$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: Fkw0u/e6qnAUW2zuWAVvMhRxyawDInedPO/56jnKqaY= Subject key identifier: 2C:0C:9C:78:36:DD:63:F6:4F:49:F5:D2:43:47:0F:C6:D6:13:38:7A Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019E0362DB6AFC65FC1FFE72B044B80A0479 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 0827 Signing time: Thu 07 May 2026 17:01:10 +0000 Manifest this update: Thu 07 May 2026 17:01:10 +0000 Manifest next update: Fri 08 May 2026 17:01:10 +0000 Files and hashes: 1: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=) 2: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=) 3: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=) 4: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=) 5: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=) 6: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=) 7: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=) 8: RW1Mn5jGY_fNwEa4nhfDdOF4euY.roa (hash: rormOO+Scyvc6/IMwyduU2PX9d097afAopSHjpl3a98=) 9: RnPVD9gf9jZqdZp1P8aZvT1Sy1E.roa (hash: 3pjV0gpZSof9VU2uFqwQB+SFUSkzl8zy0feUmyfywNM=) 10: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=) 11: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=) 12: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=) 13: cfZY6a_P68a48WrfPdh2ybzN0mo.roa (hash: vz82xH5oEj0u8LL1xE6ynS2ZCw12kUa4tRY5hXJQvWw=) 14: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=) 15: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: QksMQ5KQpEK0K2qJBEUoujfqlsuRl3YaDCmDQAe7tN8=) 16: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=) 17: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=) 18: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=) 19: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=) 20: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (hash: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=) 21: u4PnfQwbctib9UTp0Hw6JFAFmdE.roa (hash: yGfK2ekpYvk3JD4bO1Q/D68AgiBMT6ISuB31ixaUwhQ=) 22: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 May 2026 14:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:03:62:db:6a:fc:65:fc:1f:fe:72:b0:44:b8:0a:04:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: May 7 17:01:10 2026 GMT Not After : May 8 17:01:10 2026 GMT Subject: CN=2c0c9c7836dd63f64f49f5d243470fc6d613387a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:67:fd:24:78:c6:4a:a4:13:30:84:b3:ba:e6: 16:91:62:0e:25:f9:d7:94:1f:84:0d:31:68:7f:33: e4:17:50:6c:8c:b6:4c:01:12:6d:af:ca:73:c8:b0: 34:10:9d:71:8a:6d:16:ba:78:cc:01:dc:66:91:d2: 4d:81:01:30:92:b6:3f:1f:ba:7d:bd:46:8a:91:f6: 00:b3:ef:f3:a2:8c:2c:2e:36:c4:54:93:ec:a1:82: e8:22:b6:a6:be:55:e4:87:4c:65:d2:c9:74:83:a4: 0b:38:aa:cf:b4:91:ca:cd:e4:dc:72:8b:b0:7e:d4: 80:93:b2:c1:e6:f4:6e:e9:e5:21:ec:f8:82:8b:6f: 58:f0:f6:13:ba:ec:45:b9:46:40:3c:ea:fa:d7:97: 63:63:d4:52:82:77:e5:9b:e1:fa:cf:65:04:6e:09: 83:58:90:88:21:33:65:14:dd:22:9d:56:42:5b:7e: d3:b5:0f:dd:1f:aa:c7:f2:da:59:f5:80:a0:f6:13: a8:5b:af:5a:e8:bf:58:a9:33:6a:14:fc:48:ca:26: d3:ae:e4:15:f4:24:78:df:7c:2b:89:d6:d0:4e:40: 72:72:11:08:24:be:89:59:85:0b:3e:bb:b5:bf:4a: 7e:3c:6c:d2:df:c0:89:5f:a9:3e:60:1e:ca:98:b9: b6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0C:9C:78:36:DD:63:F6:4F:49:F5:D2:43:47:0F:C6:D6:13:38:7A X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:73:1b:51:8c:75:62:39:5c:c4:16:ea:a9:0d:cf:f2:a7:74: e2:90:12:64:9c:e3:97:50:16:92:a6:a6:13:e7:ed:63:cd:0a: 3a:86:f3:58:0e:cb:50:26:ce:1d:21:46:fa:c4:3f:eb:26:fb: af:fc:14:99:6f:81:5d:3a:64:1c:45:7f:87:6d:f0:b2:67:f0: 4d:fa:5c:69:fd:c0:8f:0d:43:e9:65:54:0e:d2:3f:be:34:e5: 1b:cd:b5:10:98:55:5d:15:01:3a:ed:70:af:11:9b:2c:04:ec: ea:c3:57:5d:49:64:86:b5:3e:c8:7c:a7:68:2b:8f:d9:ef:f1: 1d:b1:1a:3e:19:f8:e9:bd:8b:15:d4:83:eb:8d:b0:17:95:a8: f7:35:ab:5f:09:2c:d9:8b:86:9b:81:1e:31:97:56:c7:95:81: a7:f1:9f:50:58:3c:e2:b9:e5:16:c8:b6:7c:3c:5c:a4:48:ef: 7f:b7:23:b6:b0:6c:de:b6:90:a4:05:7a:38:16:81:c9:2b:1c: 37:69:3d:9d:22:3b:b7:8e:92:10:d7:ea:2a:d6:36:df:c6:30: 22:c9:c9:0a:0a:ec:e4:8d:81:ee:c9:c9:f1:55:60:1e:b8:69: de:9c:5f:a5:87:72:be:4e:c1:87:51:3d:49:e7:00:40:c3:15: 3b:c7:ee:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4DYttq/GX8H/5ysES4CgR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwNTA3MTcwMTEwWhcNMjYwNTA4MTcwMTEwWjAzMTEwLwYDVQQD EygyYzBjOWM3ODM2ZGQ2M2Y2NGY0OWY1ZDI0MzQ3MGZjNmQ2MTMzODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mf9JHjGSqQTMISzuuYWkWIOJfnX lB+EDTFofzPkF1BsjLZMARJtr8pzyLA0EJ1xim0WunjMAdxmkdJNgQEwkrY/H7p9 vUaKkfYAs+/zoowsLjbEVJPsoYLoIramvlXkh0xl0sl0g6QLOKrPtJHKzeTccouw ftSAk7LB5vRu6eUh7PiCi29Y8PYTuuxFuUZAPOr615djY9RSgnflm+H6z2UEbgmD WJCIITNlFN0inVZCW37TtQ/dH6rH8tpZ9YCg9hOoW69a6L9YqTNqFPxIyibTruQV 9CR433wridbQTkBychEIJL6JWYULPru1v0p+PGzS38CJX6k+YB7KmLm27wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwMnHg23WP2T0n10kNHD8bWEzh6MB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHMbUYx1 YjlcxBbqqQ3P8qd04pASZJzjl1AWkqamE+ftY80KOobzWA7LUCbOHSFG+sQ/6yb7 r/wUmW+BXTpkHEV/h23wsmfwTfpcaf3Ajw1D6WVUDtI/vjTlG821EJhVXRUBOu1w rxGbLATs6sNXXUlkhrU+yHynaCuP2e/xHbEaPhn46b2LFdSD642wF5Wo9zWrXwks 2YuGm4EeMZdWx5WBp/GfUFg84rnlFsi2fDxcpEjvf7cjtrBs3raQpAV6OBaBySsc N2k9nSI7t46SENfqKtY238YwIsnJCgrs5I2B7snJ8VVgHrhp3pxfpYdyvk7Bh1E9 SecAQMMVO8fuTw== -----END CERTIFICATE-----Generated at Thu May 7 18:50:34 2026 by rpki-client