$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: PfMlHRaMAlujLR0vVquTAvocAAxSITRoNSIlD2HqiR4= Subject key identifier: DD:BE:A1:06:D3:E3:64:EA:A2:B1:87:4C:89:67:A7:B2:1C:6C:01:2C Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019D8BDE66A49082D0E5A1A315C6B5D202AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 07DF Signing time: Tue 14 Apr 2026 12:01:41 +0000 Manifest this update: Tue 14 Apr 2026 12:01:41 +0000 Manifest next update: Wed 15 Apr 2026 12:01:41 +0000 Files and hashes: 1: 16Np4JNZv6v2ZaABJcy2sCql7pI.roa (hash: qAvGjbOzsR63qF3tqsjKZEDozeFVN2kLIVrjTI8/doM=) 2: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=) 3: 1t0W39rjvnhlr82paEbC8GZYcC0.roa (hash: 17SD6nyFJbW/EGjQCaf/6g0oWpZcAdugL0aeYfs/fCc=) 4: 5UDuqrSyuGprLjI2HKiGxGynvqE.roa (hash: NGA8WTAO8zMKPpGzof9YMthqeMGnL9P153gfC/S9Zh0=) 5: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=) 6: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=) 7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=) 8: FsWz95bjpsQz09qkc-hQos-M0m8.roa (hash: 3XsppK5S7iL8gQ3L3NeC1DD01cY/1dPaUa81kDoWAKE=) 9: IWbk6zNSYB6WM0Y5Z6-XcPx7fTg.roa (hash: lD3YgQPEcJ+Lsldpe4bbaxPUzCjTvoc7u6pwJwRKzSw=) 10: IjZEx1eHpkQjZ-ES_Rg9N95_Zzg.roa (hash: 5Sm4tdW+S9NYYEZ3KZhaD241AoDsBp/MjQHfJVYoRSk=) 11: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=) 12: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=) 13: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=) 14: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=) 15: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=) 16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=) 17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: P15NDkLH7amXTusBaxBoiCpD+pg/3yl2IU9Gk+JZ+wc=) 18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=) 19: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=) 20: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=) 21: qfYseX0GpDJ3nwbZkrDDY-_lcTQ.roa (hash: 9SV1r203DsffZLFBuKYeAWKCRAM7udUdpGOOPSGi5Bw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 15 Apr 2026 12:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:8b:de:66:a4:90:82:d0:e5:a1:a3:15:c6:b5:d2:02:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Apr 14 12:01:41 2026 GMT Not After : Apr 15 12:01:41 2026 GMT Subject: CN=ddbea106d3e364eaa2b1874c8967a7b21c6c012c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:41:20:c1:ff:b5:ef:a9:65:75:bb:38:6b: 0a:3d:40:cf:e4:c6:76:1f:f0:43:fe:f6:eb:31:15: 89:18:59:2c:e0:b1:9e:fb:01:c9:eb:e6:30:b9:7b: 55:e2:8d:fe:57:20:f2:8e:40:27:e4:64:70:3a:88: 21:f0:ec:f5:71:93:df:cb:48:ab:d4:f2:9a:04:24: 71:09:fb:81:d5:30:0c:ee:e9:5c:da:d9:f5:6b:b9: 78:8e:07:50:4c:c1:f2:79:bf:5b:a0:28:c0:d8:ea: e5:ba:c2:c7:a7:b6:97:fe:9b:7f:50:cd:28:71:d5: d2:e8:4a:d7:18:33:c7:80:bc:6a:56:6a:fd:d0:0e: 59:a9:6e:c9:58:ef:89:63:35:ec:ff:51:3a:62:2f: 08:5d:2c:69:c1:b2:7d:c2:bd:1e:10:dc:38:0f:f2: cb:40:25:f3:13:ca:3e:d2:d6:c6:35:e7:a6:25:75: c5:b9:5e:ba:17:8f:66:a7:99:78:d2:95:89:e7:e5: 9b:31:aa:c4:6e:32:ea:f4:f8:75:81:36:b1:fb:9c: c0:88:aa:c6:72:22:7d:ad:a3:e5:63:27:d4:22:28: bc:7f:88:90:62:41:14:f2:38:1d:c7:1f:d4:af:e6: b9:53:de:81:81:14:0b:42:c4:5d:eb:f4:13:e9:0f: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BE:A1:06:D3:E3:64:EA:A2:B1:87:4C:89:67:A7:B2:1C:6C:01:2C X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:97:f6:ae:c4:d1:8f:bd:37:7e:b3:f2:6c:ab:09:bd:b5:fd: 09:3f:4b:ea:af:1a:e0:ec:c3:53:5e:1c:be:aa:bd:b6:48:3c: 2b:65:fa:d1:3c:22:8b:14:b7:b3:8b:5d:79:66:59:00:ea:3e: 3d:83:4b:5e:40:70:66:bf:25:97:04:5a:a8:7d:6b:c2:6a:46: 74:e8:bb:7a:f1:50:67:19:d7:ac:cb:f1:7b:a5:ee:52:72:ab: d4:e0:20:cd:84:da:bc:49:a5:21:73:48:47:fd:d0:e7:b7:e9: 79:06:54:29:37:8d:96:8c:db:e9:77:80:b0:a1:e1:97:6f:d7: 11:fc:6f:cd:52:30:a2:a7:b3:40:31:a8:eb:68:c9:50:cd:10: 28:25:61:64:3e:3a:f7:98:73:61:e5:52:65:7c:61:f6:fa:d7: 5b:70:83:df:76:cd:d5:34:fc:8f:93:71:30:68:11:18:1b:82: 9e:6d:31:75:6e:95:8d:a0:f1:56:fe:6d:1f:3c:75:fa:6e:f8: c6:c1:6a:7a:43:ad:40:62:48:67:33:1b:60:a6:2f:29:ed:ee: 67:91:c0:57:df:3b:f7:44:a2:4d:c2:d7:a1:29:1c:25:7a:2e: a1:be:74:cb:63:88:c6:9e:04:39:68:c7:83:e0:0b:87:b9:65: ad:a6:4e:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2L3makkILQ5aGjFca10gKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwNDE0MTIwMTQxWhcNMjYwNDE1MTIwMTQxWjAzMTEwLwYDVQQD EyhkZGJlYTEwNmQzZTM2NGVhYTJiMTg3NGM4OTY3YTdiMjFjNmMwMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjFBIMH/te+pZXW7OGsKPUDP5MZ2 H/BD/vbrMRWJGFks4LGe+wHJ6+YwuXtV4o3+VyDyjkAn5GRwOogh8Oz1cZPfy0ir 1PKaBCRxCfuB1TAM7ulc2tn1a7l4jgdQTMHyeb9boCjA2OrlusLHp7aX/pt/UM0o cdXS6ErXGDPHgLxqVmr90A5ZqW7JWO+JYzXs/1E6Yi8IXSxpwbJ9wr0eENw4D/LL QCXzE8o+0tbGNeemJXXFuV66F49mp5l40pWJ5+WbMarEbjLq9Ph1gTax+5zAiKrG ciJ9raPlYyfUIii8f4iQYkEU8jgdxx/Ur+a5U96BgRQLQsRd6/QT6Q+rwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2+oQbT42TqorGHTIlnp7IcbAEsMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJf2rsTR j703frPybKsJvbX9CT9L6q8a4OzDU14cvqq9tkg8K2X60TwiixS3s4tdeWZZAOo+ PYNLXkBwZr8llwRaqH1rwmpGdOi7evFQZxnXrMvxe6XuUnKr1OAgzYTavEmlIXNI R/3Q57fpeQZUKTeNlozb6XeAsKHhl2/XEfxvzVIwoqezQDGo62jJUM0QKCVhZD46 95hzYeVSZXxh9vrXW3CD33bN1TT8j5NxMGgRGBuCnm0xdW6VjaDxVv5tHzx1+m74 xsFqekOtQGJIZzMbYKYvKe3uZ5HAV98790SiTcLXoSkcJXouob50y2OIxp4EOWjH g+ALh7llraZOOw== -----END CERTIFICATE-----Generated at Tue Apr 14 16:18:53 2026 by rpki-client