$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft File: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json) Hash identifier: e+Cpoj+C0CH9Dd+VN087OZ8q9sIJuPAJglknff5eVEg= Subject key identifier: F2:57:F6:E1:17:7F:F6:AE:7C:63:54:91:AD:05:D4:0B:19:56:58:D8 Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 01A0D45D61D3C0E11BCDB5CCE9190385A4B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft Manifest number: 1A97 Signing time: Thu 24 Sep 2026 17:01:24 +0000 Manifest this update: Thu 24 Sep 2026 17:01:24 +0000 Manifest next update: Fri 25 Sep 2026 17:01:24 +0000 Files and hashes: 1: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: IfvDRyVd9Bw6C9Xok6ANEPtSL9iY90bvo6IfzYpW5W0=) 2: C49vSVt4dfdT17Z5kZxdlV_lY_Y.roa (hash: 6HfpvHUMJisoBNoMG7lySqZtsVK9Z40fSQ9YGkMMFF0=) 3: CYTlKlzSJSqB3jTzZOH673qv2os.roa (hash: nMYpBRNUUmqx48+xTuVDjH9QkSUeA9v7hDY4KWKCBCQ=) 4: DIVTK05T8Vdhwjp7g0z7MnF1TQQ.roa (hash: 6vlsDL0j8NnBvb9Ab/QGUCQui9hFjQ/teVqIFOEkwLQ=) 5: ENla5OgKBu9uunWqxWQAfu7kwx0.roa (hash: Fbmqrk8r0alDCgWyzCOzHqp7tHL/3UqhpNT6d1lPtlY=) 6: Gd1jgkbYPMlLshrmT5bN1iKt1Zc.roa (hash: 6E+Sma6MsZfgSjGZCxQl81Nm/7sMb7NSZ9dIkuBxamk=) 7: IamjYw1vikCzZIhDeU8H0NMAjHs.roa (hash: M+kmsNXkFSxnu0j1QJUyRMfdThsPZBpSXk2/kSsLWUY=) 8: Iyt7Ob_snKf1ZPop-eeEldXM0fQ.roa (hash: 9XeUKSaM919H72Lo2RzCdmjP30DLuCdA4txuvCcKAVk=) 9: Q5HfXdIQnusnCwKJeNtcbaxYKRw.roa (hash: cgDqaBa5oL7jHKKM1uUVRVvnMYGroeNLDuSFwDAGhy8=) 10: _izOulmhuUBG3FatKk1kjhEzI5I.roa (hash: D2Y24n1qrh+NyvYt/hta8znqPyvAoiiYcPgWq6TG2zI=) 11: bAO9OihdfpmA-XpEMUum-i6NlvM.roa (hash: w9BYm30HDg7VDCHpAaP2FWEEPT1iEKkPQOttAF9gh5o=) 12: bnpbPX_ctt0kqkwx6ukV-j4WTGM.roa (hash: 730AnutRLa9Haz+ZMN+qGZx6PYPOqH6zu3NH8XC/47k=) 13: dbi31yJdjzH-gnfiJixAWom7O2Y.roa (hash: wv59+nx6Q7SMg8qYiivt/O65l/1UFWdvKThzkz1L+E8=) 14: gTyFz4o7qq-mz7kkyhI4YQAE3F8.roa (hash: ql1a+n9u4sT8twi+Ey5tWWvsl/zO/3fN4L8B2DWoXrk=) 15: h2mTI89G79vzZdTXcNgpiY_bSuE.roa (hash: qa2BzNyouPFY7/V6+HRcQ7umJPtaaWKwpg9jeFVJFSE=) 16: hhAxTUm-YLDfu5gnVbj74LIg_xE.roa (hash: 5lrRMZNGyqCPeI3ughaZF3pVN6T3OxbFiijuNyO2VPw=) 17: j8JXlUTEd1j_9VoERc0ZtsXM8O8.roa (hash: A11q2a+vMmn2Uc3d6mAqUut0tGh3JvhOP0a9hwmGjMs=) 18: lru0bK1pFWTdlNh3tSeVRy2RxB4.roa (hash: D3uDWSg2oVhHneIgFjvyT24SUbp4OtxjQr0JkAH/IGY=) 19: x9kxYUUdYs3Vc1XQvx9EJnJhrDs.roa (hash: Xjj2UlUQT0tIyuN4wzeBBIdle7HnaFZ9oWTYHnJPnD4=) 20: yANucdgEc1d0SNlX9N4mAfLd3FI.roa (hash: aYUGTbKXXzJP8D5gN1satw5qfxqKP8FY7aLZMQYHTqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:5d:61:d3:c0:e1:1b:cd:b5:cc:e9:19:03:85:a4:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Sep 24 17:01:24 2026 GMT Not After : Sep 25 17:01:24 2026 GMT Subject: CN=f257f6e1177ff6ae7c635491ad05d40b195658d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:75:9c:71:36:3b:8a:15:18:69:4a:18:9a: 42:d3:98:9e:20:9e:e4:a3:e9:37:7c:cc:aa:70:ad: 02:fc:18:73:3a:3c:41:29:ce:01:af:b8:e2:db:fb: dd:ba:47:62:f3:74:1f:94:14:cc:e7:fa:b3:2e:51: c3:3c:90:d5:60:9f:97:d0:a2:cf:0e:6c:2c:ab:0b: c1:ae:0e:9d:65:59:8c:81:95:c4:4e:2d:db:4c:1d: 5f:98:6b:97:f1:31:42:e1:b6:4b:ee:08:51:46:43: f1:55:de:60:07:7b:01:80:db:5d:95:5d:41:cb:bc: 06:66:44:e0:cf:5a:80:31:4d:19:c5:72:b5:63:ca: 05:85:83:c0:96:df:58:71:ec:97:81:82:ac:21:7d: 63:3d:5d:20:b8:98:15:8b:02:ba:80:11:ff:54:a4: 22:65:70:e2:45:69:f3:1d:13:1a:19:58:4d:f2:22: 18:ed:1f:98:24:f2:09:f1:fb:7c:b8:90:31:66:52: 9d:0b:95:2c:da:1b:f3:26:d7:27:57:ef:82:02:60: 34:88:76:47:0f:3c:66:2c:e7:ab:5d:9a:65:13:96: 03:55:61:da:57:9f:ff:08:a7:db:09:7b:79:27:69: 31:65:0b:9c:cf:c3:e0:bd:31:42:34:ec:01:2f:b1: 85:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:57:F6:E1:17:7F:F6:AE:7C:63:54:91:AD:05:D4:0B:19:56:58:D8 X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:60:ed:b8:a3:65:4e:87:1f:12:2e:1a:bd:ae:7c:3e:1b:d3: 81:5f:03:5e:b1:8a:f6:96:a0:f6:6c:24:35:a4:a3:e6:ce:be: d7:82:8f:1b:ab:03:80:bd:33:ef:38:67:a1:74:f9:c6:08:e3: 67:2c:fe:b5:17:24:d5:98:21:0b:e1:29:76:16:c7:38:ef:92: 3d:18:60:ed:95:c2:84:da:90:a4:40:1d:ce:88:db:f3:e0:05: 02:95:d2:ee:50:64:fc:11:57:7b:3e:31:a5:11:be:7d:24:d2: 4c:88:f9:a8:36:08:d4:f1:8c:cb:95:98:4a:57:d9:f9:0c:38: 3a:72:2c:77:97:f5:86:c5:0a:3b:f1:31:fa:06:88:21:c5:97: 14:62:40:16:d4:bc:16:c9:e4:32:0c:b6:c9:f1:e2:13:3d:7e: 0b:8e:c5:63:60:ef:39:00:67:bb:d8:d8:39:65:9a:6e:ba:93: a1:b6:ac:09:4f:a9:92:c7:b2:17:42:a3:26:24:82:d7:dc:1e: fc:82:c0:81:44:19:26:b5:9d:8f:c9:61:14:ba:8b:9e:de:fc: 0d:19:57:54:ab:5c:c3:da:79:0e:9a:43:49:f3:dd:dd:41:bf: 99:c8:05:12:66:bb:e8:84:a2:4b:cb:4c:06:6c:6b:ce:c8:3b: dd:6b:3d:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUXWHTwOEbzbXM6RkDhaSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwOTI0MTcwMTI0WhcNMjYwOTI1MTcwMTI0WjAzMTEwLwYDVQQD EyhmMjU3ZjZlMTE3N2ZmNmFlN2M2MzU0OTFhZDA1ZDQwYjE5NTY1OGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJh1nHE2O4oVGGlKGJpC05ieIJ7k o+k3fMyqcK0C/BhzOjxBKc4Br7ji2/vdukdi83QflBTM5/qzLlHDPJDVYJ+X0KLP DmwsqwvBrg6dZVmMgZXETi3bTB1fmGuX8TFC4bZL7ghRRkPxVd5gB3sBgNtdlV1B y7wGZkTgz1qAMU0ZxXK1Y8oFhYPAlt9YceyXgYKsIX1jPV0guJgViwK6gBH/VKQi ZXDiRWnzHRMaGVhN8iIY7R+YJPIJ8ft8uJAxZlKdC5Us2hvzJtcnV++CAmA0iHZH DzxmLOerXZplE5YDVWHaV5//CKfbCXt5J2kxZQucz8PgvTFCNOwBL7GFjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJX9uEXf/aufGNUka0F1AsZVljYMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWDtuKNl TocfEi4ava58PhvTgV8DXrGK9pag9mwkNaSj5s6+14KPG6sDgL0z7zhnoXT5xgjj Zyz+tRck1ZghC+EpdhbHOO+SPRhg7ZXChNqQpEAdzojb8+AFApXS7lBk/BFXez4x pRG+fSTSTIj5qDYI1PGMy5WYSlfZ+Qw4OnIsd5f1hsUKO/Ex+gaIIcWXFGJAFtS8 FsnkMgy2yfHiEz1+C47FY2DvOQBnu9jYOWWabrqTobasCU+pkseyF0KjJiSC19we /ILAgUQZJrWdj8lhFLqLnt78DRlXVKtcw9p5DppDSfPd3UG/mcgFEma76ISiS8tM Bmxrzsg73Ws9Xw== -----END CERTIFICATE-----Generated at Fri Sep 25 01:07:51 2026 by rpki-client