$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: 0ZZqq20URZjWhKZbYDxLbYzmG5lRa+F7p4cSLcnLz2k= Subject key identifier: 2D:CD:89:3A:54:88:81:A4:05:06:89:1F:4C:B2:3B:D1:42:F8:38:CB Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019D76A12204834DEDE8677417A4D30CE48A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 07D4 Signing time: Fri 10 Apr 2026 09:02:44 +0000 Manifest this update: Fri 10 Apr 2026 09:02:44 +0000 Manifest next update: Sat 11 Apr 2026 09:02:44 +0000 Files and hashes: 1: 16Np4JNZv6v2ZaABJcy2sCql7pI.roa (hash: qAvGjbOzsR63qF3tqsjKZEDozeFVN2kLIVrjTI8/doM=) 2: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=) 3: 1t0W39rjvnhlr82paEbC8GZYcC0.roa (hash: 17SD6nyFJbW/EGjQCaf/6g0oWpZcAdugL0aeYfs/fCc=) 4: 5UDuqrSyuGprLjI2HKiGxGynvqE.roa (hash: NGA8WTAO8zMKPpGzof9YMthqeMGnL9P153gfC/S9Zh0=) 5: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=) 6: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=) 7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=) 8: FsWz95bjpsQz09qkc-hQos-M0m8.roa (hash: 3XsppK5S7iL8gQ3L3NeC1DD01cY/1dPaUa81kDoWAKE=) 9: IWbk6zNSYB6WM0Y5Z6-XcPx7fTg.roa (hash: lD3YgQPEcJ+Lsldpe4bbaxPUzCjTvoc7u6pwJwRKzSw=) 10: IjZEx1eHpkQjZ-ES_Rg9N95_Zzg.roa (hash: 5Sm4tdW+S9NYYEZ3KZhaD241AoDsBp/MjQHfJVYoRSk=) 11: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=) 12: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=) 13: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=) 14: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=) 15: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=) 16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=) 17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: Y+XkmMDPMobToxJeZMhsBnjkhj2sdeZPjfpBsWjxTTo=) 18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=) 19: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=) 20: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=) 21: qfYseX0GpDJ3nwbZkrDDY-_lcTQ.roa (hash: 9SV1r203DsffZLFBuKYeAWKCRAM7udUdpGOOPSGi5Bw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:76:a1:22:04:83:4d:ed:e8:67:74:17:a4:d3:0c:e4:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Apr 10 09:02:44 2026 GMT Not After : Apr 11 09:02:44 2026 GMT Subject: CN=2dcd893a548881a40506891f4cb23bd142f838cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:a2:f7:8e:f0:5a:b1:32:51:25:6f:17:97: e2:26:a3:ed:d4:51:e8:e0:d5:62:29:66:a0:48:49: 14:64:51:8a:e0:2e:34:30:7f:04:d7:05:c3:b2:8b: 97:3d:14:3f:3e:4c:bb:bc:21:a8:53:e3:ea:3c:8d: d5:e6:2d:b0:f5:9d:14:e0:7a:82:ce:0f:42:b6:71: 21:8c:de:ed:f9:8e:31:34:43:0d:e6:ad:5f:bf:e1: 6c:d3:40:99:f7:9a:50:d9:03:7f:7d:78:6c:1e:f0: 0e:f7:0a:be:0c:20:e6:07:87:a1:ea:99:84:03:c4: e5:3b:af:52:b0:dc:2b:90:03:b7:cb:0e:4d:bf:2c: 29:f2:1a:ec:34:96:a9:6a:7a:44:ea:5e:bf:72:cf: 7c:3c:40:04:d8:a1:63:ef:0f:92:95:84:cd:8f:57: 3c:90:77:97:55:3b:86:22:86:b2:91:b4:0b:41:18: 22:9e:29:be:5c:24:0f:14:e8:ea:c5:55:2b:da:44: dd:a4:46:8b:79:7c:cd:6c:9e:85:b9:8b:cc:9f:06: 3d:26:a2:73:18:04:7c:09:4a:a0:ac:76:f6:1e:b9: 11:75:89:d3:ff:c4:35:f6:f4:5d:86:f3:54:2c:52: 39:d5:63:c9:29:76:09:29:de:5d:c1:28:fc:bc:46: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CD:89:3A:54:88:81:A4:05:06:89:1F:4C:B2:3B:D1:42:F8:38:CB X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8e:9e:8a:89:6c:fa:af:d8:a8:d6:84:11:95:6a:69:c8:94: 98:ca:61:3b:09:00:7f:71:69:18:a8:36:3f:b3:f3:f2:69:be: 64:0d:1b:fa:69:f1:d9:62:10:f4:e1:8b:fa:0a:37:ac:c5:ff: 39:3f:7a:50:9b:6a:e6:1c:80:62:3d:c2:0d:2d:3c:0f:4f:57: 6a:1b:10:12:15:bf:c7:27:77:35:5f:9f:a1:24:c6:82:e5:c0: 23:a0:63:a7:29:ca:74:76:a4:6b:93:95:c3:c4:86:d2:ad:de: 8e:2f:f4:f5:3b:5c:23:af:96:5f:5d:7d:ee:c0:7a:c0:66:0a: bf:5c:24:a2:81:44:b8:05:b2:86:b7:d7:3e:4b:c9:59:75:3b: 45:a4:98:5a:8d:77:58:77:13:97:d4:ca:d7:aa:c8:97:3d:ef: 16:5a:69:3c:48:b2:03:8b:23:a9:fd:6a:f8:ce:65:45:1b:9c: 6b:7e:6d:ac:e9:68:3b:d9:b2:e4:4d:92:5e:dd:f9:de:e4:f2: 93:5f:c1:c1:35:aa:67:35:5b:4f:f8:a4:25:70:1c:2b:8a:67: b7:d3:18:79:d6:18:a9:7b:a1:26:69:4e:22:47:b6:16:5d:4d: 6f:41:4f:7b:9f:8b:17:27:b2:2b:c5:e3:9f:b6:6c:54:ef:6f: c2:db:52:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ12oSIEg03t6Gd0F6TTDOSKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwNDEwMDkwMjQ0WhcNMjYwNDExMDkwMjQ0WjAzMTEwLwYDVQQD EygyZGNkODkzYTU0ODg4MWE0MDUwNjg5MWY0Y2IyM2JkMTQyZjgzOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwSi947wWrEyUSVvF5fiJqPt1FHo 4NViKWagSEkUZFGK4C40MH8E1wXDsouXPRQ/Pky7vCGoU+PqPI3V5i2w9Z0U4HqC zg9CtnEhjN7t+Y4xNEMN5q1fv+Fs00CZ95pQ2QN/fXhsHvAO9wq+DCDmB4eh6pmE A8TlO69SsNwrkAO3yw5Nvywp8hrsNJapanpE6l6/cs98PEAE2KFj7w+SlYTNj1c8 kHeXVTuGIoaykbQLQRginim+XCQPFOjqxVUr2kTdpEaLeXzNbJ6FuYvMnwY9JqJz GAR8CUqgrHb2HrkRdYnT/8Q19vRdhvNULFI51WPJKXYJKd5dwSj8vEYVIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3NiTpUiIGkBQaJH0yyO9FC+DjLMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB46eiols +q/YqNaEEZVqaciUmMphOwkAf3FpGKg2P7Pz8mm+ZA0b+mnx2WIQ9OGL+go3rMX/ OT96UJtq5hyAYj3CDS08D09XahsQEhW/xyd3NV+foSTGguXAI6BjpynKdHaka5OV w8SG0q3eji/09TtcI6+WX1197sB6wGYKv1wkooFEuAWyhrfXPkvJWXU7RaSYWo13 WHcTl9TK16rIlz3vFlppPEiyA4sjqf1q+M5lRRuca35trOloO9my5E2SXt353uTy k1/BwTWqZzVbT/ikJXAcK4pnt9MYedYYqXuhJmlOIke2Fl1Nb0FPe5+LFyeyK8Xj n7ZsVO9vwttSIg== -----END CERTIFICATE-----Generated at Fri Apr 10 12:32:23 2026 by rpki-client