$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft File: fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json) Hash identifier: 2EELbYjjI+punDefusRKfkSTK38PblRrS4f/8UYFHTc= Subject key identifier: A6:DF:1F:85:BD:0A:65:42:DF:D5:69:8A:F8:FE:4C:C4:FC:15:52:B9 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019DA52FC71220AE1C40381C89BF8DFEE0F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft Manifest number: 14D8 Signing time: Sun 19 Apr 2026 10:01:04 +0000 Manifest this update: Sun 19 Apr 2026 10:01:04 +0000 Manifest next update: Mon 20 Apr 2026 10:01:04 +0000 Files and hashes: 1: 0KFRQQB9Lc0XuWKXvA0dnIy2njg.roa (hash: 9PNcCkZrauXgW+3YFUtyOx9/rmS3W9JA5UUSg4BFsGU=) 2: 2diwtm0Zbf_bmsdktiMcMcOMQg8.roa (hash: eVMbVKsLzh2plyfnoFozWhZn/xVtpLdpwRt+PjQnri4=) 3: 2hKTftFtuQRMT1oaso9aJ2Fwbhs.roa (hash: yt73gkjCnEpWOl4mDI2UvWLYkd+MzKzlxXOQLXQ8/rg=) 4: 3Q5j-7Pt8HcUq6bBHu3dKDediOU.roa (hash: 5c1NCBuQPjwD9eR+7rowyJnrFaKqJ48pXAIHslQmr00=) 5: 7ODkEA8GW4XqQMX815M0xDjVvrs.roa (hash: Ncp1j3mzzX7ml5rvDVDTsQNEgjoz0Dt1wsNtC6lEi94=) 6: 8NYcGLI50NHf_-GqbpzZZr4ltLA.roa (hash: fEaVNw2Wyd4+MGZ7FzjbEUafcEBr+2hDrYVvqLoZo5Q=) 7: 8ZcQrN0gVcxFnr-ChcIyFWdfoF8.roa (hash: FxsIDxqiDCsks/QZP2zl7z65J0NcQRJR7OpzOE/ZLiM=) 8: 8jfqpIUKuOw3bEeNl0QjuTIts5w.roa (hash: lA+JjzalnUsshqDeIEjkif9B6fmiylkMishkEuJTw+c=) 9: 9ciSFxfpsFEJtvCxwwKQui6r5zM.roa (hash: QooSkMFERuaO2unvGuJR36695C6QceBrXMuXSVRQ/9s=) 10: 9gIUZ3-KWFOqbPCbkWI5yHzecO0.roa (hash: jjpO0DxwKQMyYQwBPNQVarsVnFCb4DMo73zMMJVeyFI=) 11: BHMecBG9x9xUY8jTjlOT7nNxN9k.roa (hash: HYJY2r76YQlta0gJBproON2MhOd3SZjrPkPVpXkWpDU=) 12: Ez7vdg6eB07lFL05DPjqJKCOdIo.roa (hash: fBYYvlQ87n8J9SuhX/gsPnpOFHNxq/I9XnmkEjxP+Js=) 13: FLQX7VTxwFaQrQRyhh5AZ1ehPTU.roa (hash: TCoATecBzXKE+6xHAeP7h7guA+jHThVu36yV5nbsOcM=) 14: HMUv5O_IloNPK-xnYoboUUQaw9I.roa (hash: pWKPihhcLAd/kMZDUiPWP3Bf2PaOFgTs9krixFbyXKg=) 15: M23E5jFvo9QE4PZ22sZCcc77gm0.roa (hash: ez6ZtNmZWmq4SxAtsTn9ZRzqCWD4ICp/AVepQiwyNEI=) 16: M9SkjzKgp0C1w36F_3V-rwxzPrM.roa (hash: NOgmWBFIBR8qfeBLcrBHcBrGBBxychhI5zlw8nvAaeE=) 17: WToUjwUwqxWGFX7YfgHrsOMgM_8.roa (hash: kIIRszKRMT6GNaYzUy0dv+/IIIR5RaGl85LSnUgSJ+k=) 18: YKXZknOA48Q687Y2d6b6e138kG0.roa (hash: YKAaiTG9TWQNiJSpv5qYvX/007RacaolNt+mRs/AVA4=) 19: bZ7lVe52f2GXmi7XWYMeLJ4V86s.roa (hash: bZcb4IcZpKmYddgjqqBxvAN6lqh2zAQBjMMCJZa90kQ=) 20: bxDMk8rDIjX1JIaOhPkkS6agVn8.roa (hash: qdJb7Cn9TFHTehw1Um25RR8YIvGg9qXGmexGQanw2Jc=) 21: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: xIJnvXBX67gz6Mx4Iab7VGzBNa2bPAz+bNAUFSa6mPA=) 22: fvP8_8TU48J6IMiREwiDhO3tYLk.roa (hash: 3D1JK3jjDZ3dw6xUSf+wo+DL5MerbJPcmtMrr884SG8=) 23: gnDB9W02-r6mUcSzv9GpwgZT3jo.roa (hash: xF1q8i5GseG2Y/ChOFm114hCxbfrQRyX8F0vQWk71OI=) 24: go1rZLit0ECxEQHq3kpBk2CE4Qg.roa (hash: hJVabNE+muWiI6lmIeSiA8icGMZrwMb4YKQs1wbCUu8=) 25: kx0iDFbsXmf1_joPchYNl-Qa3D0.roa (hash: 0natnuOE/XONkp7+7SAGpqgXtC+NNO9MQZlBw7eJSr0=) 26: lqCu78LtvHJishdD6N4eR-R7RIM.roa (hash: iKTkz66NrpLAcH4+xiDnu+/37wuOGvm5ZNIxFMyUSUw=) 27: ovaw2-C0aLc15MUNM--nHeVzXAk.roa (hash: k6KOhUlHQLtwN5AMkDyj19Newr/qZ7SL0hXw1sn09K8=) 28: ovqAK3pYOqxaHlVK-LqO8cHqIYM.roa (hash: W0pJB/sjr5+69ynLbPfenFx2cuPhFShby13x0oho2no=) 29: pv9Cpord1y0tCGV7NVJXrmWgS28.roa (hash: ue24VSBSX2J82akgvFk1ddcbgpuIzB8HeE+GFQFimS4=) 30: qvYAP-lSXmNoClOM3rygyr0zdI0.roa (hash: XZWaUj3+lj06izt55k5PBSAGEgz79sdEGihL99kraEo=) 31: xWAzCmZMcG-JDSiQJKOLozSrRc0.roa (hash: lzdIYy1HSi547j5LHsPdxL03SsyIBHEZ8dTINmo4ArY=) 32: zN7eJocMGhWq5niF73RM-dIuVIM.roa (hash: oo32X248IIf2Wa+j4gsxo5ikGlQv9o+0FiBYs6RXCgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a5:2f:c7:12:20:ae:1c:40:38:1c:89:bf:8d:fe:e0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Apr 19 10:01:04 2026 GMT Not After : Apr 20 10:01:04 2026 GMT Subject: CN=a6df1f85bd0a6542dfd5698af8fe4cc4fc1552b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:7c:9d:b1:ed:6b:88:aa:b1:e1:ff:6d:6b: 23:a4:e5:10:89:2a:b9:e5:f3:0c:ac:82:2d:f5:17: 09:34:db:44:0b:5a:45:4d:c0:ee:11:74:fa:4f:3d: d6:53:e4:3e:29:0b:54:ec:5f:59:39:de:46:b8:a1: 0b:0a:ef:cc:ec:23:13:8e:64:05:fc:85:db:5c:1e: 2e:12:ca:6f:3d:3d:5f:a9:df:c5:e6:2e:3b:3a:da: 33:cb:8b:bc:ef:68:d3:a5:02:90:67:ce:13:4f:7e: c1:02:65:37:59:4f:da:36:f5:ce:e7:a0:68:13:6a: ce:d2:32:da:ab:52:78:5c:b3:0f:2d:4b:65:09:3f: 4e:ae:b6:c2:ca:51:3d:e4:81:38:fb:b4:65:bf:3e: 15:e5:04:05:f1:bb:a2:19:3a:06:db:44:80:49:5d: 2d:79:0e:c4:eb:ba:b8:b0:d0:80:90:2c:60:f0:95: 2a:83:7b:e8:49:59:a8:c0:c7:24:c3:4a:70:60:50: 7d:dc:87:2b:75:cc:37:c3:e1:7f:32:95:48:9d:94: 52:de:21:01:db:64:b1:28:26:01:3c:82:fa:23:18: 09:1b:4a:a1:0c:19:bb:ed:56:cd:24:61:e7:7f:68: d6:b1:b2:f8:5d:83:ce:65:7f:ae:50:11:eb:af:ed: a1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DF:1F:85:BD:0A:65:42:DF:D5:69:8A:F8:FE:4C:C4:FC:15:52:B9 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a3:1d:17:d2:bc:5b:63:4d:73:82:f2:1e:df:47:8c:52:8a: 38:70:c1:cf:bd:0a:27:b7:64:48:60:1f:ec:2f:ab:a0:fc:75: 16:54:05:c9:5e:c0:6d:95:1a:86:bb:85:02:87:02:cf:2a:96: ca:b6:62:61:1d:53:66:fb:76:4e:ff:74:ee:66:3d:3b:50:ff: 5b:29:7c:34:b6:4b:79:3a:74:47:78:e2:dc:bc:fc:90:1e:2c: 25:7f:b8:81:98:ae:29:e5:1b:0c:c2:ce:fb:5e:8f:01:61:a0: b0:42:59:4b:77:77:af:64:75:6c:b6:c7:97:49:31:d0:c3:22: 4d:5b:ce:da:f2:85:24:29:df:9f:f9:d1:e1:e1:48:c3:4c:aa: 9b:90:12:e0:6d:80:b1:b1:c6:ab:a6:08:dc:06:c1:e5:be:1a: 8e:94:da:74:4b:25:1e:7e:62:c2:67:e5:00:f7:1d:70:a1:ae: a5:f2:23:9c:3e:33:34:e3:80:29:9e:74:ea:16:74:f5:d4:e3: 83:5c:53:a0:25:25:66:55:c5:4c:98:50:7a:ca:a2:71:99:10: 96:0a:a1:ee:77:cb:92:62:4a:af:81:8e:87:cb:e5:c9:64:b0: 74:be:1c:c6:40:90:b9:99:4f:34:e0:ec:c3:1d:8c:68:30:c1: d8:47:df:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2lL8cSIK4cQDgcib+N/uDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwNDE5MTAwMTA0WhcNMjYwNDIwMTAwMTA0WjAzMTEwLwYDVQQD EyhhNmRmMWY4NWJkMGE2NTQyZGZkNTY5OGFmOGZlNGNjNGZjMTU1MmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXV8nbHta4iqseH/bWsjpOUQiSq5 5fMMrIIt9RcJNNtEC1pFTcDuEXT6Tz3WU+Q+KQtU7F9ZOd5GuKELCu/M7CMTjmQF /IXbXB4uEspvPT1fqd/F5i47Otozy4u872jTpQKQZ84TT37BAmU3WU/aNvXO56Bo E2rO0jLaq1J4XLMPLUtlCT9OrrbCylE95IE4+7Rlvz4V5QQF8buiGToG20SASV0t eQ7E67q4sNCAkCxg8JUqg3voSVmowMckw0pwYFB93Icrdcw3w+F/MpVInZRS3iEB 22SxKCYBPIL6IxgJG0qhDBm77VbNJGHnf2jWsbL4XYPOZX+uUBHrr+2hvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbfH4W9CmVC39Vpivj+TMT8FVK5MB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqMdF9K8 W2NNc4LyHt9HjFKKOHDBz70KJ7dkSGAf7C+roPx1FlQFyV7AbZUahruFAocCzyqW yrZiYR1TZvt2Tv907mY9O1D/Wyl8NLZLeTp0R3ji3Lz8kB4sJX+4gZiuKeUbDMLO +16PAWGgsEJZS3d3r2R1bLbHl0kx0MMiTVvO2vKFJCnfn/nR4eFIw0yqm5AS4G2A sbHGq6YI3AbB5b4ajpTadEslHn5iwmflAPcdcKGupfIjnD4zNOOAKZ506hZ09dTj g1xToCUlZlXFTJhQesqicZkQlgqh7nfLkmJKr4GOh8vlyWSwdL4cxkCQuZlPNODs wx2MaDDB2EffsA== -----END CERTIFICATE-----Generated at Sun Apr 19 12:58:42 2026 by rpki-client