$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: yhQPFNMOizZ4wvSGvX+6LGWzROcaMpg6kWqieySoO3M= Subject key identifier: CA:44:1B:8A:66:FD:68:26:10:C1:99:70:64:71:5D:12:1F:72:2A:50 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019D96062FA7AFCCB137B245F02292D12B14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 07E7 Signing time: Thu 16 Apr 2026 11:21:20 +0000 Manifest this update: Thu 16 Apr 2026 11:21:20 +0000 Manifest next update: Fri 17 Apr 2026 11:21:20 +0000 Files and hashes: 1: 16Np4JNZv6v2ZaABJcy2sCql7pI.roa (hash: qAvGjbOzsR63qF3tqsjKZEDozeFVN2kLIVrjTI8/doM=) 2: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=) 3: 1t0W39rjvnhlr82paEbC8GZYcC0.roa (hash: 17SD6nyFJbW/EGjQCaf/6g0oWpZcAdugL0aeYfs/fCc=) 4: 4pRktO4y8eD6ra6mNvqltmnz8b4.roa (hash: 12Ja1hE6iIHHrJyGhSLx59zaQ5zOOmttof6X79gSp0Q=) 5: 5UDuqrSyuGprLjI2HKiGxGynvqE.roa (hash: NGA8WTAO8zMKPpGzof9YMthqeMGnL9P153gfC/S9Zh0=) 6: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=) 7: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=) 8: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=) 9: GSZrRVy15G6PvUYZWynpc2gz_hk.roa (hash: ZzSmu2LODxU1RdfKwu6hA1/fexn4kkckl+EdSV9u3ng=) 10: HDy9E8Syvp_94CFPESY5rqbClSY.roa (hash: 3igy8TWZ+XjW5zsIvNRV3KRA/9ZGWbPE9nexH9tr414=) 11: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=) 12: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=) 13: O07Gs9HJGBohmqGgV1Fxi8Cjya8.roa (hash: kUD7jvRRGDKgNARltP3yg1eJ0LsDhp1ki9c7vn6WIlQ=) 14: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=) 15: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=) 16: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=) 17: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=) 18: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: iDmcUXRvDGOMAB8XW9vOXj+RVZ6L0U93Cd1Ardybt/I=) 19: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=) 20: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=) 21: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 11:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:96:06:2f:a7:af:cc:b1:37:b2:45:f0:22:92:d1:2b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Apr 16 11:21:20 2026 GMT Not After : Apr 17 11:21:20 2026 GMT Subject: CN=ca441b8a66fd682610c1997064715d121f722a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:b8:9d:af:0e:b5:6a:89:a6:93:60:2f:c3: c6:81:0b:da:df:11:ac:ee:36:3e:6e:8f:7a:78:87: 70:6b:d4:5d:2c:6f:0a:d8:8c:11:2f:49:24:ee:46: 87:cd:be:f1:d6:b8:1d:82:59:61:68:8a:e7:75:7b: 1a:31:6c:02:ae:48:11:b4:d8:3c:8d:84:14:97:d6: 57:0f:6d:3f:ef:fd:24:6d:92:0c:c8:7c:d4:e8:f6: 53:34:d6:d8:42:5b:18:af:59:43:7b:b9:c2:30:d3: d5:d4:ba:30:0a:f3:be:fd:4c:41:35:f5:64:7f:3c: f8:01:bd:bc:b6:2f:8f:30:87:51:dc:ec:e0:1a:2e: 61:26:6b:c0:2a:35:16:2c:6c:2f:e3:8b:2a:be:ad: 23:ae:c9:0e:95:53:60:90:bf:fd:db:05:c1:df:71: 95:f2:38:ce:f2:47:e9:db:1b:f7:17:30:25:5b:11: 0f:7d:99:7d:4e:52:ec:63:1c:4c:03:a9:de:24:15: c3:ee:06:07:b3:62:b8:14:fb:a7:85:45:61:e8:26: 92:94:3b:de:8d:79:51:84:d0:c6:1b:db:eb:9c:14: 6b:50:bd:45:1d:de:12:08:6e:87:e3:af:dc:d7:c8: 77:89:d5:0a:bf:3c:73:dd:cf:88:08:1b:cb:e5:80: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:44:1B:8A:66:FD:68:26:10:C1:99:70:64:71:5D:12:1F:72:2A:50 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:32:4c:ec:04:46:72:28:5c:66:8b:bc:1c:c6:81:64:f5:0d: fe:f4:77:aa:17:93:01:6e:ab:32:b2:22:17:f1:94:43:c0:b3: a5:9f:2d:5c:0a:f5:6d:df:4f:2c:9a:a2:87:bb:4f:5a:6c:e4: 36:c8:02:39:83:d0:fe:ac:b8:b5:8e:59:33:01:b1:23:ea:be: ca:8c:ed:2b:24:42:d9:e1:7d:c8:9d:49:e3:28:8c:f0:87:60: 71:a0:28:cf:58:24:37:de:41:6b:dc:b1:3f:62:7c:ff:e5:95: c2:5d:76:f3:59:a9:3e:31:12:02:19:2c:f0:4c:c4:d7:84:10: b8:c9:ec:37:7f:81:3d:59:24:cf:70:97:f2:5e:62:a1:87:71: 3e:2b:94:73:99:43:fb:33:f6:43:47:1d:94:3a:e5:24:4e:2f: 4c:42:f0:d5:90:07:5d:69:81:f8:d8:56:dd:e4:9b:71:3b:8b: fb:03:77:bd:4a:aa:b9:21:e7:5e:38:fe:d3:12:6c:45:da:77: d8:99:cd:0d:aa:28:1f:0d:8f:9e:d9:7e:2e:c9:f8:7c:a5:49: 1c:a0:f5:09:ed:4a:73:7c:2a:56:fb:b6:e9:37:79:02:0d:dc: 18:16:f8:37:0b:1f:01:3c:32:8d:37:3f:26:6a:c0:ae:5d:93: b4:38:32:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2WBi+nr8yxN7JF8CKS0SsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwNDE2MTEyMTIwWhcNMjYwNDE3MTEyMTIwWjAzMTEwLwYDVQQD EyhjYTQ0MWI4YTY2ZmQ2ODI2MTBjMTk5NzA2NDcxNWQxMjFmNzIyYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgi4na8OtWqJppNgL8PGgQva3xGs 7jY+bo96eIdwa9RdLG8K2IwRL0kk7kaHzb7x1rgdgllhaIrndXsaMWwCrkgRtNg8 jYQUl9ZXD20/7/0kbZIMyHzU6PZTNNbYQlsYr1lDe7nCMNPV1LowCvO+/UxBNfVk fzz4Ab28ti+PMIdR3OzgGi5hJmvAKjUWLGwv44sqvq0jrskOlVNgkL/92wXB33GV 8jjO8kfp2xv3FzAlWxEPfZl9TlLsYxxMA6neJBXD7gYHs2K4FPunhUVh6CaSlDve jXlRhNDGG9vrnBRrUL1FHd4SCG6H46/c18h3idUKvzxz3c+ICBvL5YD4oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpEG4pm/WgmEMGZcGRxXRIfcipQMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjJM7ARG cihcZou8HMaBZPUN/vR3qheTAW6rMrIiF/GUQ8CzpZ8tXAr1bd9PLJqih7tPWmzk NsgCOYPQ/qy4tY5ZMwGxI+q+yoztKyRC2eF9yJ1J4yiM8IdgcaAoz1gkN95Ba9yx P2J8/+WVwl1281mpPjESAhks8EzE14QQuMnsN3+BPVkkz3CX8l5ioYdxPiuUc5lD +zP2Q0cdlDrlJE4vTELw1ZAHXWmB+NhW3eSbcTuL+wN3vUqquSHnXjj+0xJsRdp3 2JnNDaooHw2Pntl+Lsn4fKVJHKD1Ce1Kc3wqVvu26Td5Ag3cGBb4NwsfATwyjTc/ JmrArl2TtDgygw== -----END CERTIFICATE-----Generated at Thu Apr 16 20:14:46 2026 by rpki-client