$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: 1Y8Pqo7mBTVsspLZc8hoWONVD+T+mmZVRBh1dAQdxYw= Subject key identifier: D3:A5:05:3B:D1:9A:A4:5F:94:FD:0B:1F:59:B2:1A:25:82:00:C6:0F Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 01A0C067E252A3F959D8A82656A107F10AAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 1A7D Signing time: Sun 20 Sep 2026 20:00:28 +0000 Manifest this update: Sun 20 Sep 2026 20:00:28 +0000 Manifest next update: Mon 21 Sep 2026 20:00:28 +0000 Files and hashes: 1: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (hash: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0=) 2: 37plEvr9_SAxpS24SOyNrKA9Ebo.roa (hash: T+3X8+kwm0mxKJkDFOwSTGKX5y/yChg7gIfBo7o4fzc=) 3: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (hash: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y=) 4: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (hash: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE=) 5: 9KcHIAUvzuR2GWge4D-VK2067f8.roa (hash: 9sijw09CpBSxcD1XyR49IxKSXJ+lbUtfOT6XCsfhPs4=) 6: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (hash: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI=) 7: BmKkxsvsllYGRv2VQUx8x8IPybM.roa (hash: iJVvCwQgSkbFGgNZWYbEzkgvbnxvQYXvysN7fV/Jo/I=) 8: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (hash: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA=) 9: CybUaoE-1zIBrxVRyCGND427ieM.roa (hash: 8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=) 10: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (hash: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=) 11: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (hash: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s=) 12: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (hash: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ=) 13: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (hash: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI=) 14: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (hash: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI=) 15: TEEJpugeYt1F43E2tJGuUV3FeZA.roa (hash: DLdME2cAIv/rSNCUPiFiPYf01huYXXEj3+nEaRucgYU=) 16: Tg7LpYV7I-GpxinThcktcQRnm_4.roa (hash: BbXoN3AQWQv407qJGvIy6QX/6IL8zec6zQB0QjsD6HA=) 17: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (hash: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE=) 18: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (hash: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo=) 19: lUbooQJTqUPsGNWs9whSoRmQ9io.roa (hash: kluWa3I7Ato5aw2LG6KL/4iV6N2sUDy3GUsBbZKsEa8=) 20: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (hash: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ=) 21: sMNPbaJ2swpQDptjsmEdLRBAjsE.roa (hash: wMrNQ1Dt9RdtalTcVqalUbl+Cb5VgC4Yw+MpJfT4roY=) 22: sWFQ2639y5fQaDmU5ThRk6YSWFs.roa (hash: YXKPoBXjKE1eqIFJiy/DtB2fJyWSkDcytdS8/Lx36Lc=) 23: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (hash: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY=) 24: v1XAMryHcbVYBLXiFz1wOW3tUKk.roa (hash: JN1atA5xt1OyKxkpHh4rNxtPiXKSK2GbqwVySmKSgl0=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: XcvPUHRe7QqC4MX7nACMT1GiW54jIDbORDm+oiIA9Zk=) 26: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (hash: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c0:67:e2:52:a3:f9:59:d8:a8:26:56:a1:07:f1:0a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Sep 20 20:00:28 2026 GMT Not After : Sep 21 20:00:28 2026 GMT Subject: CN=d3a5053bd19aa45f94fd0b1f59b21a258200c60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:31:5b:34:ed:f5:79:4f:6f:a0:6e:e9:f2: b3:ae:b2:a4:f2:66:9b:25:f6:2d:94:55:a5:df:d4: 7f:ad:3c:e8:91:f1:c1:e6:aa:05:c3:84:52:6d:fb: 5e:9c:83:13:8e:85:20:4b:ef:18:39:b7:bf:a2:f7: b5:4a:98:ee:ec:9d:07:69:8a:c3:90:6c:06:15:ec: f2:17:64:3c:ac:cf:6f:b6:5f:1c:45:26:a7:f1:b0: 45:49:52:bd:d5:54:8f:11:60:fc:38:26:e4:45:c6: 17:cd:14:b7:3a:c7:c3:6b:0f:b5:e7:78:9d:ff:6e: a0:52:66:16:7a:de:82:89:d2:55:57:7c:87:9d:b1: 74:00:c3:cd:8b:9a:0b:ae:58:93:85:15:5b:00:2f: 35:cf:b5:0c:12:f6:54:88:be:8b:e2:91:8d:94:f8: 61:9f:b3:55:a9:91:bc:6b:26:8a:06:4c:e8:8b:3d: 5b:e6:c4:7b:02:90:d9:d0:9b:84:77:47:42:de:48: 58:0c:ad:7c:8e:5f:01:36:ab:37:cf:43:8e:3d:72: ec:ae:e1:fc:2e:74:bb:a6:93:ab:50:50:7e:62:7f: c3:f4:48:87:ea:7b:3f:ad:6f:52:ac:ed:eb:b9:37: ef:57:5c:d3:fc:c0:0f:41:1c:d4:3b:0b:ae:1c:19: 1e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A5:05:3B:D1:9A:A4:5F:94:FD:0B:1F:59:B2:1A:25:82:00:C6:0F X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:a3:1d:38:d7:db:91:aa:40:cb:3e:fe:f9:ee:d5:d2:c9:04: 1d:52:c2:b3:d7:5d:08:71:9b:7b:35:9a:bc:1c:ae:6b:69:98: 78:ed:96:9c:dc:7d:6d:eb:4d:e1:5b:85:a4:09:f0:3f:82:7f: 42:aa:58:6c:e9:0d:55:1d:da:bd:d4:67:33:b7:94:c3:2f:db: c1:8f:22:1c:38:bd:21:2b:1c:10:61:b9:ce:c5:70:68:1b:3b: 5d:0c:f7:f8:b1:15:d4:24:7a:ae:ba:87:58:de:58:9a:4a:fd: b0:e0:10:78:2c:0f:c3:e8:a2:6e:25:95:bf:25:10:22:94:5a: 92:cb:f4:55:73:52:f1:ad:03:d1:12:55:bf:bf:32:05:46:68: 4a:4c:33:73:87:bd:78:2f:f6:fb:e5:b7:14:96:25:14:a1:6c: 4e:06:de:e4:f1:f7:d6:8a:4c:e9:9a:3c:c3:05:85:0a:cf:9b: ab:14:87:83:65:1d:91:78:42:7f:3b:5c:24:91:73:f4:0e:f3: a3:50:a7:ec:c9:45:22:3e:22:4f:f7:55:0c:38:ca:f0:68:39: 36:93:35:f6:be:d3:37:0a:81:f8:15:9f:6c:05:65:2e:cf:80: 90:de:c9:4d:8b:dd:11:46:55:03:88:65:bf:ee:4b:58:fb:95: ee:7c:5b:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDAZ+JSo/lZ2KgmVqEH8QqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwOTIwMjAwMDI4WhcNMjYwOTIxMjAwMDI4WjAzMTEwLwYDVQQD EyhkM2E1MDUzYmQxOWFhNDVmOTRmZDBiMWY1OWIyMWEyNTgyMDBjNjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq74xWzTt9XlPb6Bu6fKzrrKk8mab JfYtlFWl39R/rTzokfHB5qoFw4RSbftenIMTjoUgS+8YObe/ove1Spju7J0HaYrD kGwGFezyF2Q8rM9vtl8cRSan8bBFSVK91VSPEWD8OCbkRcYXzRS3OsfDaw+153id /26gUmYWet6CidJVV3yHnbF0AMPNi5oLrliThRVbAC81z7UMEvZUiL6L4pGNlPhh n7NVqZG8ayaKBkzoiz1b5sR7ApDZ0JuEd0dC3khYDK18jl8BNqs3z0OOPXLsruH8 LnS7ppOrUFB+Yn/D9EiH6ns/rW9SrO3ruTfvV1zT/MAPQRzUOwuuHBkelQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOlBTvRmqRflP0LH1myGiWCAMYPMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKMdONfb kapAyz7++e7V0skEHVLCs9ddCHGbezWavByua2mYeO2WnNx9betN4VuFpAnwP4J/ QqpYbOkNVR3avdRnM7eUwy/bwY8iHDi9ISscEGG5zsVwaBs7XQz3+LEV1CR6rrqH WN5Ymkr9sOAQeCwPw+iibiWVvyUQIpRaksv0VXNS8a0D0RJVv78yBUZoSkwzc4e9 eC/2++W3FJYlFKFsTgbe5PH31opM6Zo8wwWFCs+bqxSHg2UdkXhCfztcJJFz9A7z o1Cn7MlFIj4iT/dVDDjK8Gg5NpM19r7TNwqB+BWfbAVlLs+AkN7JTYvdEUZVA4hl v+5LWPuV7nxb0Q== -----END CERTIFICATE-----Generated at Sun Sep 20 23:53:28 2026 by rpki-client