$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: QthYHdbozgmBJL+wxHsr2exP+mO1mRZnMO8PyNjxBSM= Subject key identifier: B1:26:EE:EE:5C:8B:7E:FC:E7:47:7A:A1:6D:73:BE:48:6F:BA:29:36 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019DB1A17FB53FD76214C9A994B6E91977EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 07F9 Signing time: Tue 21 Apr 2026 20:00:44 +0000 Manifest this update: Tue 21 Apr 2026 20:00:44 +0000 Manifest next update: Wed 22 Apr 2026 20:00:44 +0000 Files and hashes: 1: 16Np4JNZv6v2ZaABJcy2sCql7pI.roa (hash: qAvGjbOzsR63qF3tqsjKZEDozeFVN2kLIVrjTI8/doM=) 2: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=) 3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=) 4: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=) 5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=) 6: HDy9E8Syvp_94CFPESY5rqbClSY.roa (hash: 3igy8TWZ+XjW5zsIvNRV3KRA/9ZGWbPE9nexH9tr414=) 7: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=) 8: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=) 9: Qd5aVGfWV7AT9z0yps7zLdQ5lYs.roa (hash: aH9I99VPJHbgE7RP8D7UDhzblHaAfwL1UqYHcs/Hqo4=) 10: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=) 11: RW1Mn5jGY_fNwEa4nhfDdOF4euY.roa (hash: rormOO+Scyvc6/IMwyduU2PX9d097afAopSHjpl3a98=) 12: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=) 13: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=) 14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=) 15: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=) 16: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: nJe2wPfwHz9BkipMxShlcoLz+g7Us5kTZP9zzIpO3Oc=) 17: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=) 18: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=) 19: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=) 20: tCmMoUtYFPQDVVVvD1xexWaYCPs.roa (hash: 8vL7GZMxy/ZTgYn7qa4CYEJlWKlh7uFIJGQ6a6Vvspg=) 21: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 14:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b1:a1:7f:b5:3f:d7:62:14:c9:a9:94:b6:e9:19:77:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Apr 21 20:00:44 2026 GMT Not After : Apr 22 20:00:44 2026 GMT Subject: CN=b126eeee5c8b7efce7477aa16d73be486fba2936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1a:2e:c4:39:82:fc:cc:de:0e:f7:9c:44:b8: 2a:7e:9b:4c:71:6d:f4:55:1c:63:38:c1:1b:7f:54: 9a:38:50:1e:b4:43:bb:38:61:be:0f:59:42:91:cd: 6c:cb:30:c7:c5:33:89:a1:1e:b6:5b:de:fc:d6:dd: 59:8b:60:d2:79:44:51:c2:dc:9f:0f:6c:3c:d1:b8: 9e:fa:c1:08:a6:04:bf:73:0a:00:11:e4:8d:10:fa: 9a:8f:58:79:58:8e:7d:2b:19:2b:e9:8a:ad:ca:78: e4:97:7d:cd:b3:4c:6c:26:73:02:b0:3f:db:69:25: 67:f4:e7:c8:f6:04:ec:ef:ff:a6:8a:2c:96:63:35: f8:aa:bd:73:2a:ac:6e:3c:e9:b6:8c:e6:e3:45:ba: b0:2d:c1:a0:ad:6e:f1:4c:64:58:77:91:7b:d7:f4: f9:ce:42:7c:db:ff:10:b1:9e:2c:32:0b:15:3a:22: ff:04:31:ef:08:01:6d:34:c4:3f:a5:19:0f:35:2d: 3a:c7:8b:eb:84:d6:f0:c6:be:58:4c:02:f1:11:ff: e2:70:7e:d7:31:f7:e9:66:0d:26:5f:a9:c9:d2:08: 17:dd:fb:3e:1d:2a:db:61:22:a7:9e:3f:e2:76:bf: 92:d2:cc:ca:c9:66:fc:6f:3e:4d:e6:76:fe:63:92: 90:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:26:EE:EE:5C:8B:7E:FC:E7:47:7A:A1:6D:73:BE:48:6F:BA:29:36 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4a:e5:ce:5d:4f:01:80:a3:6e:c7:4f:38:4e:2a:43:bb:2b: c5:32:1e:66:3b:e3:b5:6a:37:93:b1:66:ba:9b:60:71:5d:d4: 2f:12:b4:19:5a:f4:07:ea:61:be:3e:58:79:f7:d5:6f:2c:54: d4:30:5c:ce:11:a1:c4:f0:fa:b6:a1:05:90:7b:a1:fd:7e:04: f3:0b:f1:86:93:85:e9:15:61:8e:f2:d3:03:aa:79:84:74:85: b0:f2:8a:a3:51:e4:1c:07:66:ad:94:13:9b:e3:a3:02:5d:2f: 0c:0d:3e:50:14:73:1a:d8:d3:69:30:a3:8d:8a:12:0d:0d:8e: 81:5a:5f:50:9a:be:f3:cb:f2:4d:9c:e4:62:b1:87:37:de:3a: a5:26:79:b8:ac:59:e2:a8:5c:1a:9d:ae:6f:34:9f:33:57:c1: 03:05:64:5e:fc:49:09:43:ff:1f:79:dd:43:11:cf:84:15:60: 9a:63:44:65:3f:d9:3c:15:d7:f5:af:51:86:53:3e:ab:69:8c: 09:c2:fc:29:21:62:29:61:3b:f0:b9:a3:52:38:40:60:e0:5e: f1:7e:9e:e4:b3:34:ae:13:e1:c7:55:78:9c:eb:e7:c4:34:c6: bc:44:93:bf:45:9e:79:d5:df:db:0a:30:ec:a2:2c:86:11:fe: 09:fa:07:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2xoX+1P9diFMmplLbpGXfrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwNDIxMjAwMDQ0WhcNMjYwNDIyMjAwMDQ0WjAzMTEwLwYDVQQD EyhiMTI2ZWVlZTVjOGI3ZWZjZTc0NzdhYTE2ZDczYmU0ODZmYmEyOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRouxDmC/MzeDvecRLgqfptMcW30 VRxjOMEbf1SaOFAetEO7OGG+D1lCkc1syzDHxTOJoR62W9781t1Zi2DSeURRwtyf D2w80bie+sEIpgS/cwoAEeSNEPqaj1h5WI59Kxkr6Yqtynjkl33Ns0xsJnMCsD/b aSVn9OfI9gTs7/+miiyWYzX4qr1zKqxuPOm2jObjRbqwLcGgrW7xTGRYd5F71/T5 zkJ82/8QsZ4sMgsVOiL/BDHvCAFtNMQ/pRkPNS06x4vrhNbwxr5YTALxEf/icH7X MffpZg0mX6nJ0ggX3fs+HSrbYSKnnj/idr+S0szKyWb8bz5N5nb+Y5KQJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEm7u5ci37850d6oW1zvkhvuik2MB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0rlzl1P AYCjbsdPOE4qQ7srxTIeZjvjtWo3k7FmuptgcV3ULxK0GVr0B+phvj5YeffVbyxU 1DBczhGhxPD6tqEFkHuh/X4E8wvxhpOF6RVhjvLTA6p5hHSFsPKKo1HkHAdmrZQT m+OjAl0vDA0+UBRzGtjTaTCjjYoSDQ2OgVpfUJq+88vyTZzkYrGHN946pSZ5uKxZ 4qhcGp2ubzSfM1fBAwVkXvxJCUP/H3ndQxHPhBVgmmNEZT/ZPBXX9a9RhlM+q2mM CcL8KSFiKWE78LmjUjhAYOBe8X6e5LM0rhPhx1V4nOvnxDTGvESTv0WeedXf2wow 7KIshhH+CfoHQw== -----END CERTIFICATE-----Generated at Tue Apr 21 23:21:33 2026 by rpki-client