$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: Whun5PBpV0HF1DFzs9htJkgu9sIjMQyG7Y07YeVHwbU= Subject key identifier: A6:C6:44:DE:70:80:FB:0D:EA:C7:1D:96:8B:E5:2F:C4:6D:C1:CA:66 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019D9998ED4671419A62BB39F5179D82B3A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 15E9 Signing time: Fri 17 Apr 2026 04:00:29 +0000 Manifest this update: Fri 17 Apr 2026 04:00:29 +0000 Manifest next update: Sat 18 Apr 2026 04:00:29 +0000 Files and hashes: 1: 1UiUTiwKgTMIt2VTMxLe14f3nS4.roa (hash: pqQp2WmJbg2RhT73uD+Ys0RPrhInn/LiUGnsvcFLzWI=) 2: 2IRM0RAkwS2oAZ2BDb8uf2ChjCQ.roa (hash: JPioNw406pRxJydsBBDsLTocLaIvgiBjIbhi/i3xRcw=) 3: 99NN1WXl1e-tpKT6ABRzj8ek8js.roa (hash: 8o+XYKw0+50Z916SkqFv35kFc2HKB1Yb/OlTSFjUqWw=) 4: Gt42LNyKpJtcqVRywZEAUF7VLT4.roa (hash: 9z9Onu3kjDDPqyse/NwIrtPdYmJbza2UnnbQIfvOZ2I=) 5: LlDSn4AAdQvcio-w6ueKASNJzJc.roa (hash: Tt+ws0A+jguw/rGXSOQBHfD+EimDFMYYNfrKEOU8mto=) 6: S87lpzwpwcvhDVlbS4kDtqKKrpA.roa (hash: EL+FrGUGQI1F7I3SdqUWEFxAZnp0C1EKciCac/NeJoU=) 7: UlvxYSaKh8Oc3zweZMlSdRb-gtk.roa (hash: oQKB3We88m7rm0/lXA7VFioKwk6yZDH7U1EGDEWoMxw=) 8: b9R1mHou81pbTN845jWo8AY0dG8.roa (hash: 0MAAHxvRxGYVPd74Q6mtc12UmkhV79TPgssvbAGMnic=) 9: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: 6+s2B0l3QvoMX7aS+gc+G2nl7HVT2TeN/X4eB/3qES8=) 10: zKPJ1aUk7U9x8WVHRd4-RzORH30.roa (hash: oMQrL9GvdJqmjmfNbo6U4V/JwihFWzU7V32F6VSp6yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:98:ed:46:71:41:9a:62:bb:39:f5:17:9d:82:b3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Apr 17 04:00:29 2026 GMT Not After : Apr 18 04:00:29 2026 GMT Subject: CN=a6c644de7080fb0deac71d968be52fc46dc1ca66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:80:03:f6:fb:f0:9c:d3:eb:27:f5:d0:3d: a6:28:2d:c0:33:31:3a:ee:44:ff:44:1a:e8:7c:b6: 2d:be:31:cc:93:5b:8b:28:1c:1d:de:91:55:f1:cf: 69:2e:c3:56:87:77:78:a5:70:3d:ed:02:89:b0:62: d3:b5:e0:c1:f9:70:98:42:bd:b3:d7:9d:7d:ef:84: 34:9a:4d:4f:bf:db:26:83:3a:80:d9:17:f2:77:f3: ff:30:3b:be:10:16:04:07:17:71:cf:c2:b0:1c:e1: 4f:60:9d:c6:9c:f0:19:29:2d:2f:bf:bd:cf:9e:19: 7d:d9:91:10:5f:aa:dd:5f:c3:1c:06:1c:e9:31:57: ff:c5:ff:cb:62:d6:e1:da:dd:c2:90:26:0c:41:47: 6e:df:0f:92:22:fc:69:a5:73:0d:7e:ac:f8:12:33: 71:2d:c2:36:6f:b6:0d:98:12:13:01:02:c9:fb:9e: 10:85:d5:a4:cd:a3:70:0a:34:51:63:76:fa:c2:88: d9:fa:fc:1e:ef:c7:94:bb:c8:06:59:4c:ab:99:54: 92:40:06:fe:4d:e8:40:c8:2a:c2:27:58:bc:92:2b: 26:d0:ee:ab:27:e5:af:32:4f:ea:16:30:ae:61:66: b2:d3:52:33:7e:e8:02:b0:ce:47:ec:78:24:73:68: 65:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C6:44:DE:70:80:FB:0D:EA:C7:1D:96:8B:E5:2F:C4:6D:C1:CA:66 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:9f:d9:c7:aa:91:aa:64:a1:0d:fa:f7:10:0c:ac:fa:79:7e: 56:35:89:c7:a7:b8:ba:54:00:f1:b1:e6:5b:82:cf:ab:da:d6: 71:a9:43:54:81:1b:2b:86:82:ea:74:93:f0:3d:0a:e3:53:ad: dc:8d:2a:bc:9d:3e:58:6a:6a:48:e5:12:a9:7c:d6:1f:6a:df: 5c:d1:19:c7:f0:1f:52:fe:76:b4:87:5d:72:73:33:6c:3d:d7: 68:76:0b:12:b5:4d:97:4d:04:b8:ce:b2:bc:38:8c:2f:1c:e3: 1f:31:ba:86:eb:cb:48:ad:65:b5:1b:25:38:0b:2b:7f:87:98: c3:c0:ee:de:07:94:d9:13:db:8f:87:eb:9e:26:76:41:dc:11: 2b:8d:0d:4c:80:0c:2b:c4:34:d1:3a:99:62:bb:d2:c5:2e:86: 12:9e:42:a2:20:88:b9:f8:2f:ef:1c:57:19:ae:7e:1c:5b:3a: f9:ae:c7:93:24:2a:82:90:d3:00:9b:e5:3c:29:66:73:85:e4: c3:85:08:b1:03:f0:68:f8:de:d1:7d:61:91:9d:71:86:c7:19: 01:4f:68:5e:09:fc:d0:3c:75:98:2a:78:48:01:4f:62:5f:2d: 81:87:10:ee:06:a3:4c:b8:ab:0d:56:77:02:7a:2a:d9:bf:d7: 52:ed:81:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmO1GcUGaYrs59RedgrOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjYwNDE3MDQwMDI5WhcNMjYwNDE4MDQwMDI5WjAzMTEwLwYDVQQD EyhhNmM2NDRkZTcwODBmYjBkZWFjNzFkOTY4YmU1MmZjNDZkYzFjYTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm6AA/b78JzT6yf10D2mKC3AMzE6 7kT/RBrofLYtvjHMk1uLKBwd3pFV8c9pLsNWh3d4pXA97QKJsGLTteDB+XCYQr2z 151974Q0mk1Pv9smgzqA2Rfyd/P/MDu+EBYEBxdxz8KwHOFPYJ3GnPAZKS0vv73P nhl92ZEQX6rdX8McBhzpMVf/xf/LYtbh2t3CkCYMQUdu3w+SIvxppXMNfqz4EjNx LcI2b7YNmBITAQLJ+54QhdWkzaNwCjRRY3b6wojZ+vwe78eUu8gGWUyrmVSSQAb+ TehAyCrCJ1i8kism0O6rJ+WvMk/qFjCuYWay01IzfugCsM5H7Hgkc2hlNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbGRN5wgPsN6scdlovlL8RtwcpmMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5/Zx6qR qmShDfr3EAys+nl+VjWJx6e4ulQA8bHmW4LPq9rWcalDVIEbK4aC6nST8D0K41Ot 3I0qvJ0+WGpqSOUSqXzWH2rfXNEZx/AfUv52tIddcnMzbD3XaHYLErVNl00EuM6y vDiMLxzjHzG6huvLSK1ltRslOAsrf4eYw8Du3geU2RPbj4frniZ2QdwRK40NTIAM K8Q00TqZYrvSxS6GEp5CoiCIufgv7xxXGa5+HFs6+a7HkyQqgpDTAJvlPClmc4Xk w4UIsQPwaPje0X1hkZ1xhscZAU9oXgn80Dx1mCp4SAFPYl8tgYcQ7gajTLirDVZ3 Anoq2b/XUu2BEA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:04:27 2026 by rpki-client