$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft File: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json) Hash identifier: FDRrZ3pD8ajoPhv1a7c/JeF2X7/FKCLKNbOS8rFqwi4= Subject key identifier: 46:EF:ED:D5:7B:B9:2F:9F:B1:87:89:B1:2F:73:08:E8:14:EB:7A:3D Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 01A08AF9E890BB7506451FE7A8989C9A0424 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft Manifest number: 1A71 Signing time: Thu 10 Sep 2026 11:00:28 +0000 Manifest this update: Thu 10 Sep 2026 11:00:28 +0000 Manifest next update: Fri 11 Sep 2026 11:00:28 +0000 Files and hashes: 1: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: thr66cc7h8rlfJ8ciQXDplVcfTr/TREprKSE53+J7AI=) 2: C49vSVt4dfdT17Z5kZxdlV_lY_Y.roa (hash: 6HfpvHUMJisoBNoMG7lySqZtsVK9Z40fSQ9YGkMMFF0=) 3: CYTlKlzSJSqB3jTzZOH673qv2os.roa (hash: nMYpBRNUUmqx48+xTuVDjH9QkSUeA9v7hDY4KWKCBCQ=) 4: DIVTK05T8Vdhwjp7g0z7MnF1TQQ.roa (hash: 6vlsDL0j8NnBvb9Ab/QGUCQui9hFjQ/teVqIFOEkwLQ=) 5: ENla5OgKBu9uunWqxWQAfu7kwx0.roa (hash: Fbmqrk8r0alDCgWyzCOzHqp7tHL/3UqhpNT6d1lPtlY=) 6: Gd1jgkbYPMlLshrmT5bN1iKt1Zc.roa (hash: 6E+Sma6MsZfgSjGZCxQl81Nm/7sMb7NSZ9dIkuBxamk=) 7: IamjYw1vikCzZIhDeU8H0NMAjHs.roa (hash: M+kmsNXkFSxnu0j1QJUyRMfdThsPZBpSXk2/kSsLWUY=) 8: Iyt7Ob_snKf1ZPop-eeEldXM0fQ.roa (hash: 9XeUKSaM919H72Lo2RzCdmjP30DLuCdA4txuvCcKAVk=) 9: Q5HfXdIQnusnCwKJeNtcbaxYKRw.roa (hash: cgDqaBa5oL7jHKKM1uUVRVvnMYGroeNLDuSFwDAGhy8=) 10: _izOulmhuUBG3FatKk1kjhEzI5I.roa (hash: D2Y24n1qrh+NyvYt/hta8znqPyvAoiiYcPgWq6TG2zI=) 11: bAO9OihdfpmA-XpEMUum-i6NlvM.roa (hash: w9BYm30HDg7VDCHpAaP2FWEEPT1iEKkPQOttAF9gh5o=) 12: bnpbPX_ctt0kqkwx6ukV-j4WTGM.roa (hash: 730AnutRLa9Haz+ZMN+qGZx6PYPOqH6zu3NH8XC/47k=) 13: dbi31yJdjzH-gnfiJixAWom7O2Y.roa (hash: wv59+nx6Q7SMg8qYiivt/O65l/1UFWdvKThzkz1L+E8=) 14: gTyFz4o7qq-mz7kkyhI4YQAE3F8.roa (hash: ql1a+n9u4sT8twi+Ey5tWWvsl/zO/3fN4L8B2DWoXrk=) 15: h2mTI89G79vzZdTXcNgpiY_bSuE.roa (hash: qa2BzNyouPFY7/V6+HRcQ7umJPtaaWKwpg9jeFVJFSE=) 16: hhAxTUm-YLDfu5gnVbj74LIg_xE.roa (hash: 5lrRMZNGyqCPeI3ughaZF3pVN6T3OxbFiijuNyO2VPw=) 17: j8JXlUTEd1j_9VoERc0ZtsXM8O8.roa (hash: A11q2a+vMmn2Uc3d6mAqUut0tGh3JvhOP0a9hwmGjMs=) 18: lru0bK1pFWTdlNh3tSeVRy2RxB4.roa (hash: D3uDWSg2oVhHneIgFjvyT24SUbp4OtxjQr0JkAH/IGY=) 19: x9kxYUUdYs3Vc1XQvx9EJnJhrDs.roa (hash: Xjj2UlUQT0tIyuN4wzeBBIdle7HnaFZ9oWTYHnJPnD4=) 20: yANucdgEc1d0SNlX9N4mAfLd3FI.roa (hash: aYUGTbKXXzJP8D5gN1satw5qfxqKP8FY7aLZMQYHTqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:f9:e8:90:bb:75:06:45:1f:e7:a8:98:9c:9a:04:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Sep 10 11:00:28 2026 GMT Not After : Sep 11 11:00:28 2026 GMT Subject: CN=46efedd57bb92f9fb18789b12f7308e814eb7a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e1:3f:6e:e8:d9:fa:23:2f:48:5c:09:c1:36: da:7d:b8:d2:1d:d6:62:4c:81:63:d6:5d:b3:38:3b: dd:a7:7e:c5:71:70:0a:0a:74:0a:35:6f:d1:e0:91: af:31:4d:a7:70:7e:9e:1c:e7:57:0c:36:1d:19:08: 24:f2:90:5f:2d:d6:6b:2b:38:12:46:24:be:de:a0: 90:66:2c:b7:3e:fc:4c:78:d1:8a:e1:84:ac:09:be: fc:ba:9c:c1:13:e5:11:66:48:d5:f9:3d:81:a6:4a: 93:63:13:6f:9b:8a:fd:cd:eb:89:73:05:85:61:33: e4:28:ca:65:18:ab:37:23:9d:d5:4e:ba:66:94:94: 5d:d0:61:1c:a5:60:b0:8b:9d:bb:0e:61:05:f6:cb: 3f:d2:00:bf:32:eb:54:54:98:23:1c:a4:93:3f:60: 11:c8:8d:27:c7:25:7a:54:51:bb:a0:6f:a8:58:3f: 50:04:d5:8c:5e:18:e0:c5:2e:1a:e1:9a:74:a7:9a: 9e:85:38:63:94:5c:f8:7d:c8:55:35:aa:d7:d9:7c: af:5c:29:cc:b0:12:cc:bb:a4:69:a4:1c:94:a5:7a: cf:83:79:e9:cb:18:72:39:83:ef:4f:20:ed:69:57: 2d:8b:47:27:ce:87:34:f7:e3:e9:c3:4e:4e:cd:39: 0e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EF:ED:D5:7B:B9:2F:9F:B1:87:89:B1:2F:73:08:E8:14:EB:7A:3D X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d5:b9:f4:7f:b0:2c:db:be:3f:40:39:7c:7c:93:80:34:9a: 30:a5:8a:a2:6b:11:28:90:88:51:e8:46:be:e2:9e:12:8b:a3: 58:e5:63:1d:ad:75:40:eb:af:0f:0f:1d:4f:a1:20:94:54:7d: 1e:1e:66:5f:5f:01:10:83:49:ad:81:4c:ff:41:49:73:c9:6a: cf:97:43:aa:30:05:0c:df:54:24:9e:9d:b2:92:86:d5:55:23: 5c:85:41:eb:9b:06:46:2d:42:0e:b1:6f:be:c0:e1:49:79:02: d2:f6:96:0c:8c:da:96:97:b8:aa:03:d3:1c:e4:9f:03:b3:08: 0b:96:bb:28:ad:38:35:fd:9f:65:6f:08:e5:e1:58:9b:ef:cb: e6:a7:0a:fb:83:81:b8:7f:2d:5f:a8:7f:97:c3:5c:e4:0f:ed: 83:47:e2:b2:ca:ae:b9:65:77:88:57:e0:24:85:bc:ce:cb:f6: 8b:7b:15:ea:86:c4:56:31:db:5b:a4:f8:08:1f:de:55:40:cf: 5a:17:26:08:f6:1f:2e:ac:a1:af:be:14:94:c0:14:b9:5f:1e: d8:7e:aa:f7:73:44:1f:4a:6d:f6:01:3e:bb:37:ef:e8:6d:7e: 17:28:1d:b6:77:4c:16:09:e4:16:b0:0d:7d:4b:e0:41:96:0f: d3:51:0b:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCK+eiQu3UGRR/nqJicmgQkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwOTEwMTEwMDI4WhcNMjYwOTExMTEwMDI4WjAzMTEwLwYDVQQD Eyg0NmVmZWRkNTdiYjkyZjlmYjE4Nzg5YjEyZjczMDhlODE0ZWI3YTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+E/bujZ+iMvSFwJwTbafbjSHdZi TIFj1l2zODvdp37FcXAKCnQKNW/R4JGvMU2ncH6eHOdXDDYdGQgk8pBfLdZrKzgS RiS+3qCQZiy3PvxMeNGK4YSsCb78upzBE+URZkjV+T2BpkqTYxNvm4r9zeuJcwWF YTPkKMplGKs3I53VTrpmlJRd0GEcpWCwi527DmEF9ss/0gC/MutUVJgjHKSTP2AR yI0nxyV6VFG7oG+oWD9QBNWMXhjgxS4a4Zp0p5qehThjlFz4fchVNarX2XyvXCnM sBLMu6RppByUpXrPg3npyxhyOYPvTyDtaVcti0cnzoc09+Ppw05OzTkOBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbv7dV7uS+fsYeJsS9zCOgU63o9MB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdW59H+w LNu+P0A5fHyTgDSaMKWKomsRKJCIUehGvuKeEoujWOVjHa11QOuvDw8dT6EglFR9 Hh5mX18BEINJrYFM/0FJc8lqz5dDqjAFDN9UJJ6dspKG1VUjXIVB65sGRi1CDrFv vsDhSXkC0vaWDIzalpe4qgPTHOSfA7MIC5a7KK04Nf2fZW8I5eFYm+/L5qcK+4OB uH8tX6h/l8Nc5A/tg0fissquuWV3iFfgJIW8zsv2i3sV6obEVjHbW6T4CB/eVUDP WhcmCPYfLqyhr74UlMAUuV8e2H6q93NEH0pt9gE+uzfv6G1+FygdtndMFgnkFrAN fUvgQZYP01EL8g== -----END CERTIFICATE-----Generated at Thu Sep 10 14:50:05 2026 by rpki-client