$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft File: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json) Hash identifier: JcMEDYcpTcBpboyOype6lDRlQkNSR7lF+FpdbVfkmIU= Subject key identifier: E5:4D:12:5B:7C:05:DC:D9:60:93:F0:3F:E1:81:8E:51:F7:EF:17:A6 Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019D26CCECA1C81927AEA83C6928AE0279BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft Manifest number: 18AF Signing time: Wed 25 Mar 2026 21:00:57 +0000 Manifest this update: Wed 25 Mar 2026 21:00:57 +0000 Manifest next update: Thu 26 Mar 2026 21:00:57 +0000 Files and hashes: 1: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: SpDYWAAxlnkEbFDtpoVGrQrab/VP74QE4qH2JYgJnzM=) 2: C49vSVt4dfdT17Z5kZxdlV_lY_Y.roa (hash: 6HfpvHUMJisoBNoMG7lySqZtsVK9Z40fSQ9YGkMMFF0=) 3: CYTlKlzSJSqB3jTzZOH673qv2os.roa (hash: nMYpBRNUUmqx48+xTuVDjH9QkSUeA9v7hDY4KWKCBCQ=) 4: DIVTK05T8Vdhwjp7g0z7MnF1TQQ.roa (hash: 6vlsDL0j8NnBvb9Ab/QGUCQui9hFjQ/teVqIFOEkwLQ=) 5: ENla5OgKBu9uunWqxWQAfu7kwx0.roa (hash: Fbmqrk8r0alDCgWyzCOzHqp7tHL/3UqhpNT6d1lPtlY=) 6: IamjYw1vikCzZIhDeU8H0NMAjHs.roa (hash: M+kmsNXkFSxnu0j1QJUyRMfdThsPZBpSXk2/kSsLWUY=) 7: Iyt7Ob_snKf1ZPop-eeEldXM0fQ.roa (hash: 9XeUKSaM919H72Lo2RzCdmjP30DLuCdA4txuvCcKAVk=) 8: ODquW4yfiTrN0BslpesyLROdhCU.roa (hash: LguXTTUIpUVmRso7Duo92XjODqxY0o7l3A4Aw6gkmmA=) 9: Q5HfXdIQnusnCwKJeNtcbaxYKRw.roa (hash: cgDqaBa5oL7jHKKM1uUVRVvnMYGroeNLDuSFwDAGhy8=) 10: _izOulmhuUBG3FatKk1kjhEzI5I.roa (hash: D2Y24n1qrh+NyvYt/hta8znqPyvAoiiYcPgWq6TG2zI=) 11: bAO9OihdfpmA-XpEMUum-i6NlvM.roa (hash: w9BYm30HDg7VDCHpAaP2FWEEPT1iEKkPQOttAF9gh5o=) 12: bnpbPX_ctt0kqkwx6ukV-j4WTGM.roa (hash: 730AnutRLa9Haz+ZMN+qGZx6PYPOqH6zu3NH8XC/47k=) 13: dbi31yJdjzH-gnfiJixAWom7O2Y.roa (hash: wv59+nx6Q7SMg8qYiivt/O65l/1UFWdvKThzkz1L+E8=) 14: gTyFz4o7qq-mz7kkyhI4YQAE3F8.roa (hash: ql1a+n9u4sT8twi+Ey5tWWvsl/zO/3fN4L8B2DWoXrk=) 15: h2mTI89G79vzZdTXcNgpiY_bSuE.roa (hash: qa2BzNyouPFY7/V6+HRcQ7umJPtaaWKwpg9jeFVJFSE=) 16: hhAxTUm-YLDfu5gnVbj74LIg_xE.roa (hash: 5lrRMZNGyqCPeI3ughaZF3pVN6T3OxbFiijuNyO2VPw=) 17: j8JXlUTEd1j_9VoERc0ZtsXM8O8.roa (hash: A11q2a+vMmn2Uc3d6mAqUut0tGh3JvhOP0a9hwmGjMs=) 18: lru0bK1pFWTdlNh3tSeVRy2RxB4.roa (hash: D3uDWSg2oVhHneIgFjvyT24SUbp4OtxjQr0JkAH/IGY=) 19: x9kxYUUdYs3Vc1XQvx9EJnJhrDs.roa (hash: Xjj2UlUQT0tIyuN4wzeBBIdle7HnaFZ9oWTYHnJPnD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cc:ec:a1:c8:19:27:ae:a8:3c:69:28:ae:02:79:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Mar 25 21:00:57 2026 GMT Not After : Mar 26 21:00:57 2026 GMT Subject: CN=e54d125b7c05dcd96093f03fe1818e51f7ef17a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:84:ae:07:c1:b6:b5:d2:05:c6:f0:c6:cc:35: 57:fe:0c:15:47:20:3c:d5:d4:b2:01:f4:13:cd:9a: 73:3a:61:46:3c:05:aa:70:13:7e:4a:ec:44:4a:eb: 22:69:dd:9d:98:0f:d7:45:c3:f9:4d:60:05:1c:02: 8f:fa:70:cb:8e:fd:54:5c:ea:a8:66:a3:af:9c:fa: cb:98:c8:81:65:c7:5d:48:af:3c:de:24:11:7f:dd: 59:7a:50:07:1f:9c:6b:cc:05:e2:d2:f3:22:d4:8d: e9:f1:bd:e5:a9:c8:36:4b:e9:b6:27:e4:11:62:6f: b9:33:77:51:76:8f:83:24:70:85:82:9a:4a:b5:db: 9b:99:59:df:68:c8:fb:e9:5b:26:68:ed:6d:03:4c: 0a:9a:ae:85:c8:a8:6e:83:3d:77:22:b5:df:b7:90: df:21:d3:e6:fb:cd:96:78:b8:a5:7a:08:d9:b6:97: a8:95:53:5d:0d:87:f4:e3:9e:61:ee:5b:0e:65:d4: 9a:de:89:a5:c6:ee:84:f7:59:4f:2f:f4:85:ca:50: e1:9e:da:b5:4b:ed:95:7b:6b:ac:c7:2c:ad:a1:ce: 32:03:c0:bc:04:50:f4:d8:eb:ae:31:50:22:c4:4c: 45:be:3c:ff:55:82:14:88:46:ce:17:a7:b7:c6:0b: 3f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4D:12:5B:7C:05:DC:D9:60:93:F0:3F:E1:81:8E:51:F7:EF:17:A6 X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:29:44:0d:74:a1:a8:bc:b4:c4:77:3f:01:a2:86:27:fc:4c: c5:c4:fa:4d:20:4d:90:3d:6e:64:39:76:1d:b8:bc:3c:b5:2e: f3:6a:ad:f3:45:34:84:fa:ce:04:16:8c:0a:43:1c:67:c2:ef: da:f4:e7:b4:ce:c3:d9:6b:95:2e:94:0a:56:c8:8f:28:16:1f: 20:c5:95:e2:92:7a:e5:be:00:b6:fe:20:03:19:92:ce:ba:47: 06:a4:96:0d:24:fd:7d:b3:90:98:54:f7:36:58:78:b0:77:57: 00:fa:75:49:f1:46:c2:e8:51:ae:3f:ce:1f:74:01:14:89:fe: 3f:c8:a8:74:41:b9:5f:5f:92:82:30:0b:1f:fd:0d:f0:01:1c: 1b:42:f7:3a:04:29:4b:1e:fb:25:2a:b9:77:89:8b:ba:8d:5e: 5f:7d:5d:db:3f:6c:18:bd:0e:8f:03:e9:cb:cb:31:42:ce:f4: 9c:b4:b7:67:7f:d2:4e:50:c6:ad:2c:df:74:2d:63:4e:36:e3: de:53:8f:ae:3b:29:21:a5:a2:78:79:41:86:31:34:fe:68:9e: c5:c4:7f:d1:4d:af:fb:3f:5f:4b:87:41:53:21:9d:e0:94:0e: e1:54:60:bd:04:26:fa:8f:42:fd:a8:f5:67:01:fc:07:0d:82: 6e:47:5d:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzOyhyBknrqg8aSiuAnm+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwMzI1MjEwMDU3WhcNMjYwMzI2MjEwMDU3WjAzMTEwLwYDVQQD EyhlNTRkMTI1YjdjMDVkY2Q5NjA5M2YwM2ZlMTgxOGU1MWY3ZWYxN2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ISuB8G2tdIFxvDGzDVX/gwVRyA8 1dSyAfQTzZpzOmFGPAWqcBN+SuxESusiad2dmA/XRcP5TWAFHAKP+nDLjv1UXOqo ZqOvnPrLmMiBZcddSK883iQRf91ZelAHH5xrzAXi0vMi1I3p8b3lqcg2S+m2J+QR Ym+5M3dRdo+DJHCFgppKtdubmVnfaMj76VsmaO1tA0wKmq6FyKhugz13IrXft5Df IdPm+82WeLilegjZtpeolVNdDYf0455h7lsOZdSa3omlxu6E91lPL/SFylDhntq1 S+2Ve2usxyytoc4yA8C8BFD02OuuMVAixExFvjz/VYIUiEbOF6e3xgs/AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVNElt8BdzZYJPwP+GBjlH37xemMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVylEDXSh qLy0xHc/AaKGJ/xMxcT6TSBNkD1uZDl2Hbi8PLUu82qt80U0hPrOBBaMCkMcZ8Lv 2vTntM7D2WuVLpQKVsiPKBYfIMWV4pJ65b4Atv4gAxmSzrpHBqSWDST9fbOQmFT3 Nlh4sHdXAPp1SfFGwuhRrj/OH3QBFIn+P8iodEG5X1+SgjALH/0N8AEcG0L3OgQp Sx77JSq5d4mLuo1eX31d2z9sGL0OjwPpy8sxQs70nLS3Z3/STlDGrSzfdC1jTjbj 3lOPrjspIaWieHlBhjE0/miexcR/0U2v+z9fS4dBUyGd4JQO4VRgvQQm+o9C/aj1 ZwH8Bw2Cbkddxg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:23:06 2026 by rpki-client