$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: a11e/zYGwO3y8nyMlD89+r6qk6Kff9UEYhjhiiQgzKc= Subject key identifier: 03:46:B2:65:D5:EC:8C:56:AC:33:16:D3:E0:50:CC:A7:79:EC:A0:06 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019D70D4EFBCBFAE83E17A183BFC98F6C67E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 07D1 Signing time: Thu 09 Apr 2026 06:01:36 +0000 Manifest this update: Thu 09 Apr 2026 06:01:36 +0000 Manifest next update: Fri 10 Apr 2026 06:01:36 +0000 Files and hashes: 1: 16Np4JNZv6v2ZaABJcy2sCql7pI.roa (hash: qAvGjbOzsR63qF3tqsjKZEDozeFVN2kLIVrjTI8/doM=) 2: 17br9XZ9xnmxnUIW7RS9RNYXUx8.roa (hash: ji5yJKx3YfXXQf/Z9AvzU3ITxu8fLBMTdnNA3VVV228=) 3: 1t0W39rjvnhlr82paEbC8GZYcC0.roa (hash: 17SD6nyFJbW/EGjQCaf/6g0oWpZcAdugL0aeYfs/fCc=) 4: 5UDuqrSyuGprLjI2HKiGxGynvqE.roa (hash: NGA8WTAO8zMKPpGzof9YMthqeMGnL9P153gfC/S9Zh0=) 5: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=) 6: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=) 7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=) 8: FsWz95bjpsQz09qkc-hQos-M0m8.roa (hash: 3XsppK5S7iL8gQ3L3NeC1DD01cY/1dPaUa81kDoWAKE=) 9: IWbk6zNSYB6WM0Y5Z6-XcPx7fTg.roa (hash: lD3YgQPEcJ+Lsldpe4bbaxPUzCjTvoc7u6pwJwRKzSw=) 10: IjZEx1eHpkQjZ-ES_Rg9N95_Zzg.roa (hash: 5Sm4tdW+S9NYYEZ3KZhaD241AoDsBp/MjQHfJVYoRSk=) 11: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=) 12: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=) 13: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=) 14: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=) 15: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=) 16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=) 17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: HHxjOoRZtSjjQF5bbw7b3tFDscRSa6LotwoJQn9nYew=) 18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=) 19: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=) 20: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=) 21: qfYseX0GpDJ3nwbZkrDDY-_lcTQ.roa (hash: 9SV1r203DsffZLFBuKYeAWKCRAM7udUdpGOOPSGi5Bw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 00:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:70:d4:ef:bc:bf:ae:83:e1:7a:18:3b:fc:98:f6:c6:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Apr 9 06:01:36 2026 GMT Not After : Apr 10 06:01:36 2026 GMT Subject: CN=0346b265d5ec8c56ac3316d3e050cca779eca006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:72:1a:27:7d:de:d1:d5:b0:37:4a:c2:44: 9b:67:b7:bb:1a:ca:82:30:6a:33:01:cf:e2:46:68: 04:a9:24:4e:9d:ff:8a:1f:a3:e2:cf:27:d7:29:76: ee:ed:dd:5c:0a:25:53:27:33:32:ca:cb:5f:c5:ba: 47:88:1d:80:d0:1c:fb:24:8d:bf:72:8e:ea:2e:15: 2b:09:46:10:d4:34:6f:e6:e1:65:99:22:72:14:72: c2:5a:16:18:04:53:98:79:2c:ed:77:34:f2:30:ca: 71:91:0d:d2:67:c7:c6:12:ef:20:0f:33:00:52:92: 5c:ee:04:54:ef:43:4a:b4:4b:f2:bd:6b:62:db:cb: 62:1a:de:36:bd:df:39:25:74:03:ed:8a:97:fa:e8: 5d:4a:4b:62:69:7c:fd:9d:75:b1:65:64:79:73:4f: 95:dd:c9:de:54:a6:74:3e:28:6a:36:74:d3:67:df: 85:5e:43:7b:8d:9f:04:fe:58:65:13:40:14:ea:2e: e4:19:65:d4:d8:d3:08:2d:e4:8d:93:67:bf:f2:c2: b2:7d:8d:d9:cd:c4:a7:eb:7b:82:c8:be:9c:1f:61: 77:e1:2c:39:27:4a:74:d8:3f:cd:ff:b5:54:a4:32: d6:96:78:dc:f3:be:af:e7:33:95:67:66:47:cb:8c: 62:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:46:B2:65:D5:EC:8C:56:AC:33:16:D3:E0:50:CC:A7:79:EC:A0:06 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:97:4c:9e:17:fa:9c:2d:06:33:48:e3:8a:47:b7:e3:80:67: 8d:c3:e4:d6:37:20:0e:78:98:c9:59:14:76:b7:12:2e:59:49: ea:9f:84:81:0b:97:e0:ec:e5:00:d9:6d:56:71:1e:9f:6f:14: 8e:7e:c2:53:d2:c4:0e:cb:58:6e:09:39:a3:82:f4:a6:88:2c: de:3e:9c:c8:f3:e1:61:6e:aa:ad:5c:6f:fe:42:4f:11:5d:35: c8:f9:1d:21:96:1b:1e:31:f8:3c:33:40:43:1e:11:13:d4:72: 9a:fd:dc:1a:eb:08:25:55:ca:aa:56:b2:61:0e:c5:46:6e:75: d5:e0:89:ac:6c:2d:81:36:01:98:13:cb:5d:b7:45:bc:90:fe: 49:7e:98:2a:c4:6e:8f:e2:1a:2a:8e:e5:0e:b0:5f:08:6e:1b: 7c:bc:f1:95:b3:5e:99:bb:f9:0e:43:8e:b6:64:a3:9d:b5:bb: 47:a3:03:b5:b8:75:32:c9:42:c5:b4:eb:45:0b:70:73:b6:f6: bc:ab:40:71:ae:cd:b2:fe:69:d8:a0:f1:99:aa:4d:fb:aa:c9: b8:58:f5:0c:ad:ff:46:1b:34:c5:29:9b:1a:58:a0:84:e3:ca: cd:29:04:04:a8:6a:4b:a4:da:a3:58:22:c1:5c:64:66:1d:a4: ed:9f:f9:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1w1O+8v66D4XoYO/yY9sZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwNDA5MDYwMTM2WhcNMjYwNDEwMDYwMTM2WjAzMTEwLwYDVQQD EygwMzQ2YjI2NWQ1ZWM4YzU2YWMzMzE2ZDNlMDUwY2NhNzc5ZWNhMDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjxyGid93tHVsDdKwkSbZ7e7GsqC MGozAc/iRmgEqSROnf+KH6PizyfXKXbu7d1cCiVTJzMyystfxbpHiB2A0Bz7JI2/ co7qLhUrCUYQ1DRv5uFlmSJyFHLCWhYYBFOYeSztdzTyMMpxkQ3SZ8fGEu8gDzMA UpJc7gRU70NKtEvyvWti28tiGt42vd85JXQD7YqX+uhdSktiaXz9nXWxZWR5c0+V 3cneVKZ0PihqNnTTZ9+FXkN7jZ8E/lhlE0AU6i7kGWXU2NMILeSNk2e/8sKyfY3Z zcSn63uCyL6cH2F34Sw5J0p02D/N/7VUpDLWlnjc876v5zOVZ2ZHy4xidwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANGsmXV7IxWrDMW0+BQzKd57KAGMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpdMnhf6 nC0GM0jjike344BnjcPk1jcgDniYyVkUdrcSLllJ6p+EgQuX4OzlANltVnEen28U jn7CU9LEDstYbgk5o4L0pogs3j6cyPPhYW6qrVxv/kJPEV01yPkdIZYbHjH4PDNA Qx4RE9Rymv3cGusIJVXKqlayYQ7FRm511eCJrGwtgTYBmBPLXbdFvJD+SX6YKsRu j+IaKo7lDrBfCG4bfLzxlbNembv5DkOOtmSjnbW7R6MDtbh1MslCxbTrRQtwc7b2 vKtAca7Nsv5p2KDxmapN+6rJuFj1DK3/Rhs0xSmbGlighOPKzSkEBKhqS6Tao1gi wVxkZh2k7Z/5kg== -----END CERTIFICATE-----Generated at Thu Apr 9 08:37:12 2026 by rpki-client