$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: 8dgglko7sCVqnsFuDpaLra4lVTY9iZYfNIWeGnjLx9g= Subject key identifier: 46:CC:7A:7C:BD:E8:48:50:6D:B5:D1:D5:8D:8B:29:15:27:E0:C3:5A Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 01A0D3B8F7FD473C0B8574FAE4E6D4334121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 1A87 Signing time: Thu 24 Sep 2026 14:01:49 +0000 Manifest this update: Thu 24 Sep 2026 14:01:49 +0000 Manifest next update: Fri 25 Sep 2026 14:01:49 +0000 Files and hashes: 1: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (hash: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0=) 2: 37plEvr9_SAxpS24SOyNrKA9Ebo.roa (hash: T+3X8+kwm0mxKJkDFOwSTGKX5y/yChg7gIfBo7o4fzc=) 3: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (hash: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y=) 4: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (hash: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE=) 5: 9KcHIAUvzuR2GWge4D-VK2067f8.roa (hash: 9sijw09CpBSxcD1XyR49IxKSXJ+lbUtfOT6XCsfhPs4=) 6: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (hash: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI=) 7: BmKkxsvsllYGRv2VQUx8x8IPybM.roa (hash: iJVvCwQgSkbFGgNZWYbEzkgvbnxvQYXvysN7fV/Jo/I=) 8: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (hash: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA=) 9: CybUaoE-1zIBrxVRyCGND427ieM.roa (hash: 8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=) 10: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (hash: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=) 11: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (hash: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s=) 12: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (hash: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ=) 13: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (hash: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI=) 14: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (hash: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI=) 15: TEEJpugeYt1F43E2tJGuUV3FeZA.roa (hash: DLdME2cAIv/rSNCUPiFiPYf01huYXXEj3+nEaRucgYU=) 16: Tg7LpYV7I-GpxinThcktcQRnm_4.roa (hash: BbXoN3AQWQv407qJGvIy6QX/6IL8zec6zQB0QjsD6HA=) 17: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (hash: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE=) 18: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (hash: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo=) 19: lUbooQJTqUPsGNWs9whSoRmQ9io.roa (hash: kluWa3I7Ato5aw2LG6KL/4iV6N2sUDy3GUsBbZKsEa8=) 20: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (hash: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ=) 21: sMNPbaJ2swpQDptjsmEdLRBAjsE.roa (hash: wMrNQ1Dt9RdtalTcVqalUbl+Cb5VgC4Yw+MpJfT4roY=) 22: sWFQ2639y5fQaDmU5ThRk6YSWFs.roa (hash: YXKPoBXjKE1eqIFJiy/DtB2fJyWSkDcytdS8/Lx36Lc=) 23: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (hash: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY=) 24: v1XAMryHcbVYBLXiFz1wOW3tUKk.roa (hash: JN1atA5xt1OyKxkpHh4rNxtPiXKSK2GbqwVySmKSgl0=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: sG68jGF2xvA0WyCcoS2xEYVZPhcQZEqZcqdoKl1WOp8=) 26: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (hash: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d3:b8:f7:fd:47:3c:0b:85:74:fa:e4:e6:d4:33:41:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Sep 24 14:01:49 2026 GMT Not After : Sep 25 14:01:49 2026 GMT Subject: CN=46cc7a7cbde848506db5d1d58d8b291527e0c35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:88:7d:77:23:db:56:0f:7b:45:b7:49:a8:a9: 8c:7d:02:54:76:46:fe:60:cb:22:ea:97:b7:85:46: de:ef:bf:1c:45:57:51:74:ef:4b:f8:86:e2:10:5d: 27:d0:74:2a:99:f8:42:01:5d:ac:7b:d6:07:af:ba: fe:e6:00:3a:63:83:70:8d:61:9e:4d:85:eb:b7:a0: 7a:e0:83:ae:e3:64:d2:24:0c:64:5d:71:5e:d5:4f: c9:0a:fe:15:b8:ff:ad:fa:93:b2:db:8d:fa:1f:bf: 2c:07:1c:56:a1:83:06:7b:c8:69:81:1e:eb:e6:2d: d5:ef:e7:e9:12:f7:cb:5f:c8:a2:ff:36:04:58:a7: 02:8a:6e:97:69:ef:98:57:95:de:78:78:df:0d:3b: c3:0e:ef:c7:b3:45:c3:ce:85:e3:f6:1d:31:61:f8: 4a:67:a1:ee:89:ca:17:63:77:d0:91:dc:4c:32:97: f1:d9:da:82:c8:e3:d5:b0:3b:60:b0:75:83:f5:be: a8:44:f4:e1:df:f1:3d:f2:c0:f1:5e:33:bd:25:ca: d1:70:c2:f8:a7:e6:38:15:16:76:bd:2b:d6:91:82: e2:e0:89:3f:c2:f9:30:a3:89:17:75:50:99:e0:46: c9:d9:04:4c:84:94:83:a3:1f:2d:80:57:50:94:c5: 00:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CC:7A:7C:BD:E8:48:50:6D:B5:D1:D5:8D:8B:29:15:27:E0:C3:5A X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:97:ac:91:bf:f3:4a:ac:2c:3b:f2:03:a4:14:18:24:ce:69: cb:0f:9d:49:5a:e7:f1:8a:60:5e:61:47:c7:4f:6b:68:f7:51: 82:4e:64:9d:b7:fe:33:26:e0:a9:5b:15:79:bd:2d:d1:ee:eb: 21:bf:35:3b:cd:f7:f5:3f:d2:5d:24:56:b6:39:0a:a9:fb:20: c8:f7:4a:a2:89:bf:a8:d7:c1:18:b9:6e:ab:1f:1e:2b:8a:ad: 67:02:a9:f7:9b:0b:6a:bf:12:bf:65:68:e1:4f:b9:c4:18:ce: e2:8b:21:0c:55:09:e2:0d:c8:33:4d:61:21:0f:bd:fa:20:7d: 66:f5:c8:65:65:6c:b9:5d:5d:b8:61:f5:57:13:95:6e:c6:f8: 56:3f:b0:69:61:d2:59:14:6e:51:c4:68:9f:52:0e:75:f2:11: e9:1d:b7:7e:f0:0d:d0:b5:5b:33:a6:01:d9:26:84:36:cb:4d: 21:bf:fd:85:29:02:3e:d7:ca:bc:19:39:aa:ae:30:d4:cd:23: c8:64:35:85:dd:00:da:7d:3d:b7:01:30:28:84:4c:14:eb:5e: a8:a1:d7:3a:72:b7:cb:22:38:f9:53:a9:69:80:38:80:34:c1: 7e:8b:20:cc:61:38:9b:83:91:c5:86:ad:ee:a9:2f:cc:5c:2c: 44:b4:21:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDTuPf9RzwLhXT65ObUM0EhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwOTI0MTQwMTQ5WhcNMjYwOTI1MTQwMTQ5WjAzMTEwLwYDVQQD Eyg0NmNjN2E3Y2JkZTg0ODUwNmRiNWQxZDU4ZDhiMjkxNTI3ZTBjMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoh9dyPbVg97RbdJqKmMfQJUdkb+ YMsi6pe3hUbe778cRVdRdO9L+IbiEF0n0HQqmfhCAV2se9YHr7r+5gA6Y4NwjWGe TYXrt6B64IOu42TSJAxkXXFe1U/JCv4VuP+t+pOy2436H78sBxxWoYMGe8hpgR7r 5i3V7+fpEvfLX8ii/zYEWKcCim6Xae+YV5XeeHjfDTvDDu/Hs0XDzoXj9h0xYfhK Z6HuicoXY3fQkdxMMpfx2dqCyOPVsDtgsHWD9b6oRPTh3/E98sDxXjO9JcrRcML4 p+Y4FRZ2vSvWkYLi4Ik/wvkwo4kXdVCZ4EbJ2QRMhJSDox8tgFdQlMUABQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbMeny96EhQbbXR1Y2LKRUn4MNaMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJeskb/z SqwsO/IDpBQYJM5pyw+dSVrn8YpgXmFHx09raPdRgk5knbf+MybgqVsVeb0t0e7r Ib81O8339T/SXSRWtjkKqfsgyPdKoom/qNfBGLluqx8eK4qtZwKp95sLar8Sv2Vo 4U+5xBjO4oshDFUJ4g3IM01hIQ+9+iB9ZvXIZWVsuV1duGH1VxOVbsb4Vj+waWHS WRRuUcRon1IOdfIR6R23fvAN0LVbM6YB2SaENstNIb/9hSkCPtfKvBk5qq4w1M0j yGQ1hd0A2n09twEwKIRMFOteqKHXOnK3yyI4+VOpaYA4gDTBfosgzGE4m4ORxYat 7qkvzFwsRLQhKg== -----END CERTIFICATE-----Generated at Thu Sep 24 16:56:55 2026 by rpki-client