$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: ppho1WfCYya/EVqCUxz9BVXpDjoSoZmgKZ+e2QZU4sY= Subject key identifier: 12:E0:50:5F:E8:FD:CC:AE:E2:8F:90:F6:35:A8:F1:6F:06:D9:D9:8C Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019D25EE2BBBB06A7F246E950484D7F6D1B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 07A2 Signing time: Wed 25 Mar 2026 16:57:38 +0000 Manifest this update: Wed 25 Mar 2026 16:57:38 +0000 Manifest next update: Thu 26 Mar 2026 16:57:38 +0000 Files and hashes: 1: 1-fHKEGdQzHKJnoO-QxMVY_4pRE8.roa (hash: zDRe41xbopOMDmDagY2NOiL9+JF7qRmR3ODp2uFdORY=) 2: 16Np4JNZv6v2ZaABJcy2sCql7pI.roa (hash: qAvGjbOzsR63qF3tqsjKZEDozeFVN2kLIVrjTI8/doM=) 3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=) 4: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=) 5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=) 6: FsWz95bjpsQz09qkc-hQos-M0m8.roa (hash: 3XsppK5S7iL8gQ3L3NeC1DD01cY/1dPaUa81kDoWAKE=) 7: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (hash: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8=) 8: IjZEx1eHpkQjZ-ES_Rg9N95_Zzg.roa (hash: 5Sm4tdW+S9NYYEZ3KZhaD241AoDsBp/MjQHfJVYoRSk=) 9: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=) 10: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=) 11: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=) 12: SqsOc_l_Byw8A63bMs7bGr5Csfk.roa (hash: yDuYEQpT9u0kVYnoDL0S45vkKwdy3kU/Xh9r8KwY0Mg=) 13: V30LAUIEMJuKBEQCGV3OZGmIB14.roa (hash: +8oZMvJe3e6QYtsCv+/2sJyZxT/rJgAo204q009TkGk=) 14: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=) 15: WuFVi91PLw1PUGyRssd2Q6yHyks.roa (hash: w4KZzG/sU1/9RMrXZYTWNuUrYY4VCLIF4AOLDV1SBW0=) 16: YhLDm5Ce0BvL20OlK_DJ3XluMvQ.roa (hash: a/DUt7th7DoduXNQ3o8GbpNtKAw3KBcPk7la6IbcmHQ=) 17: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=) 18: d3URZqZU61DXU8Pxx8p7KdaQhTk.roa (hash: 0sFhnZDT3nptAp7FfkP3V+TkjPROY/IHl0rud0LuY7A=) 19: dCfpsPGaI9EPpHHA1tpX3ncah84.roa (hash: YD3gFKPk43fuccQT39vfRFDnBr8rg/N4oAVZTnznPYE=) 20: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=) 21: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: ekL9VxhWTBtgaPSOMgLfRGEF0A0sc0PpxMa220JNrTc=) 22: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=) 23: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=) 24: mLwRQPJNPNyFW9b_cs3RSw90Ej0.roa (hash: lGalA+fhuk3zaDb/hTVS4G3SDG2yM8uu4pBXLLe2M9c=) 25: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ee:2b:bb:b0:6a:7f:24:6e:95:04:84:d7:f6:d1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Mar 25 16:57:38 2026 GMT Not After : Mar 26 16:57:38 2026 GMT Subject: CN=12e0505fe8fdccaee28f90f635a8f16f06d9d98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:2d:47:1a:19:bf:3f:a3:fd:29:2e:e0:e6: 00:26:71:bf:84:6e:62:bf:f6:c4:2d:d9:f0:5f:c0: ef:d0:23:af:80:ec:5f:b6:75:7d:33:e6:45:1b:0c: 96:d7:af:a4:16:45:33:f2:49:dc:ca:1d:ba:97:d6: 38:85:46:88:87:cb:6a:84:22:93:46:93:ca:66:77: 95:5a:85:e9:10:7f:de:05:80:8f:77:9a:c9:ea:0e: 9b:fe:f1:e8:c1:e0:57:cd:72:bc:dc:91:ac:53:07: d6:6f:90:7d:8f:02:74:96:a9:2d:18:94:ce:bd:0d: 83:c5:57:e2:50:a4:e9:1e:85:1d:8a:a8:1e:fc:ef: 75:f3:09:19:a8:29:b2:7d:08:52:0f:55:13:83:1d: 4b:f9:39:f3:42:c2:d7:37:04:a0:0e:4b:21:db:b0: 9e:90:e8:38:31:29:de:e7:b3:ae:db:fe:08:19:bc: bd:7e:fa:88:5d:83:79:ec:56:47:ab:83:af:cc:b2: 69:b8:dd:19:b8:e3:36:41:0a:b5:b6:c5:e8:c2:50: 73:4d:82:96:85:a5:fc:0e:37:dc:4a:95:71:ca:6e: 19:0f:07:d5:2b:24:40:69:14:02:ba:92:69:e5:76: 8b:62:89:7c:c7:8f:15:4a:1d:04:b6:a0:68:f1:71: be:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E0:50:5F:E8:FD:CC:AE:E2:8F:90:F6:35:A8:F1:6F:06:D9:D9:8C X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:89:73:a7:67:07:81:31:3d:51:78:4d:0e:8c:f1:d5:ca:2d: 34:ba:12:bf:be:ae:0a:2f:2c:a7:eb:ea:87:8b:57:88:7f:95: 47:ac:e6:e9:bb:a1:e3:14:20:d4:22:e0:b8:18:ac:82:5e:a8: 5e:b8:a1:b3:90:a6:d7:62:1f:70:4f:93:87:98:86:a9:81:38: 9c:8b:25:56:61:cc:a5:e6:4b:00:66:c5:c9:80:c3:42:3b:ac: 5a:0d:e6:9d:e9:54:2e:59:5b:95:1a:80:f6:38:03:56:b1:c8: ad:7e:2e:19:e5:12:20:02:da:f7:7d:14:a7:12:32:a0:12:da: e1:2a:5a:cd:52:89:7a:b8:76:63:20:dc:74:ef:3a:a7:7a:ee: e4:f4:db:52:27:27:8c:9a:bf:51:de:d2:6d:5f:ea:41:5d:cd: 16:af:6b:56:36:db:13:97:f4:b5:8d:71:0b:bf:78:5a:6b:d3: 1e:61:50:69:90:93:d5:c2:88:cc:ed:95:3a:60:71:db:db:e6: 58:5b:d9:99:f0:5c:f8:11:20:13:85:6d:f0:8e:90:2d:c7:1d: c6:4c:8b:02:7f:81:4d:04:c2:7c:c2:90:2b:5b:39:2a:43:88: 5b:3d:f3:18:77:4f:09:60:e1:a7:d6:0c:d4:c8:4e:85:b8:10: bb:33:86:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l7iu7sGp/JG6VBITX9tG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMzI1MTY1NzM4WhcNMjYwMzI2MTY1NzM4WjAzMTEwLwYDVQQD EygxMmUwNTA1ZmU4ZmRjY2FlZTI4ZjkwZjYzNWE4ZjE2ZjA2ZDlkOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJYtRxoZvz+j/Sku4OYAJnG/hG5i v/bELdnwX8Dv0COvgOxftnV9M+ZFGwyW16+kFkUz8kncyh26l9Y4hUaIh8tqhCKT RpPKZneVWoXpEH/eBYCPd5rJ6g6b/vHoweBXzXK83JGsUwfWb5B9jwJ0lqktGJTO vQ2DxVfiUKTpHoUdiqge/O918wkZqCmyfQhSD1UTgx1L+TnzQsLXNwSgDksh27Ce kOg4MSne57Ou2/4IGby9fvqIXYN57FZHq4OvzLJpuN0ZuOM2QQq1tsXowlBzTYKW haX8DjfcSpVxym4ZDwfVKyRAaRQCupJp5XaLYol8x48VSh0EtqBo8XG+cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLgUF/o/cyu4o+Q9jWo8W8G2dmMMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYlzp2cH gTE9UXhNDozx1cotNLoSv76uCi8sp+vqh4tXiH+VR6zm6buh4xQg1CLguBisgl6o Xrihs5Cm12IfcE+Th5iGqYE4nIslVmHMpeZLAGbFyYDDQjusWg3mnelULllblRqA 9jgDVrHIrX4uGeUSIALa930UpxIyoBLa4SpazVKJerh2YyDcdO86p3ru5PTbUicn jJq/Ud7SbV/qQV3NFq9rVjbbE5f0tY1xC794WmvTHmFQaZCT1cKIzO2VOmBx29vm WFvZmfBc+BEgE4Vt8I6QLccdxkyLAn+BTQTCfMKQK1s5KkOIWz3zGHdPCWDhp9YM 1MhOhbgQuzOG2w== -----END CERTIFICATE-----Generated at Wed Mar 25 21:51:10 2026 by rpki-client