$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft File: CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json) Hash identifier: 6nHlZld9Bt+hCtdGobEZ0dcaje7OKrRd9g57r3yBuro= Subject key identifier: FC:BA:5F:BC:13:C3:0E:F9:93:E2:1E:DB:56:95:F4:17:07:22:E1:AC Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019E1C1058C42628D2B994A0C7332905FA98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft Manifest number: 12B6 Signing time: Tue 12 May 2026 12:01:33 +0000 Manifest this update: Tue 12 May 2026 12:01:33 +0000 Manifest next update: Wed 13 May 2026 12:01:33 +0000 Files and hashes: 1: 07XYxZm2jgrEmO1HuzMvRYzMMuA.roa (hash: nY7m4KC7AI0Ecpy/qnFSivU7gbK1MuLa2jlBoOfj+EI=) 2: 5pKnnMxvmXQkgUx4iD030qaafz8.roa (hash: IozSxfWn+UQdKpc/wlrGsOFheXQl2L332SmtWMgRUXY=) 3: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: 0jXvq8VUzDcoc0Em3qx2WreSCKMxOauIM5fkQ4GzWi4=) 4: Cop4QBFgPz7q3SAgsCzxjQw2-I4.roa (hash: 3+KMIe4ykTPEMsf6KYjZSYj0RLNxjRnmFAFq/w1rKME=) 5: GmoWBFdZxgpgR02IJOtNWXU60Fg.roa (hash: JAxT+56ClLIWR3r+vCv75YuOZRohTPeo2TN6vnnL43w=) 6: HClmRpwZ5qb-6Tw5Lpkkp6vUq24.roa (hash: R6anRTSdgq6QM25eUKnQ4vUTar0ktx5VjKKHjNUMua0=) 7: Idn5X01I8ewaC6lH5aMO8qDPZR8.roa (hash: inaT9YDkDzXeVmAusXdqKqfZJOTOaFo7hAptlKwjJcY=) 8: OJ1w1WvW4k3Ga1EBJCqY-_2nqzU.roa (hash: b5bk7yZz1Is4O8Xir/sTrR/mIRsoYCAaY6BCfdgn5ZQ=) 9: RuMQUL9WOmEJvLWt-qr_BF1Gb5Q.roa (hash: 43NWQzsz8KlfwddLNubmNg8ArqPU7FB+g1mEx1VSbLQ=) 10: TiqcBX8Xr8pCHaLkUx1X8iTEFj4.roa (hash: 3bwGL1/nE8oEOwOy0jR0e8JowdddSDpqjg7t1twul8Y=) 11: X8XbI1H9IfSg3qQsQSowZ5W9qIQ.roa (hash: 9tYchkibyiGf63vXdkvYVj/MGH8M6+b7g0ZGSiDWW4k=) 12: XOw8JNJO-uIg9HHlnw548ZJ5LdI.roa (hash: jEOkOMDISMGQm6lDZ5S6iuPlerKdJ4lpqsbuzz6ZhmY=) 13: Zp_dQMxeK4s5cFJUs-SkUn4FjXk.roa (hash: gjQNsvq1Su+L7BoPrc7WNGYbmEUyjE7QFdUTdDWn9gA=) 14: _muqkDefxMn6elW9A6x3-u89qsI.roa (hash: hm15ty/qT5a1amDhQKBPxEwo6xcyPJbCH7A9J8+gqhU=) 15: bXpAY6oapcJJSsH74H_lsZNy-FA.roa (hash: lyF3GT0AHqEUFHykQSaeBtexwb64bMUL9++L8uFcKf0=) 16: b_TRZnQbpKGGr7WruYBNW7N39mI.roa (hash: vbQnurk8ZzdTBK99uDa/ZNS1iZlMBI/qDpBfj+6WAww=) 17: bbtN_5mwzIbiwz2iYZsWxgs7DYc.roa (hash: qaL3qNP2rfqqJbxA2Yxe7UXhzeA/+z+h+72ODdJbZt8=) 18: ffQ9wRR3lmZ7SrnLaJ08cFzb4uw.roa (hash: jojS/hwBp8bJCEys0uBEnShnLC0EMlO6n+Kx5AShBU4=) 19: g_Cj5GDUwa2HLHUJiCflYDLH1LI.roa (hash: cBANxlLCPRrDnxn+SNqepP9E9vwZCWHdv7vEfvn4Idc=) 20: gjq1MTizVb0vbeiS6fNwKoAJ-98.roa (hash: td/7FNnAxcaaN4cNgr43h1h/pk1l7x0GL3ZuIt/TdB4=) 21: gr7bdy0VGRdMj5tfmP6Hs9UXaj4.roa (hash: QyHstRZRdvd47ZQl36Rd/igqRzb8/8PpW8S7eiZiQPM=) 22: hYRrlG4ePJA5Yx73qthpN3BdmIY.roa (hash: i1ovuAdJSnvNJTo743kB/D+xmK1EozUSuKfnkZOGoUY=) 23: pruIfGKy-LHxbXkUqWldmAUFWtc.roa (hash: 4egx1uoR7Tsrvs4GjXk3vLBvPfSpindvdQmt0Be0I9c=) 24: uTHa6sFwz7iHdcsHyP4fqm0OW5k.roa (hash: v43HCGHUrt3AhlDzq1vOZbFXiCOEf6fmSyNlKWtvXnE=) 25: yPPudgQzJCUtVTuuzqJps2ZZOcg.roa (hash: ps1MAAJtV3fUVlLrQIgjyj1ZoNoHchwEw8Y92fP5Qps=) 26: zsWUC_e9yhKUrFPIEUkIvI5aHHA.roa (hash: NI+95z1P6YBvuLPF/+hkyTmgVTfETjJIbBe1gLRv9dk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 12:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:10:58:c4:26:28:d2:b9:94:a0:c7:33:29:05:fa:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: May 12 12:01:33 2026 GMT Not After : May 13 12:01:33 2026 GMT Subject: CN=fcba5fbc13c30ef993e21edb5695f4170722e1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:92:d6:cd:d9:41:7f:20:23:b1:17:f9:3f: 49:80:b9:50:a6:c0:a3:02:2a:21:ae:a5:c8:c6:14: 3b:31:fb:00:aa:a0:4b:c0:0b:81:13:cf:d3:8f:f2: a0:b7:c5:cd:a6:63:57:60:e6:4f:57:94:ba:72:5b: ae:d7:e5:15:d6:5f:23:a5:ac:d4:24:5a:8f:6c:34: b1:51:37:77:0b:08:8c:a2:3c:65:96:c6:39:56:8a: 35:c2:84:c5:f2:af:d4:17:16:a5:34:20:8d:f7:5d: bc:ec:75:1b:80:e2:4a:17:58:2b:10:51:23:f8:da: 01:09:1e:ff:a2:db:1c:78:7b:87:f8:38:87:72:a4: d1:b7:a8:1c:95:b8:21:f6:cb:10:ca:fd:8b:9b:b3: cb:67:32:92:78:d6:11:df:33:f8:f4:d6:67:b8:d6: c4:47:09:69:cf:4c:95:d9:6e:ea:da:7a:2c:05:77: 96:cc:bb:0e:92:a7:28:45:14:66:cc:37:0e:6a:2c: 8b:b8:4c:70:21:1f:6f:d0:a4:7d:0b:33:ca:e6:37: 11:50:1f:6a:dc:11:58:d6:46:a2:de:2e:48:50:e5: 3e:38:44:64:8c:af:59:7d:23:20:48:e0:24:0c:cd: 60:1b:71:b7:8e:6f:96:db:20:5e:26:88:77:45:b2: cc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BA:5F:BC:13:C3:0E:F9:93:E2:1E:DB:56:95:F4:17:07:22:E1:AC X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:5c:06:5c:d4:e7:5b:08:6c:d0:8c:5e:39:c7:4f:1f:74:9a: 69:6b:b2:4a:bf:be:a8:b6:68:ce:0d:c2:71:ec:50:dd:e0:fc: 06:08:95:ad:59:a2:40:fc:9c:0c:e0:14:cb:ad:e3:57:8f:4a: 1b:57:da:31:a1:e5:25:d1:90:36:d3:8b:8a:38:2a:b9:92:61: 4a:56:d6:03:4f:db:18:25:18:b1:c6:56:d3:22:eb:ca:7d:18: fe:20:72:1d:e4:11:2a:f8:cb:1f:5f:a4:e4:40:b5:d6:48:64: cf:75:aa:a0:6e:81:f3:14:9d:67:77:d4:93:51:f6:35:e0:d1: 9f:77:e1:dc:e7:02:58:ad:83:6c:ac:05:06:a4:3a:4a:be:ec: d1:ba:db:d1:df:a3:5f:93:b3:5b:8f:b7:ef:6a:14:53:ec:37: 22:cc:ee:45:5b:a4:34:f6:98:1b:44:82:03:ba:a4:50:fc:9b: f0:9c:2f:59:22:9b:1c:48:ef:54:2d:73:83:17:d0:ca:55:60: 4b:ba:b7:9d:ea:08:3b:a7:67:2f:43:01:c2:56:1e:4b:30:e7: 08:1e:fb:1c:bd:86:cd:f0:83:93:4c:c4:ac:a3:01:ca:a0:e7: 8c:c4:9f:1d:c3:82:05:a4:a0:8c:35:4e:ce:76:d5:01:3c:3e: b1:13:f2:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4cEFjEJijSuZSgxzMpBfqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjYwNTEyMTIwMTMzWhcNMjYwNTEzMTIwMTMzWjAzMTEwLwYDVQQD EyhmY2JhNWZiYzEzYzMwZWY5OTNlMjFlZGI1Njk1ZjQxNzA3MjJlMWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ2S1s3ZQX8gI7EX+T9JgLlQpsCj AiohrqXIxhQ7MfsAqqBLwAuBE8/Tj/Kgt8XNpmNXYOZPV5S6cluu1+UV1l8jpazU JFqPbDSxUTd3CwiMojxllsY5Voo1woTF8q/UFxalNCCN91287HUbgOJKF1grEFEj +NoBCR7/otsceHuH+DiHcqTRt6gclbgh9ssQyv2Lm7PLZzKSeNYR3zP49NZnuNbE Rwlpz0yV2W7q2nosBXeWzLsOkqcoRRRmzDcOaiyLuExwIR9v0KR9CzPK5jcRUB9q 3BFY1kai3i5IUOU+OERkjK9ZfSMgSOAkDM1gG3G3jm+W2yBeJoh3RbLMJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPy6X7wTww75k+Ie21aV9BcHIuGsMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVwGXNTn Wwhs0IxeOcdPH3SaaWuySr++qLZozg3CcexQ3eD8BgiVrVmiQPycDOAUy63jV49K G1faMaHlJdGQNtOLijgquZJhSlbWA0/bGCUYscZW0yLryn0Y/iByHeQRKvjLH1+k 5EC11khkz3WqoG6B8xSdZ3fUk1H2NeDRn3fh3OcCWK2DbKwFBqQ6Sr7s0brb0d+j X5OzW4+372oUU+w3IszuRVukNPaYG0SCA7qkUPyb8JwvWSKbHEjvVC1zgxfQylVg S7q3neoIO6dnL0MBwlYeSzDnCB77HL2GzfCDk0zErKMByqDnjMSfHcOCBaSgjDVO znbVATw+sRPyoQ== -----END CERTIFICATE-----Generated at Tue May 12 21:43:08 2026 by rpki-client