$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft File: 7xxmWwOGkrk7310djzzqPphpegM.mft (raw, json) Hash identifier: i3vsUmLcTeLCFFnW0a7P2+62FGSoVw2tQz52NkUHlI8= Subject key identifier: 0A:FB:BC:5D:78:E6:B3:DC:18:2D:52:C6:9D:CA:29:8D:97:29:BB:C3 Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019D28BB86AFC1D3333C55B2D2D954B28B1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft Manifest number: 18EB Signing time: Thu 26 Mar 2026 06:01:11 +0000 Manifest this update: Thu 26 Mar 2026 06:01:11 +0000 Manifest next update: Fri 27 Mar 2026 06:01:11 +0000 Files and hashes: 1: 1Uo76hmvh5FzNDo276Zm4m_BT0s.roa (hash: N6dkUQu86zvoRHT3ompLiDGklhcKWt0L+DfJn/M9Ues=) 2: 60PmQRc6KqumCF_7Z7zTsYcdYaY.roa (hash: y1QSPcuJ+pW6ofu1/70Fq1yGPon+kU5iDXnDLtw/Cpo=) 3: 7xxmWwOGkrk7310djzzqPphpegM.crl (hash: BWeZle1I/Mgdc83CB0y4iUOC5dPlhLXlsKvD0mbQx6I=) 4: C2bNUeB_0zECbd22GOKk7y57b7g.roa (hash: l0IvAbIHaEOPaTPBP3rxLmVfNAJqlgTHUbxhQD/Bm6M=) 5: D5NkL44tDna5iq5TxBiDoayyR7w.roa (hash: xpIWln43hlWk8qKWLoKR9JJ/noHx7dA0xrLy34N2PV8=) 6: I96PBjrYup8aPv2pR7TdLFEHJHk.roa (hash: WYpW9pgQH+tfWd38rRUvQVayJbzQqdLy/3DGSA3PmaA=) 7: IzuhPSU32UBjVKA2bk0v7_QU1uE.roa (hash: Hv1nXeZ09K6FcuDi7GWgb1nfVre9Ok5EpyqMWBjT5zg=) 8: Na_ozAcWu6ZVRTfzNvM2ICtye2Y.roa (hash: 6MBrxW0BKA+vioWFxO1PZaS20qgrgGxGwFg9B23P52o=) 9: QM8VI98PqlANgb9tPw2FAs0LwAM.roa (hash: JeUyAKH1L4usZx4jxBTMv0q5gpiSUok50P68tyWxjhI=) 10: RMSbReZxAHoFg9QhadNO9TahUm8.roa (hash: f0AnUWtxhrAYYQTYCZDIqQ5s08RCO7RTaWlG1CYAjZ0=) 11: SdJxhz3Z45rZQ2vRK_J4CkNgTHM.roa (hash: h00bQB9oTUE+4PsAJHu/xyixXuN3G9fmaTv9iiJ4iOw=) 12: U4jYXa33eK2_Y2WdmHCAOH75bvM.roa (hash: ejTGELQ7zjtDoNb9o1n2deFNC4+qkFo4zCvOGfp57X4=) 13: YPjsb2BZZVlwkheQ4-BXMyYUx8A.roa (hash: BuSmPU+cmorFIW2mrVOPHrLfL0dn0EfxJIzzSyE9HX4=) 14: ZYExCDXlMvLvbu9PyCtvwKVx1wg.roa (hash: 80JMqq0F0tUOvFwE2Iz/kNdGxy/t5IdoU4H7dyp6pDI=) 15: aW3M8On5MmS81nR314v2KAMjhWo.roa (hash: 9ZW0rFhmByfJbfB+yP9UIWPM/yI+swsdrl4gzJqco04=) 16: bjFSQtRF34AqVafFJtFqhxgWQZc.roa (hash: yES7m7w5zSaR30emDz0+YUk1mwW3sg3fxIM0I4pVGRw=) 17: bnpIDhTze01wESG9I3vUuYbGv80.roa (hash: pCKaqyPuY+WplwCpDPRA6ZUWqAhou47BgnY6GoKoew4=) 18: c7IXsqmxdhAG_jJYtud9EP72qOw.roa (hash: Mym9yT5oPGpT2N2HtTmvnEaPNnpQ4t08pH6QuUqEjls=) 19: dO3ondwwLGbrI_vEcsL_cnUVyk4.roa (hash: zcZPr9SNFN/r/TTxtdIr0uKIimZwXcjbyUmDYN6jAtY=) 20: k9qT9L4oiwVVutgZqw2789sZSpM.roa (hash: 4bUe/2Ktq9Rh6ybQkPrFIzkqDQmO7L4EaOmWWLO3Ybw=) 21: ljwpW_MXZm-BJRwn1Jjte3DRq38.roa (hash: AJnLn/P5WqYS8NOh6UP6VDDKHZJB50IROKVNlFo2134=) 22: pWknCXIQAFv1BFVjsRmSr0NGTn4.roa (hash: Uq48b0jv4rRLlijsx/raaenPXKpfmSHTN+zFN1ZqwHY=) 23: qff7q2HzSGSSyiMg2SYgZicp8RA.roa (hash: she65TZNRufZfodlMnGAteeu8BxuGXHft9ScMacnGLI=) 24: yyxSxrF4ZcFyCTbbapEmZHvC14M.roa (hash: 9k1t3MVGGwaihFQgwuGr+VC3Y19Wd6fj+le41WnzZYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:bb:86:af:c1:d3:33:3c:55:b2:d2:d9:54:b2:8b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Mar 26 06:01:11 2026 GMT Not After : Mar 27 06:01:11 2026 GMT Subject: CN=0afbbc5d78e6b3dc182d52c69dca298d9729bbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9b:49:be:9f:ee:3e:2f:40:f1:48:f8:27:39: 76:cf:0a:02:dc:db:ec:65:24:87:6d:68:13:e2:08: 9b:58:f6:82:d7:a7:e2:2d:b5:23:e2:a2:48:d7:65: 27:9a:3a:63:3a:95:95:76:36:ff:a3:87:36:22:aa: ab:16:09:d2:e3:a0:2c:35:d0:57:70:6a:89:28:db: 68:e2:dc:e3:74:20:ed:1c:0c:b9:b0:98:df:5a:24: 1c:71:48:9d:00:ac:82:be:c9:c6:51:2d:73:5a:f5: a4:08:f5:95:38:12:4e:ad:fe:a3:fc:1f:21:64:41: 25:d1:25:74:51:75:61:80:4b:ed:01:1b:4e:58:55: 79:f9:67:fc:8f:6e:8c:c5:3f:93:a2:b3:27:b7:a2: 3e:82:a7:5c:fa:f7:45:62:ec:6f:c4:52:04:bf:ee: c6:d8:23:f1:c0:14:ac:20:f3:d7:43:3a:95:6c:4d: a0:78:50:a6:24:76:4a:b7:7e:2f:1b:c5:39:22:5e: 34:aa:6d:ee:5f:fc:90:6f:98:db:80:38:f6:b7:52: a4:be:b2:67:9d:cd:18:83:93:ec:00:0d:05:d6:b7: b8:d3:15:06:37:97:a9:47:99:8d:27:bf:51:f6:e9: 64:70:77:fd:e9:22:11:4e:c4:55:9b:c2:cf:0e:35: 29:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FB:BC:5D:78:E6:B3:DC:18:2D:52:C6:9D:CA:29:8D:97:29:BB:C3 X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:57:73:90:f0:b8:fb:b6:89:42:c0:fd:83:a1:7d:6a:07:ab: 3e:87:8e:24:60:9f:04:73:7c:cf:ce:71:d2:fe:d7:bf:a6:e9: 80:57:6f:b8:55:63:8a:47:83:7e:de:86:1b:50:05:4b:48:3a: 6a:ac:ee:2f:3e:6a:bd:d9:c9:f6:c7:f3:f9:5a:ad:bd:33:17: 6d:ac:91:b4:2c:a3:a6:00:99:97:84:82:a2:78:5a:15:24:cf: 26:61:b4:7b:df:ad:c0:76:2b:93:23:94:9a:14:b9:9a:cc:33: 74:71:f7:c0:d1:ce:1a:83:49:7c:a8:ed:18:99:32:e4:fd:80: c2:ca:11:aa:ce:48:3c:2a:ca:4b:b3:37:0e:4e:60:1b:e2:75: 2e:88:df:ac:82:f8:8a:e0:e6:f0:71:05:f8:46:ab:42:32:1d: 3c:75:2f:47:52:3f:81:7c:40:9d:fd:b3:f4:bf:93:eb:33:85: 1b:69:97:9c:61:31:3f:d8:b7:b5:3a:13:8d:3f:2b:49:43:f5: 29:da:31:d7:dd:14:82:ed:43:1b:d6:6e:eb:20:44:34:95:43: 34:13:7b:e1:6c:e0:49:30:02:b6:c8:85:c7:ca:14:9d:49:92: 38:8f:b7:26:43:c4:ff:49:a3:35:e7:a5:83:25:e7:64:5f:30: 60:71:11:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ou4avwdMzPFWy0tlUsoseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMzI2MDYwMTExWhcNMjYwMzI3MDYwMTExWjAzMTEwLwYDVQQD EygwYWZiYmM1ZDc4ZTZiM2RjMTgyZDUyYzY5ZGNhMjk4ZDk3MjliYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZtJvp/uPi9A8Uj4Jzl2zwoC3Nvs ZSSHbWgT4gibWPaC16fiLbUj4qJI12UnmjpjOpWVdjb/o4c2IqqrFgnS46AsNdBX cGqJKNto4tzjdCDtHAy5sJjfWiQccUidAKyCvsnGUS1zWvWkCPWVOBJOrf6j/B8h ZEEl0SV0UXVhgEvtARtOWFV5+Wf8j26MxT+TorMnt6I+gqdc+vdFYuxvxFIEv+7G 2CPxwBSsIPPXQzqVbE2geFCmJHZKt34vG8U5Il40qm3uX/yQb5jbgDj2t1KkvrJn nc0Yg5PsAA0F1re40xUGN5epR5mNJ79R9ulkcHf96SIRTsRVm8LPDjUp8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAr7vF145rPcGC1Sxp3KKY2XKbvDMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFdzkPC4 +7aJQsD9g6F9agerPoeOJGCfBHN8z85x0v7Xv6bpgFdvuFVjikeDft6GG1AFS0g6 aqzuLz5qvdnJ9sfz+VqtvTMXbayRtCyjpgCZl4SConhaFSTPJmG0e9+twHYrkyOU mhS5mswzdHH3wNHOGoNJfKjtGJky5P2AwsoRqs5IPCrKS7M3Dk5gG+J1LojfrIL4 iuDm8HEF+EarQjIdPHUvR1I/gXxAnf2z9L+T6zOFG2mXnGExP9i3tToTjT8rSUP1 Kdox190Ugu1DG9Zu6yBENJVDNBN74WzgSTACtsiFx8oUnUmSOI+3JkPE/0mjNeel gyXnZF8wYHERhQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:25:29 2026 by rpki-client