$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: QvApB9IMPy5pmNtlp9z4pMzOcuRpbqr9DdQ+6bkqHig= Subject key identifier: 90:3E:70:18:1A:52:4E:5D:12:4E:BB:B1:08:1A:4C:7D:84:66:7E:17 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019DA4C1BA8172FCD61F70AEE4F6A6792919 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 18E1 Signing time: Sun 19 Apr 2026 08:00:52 +0000 Manifest this update: Sun 19 Apr 2026 08:00:52 +0000 Manifest next update: Mon 20 Apr 2026 08:00:52 +0000 Files and hashes: 1: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (hash: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0=) 2: 37plEvr9_SAxpS24SOyNrKA9Ebo.roa (hash: T+3X8+kwm0mxKJkDFOwSTGKX5y/yChg7gIfBo7o4fzc=) 3: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (hash: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y=) 4: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (hash: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE=) 5: 9KcHIAUvzuR2GWge4D-VK2067f8.roa (hash: 9sijw09CpBSxcD1XyR49IxKSXJ+lbUtfOT6XCsfhPs4=) 6: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (hash: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI=) 7: BmKkxsvsllYGRv2VQUx8x8IPybM.roa (hash: iJVvCwQgSkbFGgNZWYbEzkgvbnxvQYXvysN7fV/Jo/I=) 8: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (hash: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA=) 9: CybUaoE-1zIBrxVRyCGND427ieM.roa (hash: 8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=) 10: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (hash: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=) 11: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (hash: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s=) 12: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (hash: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ=) 13: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (hash: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI=) 14: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (hash: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI=) 15: TEEJpugeYt1F43E2tJGuUV3FeZA.roa (hash: DLdME2cAIv/rSNCUPiFiPYf01huYXXEj3+nEaRucgYU=) 16: Tg7LpYV7I-GpxinThcktcQRnm_4.roa (hash: BbXoN3AQWQv407qJGvIy6QX/6IL8zec6zQB0QjsD6HA=) 17: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (hash: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE=) 18: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (hash: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo=) 19: lUbooQJTqUPsGNWs9whSoRmQ9io.roa (hash: kluWa3I7Ato5aw2LG6KL/4iV6N2sUDy3GUsBbZKsEa8=) 20: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (hash: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ=) 21: sMNPbaJ2swpQDptjsmEdLRBAjsE.roa (hash: wMrNQ1Dt9RdtalTcVqalUbl+Cb5VgC4Yw+MpJfT4roY=) 22: sWFQ2639y5fQaDmU5ThRk6YSWFs.roa (hash: YXKPoBXjKE1eqIFJiy/DtB2fJyWSkDcytdS8/Lx36Lc=) 23: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (hash: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY=) 24: v1XAMryHcbVYBLXiFz1wOW3tUKk.roa (hash: JN1atA5xt1OyKxkpHh4rNxtPiXKSK2GbqwVySmKSgl0=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: qRnfK1Sl668xxtVJbFN09XuHfuFjPUaV9NqNERh5ers=) 26: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (hash: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a4:c1:ba:81:72:fc:d6:1f:70:ae:e4:f6:a6:79:29:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Apr 19 08:00:52 2026 GMT Not After : Apr 20 08:00:52 2026 GMT Subject: CN=903e70181a524e5d124ebbb1081a4c7d84667e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:79:d6:39:84:bb:66:21:ad:4c:56:97:0d: 6f:b7:49:c0:db:bf:b9:b3:03:0c:b7:ec:e4:fb:3f: 89:61:6b:6d:1d:f3:19:e0:0f:02:ce:a5:e3:85:c4: df:96:29:f2:6b:9d:20:0b:f2:7a:53:17:57:5e:eb: f5:0e:60:84:fc:10:e4:53:50:d1:95:cc:48:1b:6a: 86:0e:36:d8:1a:aa:7d:d7:b0:26:03:b3:3c:83:95: 59:50:1b:e2:8b:b9:d9:5a:ca:31:f6:a5:cd:0a:42: c8:53:d0:c1:76:6f:0e:55:97:9b:2a:6a:74:26:d9: 79:2e:c9:d1:4f:fb:b4:9c:c3:8f:35:e0:13:bb:4b: 37:34:13:c0:31:6a:10:b3:84:73:f7:ee:bf:b1:9a: 6b:9d:00:f7:31:c2:59:97:26:24:38:08:3f:40:71: 25:04:38:4a:d0:75:69:08:d5:ec:68:1a:ba:38:9c: 02:3a:a2:8c:69:2c:a2:85:dd:41:96:4f:55:14:4b: 0a:b3:0f:e0:ff:31:78:62:7c:b0:f7:ae:24:bf:a9: 2f:2b:48:fc:d4:6f:ec:9f:31:2e:67:c3:70:3e:0a: 94:8f:dd:02:67:50:10:8a:36:cf:21:b5:b3:f3:e3: d7:2b:df:b7:fd:c7:2e:83:88:b2:50:ff:2d:83:ef: 92:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3E:70:18:1A:52:4E:5D:12:4E:BB:B1:08:1A:4C:7D:84:66:7E:17 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:51:4e:21:f6:1b:09:0c:6c:1e:3a:23:c3:74:e5:ad:bc:c1: 8e:a7:53:fb:d4:ca:fa:09:7b:bb:0a:06:36:a1:eb:98:1b:2b: f9:5b:8c:6d:bb:fb:8b:8a:50:0b:37:44:99:7a:49:85:3d:c2: 03:5c:8f:dd:0e:3d:94:ab:52:ab:e8:be:e9:4e:a9:6e:34:b9: 72:14:f9:24:61:7f:36:5f:6d:bb:18:09:da:3a:3a:51:09:a9: 0f:cc:b9:1e:2e:db:15:94:86:49:a7:f5:f1:14:33:61:1e:e3: d1:fc:69:5e:ec:ff:f5:8c:f6:e8:d5:55:38:c6:f9:87:1f:0e: 4f:0f:36:81:fa:e5:5c:1a:aa:12:ba:3a:b3:5f:9f:5c:62:0d: 48:64:2c:58:c4:f4:e5:b1:00:4e:0b:96:6c:df:dc:a7:45:3c: 17:e9:ae:b1:89:21:31:62:3a:03:6e:1b:c3:bf:c8:42:72:26: 2a:b2:37:08:92:42:3c:eb:e2:e6:e6:b9:e1:62:e4:47:dd:be: 80:1e:0a:f3:7c:60:30:49:86:bf:eb:34:67:b8:15:93:50:40: c5:75:10:4e:b3:c5:20:76:79:9c:47:b9:14:e7:48:7e:01:c8: 19:c3:fa:66:93:36:92:b7:43:46:18:4a:ab:a0:5a:e5:4a:75: b0:5b:e5:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2kwbqBcvzWH3Cu5PameSkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwNDE5MDgwMDUyWhcNMjYwNDIwMDgwMDUyWjAzMTEwLwYDVQQD Eyg5MDNlNzAxODFhNTI0ZTVkMTI0ZWJiYjEwODFhNGM3ZDg0NjY3ZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMJ51jmEu2YhrUxWlw1vt0nA27+5 swMMt+zk+z+JYWttHfMZ4A8CzqXjhcTflinya50gC/J6UxdXXuv1DmCE/BDkU1DR lcxIG2qGDjbYGqp917AmA7M8g5VZUBvii7nZWsox9qXNCkLIU9DBdm8OVZebKmp0 Jtl5LsnRT/u0nMOPNeATu0s3NBPAMWoQs4Rz9+6/sZprnQD3McJZlyYkOAg/QHEl BDhK0HVpCNXsaBq6OJwCOqKMaSyihd1Blk9VFEsKsw/g/zF4Ynyw964kv6kvK0j8 1G/snzEuZ8NwPgqUj90CZ1AQijbPIbWz8+PXK9+3/ccug4iyUP8tg++S8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJA+cBgaUk5dEk67sQgaTH2EZn4XMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlFOIfYb CQxsHjojw3TlrbzBjqdT+9TK+gl7uwoGNqHrmBsr+VuMbbv7i4pQCzdEmXpJhT3C A1yP3Q49lKtSq+i+6U6pbjS5chT5JGF/Nl9tuxgJ2jo6UQmpD8y5Hi7bFZSGSaf1 8RQzYR7j0fxpXuz/9Yz26NVVOMb5hx8OTw82gfrlXBqqEro6s1+fXGINSGQsWMT0 5bEATguWbN/cp0U8F+musYkhMWI6A24bw7/IQnImKrI3CJJCPOvi5ua54WLkR92+ gB4K83xgMEmGv+s0Z7gVk1BAxXUQTrPFIHZ5nEe5FOdIfgHIGcP6ZpM2krdDRhhK q6Ba5Up1sFvlVA== -----END CERTIFICATE-----Generated at Sun Apr 19 11:28:57 2026 by rpki-client