$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: buAZ7ckFe+GU49znLoCnwbR+ipgXuaxPTwdYT6eCMyU= Subject key identifier: 20:E4:AC:33:85:79:0A:95:9D:6F:DA:3C:12:24:80:2A:41:16:14:FC Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019CAAC61062A06B90C0047C5B767CAF35D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 156D Signing time: Sun 01 Mar 2026 19:00:32 +0000 Manifest this update: Sun 01 Mar 2026 19:00:32 +0000 Manifest next update: Mon 02 Mar 2026 19:00:32 +0000 Files and hashes: 1: 1UiUTiwKgTMIt2VTMxLe14f3nS4.roa (hash: pqQp2WmJbg2RhT73uD+Ys0RPrhInn/LiUGnsvcFLzWI=) 2: 99NN1WXl1e-tpKT6ABRzj8ek8js.roa (hash: 8o+XYKw0+50Z916SkqFv35kFc2HKB1Yb/OlTSFjUqWw=) 3: Gt42LNyKpJtcqVRywZEAUF7VLT4.roa (hash: 9z9Onu3kjDDPqyse/NwIrtPdYmJbza2UnnbQIfvOZ2I=) 4: LlDSn4AAdQvcio-w6ueKASNJzJc.roa (hash: Tt+ws0A+jguw/rGXSOQBHfD+EimDFMYYNfrKEOU8mto=) 5: S87lpzwpwcvhDVlbS4kDtqKKrpA.roa (hash: EL+FrGUGQI1F7I3SdqUWEFxAZnp0C1EKciCac/NeJoU=) 6: UlvxYSaKh8Oc3zweZMlSdRb-gtk.roa (hash: oQKB3We88m7rm0/lXA7VFioKwk6yZDH7U1EGDEWoMxw=) 7: b9R1mHou81pbTN845jWo8AY0dG8.roa (hash: 0MAAHxvRxGYVPd74Q6mtc12UmkhV79TPgssvbAGMnic=) 8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: YqNGUxeHea2W+VfN58dxnZVA6qKdaHSrHyfjtzb9LJ0=) 9: vTKohdF56IFQgah9DuO0JGwcH9U.roa (hash: bsUg8Uy5yocfoi+JUcF+13tkU1rzb4BDrWJjTlHrS6I=) 10: zKPJ1aUk7U9x8WVHRd4-RzORH30.roa (hash: oMQrL9GvdJqmjmfNbo6U4V/JwihFWzU7V32F6VSp6yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:c6:10:62:a0:6b:90:c0:04:7c:5b:76:7c:af:35:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Mar 1 19:00:32 2026 GMT Not After : Mar 2 19:00:32 2026 GMT Subject: CN=20e4ac3385790a959d6fda3c1224802a411614fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:bc:87:c7:75:ca:d6:46:e7:25:e7:57:27: fc:f9:b6:80:9e:51:45:43:68:64:e5:67:3c:ab:f1: 56:c5:8f:7e:aa:2e:5c:c1:fd:96:4b:df:7c:16:8b: fc:02:a4:a7:32:ff:da:98:72:ee:8e:c6:86:a7:a0: c6:44:a9:db:49:9f:8a:06:f4:76:79:81:6d:70:2a: 45:ee:31:73:44:bf:f6:af:e1:f7:76:e4:c9:1a:59: f4:fa:be:55:55:bf:85:f7:de:fb:2a:93:97:6c:bc: 3a:b6:25:db:02:da:c4:1a:8c:fd:37:68:1f:d0:c1: ab:5b:bf:b8:27:9f:7f:1c:44:ea:3e:c1:f6:bc:4d: 67:82:12:e4:94:a9:95:7f:bb:7b:42:ac:80:0e:9e: 31:2f:4f:81:50:85:82:5e:ac:5d:eb:a8:8f:d0:75: 67:9c:83:59:50:ec:e4:d1:26:88:c9:75:37:50:d8: 74:7f:4a:e8:d7:02:2d:be:87:3a:ee:77:4f:90:9a: b9:ff:cd:4d:0b:87:59:69:35:87:45:82:40:33:87: 0e:b0:b4:1d:9a:c4:d7:f3:f3:b2:58:a5:d1:78:a8: 67:46:91:b6:46:4c:9b:db:77:e5:24:8c:ad:87:04: ac:ff:93:6c:3d:fa:94:7d:63:53:10:5a:00:6a:c5: e6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E4:AC:33:85:79:0A:95:9D:6F:DA:3C:12:24:80:2A:41:16:14:FC X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ea:06:0c:cf:76:83:b2:e4:da:d2:91:aa:7e:d9:66:0a:24: d7:ac:c1:f7:52:8f:d3:df:9e:26:d1:6f:fc:20:c3:94:40:57: 63:4f:79:76:7a:1e:61:43:8a:86:1f:cc:3a:78:36:0d:fd:b5: d9:d9:31:97:10:1d:35:e5:86:20:19:04:9c:7a:5b:3f:f7:a6: af:d7:d0:af:69:59:34:ad:5e:d3:65:92:f1:05:33:ad:7d:87: fb:41:60:44:7e:c3:13:bc:39:15:e7:8b:7c:2d:5e:66:30:66: 36:7d:e5:aa:4c:7a:e7:79:19:6e:72:48:39:b8:c9:b2:a7:d0: d2:ad:f3:4b:64:44:ae:4f:c8:ac:4d:1e:1f:2f:79:78:0c:15: 85:70:8f:f2:9d:95:b4:5d:cf:03:1c:90:ce:3c:b2:c4:f2:50: 1e:9c:a3:1a:11:d5:24:2d:2b:06:4b:0a:b9:d4:5f:0c:4d:58: db:9a:06:06:2c:8b:5e:b3:eb:9b:02:5a:a6:d6:43:5c:f9:a0: d6:b5:81:2f:61:22:80:d9:f1:08:20:55:be:4e:92:fc:57:fb: fb:5e:78:90:a3:de:f6:fe:6d:35:d3:01:0e:c4:18:d3:4e:12: c8:0f:c7:0c:16:4e:80:0a:dc:26:e0:50:05:59:f2:12:50:26: f4:b9:6e:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqxhBioGuQwAR8W3Z8rzXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjYwMzAxMTkwMDMyWhcNMjYwMzAyMTkwMDMyWjAzMTEwLwYDVQQD EygyMGU0YWMzMzg1NzkwYTk1OWQ2ZmRhM2MxMjI0ODAyYTQxMTYxNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyS8h8d1ytZG5yXnVyf8+baAnlFF Q2hk5Wc8q/FWxY9+qi5cwf2WS998Fov8AqSnMv/amHLujsaGp6DGRKnbSZ+KBvR2 eYFtcCpF7jFzRL/2r+H3duTJGln0+r5VVb+F9977KpOXbLw6tiXbAtrEGoz9N2gf 0MGrW7+4J59/HETqPsH2vE1nghLklKmVf7t7QqyADp4xL0+BUIWCXqxd66iP0HVn nINZUOzk0SaIyXU3UNh0f0ro1wItvoc67ndPkJq5/81NC4dZaTWHRYJAM4cOsLQd msTX8/OyWKXReKhnRpG2Rkyb23flJIythwSs/5NsPfqUfWNTEFoAasXmTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDkrDOFeQqVnW/aPBIkgCpBFhT8MB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuoGDM92 g7Lk2tKRqn7ZZgok16zB91KP09+eJtFv/CDDlEBXY095dnoeYUOKhh/MOng2Df21 2dkxlxAdNeWGIBkEnHpbP/emr9fQr2lZNK1e02WS8QUzrX2H+0FgRH7DE7w5FeeL fC1eZjBmNn3lqkx653kZbnJIObjJsqfQ0q3zS2RErk/IrE0eHy95eAwVhXCP8p2V tF3PAxyQzjyyxPJQHpyjGhHVJC0rBksKudRfDE1Y25oGBiyLXrPrmwJaptZDXPmg 1rWBL2EigNnxCCBVvk6S/Ff7+154kKPe9v5tNdMBDsQY004SyA/HDBZOgArcJuBQ BVnyElAm9LluVA== -----END CERTIFICATE-----Generated at Sun Mar 1 23:43:56 2026 by rpki-client