$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: qiqXufxTnLNQyHr7kuT2VpDgUt3/6eshqttk/YgB7IU= Subject key identifier: 88:25:08:2C:F6:D2:BE:B7:A0:1E:6E:FD:2B:BD:CD:36:78:3A:AF:56 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019CAAFD64153F984BB200FEC88AD832C3A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 13AE Signing time: Sun 01 Mar 2026 20:00:58 +0000 Manifest this update: Sun 01 Mar 2026 20:00:58 +0000 Manifest next update: Mon 02 Mar 2026 20:00:58 +0000 Files and hashes: 1: 5Tkq8wpHcpeGz-f1egqNaUaEly4.roa (hash: UEQegGsLWicDIfmpSCpj13D1XKHb5j/U85IT8bxJWfc=) 2: 9CTRikFmDfftuulzmE7oVg4SrXo.roa (hash: QetHPa6rhiOmzCiHhKi65+JEz8i5R3+PHpMQcXOELTs=) 3: CGlwaarm8XPHSfd_sN3ULyqaKUg.roa (hash: WkoSqWTtOvdRK1F0sTVTQcYIqle5HqEUONAxF4fdu+0=) 4: DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa (hash: YlvXpp8OBX054sUjgr0G/E8Fj1hyn6n9+pikSmik/yw=) 5: K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa (hash: UtI+N3jVMIi1MfArZauCcNJH+3Px9d37UixMPUZOoTo=) 6: _yP2m6cl8cRwC6MErd0OYqhk9uw.roa (hash: KC1xdvTrCnL148MmuC/CmRUv6swh9y2uLjAWg/EyWgo=) 7: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: 4LRO8MzfsM0PRdQ9eK0VeDilTHgSOb/a/mukexOXizo=) 8: jQ9RMCpwNTwYfimV7ID_rUCi6Jo.roa (hash: epRbU/bf6HhhyAdmIE7JEgeJXVkXi3sclBBNp0SAlwg=) 9: nr9k1CgFTONdLf6R9QxhHnNqn0s.roa (hash: p4nvZA3enPe2lQ5RM8LvTtTA0KKajVqsnKOLaWopgI8=) 10: tdnQohzHZr8uW9f2J4849lgRnNs.roa (hash: R/F7DsXRI6l5OyjK0XOgTrIjrxtiZQtQIcujVHWYsus=) 11: wFfaatQDGVsMpN2fH-zvzPesV3g.roa (hash: 3ZM6HdXkNcqvPo4Y/liQTynJdayCJYTJLnDaTRRsnVI=) 12: wLx0CVIubWTYoCjwsL2Po__MQUM.roa (hash: F8k0Jt+fxP76purtLa3GdhBDmrpeFIZqPR/m/8/wT2Y=) 13: x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa (hash: DGtjPXc9IfmH8Lv2uA77Pdq/vDMpd2Jc/ZwXsO4TcZ0=) 14: yz9kj_FWQhCmpskN-2MCDdY5uBw.roa (hash: cgLL1yo6vIv8E9t7kQH/ixztHSmNjb1gmVnvmFzrVfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fd:64:15:3f:98:4b:b2:00:fe:c8:8a:d8:32:c3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Mar 1 20:00:58 2026 GMT Not After : Mar 2 20:00:58 2026 GMT Subject: CN=8825082cf6d2beb7a01e6efd2bbdcd36783aaf56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:87:70:fd:47:50:63:03:d8:d4:f1:ef:45:e1: 86:1d:37:9d:f7:08:5a:27:e5:0f:2d:19:41:a2:20: 5a:b7:b3:ee:86:d1:91:6f:7f:1a:94:31:d3:e8:90: 40:ef:2d:5f:9c:5a:73:33:6a:dd:ce:9e:56:2b:c7: 15:58:93:f9:b5:57:c8:c1:c4:77:64:c2:d5:cd:44: 83:21:95:9b:e0:2f:4d:5a:d5:1a:f4:75:d4:6a:78: d5:09:87:0d:b1:3e:52:8f:46:f6:01:90:7f:ba:fb: f4:d8:1f:03:59:69:16:4c:63:67:b0:c9:d9:56:54: 02:95:a6:ba:7c:86:0d:19:84:53:8a:8c:6b:7c:11: 61:f8:40:61:8c:61:ad:fc:2a:fb:2f:ec:5f:b6:b8: 50:ef:2d:93:8a:d3:82:3a:f4:43:f1:b9:30:08:15: 57:12:af:b6:f0:55:c8:98:3d:02:16:8b:11:dc:e4: 8d:ed:d7:76:b2:ae:2e:33:ba:cc:7e:5c:1b:f1:7a: b4:92:b5:a1:a1:d0:05:8d:89:28:7b:61:af:37:ba: 30:6e:03:a6:7d:a3:9b:24:b8:1c:41:49:7b:59:e8: f0:d1:1b:2c:45:b9:8a:23:71:2d:15:30:82:f3:48: be:54:3c:89:c8:24:2b:9c:e9:33:6c:4d:2b:ea:bb: 84:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:25:08:2C:F6:D2:BE:B7:A0:1E:6E:FD:2B:BD:CD:36:78:3A:AF:56 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:82:c3:9f:45:2b:73:be:dd:85:75:b8:08:6b:a7:9a:aa:b3: d0:ad:3d:32:70:40:2c:fa:11:6d:83:c2:d1:4f:12:39:af:f9: 3d:cc:3f:0f:8f:9d:ec:d1:6e:0c:d1:13:9c:3f:11:77:bc:42: b9:fe:58:5a:ff:f8:a9:57:d5:d5:1d:3e:c6:48:51:90:93:f7: 66:38:39:c9:b4:ab:8e:50:38:e7:74:a3:ed:07:9c:27:4b:f7: e2:80:84:d3:57:66:bb:40:d8:ac:e3:92:ea:d4:d5:d6:c2:95: 66:de:d3:82:18:62:a2:05:67:ec:a4:1d:c8:00:5d:3e:42:b8: 6f:a3:cb:0c:c8:86:91:39:a2:2b:d8:f9:ca:55:e3:5b:9c:97: f9:8b:c6:db:95:ea:55:b7:a9:c9:5e:73:0a:55:ea:c1:83:bf: 04:b1:e5:c7:cc:54:71:8c:ca:1e:42:51:8e:7d:80:8c:38:57: c3:4f:c9:2c:36:a7:24:bd:b6:c5:9b:d0:50:c3:af:de:83:7d: 26:2d:86:2e:f1:75:62:13:b4:65:8e:30:79:d9:47:17:c8:8d: c0:aa:ba:16:7d:17:d2:23:76:60:8f:b1:a6:e5:69:50:2e:61: 37:0c:08:b7:64:10:cb:8a:dc:93:ce:f9:76:09:41:7e:6e:3c: ec:8b:48:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/WQVP5hLsgD+yIrYMsOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwMzAxMjAwMDU4WhcNMjYwMzAyMjAwMDU4WjAzMTEwLwYDVQQD Eyg4ODI1MDgyY2Y2ZDJiZWI3YTAxZTZlZmQyYmJkY2QzNjc4M2FhZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIdw/UdQYwPY1PHvReGGHTed9wha J+UPLRlBoiBat7PuhtGRb38alDHT6JBA7y1fnFpzM2rdzp5WK8cVWJP5tVfIwcR3 ZMLVzUSDIZWb4C9NWtUa9HXUanjVCYcNsT5Sj0b2AZB/uvv02B8DWWkWTGNnsMnZ VlQClaa6fIYNGYRTioxrfBFh+EBhjGGt/Cr7L+xftrhQ7y2TitOCOvRD8bkwCBVX Eq+28FXImD0CFosR3OSN7dd2sq4uM7rMflwb8Xq0krWhodAFjYkoe2GvN7owbgOm faObJLgcQUl7Wejw0RssRbmKI3EtFTCC80i+VDyJyCQrnOkzbE0r6ruEuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIglCCz20r63oB5u/Su9zTZ4Oq9WMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYLDn0Ur c77dhXW4CGunmqqz0K09MnBALPoRbYPC0U8SOa/5Pcw/D4+d7NFuDNETnD8Rd7xC uf5YWv/4qVfV1R0+xkhRkJP3Zjg5ybSrjlA453Sj7QecJ0v34oCE01dmu0DYrOOS 6tTV1sKVZt7TghhiogVn7KQdyABdPkK4b6PLDMiGkTmiK9j5ylXjW5yX+YvG25Xq VbepyV5zClXqwYO/BLHlx8xUcYzKHkJRjn2AjDhXw0/JLDanJL22xZvQUMOv3oN9 Ji2GLvF1YhO0ZY4wedlHF8iNwKq6Fn0X0iN2YI+xpuVpUC5hNwwIt2QQy4rck875 dglBfm487ItIhg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:05:46 2026 by rpki-client