$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: TIghfax7AseSnGY/OKDjmuLLAl73FupUPut6HfLzaLY= Subject key identifier: F8:8C:6A:22:E6:AA:A1:48:4D:84:9F:6B:DA:0B:D9:0F:7B:7F:27:73 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019D2928E58CE962EEF99EE9AA42CD2DB60E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 18A1 Signing time: Thu 26 Mar 2026 08:00:39 +0000 Manifest this update: Thu 26 Mar 2026 08:00:39 +0000 Manifest next update: Fri 27 Mar 2026 08:00:39 +0000 Files and hashes: 1: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (hash: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0=) 2: 37plEvr9_SAxpS24SOyNrKA9Ebo.roa (hash: T+3X8+kwm0mxKJkDFOwSTGKX5y/yChg7gIfBo7o4fzc=) 3: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (hash: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y=) 4: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (hash: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE=) 5: 9KcHIAUvzuR2GWge4D-VK2067f8.roa (hash: 9sijw09CpBSxcD1XyR49IxKSXJ+lbUtfOT6XCsfhPs4=) 6: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (hash: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI=) 7: BmKkxsvsllYGRv2VQUx8x8IPybM.roa (hash: iJVvCwQgSkbFGgNZWYbEzkgvbnxvQYXvysN7fV/Jo/I=) 8: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (hash: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA=) 9: CybUaoE-1zIBrxVRyCGND427ieM.roa (hash: 8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=) 10: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (hash: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=) 11: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (hash: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s=) 12: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (hash: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ=) 13: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (hash: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI=) 14: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (hash: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI=) 15: TEEJpugeYt1F43E2tJGuUV3FeZA.roa (hash: DLdME2cAIv/rSNCUPiFiPYf01huYXXEj3+nEaRucgYU=) 16: Tg7LpYV7I-GpxinThcktcQRnm_4.roa (hash: BbXoN3AQWQv407qJGvIy6QX/6IL8zec6zQB0QjsD6HA=) 17: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (hash: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE=) 18: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (hash: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo=) 19: lUbooQJTqUPsGNWs9whSoRmQ9io.roa (hash: kluWa3I7Ato5aw2LG6KL/4iV6N2sUDy3GUsBbZKsEa8=) 20: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (hash: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ=) 21: sMNPbaJ2swpQDptjsmEdLRBAjsE.roa (hash: wMrNQ1Dt9RdtalTcVqalUbl+Cb5VgC4Yw+MpJfT4roY=) 22: sWFQ2639y5fQaDmU5ThRk6YSWFs.roa (hash: YXKPoBXjKE1eqIFJiy/DtB2fJyWSkDcytdS8/Lx36Lc=) 23: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (hash: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY=) 24: v1XAMryHcbVYBLXiFz1wOW3tUKk.roa (hash: JN1atA5xt1OyKxkpHh4rNxtPiXKSK2GbqwVySmKSgl0=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: /zVOBmFYV49cBOpR7j63C9lT+5LWq4Tp7TMTCUKZYAU=) 26: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (hash: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:28:e5:8c:e9:62:ee:f9:9e:e9:aa:42:cd:2d:b6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Mar 26 08:00:39 2026 GMT Not After : Mar 27 08:00:39 2026 GMT Subject: CN=f88c6a22e6aaa1484d849f6bda0bd90f7b7f2773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c4:28:a3:bc:25:98:8e:6d:ba:a0:b7:c7:1c: 72:d3:e5:e4:53:cd:41:b0:72:63:9d:ea:2d:d1:01: 2f:8f:12:0c:a4:41:08:c4:eb:eb:9f:30:66:5b:41: af:48:00:63:7c:17:9c:b9:30:ff:98:9c:35:44:de: e6:2c:72:2f:fb:b6:55:e6:50:a1:46:7b:52:b4:db: 60:e4:4f:e5:8a:80:57:70:1d:3a:31:f3:29:b9:17: 5a:21:e6:07:d2:71:ac:79:dc:e3:4f:24:94:87:39: 5b:1f:99:53:6a:51:f8:7e:53:65:f6:4a:f2:ac:e7: 63:5b:6f:30:12:1f:16:bb:98:a7:3d:34:93:fe:db: 21:ac:99:66:5c:27:5b:ed:9a:76:2d:e8:45:5b:14: 3c:e1:51:83:9b:a4:2d:7a:6f:10:b1:c6:e1:d5:64: 74:33:ef:de:61:a8:7a:53:53:68:30:a3:5f:06:be: 77:55:5f:99:ad:40:6d:93:1b:ec:d5:3d:0b:38:6f: f5:42:8f:31:6a:19:88:75:47:55:27:d0:83:5c:0e: 18:ea:b1:8e:a7:a3:13:27:a1:e5:65:bb:36:a5:28: 5f:4b:70:b5:74:48:76:92:73:a7:98:0f:10:8b:35: 3a:9f:62:70:a7:85:02:ba:04:45:7e:28:b4:e4:85: 87:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8C:6A:22:E6:AA:A1:48:4D:84:9F:6B:DA:0B:D9:0F:7B:7F:27:73 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f7:5f:b8:d6:bf:2b:f5:72:64:db:9a:03:74:99:dc:4f:9a: 0b:fc:2e:01:9c:e7:b1:88:8f:74:45:ad:50:01:71:ee:9c:3c: ce:75:b2:2c:f7:5d:d6:33:d1:77:06:25:70:56:8e:32:aa:d7: 28:fa:7f:af:16:e0:b4:b2:f8:55:39:4f:e7:11:7b:df:fd:e3: 88:90:2d:b2:d6:e2:a1:79:b0:15:2f:e1:1e:7a:ff:a9:6a:ec: 5d:b3:8d:73:e1:0a:22:d2:75:c6:eb:f7:78:df:7b:e9:d4:94: 03:3b:e5:c6:72:b7:aa:a1:4b:d1:02:af:11:61:4c:14:13:26: 6e:3c:8e:90:47:88:40:e2:db:12:9f:c1:29:ff:36:84:73:ef: a2:5c:9f:34:eb:b4:ab:ec:f3:75:16:de:90:55:0f:e4:5c:ed: ab:f1:00:26:9d:af:0a:85:bd:52:d9:6b:17:0d:3d:30:da:ab: 6f:d7:32:6a:a6:94:1d:ed:a0:4d:b4:cf:ba:d0:da:d0:5b:d9: 40:29:06:a5:21:f4:be:71:ac:f3:b3:bb:5b:59:63:ac:28:e0: 8c:7e:b7:72:74:a3:a8:8b:8e:a4:77:0e:fe:ae:e1:3f:e5:e7: b6:79:04:cb:6f:9b:d1:24:2b:91:b2:a9:4b:1d:87:54:c2:f8: c9:66:d6:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pKOWM6WLu+Z7pqkLNLbYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMzI2MDgwMDM5WhcNMjYwMzI3MDgwMDM5WjAzMTEwLwYDVQQD EyhmODhjNmEyMmU2YWFhMTQ4NGQ4NDlmNmJkYTBiZDkwZjdiN2YyNzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MQoo7wlmI5tuqC3xxxy0+XkU81B sHJjneot0QEvjxIMpEEIxOvrnzBmW0GvSABjfBecuTD/mJw1RN7mLHIv+7ZV5lCh RntStNtg5E/lioBXcB06MfMpuRdaIeYH0nGsedzjTySUhzlbH5lTalH4flNl9kry rOdjW28wEh8Wu5inPTST/tshrJlmXCdb7Zp2LehFWxQ84VGDm6Qtem8Qscbh1WR0 M+/eYah6U1NoMKNfBr53VV+ZrUBtkxvs1T0LOG/1Qo8xahmIdUdVJ9CDXA4Y6rGO p6MTJ6HlZbs2pShfS3C1dEh2knOnmA8QizU6n2Jwp4UCugRFfii05IWHGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiMaiLmqqFITYSfa9oL2Q97fydzMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPdfuNa/ K/VyZNuaA3SZ3E+aC/wuAZznsYiPdEWtUAFx7pw8znWyLPdd1jPRdwYlcFaOMqrX KPp/rxbgtLL4VTlP5xF73/3jiJAtstbioXmwFS/hHnr/qWrsXbONc+EKItJ1xuv3 eN976dSUAzvlxnK3qqFL0QKvEWFMFBMmbjyOkEeIQOLbEp/BKf82hHPvolyfNOu0 q+zzdRbekFUP5Fztq/EAJp2vCoW9UtlrFw09MNqrb9cyaqaUHe2gTbTPutDa0FvZ QCkGpSH0vnGs87O7W1ljrCjgjH63cnSjqIuOpHcO/q7hP+XntnkEy2+b0SQrkbKp Sx2HVML4yWbWsg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:33:37 2026 by rpki-client