$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft File: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json) Hash identifier: zDgg+OdAxGhgIVvWJ1KhnEgp3gA6jG54z0a6hu2+9QM= Subject key identifier: B7:11:7C:D1:6E:69:E3:22:A7:DF:E7:3D:91:D5:3E:77:C3:37:44:C5 Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019EB87CEA07513E877AFFA8AED3EF122F01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft Manifest number: 197F Signing time: Thu 11 Jun 2026 21:00:54 +0000 Manifest this update: Thu 11 Jun 2026 21:00:54 +0000 Manifest next update: Fri 12 Jun 2026 21:00:54 +0000 Files and hashes: 1: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: sKYi7mkP2McvTldccvtMKRVIbvoX3wEHNBZ+fosUVII=) 2: C49vSVt4dfdT17Z5kZxdlV_lY_Y.roa (hash: 6HfpvHUMJisoBNoMG7lySqZtsVK9Z40fSQ9YGkMMFF0=) 3: CYTlKlzSJSqB3jTzZOH673qv2os.roa (hash: nMYpBRNUUmqx48+xTuVDjH9QkSUeA9v7hDY4KWKCBCQ=) 4: DIVTK05T8Vdhwjp7g0z7MnF1TQQ.roa (hash: 6vlsDL0j8NnBvb9Ab/QGUCQui9hFjQ/teVqIFOEkwLQ=) 5: ENla5OgKBu9uunWqxWQAfu7kwx0.roa (hash: Fbmqrk8r0alDCgWyzCOzHqp7tHL/3UqhpNT6d1lPtlY=) 6: IamjYw1vikCzZIhDeU8H0NMAjHs.roa (hash: M+kmsNXkFSxnu0j1QJUyRMfdThsPZBpSXk2/kSsLWUY=) 7: Iyt7Ob_snKf1ZPop-eeEldXM0fQ.roa (hash: 9XeUKSaM919H72Lo2RzCdmjP30DLuCdA4txuvCcKAVk=) 8: ODquW4yfiTrN0BslpesyLROdhCU.roa (hash: LguXTTUIpUVmRso7Duo92XjODqxY0o7l3A4Aw6gkmmA=) 9: Q5HfXdIQnusnCwKJeNtcbaxYKRw.roa (hash: cgDqaBa5oL7jHKKM1uUVRVvnMYGroeNLDuSFwDAGhy8=) 10: _izOulmhuUBG3FatKk1kjhEzI5I.roa (hash: D2Y24n1qrh+NyvYt/hta8znqPyvAoiiYcPgWq6TG2zI=) 11: bAO9OihdfpmA-XpEMUum-i6NlvM.roa (hash: w9BYm30HDg7VDCHpAaP2FWEEPT1iEKkPQOttAF9gh5o=) 12: bnpbPX_ctt0kqkwx6ukV-j4WTGM.roa (hash: 730AnutRLa9Haz+ZMN+qGZx6PYPOqH6zu3NH8XC/47k=) 13: dbi31yJdjzH-gnfiJixAWom7O2Y.roa (hash: wv59+nx6Q7SMg8qYiivt/O65l/1UFWdvKThzkz1L+E8=) 14: gTyFz4o7qq-mz7kkyhI4YQAE3F8.roa (hash: ql1a+n9u4sT8twi+Ey5tWWvsl/zO/3fN4L8B2DWoXrk=) 15: h2mTI89G79vzZdTXcNgpiY_bSuE.roa (hash: qa2BzNyouPFY7/V6+HRcQ7umJPtaaWKwpg9jeFVJFSE=) 16: hhAxTUm-YLDfu5gnVbj74LIg_xE.roa (hash: 5lrRMZNGyqCPeI3ughaZF3pVN6T3OxbFiijuNyO2VPw=) 17: j8JXlUTEd1j_9VoERc0ZtsXM8O8.roa (hash: A11q2a+vMmn2Uc3d6mAqUut0tGh3JvhOP0a9hwmGjMs=) 18: lru0bK1pFWTdlNh3tSeVRy2RxB4.roa (hash: D3uDWSg2oVhHneIgFjvyT24SUbp4OtxjQr0JkAH/IGY=) 19: x9kxYUUdYs3Vc1XQvx9EJnJhrDs.roa (hash: Xjj2UlUQT0tIyuN4wzeBBIdle7HnaFZ9oWTYHnJPnD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b8:7c:ea:07:51:3e:87:7a:ff:a8:ae:d3:ef:12:2f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Jun 11 21:00:54 2026 GMT Not After : Jun 12 21:00:54 2026 GMT Subject: CN=b7117cd16e69e322a7dfe73d91d53e77c33744c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ec:06:32:6d:20:ae:2c:61:b9:41:68:d7:e0: 95:62:09:5d:1f:8a:46:27:66:13:b5:8f:74:fb:7c: 31:c0:49:f2:30:6a:e6:c1:81:88:95:26:44:0c:5e: e0:5a:1f:69:46:b5:5d:5f:ab:ce:7c:bd:67:c2:5c: b2:ec:00:a2:07:0a:08:30:a3:d0:0e:fb:f8:1c:40: a4:a0:9e:c3:3f:60:31:60:67:80:e2:9d:80:9c:50: 55:f9:3c:0a:e7:b7:47:95:f5:4f:b9:98:97:6a:d6: 61:32:ca:d2:db:09:ba:82:01:29:1a:c8:0c:fe:e0: e3:78:2e:3c:60:de:d2:3e:48:b6:a4:18:fd:91:b7: 92:94:57:04:e0:eb:b2:6b:f6:ca:7f:9b:b3:5f:ff: 5f:1c:bf:d3:98:54:87:8c:0a:98:90:d3:77:09:f0: 19:db:79:23:f4:0c:23:0a:a2:ef:68:f9:a6:a7:a6: 57:ab:be:9c:6e:83:70:ad:19:fa:0c:2b:b4:b0:fc: f3:29:b1:d7:2b:38:41:db:b1:66:e7:c7:e6:17:d2: 73:49:af:18:1a:7c:94:28:7c:31:e0:63:38:de:5c: be:0f:8b:46:75:65:12:14:86:5b:78:64:44:58:c7: f0:41:b7:0a:da:24:06:67:f1:18:bb:5c:0d:5a:7b: 8c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:11:7C:D1:6E:69:E3:22:A7:DF:E7:3D:91:D5:3E:77:C3:37:44:C5 X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:16:2f:fc:96:be:5a:b3:5d:25:e2:f5:15:9f:9a:db:99:0e: ca:4e:4e:0c:cd:be:e1:83:6c:13:ce:9e:b7:a4:ff:89:54:5e: 36:84:8e:26:2e:dd:c7:5a:cb:69:68:cc:f6:51:9f:57:18:2e: b9:b2:60:f7:06:58:4d:f0:d2:ab:b5:c1:b1:8c:38:db:d4:04: a4:55:63:7d:2c:8f:3c:da:32:38:e9:9c:6f:63:39:f9:52:49: 2c:92:dc:78:71:7c:55:89:73:21:8e:bc:28:a7:f5:25:df:f0: 98:c9:6d:a3:e4:3a:76:63:9d:44:e7:35:ee:d5:e0:ed:05:b9: 80:7f:04:a8:b4:d2:8e:c3:a3:5f:1a:57:b1:b1:81:78:fb:8f: d6:f9:fe:3b:28:22:10:60:b9:c5:cb:d5:7d:3e:9d:1e:1e:02: 43:62:34:c4:0a:c3:51:0b:e6:c3:b6:33:39:f6:42:4a:18:3d: 87:1e:32:be:71:84:dd:4b:75:a8:9d:89:03:57:ee:9c:8b:13: 84:d4:60:50:3c:40:33:2f:d8:b0:c5:1e:e4:2c:0c:0b:e5:fd: 0c:82:57:aa:42:39:2f:94:17:a9:34:8c:48:27:a8:77:bb:c2: 24:40:22:de:a8:ef:8a:a1:3e:3d:01:ca:7b:cd:f4:c6:63:51: 13:12:61:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ64fOoHUT6Hev+ortPvEi8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwNjExMjEwMDU0WhcNMjYwNjEyMjEwMDU0WjAzMTEwLwYDVQQD EyhiNzExN2NkMTZlNjllMzIyYTdkZmU3M2Q5MWQ1M2U3N2MzMzc0NGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ewGMm0grixhuUFo1+CVYgldH4pG J2YTtY90+3wxwEnyMGrmwYGIlSZEDF7gWh9pRrVdX6vOfL1nwlyy7ACiBwoIMKPQ Dvv4HECkoJ7DP2AxYGeA4p2AnFBV+TwK57dHlfVPuZiXatZhMsrS2wm6ggEpGsgM /uDjeC48YN7SPki2pBj9kbeSlFcE4Ouya/bKf5uzX/9fHL/TmFSHjAqYkNN3CfAZ 23kj9AwjCqLvaPmmp6ZXq76cboNwrRn6DCu0sPzzKbHXKzhB27Fm58fmF9JzSa8Y GnyUKHwx4GM43ly+D4tGdWUSFIZbeGREWMfwQbcK2iQGZ/EYu1wNWnuMHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcRfNFuaeMip9/nPZHVPnfDN0TFMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxYv/Ja+ WrNdJeL1FZ+a25kOyk5ODM2+4YNsE86et6T/iVReNoSOJi7dx1rLaWjM9lGfVxgu ubJg9wZYTfDSq7XBsYw429QEpFVjfSyPPNoyOOmcb2M5+VJJLJLceHF8VYlzIY68 KKf1Jd/wmMlto+Q6dmOdROc17tXg7QW5gH8EqLTSjsOjXxpXsbGBePuP1vn+Oygi EGC5xcvVfT6dHh4CQ2I0xArDUQvmw7YzOfZCShg9hx4yvnGE3Ut1qJ2JA1funIsT hNRgUDxAMy/YsMUe5CwMC+X9DIJXqkI5L5QXqTSMSCeod7vCJEAi3qjviqE+PQHK e830xmNRExJh0A== -----END CERTIFICATE-----Generated at Thu Jun 11 22:22:51 2026 by rpki-client