$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft File: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json) Hash identifier: gBQGBZy3sQ2cNrn5B1x3CP7aqvQUwu5tRR+ReXcrM5g= Subject key identifier: 79:5B:6A:55:B1:53:A0:E0:A1:7A:BB:3D:66:53:41:26:BF:46:65:C1 Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019CAB34147AC75A355E691BF1A34FCCEE2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft Manifest number: 186F Signing time: Sun 01 Mar 2026 21:00:42 +0000 Manifest this update: Sun 01 Mar 2026 21:00:42 +0000 Manifest next update: Mon 02 Mar 2026 21:00:42 +0000 Files and hashes: 1: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: jOTM1hS1c8S/F+5ntrr5duYtWUd8ID8Wla3rG1P6DiU=) 2: C49vSVt4dfdT17Z5kZxdlV_lY_Y.roa (hash: 6HfpvHUMJisoBNoMG7lySqZtsVK9Z40fSQ9YGkMMFF0=) 3: CYTlKlzSJSqB3jTzZOH673qv2os.roa (hash: nMYpBRNUUmqx48+xTuVDjH9QkSUeA9v7hDY4KWKCBCQ=) 4: DIVTK05T8Vdhwjp7g0z7MnF1TQQ.roa (hash: 6vlsDL0j8NnBvb9Ab/QGUCQui9hFjQ/teVqIFOEkwLQ=) 5: ENla5OgKBu9uunWqxWQAfu7kwx0.roa (hash: Fbmqrk8r0alDCgWyzCOzHqp7tHL/3UqhpNT6d1lPtlY=) 6: IamjYw1vikCzZIhDeU8H0NMAjHs.roa (hash: M+kmsNXkFSxnu0j1QJUyRMfdThsPZBpSXk2/kSsLWUY=) 7: Iyt7Ob_snKf1ZPop-eeEldXM0fQ.roa (hash: 9XeUKSaM919H72Lo2RzCdmjP30DLuCdA4txuvCcKAVk=) 8: ODquW4yfiTrN0BslpesyLROdhCU.roa (hash: LguXTTUIpUVmRso7Duo92XjODqxY0o7l3A4Aw6gkmmA=) 9: Q5HfXdIQnusnCwKJeNtcbaxYKRw.roa (hash: cgDqaBa5oL7jHKKM1uUVRVvnMYGroeNLDuSFwDAGhy8=) 10: _izOulmhuUBG3FatKk1kjhEzI5I.roa (hash: D2Y24n1qrh+NyvYt/hta8znqPyvAoiiYcPgWq6TG2zI=) 11: bAO9OihdfpmA-XpEMUum-i6NlvM.roa (hash: w9BYm30HDg7VDCHpAaP2FWEEPT1iEKkPQOttAF9gh5o=) 12: bnpbPX_ctt0kqkwx6ukV-j4WTGM.roa (hash: 730AnutRLa9Haz+ZMN+qGZx6PYPOqH6zu3NH8XC/47k=) 13: dbi31yJdjzH-gnfiJixAWom7O2Y.roa (hash: wv59+nx6Q7SMg8qYiivt/O65l/1UFWdvKThzkz1L+E8=) 14: gTyFz4o7qq-mz7kkyhI4YQAE3F8.roa (hash: ql1a+n9u4sT8twi+Ey5tWWvsl/zO/3fN4L8B2DWoXrk=) 15: h2mTI89G79vzZdTXcNgpiY_bSuE.roa (hash: qa2BzNyouPFY7/V6+HRcQ7umJPtaaWKwpg9jeFVJFSE=) 16: hhAxTUm-YLDfu5gnVbj74LIg_xE.roa (hash: 5lrRMZNGyqCPeI3ughaZF3pVN6T3OxbFiijuNyO2VPw=) 17: j8JXlUTEd1j_9VoERc0ZtsXM8O8.roa (hash: A11q2a+vMmn2Uc3d6mAqUut0tGh3JvhOP0a9hwmGjMs=) 18: lru0bK1pFWTdlNh3tSeVRy2RxB4.roa (hash: D3uDWSg2oVhHneIgFjvyT24SUbp4OtxjQr0JkAH/IGY=) 19: x9kxYUUdYs3Vc1XQvx9EJnJhrDs.roa (hash: Xjj2UlUQT0tIyuN4wzeBBIdle7HnaFZ9oWTYHnJPnD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:14:7a:c7:5a:35:5e:69:1b:f1:a3:4f:cc:ee:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Mar 1 21:00:42 2026 GMT Not After : Mar 2 21:00:42 2026 GMT Subject: CN=795b6a55b153a0e0a17abb3d66534126bf4665c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:6e:62:2e:d7:4e:d2:ad:59:b0:f5:a0:69: dc:0f:d4:3b:45:84:18:10:bc:8c:65:da:4d:3b:ee: db:48:2e:6f:bb:74:26:9a:6e:b8:4d:96:96:eb:33: d7:5c:17:59:e7:47:37:45:49:c5:e7:de:ce:54:e9: 7c:6b:c8:cc:ad:e4:48:de:d2:14:d0:bb:42:68:96: 02:8f:0e:21:7e:07:3a:28:b4:3e:2c:6c:27:cf:ca: a2:27:40:11:e5:4b:98:e9:d0:e3:18:85:46:27:65: d9:ae:02:21:84:69:38:09:2f:47:03:09:10:39:c3: 7d:85:2f:ab:9d:3f:4d:7e:99:cf:f5:5f:ff:56:c3: e8:f4:a9:38:a3:75:d5:c3:c8:28:81:01:0f:6e:04: 5e:a6:53:d6:c9:0a:3c:d9:86:55:26:82:ba:84:e5: c8:7b:ab:ef:cf:04:52:ab:8c:e8:fc:5a:f4:f7:df: 8b:89:61:98:72:20:5e:2c:c6:b1:66:86:63:5c:dd: 4b:e2:3f:1a:13:5b:73:ef:c0:54:a9:02:25:aa:3a: 4e:2a:e7:4a:a8:e9:c0:d0:30:9d:7b:de:2a:33:14: 9b:c6:04:9d:e1:48:a6:bb:26:06:b0:0a:eb:aa:fd: 75:96:dc:65:12:be:a7:28:b0:4a:67:9d:23:34:da: bc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5B:6A:55:B1:53:A0:E0:A1:7A:BB:3D:66:53:41:26:BF:46:65:C1 X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:03:fb:d2:09:b8:00:26:63:96:f1:18:99:0a:7d:04:a4:b1: 4b:f6:f4:7a:5d:40:7f:79:b9:30:d5:1b:68:48:97:53:cd:f3: 33:09:86:ff:1a:df:0f:0b:a5:07:8f:e4:51:00:87:59:b8:13: c3:7c:4b:83:d7:f4:09:9b:45:c7:7e:36:13:6a:0e:c8:65:34: a4:36:53:85:90:01:47:f9:6c:a1:dd:19:2b:5a:05:6b:20:78: a1:2d:db:f0:3c:ac:c4:b8:44:58:2d:95:8c:fa:9d:15:b3:d0: fc:a5:bb:b6:3a:5f:ab:94:4c:fc:8b:0b:aa:0f:a1:18:53:ba: 0f:ec:38:98:a7:09:16:14:65:d5:f2:1d:d4:0a:8c:2d:ce:1e: 7f:4b:2c:80:12:10:40:72:83:50:42:38:4c:01:d2:13:d1:6d: 98:06:33:53:d4:f9:19:68:f3:8b:e3:e7:83:5a:ae:eb:4f:b2: 86:7b:02:fd:f4:f2:13:76:c3:49:f6:21:c2:f4:3c:20:c6:d1: e4:2e:1b:11:3c:ea:3b:67:37:99:aa:81:3d:a1:82:4c:9c:af: fc:13:11:fc:1e:06:be:b9:25:ae:e4:93:00:28:c3:2a:84:90: c7:34:f6:d5:dc:a7:0e:da:86:a0:e2:fa:f1:51:bc:05:95:0d: c9:d6:9c:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNBR6x1o1Xmkb8aNPzO4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwMzAxMjEwMDQyWhcNMjYwMzAyMjEwMDQyWjAzMTEwLwYDVQQD Eyg3OTViNmE1NWIxNTNhMGUwYTE3YWJiM2Q2NjUzNDEyNmJmNDY2NWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbtuYi7XTtKtWbD1oGncD9Q7RYQY ELyMZdpNO+7bSC5vu3Qmmm64TZaW6zPXXBdZ50c3RUnF597OVOl8a8jMreRI3tIU 0LtCaJYCjw4hfgc6KLQ+LGwnz8qiJ0AR5UuY6dDjGIVGJ2XZrgIhhGk4CS9HAwkQ OcN9hS+rnT9NfpnP9V//VsPo9Kk4o3XVw8gogQEPbgReplPWyQo82YZVJoK6hOXI e6vvzwRSq4zo/Fr099+LiWGYciBeLMaxZoZjXN1L4j8aE1tz78BUqQIlqjpOKudK qOnA0DCde94qMxSbxgSd4UimuyYGsArrqv11ltxlEr6nKLBKZ50jNNq8UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlbalWxU6DgoXq7PWZTQSa/RmXBMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAP70gm4 ACZjlvEYmQp9BKSxS/b0el1Af3m5MNUbaEiXU83zMwmG/xrfDwulB4/kUQCHWbgT w3xLg9f0CZtFx342E2oOyGU0pDZThZABR/lsod0ZK1oFayB4oS3b8DysxLhEWC2V jPqdFbPQ/KW7tjpfq5RM/IsLqg+hGFO6D+w4mKcJFhRl1fId1AqMLc4ef0ssgBIQ QHKDUEI4TAHSE9FtmAYzU9T5GWjzi+Png1qu60+yhnsC/fTyE3bDSfYhwvQ8IMbR 5C4bETzqO2c3maqBPaGCTJyv/BMR/B4GvrklruSTACjDKoSQxzT21dynDtqGoOL6 8VG8BZUNydaccQ== -----END CERTIFICATE-----Generated at Mon Mar 2 05:37:13 2026 by rpki-client