$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft File: fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json) Hash identifier: pK+45eVeStXiDN047WwVUpcfLOZ6HYtJAX25TJy8vII= Subject key identifier: 5F:4E:CF:3D:EE:12:54:6D:CA:E6:85:BA:14:B3:ED:0D:64:58:DB:6C Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019DB2B48B8DBAAFB01E895027E075784295 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft Manifest number: 14DF Signing time: Wed 22 Apr 2026 01:01:09 +0000 Manifest this update: Wed 22 Apr 2026 01:01:09 +0000 Manifest next update: Thu 23 Apr 2026 01:01:09 +0000 Files and hashes: 1: 0KFRQQB9Lc0XuWKXvA0dnIy2njg.roa (hash: 9PNcCkZrauXgW+3YFUtyOx9/rmS3W9JA5UUSg4BFsGU=) 2: 2diwtm0Zbf_bmsdktiMcMcOMQg8.roa (hash: eVMbVKsLzh2plyfnoFozWhZn/xVtpLdpwRt+PjQnri4=) 3: 2hKTftFtuQRMT1oaso9aJ2Fwbhs.roa (hash: yt73gkjCnEpWOl4mDI2UvWLYkd+MzKzlxXOQLXQ8/rg=) 4: 3Q5j-7Pt8HcUq6bBHu3dKDediOU.roa (hash: 5c1NCBuQPjwD9eR+7rowyJnrFaKqJ48pXAIHslQmr00=) 5: 7ODkEA8GW4XqQMX815M0xDjVvrs.roa (hash: Ncp1j3mzzX7ml5rvDVDTsQNEgjoz0Dt1wsNtC6lEi94=) 6: 8NYcGLI50NHf_-GqbpzZZr4ltLA.roa (hash: fEaVNw2Wyd4+MGZ7FzjbEUafcEBr+2hDrYVvqLoZo5Q=) 7: 8ZcQrN0gVcxFnr-ChcIyFWdfoF8.roa (hash: FxsIDxqiDCsks/QZP2zl7z65J0NcQRJR7OpzOE/ZLiM=) 8: 8jfqpIUKuOw3bEeNl0QjuTIts5w.roa (hash: lA+JjzalnUsshqDeIEjkif9B6fmiylkMishkEuJTw+c=) 9: 9ciSFxfpsFEJtvCxwwKQui6r5zM.roa (hash: QooSkMFERuaO2unvGuJR36695C6QceBrXMuXSVRQ/9s=) 10: 9gIUZ3-KWFOqbPCbkWI5yHzecO0.roa (hash: jjpO0DxwKQMyYQwBPNQVarsVnFCb4DMo73zMMJVeyFI=) 11: BHMecBG9x9xUY8jTjlOT7nNxN9k.roa (hash: HYJY2r76YQlta0gJBproON2MhOd3SZjrPkPVpXkWpDU=) 12: Ez7vdg6eB07lFL05DPjqJKCOdIo.roa (hash: fBYYvlQ87n8J9SuhX/gsPnpOFHNxq/I9XnmkEjxP+Js=) 13: FLQX7VTxwFaQrQRyhh5AZ1ehPTU.roa (hash: TCoATecBzXKE+6xHAeP7h7guA+jHThVu36yV5nbsOcM=) 14: HMUv5O_IloNPK-xnYoboUUQaw9I.roa (hash: pWKPihhcLAd/kMZDUiPWP3Bf2PaOFgTs9krixFbyXKg=) 15: M23E5jFvo9QE4PZ22sZCcc77gm0.roa (hash: ez6ZtNmZWmq4SxAtsTn9ZRzqCWD4ICp/AVepQiwyNEI=) 16: M9SkjzKgp0C1w36F_3V-rwxzPrM.roa (hash: NOgmWBFIBR8qfeBLcrBHcBrGBBxychhI5zlw8nvAaeE=) 17: WToUjwUwqxWGFX7YfgHrsOMgM_8.roa (hash: kIIRszKRMT6GNaYzUy0dv+/IIIR5RaGl85LSnUgSJ+k=) 18: YKXZknOA48Q687Y2d6b6e138kG0.roa (hash: YKAaiTG9TWQNiJSpv5qYvX/007RacaolNt+mRs/AVA4=) 19: bZ7lVe52f2GXmi7XWYMeLJ4V86s.roa (hash: bZcb4IcZpKmYddgjqqBxvAN6lqh2zAQBjMMCJZa90kQ=) 20: bxDMk8rDIjX1JIaOhPkkS6agVn8.roa (hash: qdJb7Cn9TFHTehw1Um25RR8YIvGg9qXGmexGQanw2Jc=) 21: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: U7nuGgsCBmy4ImdX10G6OjMXlDCvcMwOn4sZlc7ByBE=) 22: fvP8_8TU48J6IMiREwiDhO3tYLk.roa (hash: 3D1JK3jjDZ3dw6xUSf+wo+DL5MerbJPcmtMrr884SG8=) 23: gnDB9W02-r6mUcSzv9GpwgZT3jo.roa (hash: xF1q8i5GseG2Y/ChOFm114hCxbfrQRyX8F0vQWk71OI=) 24: go1rZLit0ECxEQHq3kpBk2CE4Qg.roa (hash: hJVabNE+muWiI6lmIeSiA8icGMZrwMb4YKQs1wbCUu8=) 25: kx0iDFbsXmf1_joPchYNl-Qa3D0.roa (hash: 0natnuOE/XONkp7+7SAGpqgXtC+NNO9MQZlBw7eJSr0=) 26: lqCu78LtvHJishdD6N4eR-R7RIM.roa (hash: iKTkz66NrpLAcH4+xiDnu+/37wuOGvm5ZNIxFMyUSUw=) 27: ovaw2-C0aLc15MUNM--nHeVzXAk.roa (hash: k6KOhUlHQLtwN5AMkDyj19Newr/qZ7SL0hXw1sn09K8=) 28: ovqAK3pYOqxaHlVK-LqO8cHqIYM.roa (hash: W0pJB/sjr5+69ynLbPfenFx2cuPhFShby13x0oho2no=) 29: pv9Cpord1y0tCGV7NVJXrmWgS28.roa (hash: ue24VSBSX2J82akgvFk1ddcbgpuIzB8HeE+GFQFimS4=) 30: qvYAP-lSXmNoClOM3rygyr0zdI0.roa (hash: XZWaUj3+lj06izt55k5PBSAGEgz79sdEGihL99kraEo=) 31: xWAzCmZMcG-JDSiQJKOLozSrRc0.roa (hash: lzdIYy1HSi547j5LHsPdxL03SsyIBHEZ8dTINmo4ArY=) 32: zN7eJocMGhWq5niF73RM-dIuVIM.roa (hash: oo32X248IIf2Wa+j4gsxo5ikGlQv9o+0FiBYs6RXCgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 21:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b2:b4:8b:8d:ba:af:b0:1e:89:50:27:e0:75:78:42:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Apr 22 01:01:09 2026 GMT Not After : Apr 23 01:01:09 2026 GMT Subject: CN=5f4ecf3dee12546dcae685ba14b3ed0d6458db6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d5:ca:7b:32:d3:cc:5e:25:a5:9b:84:bf:fc: 4d:b5:4f:9d:63:35:0d:1b:8d:16:17:83:0e:e0:ef: e2:4a:98:54:b1:2a:c9:40:5a:09:af:8b:d7:3a:fc: f3:dc:ba:7b:c4:24:ba:56:b6:20:42:4b:5c:ed:ab: ee:77:43:58:1a:82:2e:80:70:8c:91:3b:dc:ae:ac: 33:5d:80:a4:6d:5f:41:c1:52:0b:fa:2b:7d:af:0c: 70:ab:f5:21:af:66:32:65:51:f1:aa:c1:34:97:05: 6d:1e:c7:30:21:99:ad:d0:ad:5f:e9:d4:ef:e3:41: e3:39:0e:20:5d:23:04:f2:57:4a:63:73:91:e0:56: 6b:de:2d:0a:34:8f:c4:60:04:4c:43:c3:5a:e6:43: e6:be:c0:aa:3f:c2:02:9d:fa:f6:04:6a:cd:d4:1f: 6e:e0:8d:af:04:89:d0:fb:d3:b7:1d:64:6f:d2:ac: 22:7a:ac:c8:ac:3e:0d:c8:b8:c7:70:0e:d8:25:bf: 94:cd:90:d5:04:c2:c5:94:72:17:f8:9f:11:e8:f7: 3d:df:18:2e:56:42:1a:de:e7:9b:80:ea:c8:d7:f7: ca:ba:8b:d8:41:c3:1e:86:c6:48:2c:fd:a3:e1:03: 23:f7:67:ca:5f:60:aa:5d:8f:7e:79:41:be:37:ff: a0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4E:CF:3D:EE:12:54:6D:CA:E6:85:BA:14:B3:ED:0D:64:58:DB:6C X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:00:b6:35:e2:86:0f:34:ed:cd:88:97:ad:b8:82:67:5a:69: aa:cd:f6:15:94:66:c6:3f:0b:21:2a:a2:c9:e4:17:91:97:52: 70:ab:11:4a:4d:db:b1:55:97:ec:2a:3a:2c:db:5e:56:ab:9c: 71:2d:f5:0b:69:d6:eb:01:0d:10:34:1b:73:29:be:1c:eb:b4: 84:db:86:49:54:3f:80:fb:89:9d:ab:02:f7:d3:e9:24:e3:ed: de:a6:35:fa:6b:ef:be:dc:47:57:91:94:f0:f7:35:8b:6d:f8: b5:33:88:fc:2c:03:08:60:bf:17:6d:6d:c8:84:dd:62:50:cc: 5d:80:ad:b4:43:29:5b:94:49:78:9e:cf:44:a1:cb:f7:33:20: 8b:cf:63:7c:79:7b:f5:7e:f6:1c:01:8f:5a:7b:13:dd:21:6e: 34:60:81:05:c0:69:c7:83:bd:ad:1d:87:08:d3:3d:0f:48:96: f0:d1:6e:41:2b:c7:d6:11:b3:fb:96:6c:57:73:c6:ee:cd:9f: 31:69:50:15:43:f7:c5:81:99:77:d7:10:61:a2:f0:85:9e:68: e9:78:3c:fc:87:8f:ce:98:65:a0:94:51:cf:10:7c:a8:86:04: 6c:bf:1e:c1:73:37:f0:f3:3f:0c:1c:a6:f6:94:8c:c6:68:5c: 1b:b9:88:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ytIuNuq+wHolQJ+B1eEKVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwNDIyMDEwMTA5WhcNMjYwNDIzMDEwMTA5WjAzMTEwLwYDVQQD Eyg1ZjRlY2YzZGVlMTI1NDZkY2FlNjg1YmExNGIzZWQwZDY0NThkYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tXKezLTzF4lpZuEv/xNtU+dYzUN G40WF4MO4O/iSphUsSrJQFoJr4vXOvzz3Lp7xCS6VrYgQktc7avud0NYGoIugHCM kTvcrqwzXYCkbV9BwVIL+it9rwxwq/Uhr2YyZVHxqsE0lwVtHscwIZmt0K1f6dTv 40HjOQ4gXSME8ldKY3OR4FZr3i0KNI/EYARMQ8Na5kPmvsCqP8ICnfr2BGrN1B9u 4I2vBInQ+9O3HWRv0qwieqzIrD4NyLjHcA7YJb+UzZDVBMLFlHIX+J8R6Pc93xgu VkIa3uebgOrI1/fKuovYQcMehsZILP2j4QMj92fKX2CqXY9+eUG+N/+gXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9Ozz3uElRtyuaFuhSz7Q1kWNtsMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgC2NeKG DzTtzYiXrbiCZ1ppqs32FZRmxj8LISqiyeQXkZdScKsRSk3bsVWX7Co6LNteVquc cS31C2nW6wENEDQbcym+HOu0hNuGSVQ/gPuJnasC99PpJOPt3qY1+mvvvtxHV5GU 8Pc1i234tTOI/CwDCGC/F21tyITdYlDMXYCttEMpW5RJeJ7PRKHL9zMgi89jfHl7 9X72HAGPWnsT3SFuNGCBBcBpx4O9rR2HCNM9D0iW8NFuQSvH1hGz+5ZsV3PG7s2f MWlQFUP3xYGZd9cQYaLwhZ5o6Xg8/IePzphloJRRzxB8qIYEbL8ewXM38PM/DBym 9pSMxmhcG7mI2g== -----END CERTIFICATE-----Generated at Wed Apr 22 02:48:28 2026 by rpki-client