$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: Cvo/AyEtfMZ81wH1RSDdwcMmDsG6FlcJRv39XE6x8bg= Subject key identifier: 52:E0:90:33:D1:B9:8F:8A:3E:68:84:49:AE:86:7C:0C:E6:A1:AB:48 Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019E1D5921A8FF5B7EDE65C245DDE56E5EE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 0F6D Signing time: Tue 12 May 2026 18:00:40 +0000 Manifest this update: Tue 12 May 2026 18:00:40 +0000 Manifest next update: Wed 13 May 2026 18:00:40 +0000 Files and hashes: 1: 112MUhV6Rq4vAZbzuW-obACCM54.roa (hash: bG/EpEeoydzJUldH4JoAmHs4InlJJW21+s36TR2C22g=) 2: 2wyh_QhMgMqC_O4n1IvcnhHRGBk.roa (hash: ao/nwpiJU1qsY5iD/g3xyfwFgyAPEV6fkSVForiTS1k=) 3: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: li31Ri3ifb/ghluxnUfj6kXETCfknSBrK5mJtS/nVak=) 4: 9WKN0gCb48l5bHUNl8dV6tRmYSc.roa (hash: v965nXSnshTWQQghLNVOqzkDYtxXR/Xwp0hDztEcPr0=) 5: Cdey4x25Y71jAjsi-w5ror1Em9w.roa (hash: 9Nkc6pZ1LY8cZ4nIVazJu4RFkDfce5y0UNDPuC2XOUU=) 6: Fu5kT9TxojjMx5c9WVqjL4KHnHY.roa (hash: OkWCwFJEccvJXScWm+KM/QkYp8L4OehLKl/qIjl3hPk=) 7: LvnAY2pckzRLAzMxTjPE9zCN3Ag.roa (hash: woZLLhApCfVxkyZ50HpqXpM/zC7yGzb4mBQNzIbCauE=) 8: Q03PdSGrQJ1a3WGfZ-bc5I0qaws.roa (hash: 2OnqRPuaN0v+Zan9ND6ygbAA1lh/p4DcTNqdYBIoSGo=) 9: Q5C92tE2t37UtBMqw-zHumbPgxQ.roa (hash: tly3KYH+a59AiCAVIEHbNYFLpCPBaZXHr2/DBwumJlc=) 10: RUzsZjQOmWwABCIUkcshejkaol8.roa (hash: RBKNBE9V3LhFEz+JeieM4xs1FwZeU1f7a5C0ApeFYFE=) 11: U0sKMofxXdVOw-0XJTrnhs5_ivw.roa (hash: 2ArYsgltaFdadzwNfrDc7gLpkClQBPjzaHH3uLWf38s=) 12: WcBb746Ge3KAEF-yLyH5I6ZFE0E.roa (hash: QXm/UopRYCraXfnadtlxCqtDzUMyQNtipIGzmPAgbf4=) 13: XUImnZKdlu7MDc0FxppzhVw4AFU.roa (hash: owXiNqfnKaJDDUXdUHghHE0onKUOIoOQu55R09C97Zg=) 14: dXpQm6W-fzeDoM6ANaDna4LeJJw.roa (hash: X+KL+RuBzuWO/Tf7EZrDXYxpoc28BH51yAUJezDMoh8=) 15: orlkrCk7j2kN4JQTtPHQBI1ppv4.roa (hash: pQvVge5sNbnnNmBAtn1qIeqUW7d2G6GN1mxMDVjqXnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:21:a8:ff:5b:7e:de:65:c2:45:dd:e5:6e:5e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: May 12 18:00:40 2026 GMT Not After : May 13 18:00:40 2026 GMT Subject: CN=52e09033d1b98f8a3e688449ae867c0ce6a1ab48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c6:e0:a2:29:68:d2:02:b9:09:4c:ca:d8:15: c6:36:50:85:31:e3:60:a3:9b:d3:c0:6a:78:14:5e: 69:f0:e0:ba:8d:80:61:79:af:f0:7d:e6:9d:64:63: 66:3f:4f:dc:88:ce:fb:db:e0:18:1d:0c:87:2a:e4: 56:9a:fc:0d:7f:1c:d7:0f:d9:15:48:1f:4b:f4:62: e9:54:60:b3:b7:2c:ce:d8:54:d7:0a:8d:6a:ec:a5: 63:0b:a3:df:bc:46:0d:ea:11:20:b6:c2:89:64:e1: 1c:9c:3a:ce:02:ca:fc:a5:98:9f:92:be:fb:39:6a: 6b:02:d8:ae:14:2f:9c:da:0a:e1:93:0a:b0:fe:df: 21:b6:ec:34:f3:bb:38:fb:8c:a5:e5:51:0c:86:1d: d9:bc:94:11:89:29:8d:f6:80:07:f1:ab:b8:63:6c: cf:01:c3:ec:28:13:7e:1c:80:f5:c4:94:e7:4a:ae: ab:07:67:d6:64:e8:06:ee:51:4b:b6:50:71:be:e2: 59:49:db:00:53:f2:66:70:77:86:b5:d9:2d:96:ef: 48:8f:0f:59:9a:7d:8d:cc:c9:3f:75:0a:d7:18:cc: 6b:41:8d:e7:f7:a5:7d:3d:37:1a:1f:9a:bd:ee:97: dc:80:12:27:e4:76:6d:b9:f3:e8:ad:dc:23:26:bb: 24:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E0:90:33:D1:B9:8F:8A:3E:68:84:49:AE:86:7C:0C:E6:A1:AB:48 X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ca:94:89:4a:19:16:7e:51:8d:31:d7:38:8e:79:26:f4:01: 9f:ad:cd:60:83:51:df:76:45:50:ed:2d:49:fe:8f:42:db:80: 75:32:df:f6:f1:fa:26:6e:88:8b:a3:d7:06:54:ed:ff:dc:00: 2f:94:75:1a:7a:d7:0a:3b:d0:38:a6:60:34:96:49:06:f6:ab: 11:1b:f0:1c:1d:4b:d0:b9:7c:0f:2c:7d:8c:61:1b:e8:a3:ce: 6d:d6:da:41:b7:2d:c0:a7:61:53:e1:71:07:c8:4d:ed:bd:1c: ea:e5:70:6e:e4:ce:41:3f:dd:b7:0e:c1:15:39:42:52:12:4b: 04:64:24:9f:ee:04:cc:e0:9d:a8:7b:2e:86:01:f2:c4:d5:c2: f4:50:ab:e9:12:67:2f:22:05:36:bf:89:e7:fe:c1:bb:72:b3: dd:31:f3:c0:ae:17:bb:97:16:26:6f:7f:bf:bc:b1:78:12:e9: e5:fb:c9:f5:44:67:cf:7d:5c:36:cc:41:88:70:58:77:7e:73: 54:27:85:31:47:56:af:bb:33:79:1e:84:1d:46:24:54:d7:27: 9e:63:70:1c:75:f4:5e:ee:81:8e:9a:e4:f2:e0:a1:21:61:34: 4f:71:11:9b:67:4c:c0:94:0b:e3:c8:0d:42:be:b9:af:5c:9a: 1a:1a:da:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWSGo/1t+3mXCRd3lbl7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjYwNTEyMTgwMDQwWhcNMjYwNTEzMTgwMDQwWjAzMTEwLwYDVQQD Eyg1MmUwOTAzM2QxYjk4ZjhhM2U2ODg0NDlhZTg2N2MwY2U2YTFhYjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsbgoilo0gK5CUzK2BXGNlCFMeNg o5vTwGp4FF5p8OC6jYBhea/wfeadZGNmP0/ciM772+AYHQyHKuRWmvwNfxzXD9kV SB9L9GLpVGCztyzO2FTXCo1q7KVjC6PfvEYN6hEgtsKJZOEcnDrOAsr8pZifkr77 OWprAtiuFC+c2grhkwqw/t8htuw087s4+4yl5VEMhh3ZvJQRiSmN9oAH8au4Y2zP AcPsKBN+HID1xJTnSq6rB2fWZOgG7lFLtlBxvuJZSdsAU/JmcHeGtdktlu9Ijw9Z mn2NzMk/dQrXGMxrQY3n96V9PTcaH5q97pfcgBIn5HZtufPordwjJrskFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLgkDPRuY+KPmiESa6GfAzmoatIMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsqUiUoZ Fn5RjTHXOI55JvQBn63NYINR33ZFUO0tSf6PQtuAdTLf9vH6Jm6Ii6PXBlTt/9wA L5R1GnrXCjvQOKZgNJZJBvarERvwHB1L0Ll8Dyx9jGEb6KPObdbaQbctwKdhU+Fx B8hN7b0c6uVwbuTOQT/dtw7BFTlCUhJLBGQkn+4EzOCdqHsuhgHyxNXC9FCr6RJn LyIFNr+J5/7Bu3Kz3THzwK4Xu5cWJm9/v7yxeBLp5fvJ9URnz31cNsxBiHBYd35z VCeFMUdWr7szeR6EHUYkVNcnnmNwHHX0Xu6Bjprk8uChIWE0T3ERm2dMwJQL48gN Qr65r1yaGhrafw== -----END CERTIFICATE-----Generated at Tue May 12 21:12:18 2026 by rpki-client