$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: lWE4nHcMhGT6ZD4U9hf3x59/bocwy1R/YWsjRkF4Pzw= Subject key identifier: C4:42:73:4D:A4:8F:79:3D:A6:0E:5B:E4:30:6D:C3:A8:1B:E1:A0:2D Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019E517E12425750D6513E0408955B22D46D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 0852 Signing time: Fri 22 May 2026 21:01:17 +0000 Manifest this update: Fri 22 May 2026 21:01:17 +0000 Manifest next update: Sat 23 May 2026 21:01:17 +0000 Files and hashes: 1: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=) 2: 1qKLqB7YGK13o6kurhGQsYZetmo.roa (hash: 1gJBGB9klrHZSwVL2SLeIR4sc4/6k+hLxWUNUcJftrk=) 3: 3UxXNfbXuz8i0p4qeOcbr6GGK7g.roa (hash: hZgmhd7rTwkIKlbrCrKQZLJjwcORc7pG4gvvo+Rcs3Q=) 4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=) 5: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=) 6: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=) 7: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=) 8: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=) 9: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=) 10: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=) 11: RW1Mn5jGY_fNwEa4nhfDdOF4euY.roa (hash: rormOO+Scyvc6/IMwyduU2PX9d097afAopSHjpl3a98=) 12: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=) 13: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=) 14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=) 15: cfZY6a_P68a48WrfPdh2ybzN0mo.roa (hash: vz82xH5oEj0u8LL1xE6ynS2ZCw12kUa4tRY5hXJQvWw=) 16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=) 17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: YV/4iO60mOSPrvBus9Yo8TcGizuf8Nckl7JUZyjGC9Y=) 18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=) 19: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=) 20: pOZHVjX8onM9oBBZ12RCzAbquBs.roa (hash: pOOINsyyZRyr8GyLY4+525uladm5E7MLq4xyYrftyKY=) 21: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (hash: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=) 22: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=) 23: x0w0SJYyBODLjpKGKi2OvtCd5BY.roa (hash: /oU3eS+zy0/9a9tpbxNFxOY3NXEHHhBLy521R4xGw7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 May 2026 17:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:51:7e:12:42:57:50:d6:51:3e:04:08:95:5b:22:d4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: May 22 21:01:17 2026 GMT Not After : May 23 21:01:17 2026 GMT Subject: CN=c442734da48f793da60e5be4306dc3a81be1a02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ae:ab:cf:b9:b3:38:f2:71:32:17:40:f9:ca: 2b:74:9a:09:eb:85:07:a0:de:9b:8b:e8:71:08:23: df:d1:43:a3:f7:23:bd:46:5b:f6:59:26:8b:f1:03: 62:31:44:1e:69:af:f5:14:1c:28:e0:7e:fe:67:02: d2:73:02:ae:b9:30:b3:cf:7a:d7:0e:24:f6:6c:d8: ba:8d:60:b1:53:aa:b6:8f:38:a4:2e:3d:24:e9:1c: 12:78:31:25:59:93:a6:83:c6:c8:a0:0f:78:8e:55: d5:8d:93:1e:fc:51:b4:5a:fd:f3:d3:27:39:02:31: 00:25:ab:32:0c:b5:41:08:2e:48:6d:4d:6c:da:a8: 79:65:20:83:ee:19:aa:8b:0c:7f:be:2d:f8:ea:b2: 23:a5:f6:9a:92:16:af:8c:07:3e:d0:7b:f7:48:39: b5:fb:24:35:d6:e0:d2:3b:f5:2f:93:27:ad:d0:89: 18:d1:0c:d9:9f:ff:5c:60:dd:0d:95:30:24:53:5b: 3e:65:d5:ba:42:f3:57:67:29:15:f4:13:f8:fa:b5: d0:c8:2c:66:f7:98:66:4a:b6:eb:6c:ff:3f:b5:4e: b0:cb:c9:9e:42:2b:f5:77:db:c3:68:15:86:42:5f: cb:33:56:7d:91:8e:68:8f:bb:cc:b8:48:37:45:55: 1c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:42:73:4D:A4:8F:79:3D:A6:0E:5B:E4:30:6D:C3:A8:1B:E1:A0:2D X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b0:31:6d:fa:d1:e7:a8:ca:8b:64:66:bb:89:d7:46:da:23: 95:86:75:ce:ca:71:7e:75:2d:f7:22:09:01:8a:21:75:10:65: 03:66:50:70:5d:ba:89:d8:26:5e:9c:8e:22:4a:db:10:3d:ef: 9b:fb:bb:79:6a:9d:f0:7e:09:7b:90:26:d7:38:9b:7f:11:4b: 64:de:20:9b:be:4a:ec:8b:6f:00:01:fb:6c:5a:43:3c:c8:bd: 2f:4f:02:cb:be:a7:6a:4d:6e:2f:f4:c3:ad:ed:a4:dd:8f:e9: 3f:b7:77:29:45:80:82:98:33:7d:b8:92:1b:d9:fb:09:e6:b6: 1f:6a:95:ca:01:91:91:0d:fe:16:e6:e6:66:2a:59:9a:85:48: df:7d:42:d2:2f:8d:fb:80:85:b0:25:dd:e9:d8:7a:6f:44:34: cf:6c:c3:2a:cb:14:cb:db:88:f3:a9:ca:be:24:42:63:21:ca: 96:e1:e1:af:87:db:66:ea:d4:28:01:b2:9e:c4:2e:5f:80:a9: d7:ac:d2:4b:aa:cd:20:49:df:8b:a8:e9:58:4d:f2:f8:cc:f6: 39:35:90:f1:e0:f6:06:17:3c:de:cb:f9:4c:1b:46:ac:8b:96: f0:9b:82:22:a0:21:b0:97:19:a9:49:3a:f2:b2:06:e3:42:71: 5e:4f:fa:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5RfhJCV1DWUT4ECJVbItRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwNTIyMjEwMTE3WhcNMjYwNTIzMjEwMTE3WjAzMTEwLwYDVQQD EyhjNDQyNzM0ZGE0OGY3OTNkYTYwZTViZTQzMDZkYzNhODFiZTFhMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma6rz7mzOPJxMhdA+cordJoJ64UH oN6bi+hxCCPf0UOj9yO9Rlv2WSaL8QNiMUQeaa/1FBwo4H7+ZwLScwKuuTCzz3rX DiT2bNi6jWCxU6q2jzikLj0k6RwSeDElWZOmg8bIoA94jlXVjZMe/FG0Wv3z0yc5 AjEAJasyDLVBCC5IbU1s2qh5ZSCD7hmqiwx/vi346rIjpfaakhavjAc+0Hv3SDm1 +yQ11uDSO/Uvkyet0IkY0QzZn/9cYN0NlTAkU1s+ZdW6QvNXZykV9BP4+rXQyCxm 95hmSrbrbP8/tU6wy8meQiv1d9vDaBWGQl/LM1Z9kY5oj7vMuEg3RVUcIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRCc02kj3k9pg5b5DBtw6gb4aAtMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLAxbfrR 56jKi2Rmu4nXRtojlYZ1zspxfnUt9yIJAYohdRBlA2ZQcF26idgmXpyOIkrbED3v m/u7eWqd8H4Je5Am1zibfxFLZN4gm75K7ItvAAH7bFpDPMi9L08Cy76nak1uL/TD re2k3Y/pP7d3KUWAgpgzfbiSG9n7Cea2H2qVygGRkQ3+FubmZipZmoVI331C0i+N +4CFsCXd6dh6b0Q0z2zDKssUy9uI86nKviRCYyHKluHhr4fbZurUKAGynsQuX4Cp 16zSS6rNIEnfi6jpWE3y+Mz2OTWQ8eD2Bhc83sv5TBtGrIuW8JuCIqAhsJcZqUk6 8rIG40JxXk/64g== -----END CERTIFICATE-----Generated at Sat May 23 00:48:28 2026 by rpki-client