$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft File: fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json) Hash identifier: 2/0Ye/7wSt+zxVZE04UH8b+pxPUgsOhdCEWlGyMVYjI= Subject key identifier: 88:E1:91:32:F0:08:9C:3B:A6:8E:63:ED:D0:80:F7:12:57:69:62:F9 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019D27A8C9F9E2AF1047FBCE82CBD68B0566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft Manifest number: 1497 Signing time: Thu 26 Mar 2026 01:01:06 +0000 Manifest this update: Thu 26 Mar 2026 01:01:06 +0000 Manifest next update: Fri 27 Mar 2026 01:01:06 +0000 Files and hashes: 1: 0KFRQQB9Lc0XuWKXvA0dnIy2njg.roa (hash: 9PNcCkZrauXgW+3YFUtyOx9/rmS3W9JA5UUSg4BFsGU=) 2: 2diwtm0Zbf_bmsdktiMcMcOMQg8.roa (hash: eVMbVKsLzh2plyfnoFozWhZn/xVtpLdpwRt+PjQnri4=) 3: 2hKTftFtuQRMT1oaso9aJ2Fwbhs.roa (hash: yt73gkjCnEpWOl4mDI2UvWLYkd+MzKzlxXOQLXQ8/rg=) 4: 3Q5j-7Pt8HcUq6bBHu3dKDediOU.roa (hash: 5c1NCBuQPjwD9eR+7rowyJnrFaKqJ48pXAIHslQmr00=) 5: 7ODkEA8GW4XqQMX815M0xDjVvrs.roa (hash: Ncp1j3mzzX7ml5rvDVDTsQNEgjoz0Dt1wsNtC6lEi94=) 6: 8NYcGLI50NHf_-GqbpzZZr4ltLA.roa (hash: fEaVNw2Wyd4+MGZ7FzjbEUafcEBr+2hDrYVvqLoZo5Q=) 7: 8ZcQrN0gVcxFnr-ChcIyFWdfoF8.roa (hash: FxsIDxqiDCsks/QZP2zl7z65J0NcQRJR7OpzOE/ZLiM=) 8: 8jfqpIUKuOw3bEeNl0QjuTIts5w.roa (hash: lA+JjzalnUsshqDeIEjkif9B6fmiylkMishkEuJTw+c=) 9: 9ciSFxfpsFEJtvCxwwKQui6r5zM.roa (hash: QooSkMFERuaO2unvGuJR36695C6QceBrXMuXSVRQ/9s=) 10: 9gIUZ3-KWFOqbPCbkWI5yHzecO0.roa (hash: jjpO0DxwKQMyYQwBPNQVarsVnFCb4DMo73zMMJVeyFI=) 11: BHMecBG9x9xUY8jTjlOT7nNxN9k.roa (hash: HYJY2r76YQlta0gJBproON2MhOd3SZjrPkPVpXkWpDU=) 12: Ez7vdg6eB07lFL05DPjqJKCOdIo.roa (hash: fBYYvlQ87n8J9SuhX/gsPnpOFHNxq/I9XnmkEjxP+Js=) 13: FLQX7VTxwFaQrQRyhh5AZ1ehPTU.roa (hash: TCoATecBzXKE+6xHAeP7h7guA+jHThVu36yV5nbsOcM=) 14: HMUv5O_IloNPK-xnYoboUUQaw9I.roa (hash: pWKPihhcLAd/kMZDUiPWP3Bf2PaOFgTs9krixFbyXKg=) 15: M23E5jFvo9QE4PZ22sZCcc77gm0.roa (hash: ez6ZtNmZWmq4SxAtsTn9ZRzqCWD4ICp/AVepQiwyNEI=) 16: M9SkjzKgp0C1w36F_3V-rwxzPrM.roa (hash: NOgmWBFIBR8qfeBLcrBHcBrGBBxychhI5zlw8nvAaeE=) 17: WToUjwUwqxWGFX7YfgHrsOMgM_8.roa (hash: kIIRszKRMT6GNaYzUy0dv+/IIIR5RaGl85LSnUgSJ+k=) 18: YKXZknOA48Q687Y2d6b6e138kG0.roa (hash: YKAaiTG9TWQNiJSpv5qYvX/007RacaolNt+mRs/AVA4=) 19: bZ7lVe52f2GXmi7XWYMeLJ4V86s.roa (hash: bZcb4IcZpKmYddgjqqBxvAN6lqh2zAQBjMMCJZa90kQ=) 20: bxDMk8rDIjX1JIaOhPkkS6agVn8.roa (hash: qdJb7Cn9TFHTehw1Um25RR8YIvGg9qXGmexGQanw2Jc=) 21: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: RRRRVIbPo7cKcuD/f0uEEv9CP1PtM0POiWn00zZ7XkY=) 22: fvP8_8TU48J6IMiREwiDhO3tYLk.roa (hash: 3D1JK3jjDZ3dw6xUSf+wo+DL5MerbJPcmtMrr884SG8=) 23: gnDB9W02-r6mUcSzv9GpwgZT3jo.roa (hash: xF1q8i5GseG2Y/ChOFm114hCxbfrQRyX8F0vQWk71OI=) 24: go1rZLit0ECxEQHq3kpBk2CE4Qg.roa (hash: hJVabNE+muWiI6lmIeSiA8icGMZrwMb4YKQs1wbCUu8=) 25: kx0iDFbsXmf1_joPchYNl-Qa3D0.roa (hash: 0natnuOE/XONkp7+7SAGpqgXtC+NNO9MQZlBw7eJSr0=) 26: lqCu78LtvHJishdD6N4eR-R7RIM.roa (hash: iKTkz66NrpLAcH4+xiDnu+/37wuOGvm5ZNIxFMyUSUw=) 27: ovaw2-C0aLc15MUNM--nHeVzXAk.roa (hash: k6KOhUlHQLtwN5AMkDyj19Newr/qZ7SL0hXw1sn09K8=) 28: ovqAK3pYOqxaHlVK-LqO8cHqIYM.roa (hash: W0pJB/sjr5+69ynLbPfenFx2cuPhFShby13x0oho2no=) 29: pv9Cpord1y0tCGV7NVJXrmWgS28.roa (hash: ue24VSBSX2J82akgvFk1ddcbgpuIzB8HeE+GFQFimS4=) 30: qvYAP-lSXmNoClOM3rygyr0zdI0.roa (hash: XZWaUj3+lj06izt55k5PBSAGEgz79sdEGihL99kraEo=) 31: xWAzCmZMcG-JDSiQJKOLozSrRc0.roa (hash: lzdIYy1HSi547j5LHsPdxL03SsyIBHEZ8dTINmo4ArY=) 32: zN7eJocMGhWq5niF73RM-dIuVIM.roa (hash: oo32X248IIf2Wa+j4gsxo5ikGlQv9o+0FiBYs6RXCgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:a8:c9:f9:e2:af:10:47:fb:ce:82:cb:d6:8b:05:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Mar 26 01:01:06 2026 GMT Not After : Mar 27 01:01:06 2026 GMT Subject: CN=88e19132f0089c3ba68e63edd080f712576962f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:24:6c:fd:2e:a5:6a:16:9e:ad:6f:7d:ed:76: 8c:f1:38:d7:a1:75:7d:38:dc:fa:81:85:5e:88:13: bc:43:80:2f:f1:95:38:2d:63:0c:d7:2b:fe:b8:d0: bc:f2:1b:6d:a7:2f:83:a5:de:d5:13:78:02:c3:96: 03:cf:d4:36:58:7b:a1:0e:a0:f5:65:99:5f:2b:8f: f9:40:dc:6c:ea:b4:17:66:b8:c3:e1:1d:17:d0:2f: d0:ae:65:12:97:72:b0:11:a8:7a:ba:0b:d6:b6:2a: ac:38:2c:12:c2:0e:33:92:4c:44:d9:c7:1f:86:1d: a1:e8:93:75:2e:b0:43:94:ed:56:4f:6a:ee:93:f2: cb:fb:a3:2b:d0:da:df:a0:bd:cc:ba:a4:0c:04:a2: 28:45:10:87:88:07:3e:fc:33:c0:5a:52:f8:db:68: 40:fa:94:6f:eb:73:6a:24:34:dd:41:c6:fd:ce:1e: 1c:d5:f6:d2:17:ea:9e:5a:3d:71:ef:34:3f:3a:ad: 13:62:91:ec:28:1e:45:b3:bc:08:4a:52:70:a4:5f: e9:62:20:14:f4:01:3b:3d:24:c1:fb:c4:94:2c:8d: e2:25:37:0c:57:8c:97:d8:87:85:b7:06:33:bf:6b: 6a:96:e8:28:53:c8:b8:79:f2:52:b7:ff:c6:81:d4: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E1:91:32:F0:08:9C:3B:A6:8E:63:ED:D0:80:F7:12:57:69:62:F9 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b2:71:44:6b:54:1a:3e:7d:12:a9:59:58:a2:c8:e3:3c:ce: 7e:8c:8a:f7:4e:7f:cc:31:cc:d8:a9:42:19:01:a7:99:5b:05: 63:a1:f7:39:96:69:c7:bc:74:8b:c2:39:50:4d:13:9f:27:e1: 10:cb:90:fd:6e:d4:f8:dc:11:08:ea:7c:39:8d:b3:87:63:55: d4:fe:0b:a9:98:8a:3c:59:35:7b:58:15:d9:ca:cb:52:d3:e0: 65:ca:48:9c:f4:fd:c8:73:1a:b4:d3:31:d2:88:5d:b0:05:43: ab:9f:00:7f:e0:61:72:e9:84:a0:13:f3:10:01:00:86:33:ad: f3:e9:93:33:9d:cb:83:51:b5:0f:c3:7d:55:bd:06:a7:ca:af: b4:b1:66:4e:e5:86:e8:f4:52:bb:c2:b4:9a:c7:af:c5:ee:94: f2:b3:45:b4:52:8d:bf:0d:fc:4d:7b:3e:07:70:ef:6e:4d:88: d1:1f:27:bb:4f:45:df:95:e8:b0:77:e3:57:b4:ad:e5:c6:3b: 53:e5:1b:74:6b:7c:dc:7f:2f:7d:39:49:03:a7:75:88:92:b8: d7:cf:8d:15:37:b2:2f:61:df:bc:2a:e8:0e:3e:80:69:d0:91: 69:8e:23:f2:61:d2:f8:74:3d:81:b3:65:5f:ed:20:80:5f:b7: dd:e9:09:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nqMn54q8QR/vOgsvWiwVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMzI2MDEwMTA2WhcNMjYwMzI3MDEwMTA2WjAzMTEwLwYDVQQD Eyg4OGUxOTEzMmYwMDg5YzNiYTY4ZTYzZWRkMDgwZjcxMjU3Njk2MmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyRs/S6lahaerW997XaM8TjXoXV9 ONz6gYVeiBO8Q4Av8ZU4LWMM1yv+uNC88httpy+Dpd7VE3gCw5YDz9Q2WHuhDqD1 ZZlfK4/5QNxs6rQXZrjD4R0X0C/QrmUSl3KwEah6ugvWtiqsOCwSwg4zkkxE2ccf hh2h6JN1LrBDlO1WT2ruk/LL+6Mr0NrfoL3MuqQMBKIoRRCHiAc+/DPAWlL422hA +pRv63NqJDTdQcb9zh4c1fbSF+qeWj1x7zQ/Oq0TYpHsKB5Fs7wISlJwpF/pYiAU 9AE7PSTB+8SULI3iJTcMV4yX2IeFtwYzv2tqlugoU8i4efJSt//GgdS8uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjhkTLwCJw7po5j7dCA9xJXaWL5MB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbJxRGtU Gj59EqlZWKLI4zzOfoyK905/zDHM2KlCGQGnmVsFY6H3OZZpx7x0i8I5UE0Tnyfh EMuQ/W7U+NwRCOp8OY2zh2NV1P4LqZiKPFk1e1gV2crLUtPgZcpInPT9yHMatNMx 0ohdsAVDq58Af+BhcumEoBPzEAEAhjOt8+mTM53Lg1G1D8N9Vb0Gp8qvtLFmTuWG 6PRSu8K0msevxe6U8rNFtFKNvw38TXs+B3Dvbk2I0R8nu09F35XosHfjV7St5cY7 U+UbdGt83H8vfTlJA6d1iJK418+NFTeyL2HfvCroDj6AadCRaY4j8mHS+HQ9gbNl X+0ggF+33ekJAQ== -----END CERTIFICATE-----Generated at Thu Mar 26 06:51:40 2026 by rpki-client