY4NWEwZjNjNjEzYTI4Mjg4MTZjNmZlZGZmOTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqliFPFM7KwMak8BK7Hs4Aw/WJpSZ q6Wo0bMrqWQJEj0GhkdQ+Q2dW/9DC4ia9+kwOVg7AFEOuFY+8mGgNByI7mRzVgHE P/sHa9gNRRCNik5EBmMwSIpSfxw7qMMSrUBPJbOMhuykaAFg1JOpWJhQxpmAfsta +Tdh3JZYy6XFFf1lbsOxB9qgkAuZTws3TJGmfY4rgMJtoXLaQv2MakFXYwYi3lm6 Uqmh8MOlmYY/Ye/OzGmGtrMs/AEstcwaeG1bGEmfgwxCfnvLHozz/jUowkOPkxgN JeEYGdswa/OX53PXPDdQVOpperWEGpATh+2sAydVZaokPD2a/cLjKZJyeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjRtV+gX4Wg88YTooKIFsb+3/lhMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlA/+XC60 W6sC9ClBeyxR40wO+0b3A3CcoSd3YJDYr0lF/PNtCv61eRrupRhtyf1aWzfsr+ji AH7BSdia4nS4kUEfQVYJd5AyOrlJdoTunoJ2wu9yOgju3Heh61CUX0ppQ+qR6Qo6 E9U8ATuLvFNzdeQ/ziWVkXvZyPXEjJqnTh0pZn+nLqso53xCTjzN2xhhPEYqaji4 k0WCn5boZ+SNcZFZwrfr0Egc97Sz0GdiH8tcjjJkt5lHgNbZKaF7gGLZHpremmIf tQe6Y+YNzCtDPE7LCnRMZwSLhyTz5l/VA/dvNKuM6yXAvKNlSpp6Ifn5rR/I83+U vsxA90Cmu8VdXg== -----END CERTIFICATE-----Generated at Thu Mar 12 23:11:32 2026 by rpki-client