$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft File: CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json) Hash identifier: /ob8gcx0uYFTy12zXEArLvGiUMmZ7BRhLVDZW4FyNJQ= Subject key identifier: 72:C6:4A:26:14:09:14:96:6B:2B:49:EF:81:6E:86:5B:E1:2E:59:BD Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019D28BB633D9EFD9AE48CFEE5B4B0EE6F09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft Manifest number: 1238 Signing time: Thu 26 Mar 2026 06:01:02 +0000 Manifest this update: Thu 26 Mar 2026 06:01:02 +0000 Manifest next update: Fri 27 Mar 2026 06:01:02 +0000 Files and hashes: 1: 07XYxZm2jgrEmO1HuzMvRYzMMuA.roa (hash: nY7m4KC7AI0Ecpy/qnFSivU7gbK1MuLa2jlBoOfj+EI=) 2: 5pKnnMxvmXQkgUx4iD030qaafz8.roa (hash: IozSxfWn+UQdKpc/wlrGsOFheXQl2L332SmtWMgRUXY=) 3: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: /+BIMNK1SPQJ7TU2aYDwAgvwF6QvqO5h4WPCmr1TlJg=) 4: Cop4QBFgPz7q3SAgsCzxjQw2-I4.roa (hash: 3+KMIe4ykTPEMsf6KYjZSYj0RLNxjRnmFAFq/w1rKME=) 5: GmoWBFdZxgpgR02IJOtNWXU60Fg.roa (hash: JAxT+56ClLIWR3r+vCv75YuOZRohTPeo2TN6vnnL43w=) 6: HClmRpwZ5qb-6Tw5Lpkkp6vUq24.roa (hash: R6anRTSdgq6QM25eUKnQ4vUTar0ktx5VjKKHjNUMua0=) 7: Idn5X01I8ewaC6lH5aMO8qDPZR8.roa (hash: inaT9YDkDzXeVmAusXdqKqfZJOTOaFo7hAptlKwjJcY=) 8: OJ1w1WvW4k3Ga1EBJCqY-_2nqzU.roa (hash: b5bk7yZz1Is4O8Xir/sTrR/mIRsoYCAaY6BCfdgn5ZQ=) 9: RuMQUL9WOmEJvLWt-qr_BF1Gb5Q.roa (hash: 43NWQzsz8KlfwddLNubmNg8ArqPU7FB+g1mEx1VSbLQ=) 10: TiqcBX8Xr8pCHaLkUx1X8iTEFj4.roa (hash: 3bwGL1/nE8oEOwOy0jR0e8JowdddSDpqjg7t1twul8Y=) 11: X8XbI1H9IfSg3qQsQSowZ5W9qIQ.roa (hash: 9tYchkibyiGf63vXdkvYVj/MGH8M6+b7g0ZGSiDWW4k=) 12: XOw8JNJO-uIg9HHlnw548ZJ5LdI.roa (hash: jEOkOMDISMGQm6lDZ5S6iuPlerKdJ4lpqsbuzz6ZhmY=) 13: Zp_dQMxeK4s5cFJUs-SkUn4FjXk.roa (hash: gjQNsvq1Su+L7BoPrc7WNGYbmEUyjE7QFdUTdDWn9gA=) 14: _muqkDefxMn6elW9A6x3-u89qsI.roa (hash: hm15ty/qT5a1amDhQKBPxEwo6xcyPJbCH7A9J8+gqhU=) 15: bXpAY6oapcJJSsH74H_lsZNy-FA.roa (hash: lyF3GT0AHqEUFHykQSaeBtexwb64bMUL9++L8uFcKf0=) 16: b_TRZnQbpKGGr7WruYBNW7N39mI.roa (hash: vbQnurk8ZzdTBK99uDa/ZNS1iZlMBI/qDpBfj+6WAww=) 17: bbtN_5mwzIbiwz2iYZsWxgs7DYc.roa (hash: qaL3qNP2rfqqJbxA2Yxe7UXhzeA/+z+h+72ODdJbZt8=) 18: ffQ9wRR3lmZ7SrnLaJ08cFzb4uw.roa (hash: jojS/hwBp8bJCEys0uBEnShnLC0EMlO6n+Kx5AShBU4=) 19: g_Cj5GDUwa2HLHUJiCflYDLH1LI.roa (hash: cBANxlLCPRrDnxn+SNqepP9E9vwZCWHdv7vEfvn4Idc=) 20: gjq1MTizVb0vbeiS6fNwKoAJ-98.roa (hash: td/7FNnAxcaaN4cNgr43h1h/pk1l7x0GL3ZuIt/TdB4=) 21: gr7bdy0VGRdMj5tfmP6Hs9UXaj4.roa (hash: QyHstRZRdvd47ZQl36Rd/igqRzb8/8PpW8S7eiZiQPM=) 22: hYRrlG4ePJA5Yx73qthpN3BdmIY.roa (hash: i1ovuAdJSnvNJTo743kB/D+xmK1EozUSuKfnkZOGoUY=) 23: pruIfGKy-LHxbXkUqWldmAUFWtc.roa (hash: 4egx1uoR7Tsrvs4GjXk3vLBvPfSpindvdQmt0Be0I9c=) 24: uTHa6sFwz7iHdcsHyP4fqm0OW5k.roa (hash: v43HCGHUrt3AhlDzq1vOZbFXiCOEf6fmSyNlKWtvXnE=) 25: yPPudgQzJCUtVTuuzqJps2ZZOcg.roa (hash: ps1MAAJtV3fUVlLrQIgjyj1ZoNoHchwEw8Y92fP5Qps=) 26: zsWUC_e9yhKUrFPIEUkIvI5aHHA.roa (hash: NI+95z1P6YBvuLPF/+hkyTmgVTfETjJIbBe1gLRv9dk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:bb:63:3d:9e:fd:9a:e4:8c:fe:e5:b4:b0:ee:6f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Mar 26 06:01:02 2026 GMT Not After : Mar 27 06:01:02 2026 GMT Subject: CN=72c64a26140914966b2b49ef816e865be12e59bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c1:18:40:03:8f:bb:6f:e9:97:cd:82:b9:e4: 80:ee:3a:25:c9:df:21:6d:10:a9:b8:06:81:c7:b3: a6:d7:17:9b:65:a3:c7:8d:9d:c8:bb:da:1d:96:d7: b0:8a:54:98:6e:58:78:81:55:f0:09:c9:3c:7e:d4: 19:f1:3e:e1:88:e1:00:e7:69:19:89:2a:ea:d8:0c: 06:89:86:9e:79:32:07:59:02:24:ea:89:10:20:8f: 29:b5:07:4d:3a:6b:44:4e:a7:22:1e:f7:1e:33:bd: 55:66:f2:8a:a6:b2:b8:89:f1:0b:28:d9:8b:58:87: 82:e4:f6:01:16:4f:86:ab:8f:5a:3b:13:9f:32:77: 8b:00:5c:8f:c2:1b:7f:a2:02:4f:e5:d7:bf:e8:4f: 6f:a8:60:71:e6:96:d1:c0:ad:f7:86:2d:75:cc:76: 0d:24:5f:96:3b:d1:94:81:4a:89:b6:24:49:58:ae: 38:a5:c2:79:95:51:4e:6a:d0:90:49:61:3f:ef:1f: c5:00:90:95:b8:cd:9e:7a:9c:ac:c2:88:35:38:01: da:c5:d4:d3:74:a1:19:27:8d:78:2b:59:e7:1b:ba: e7:b7:e1:5c:90:fb:a5:42:e8:c7:68:f6:98:31:3e: aa:1c:b0:2c:b9:3b:cb:50:25:2d:0d:82:a4:fb:f2: 2f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C6:4A:26:14:09:14:96:6B:2B:49:EF:81:6E:86:5B:E1:2E:59:BD X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:16:1d:d3:d7:3a:f4:e9:b6:5f:8a:6e:ba:7c:2d:48:3a:d0: 4a:a1:99:98:88:97:d7:1c:f5:15:5d:a9:f8:b5:67:82:b2:ad: d7:63:9d:0f:3e:57:09:4e:68:54:71:eb:9e:c8:a7:be:3d:8d: 7e:3f:66:ea:f9:f8:45:db:5b:ba:e1:f1:9a:fb:47:7f:ca:29: e0:d6:e2:fd:f2:ad:90:fc:40:a9:7b:37:3a:63:b7:9f:e2:9f: 23:16:d0:42:e3:f4:01:7c:57:82:7d:08:20:a8:e3:17:aa:db: ae:10:8b:0b:56:a9:46:73:f1:25:fe:d5:39:ba:96:5a:d0:b0: 92:ce:40:34:b9:2c:fc:66:aa:51:32:34:5d:6d:2b:17:f2:43: c5:0c:fc:a4:27:eb:e3:f1:e3:aa:01:4a:86:b5:be:ff:0d:b8: 1d:6c:66:d3:1b:6c:9a:e9:83:bd:2b:17:f6:24:3b:1e:12:23: f8:d4:3c:35:70:15:84:11:5c:bf:37:81:f6:78:f9:5b:71:f5: 87:34:61:37:7f:bf:61:da:db:52:00:8e:f4:7f:65:00:1f:dd: a9:82:52:30:d9:a8:e8:04:09:f8:c2:f9:ed:a0:d4:19:ab:06: 43:ec:e8:4d:da:62:7a:13:53:bb:73:a4:85:3d:b6:fc:9d:25: 66:d8:dc:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ou2M9nv2a5Iz+5bSw7m8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjYwMzI2MDYwMTAyWhcNMjYwMzI3MDYwMTAyWjAzMTEwLwYDVQQD Eyg3MmM2NGEyNjE0MDkxNDk2NmIyYjQ5ZWY4MTZlODY1YmUxMmU1OWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcEYQAOPu2/pl82CueSA7jolyd8h bRCpuAaBx7Om1xebZaPHjZ3Iu9odltewilSYblh4gVXwCck8ftQZ8T7hiOEA52kZ iSrq2AwGiYaeeTIHWQIk6okQII8ptQdNOmtETqciHvceM71VZvKKprK4ifELKNmL WIeC5PYBFk+Gq49aOxOfMneLAFyPwht/ogJP5de/6E9vqGBx5pbRwK33hi11zHYN JF+WO9GUgUqJtiRJWK44pcJ5lVFOatCQSWE/7x/FAJCVuM2eepyswog1OAHaxdTT dKEZJ414K1nnG7rnt+FckPulQujHaPaYMT6qHLAsuTvLUCUtDYKk+/IvKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLGSiYUCRSWaytJ74FuhlvhLlm9MB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARYd09c6 9Om2X4puunwtSDrQSqGZmIiX1xz1FV2p+LVngrKt12OdDz5XCU5oVHHrnsinvj2N fj9m6vn4RdtbuuHxmvtHf8op4Nbi/fKtkPxAqXs3OmO3n+KfIxbQQuP0AXxXgn0I IKjjF6rbrhCLC1apRnPxJf7VObqWWtCwks5ANLks/GaqUTI0XW0rF/JDxQz8pCfr 4/HjqgFKhrW+/w24HWxm0xtsmumDvSsX9iQ7HhIj+NQ8NXAVhBFcvzeB9nj5W3H1 hzRhN3+/YdrbUgCO9H9lAB/dqYJSMNmo6AQJ+ML57aDUGasGQ+zoTdpiehNTu3Ok hT22/J0lZtjcHw== -----END CERTIFICATE-----Generated at Thu Mar 26 09:02:38 2026 by rpki-client