$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: POqpDHFp/xJxfhE7+v39le7dOnBzH0ph6016NcO+iN4= Subject key identifier: 56:E5:44:BC:8C:90:34:52:5A:90:4E:AD:C5:3D:93:F2:4C:6D:08:C3 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 01A0BF5511E3426B59A79600664F7833E6B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 15D1 Signing time: Sun 20 Sep 2026 15:00:18 +0000 Manifest this update: Sun 20 Sep 2026 15:00:18 +0000 Manifest next update: Mon 21 Sep 2026 15:00:18 +0000 Files and hashes: 1: 0H6OsPKc9Cn6xVwU-sMeX-aEEII.roa (hash: xwsVWakw+x28jhWY0Coi0m/7f/xKAGYT9zdsjIu1sdk=) 2: 4ZyYrxdMVPNrHL63nSmSHm7BJig.roa (hash: tkJ2qyLJeQtQKbXkAggvDNTWa3p6+Xzk5AaNc5VgTbY=) 3: 5Tkq8wpHcpeGz-f1egqNaUaEly4.roa (hash: UEQegGsLWicDIfmpSCpj13D1XKHb5j/U85IT8bxJWfc=) 4: CGlwaarm8XPHSfd_sN3ULyqaKUg.roa (hash: WkoSqWTtOvdRK1F0sTVTQcYIqle5HqEUONAxF4fdu+0=) 5: DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa (hash: YlvXpp8OBX054sUjgr0G/E8Fj1hyn6n9+pikSmik/yw=) 6: GT1TKA4rV1OP_xJGzsCFQYpWhGg.roa (hash: HG/pHQ1DuBKD68MX3r3/b2+tAgjgwKx/kNjIgxZtYug=) 7: K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa (hash: UtI+N3jVMIi1MfArZauCcNJH+3Px9d37UixMPUZOoTo=) 8: a9jE-TX9k6OHwBgKQbFeNgu9t74.roa (hash: HbwU/n/E/rQdZGHVXYtZfsfswxUEspontCNM306GAQg=) 9: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: csVRecZGqWhHAZA3z7Hp9A7B8Kw30op451b46S2uzWc=) 10: nr9k1CgFTONdLf6R9QxhHnNqn0s.roa (hash: p4nvZA3enPe2lQ5RM8LvTtTA0KKajVqsnKOLaWopgI8=) 11: tdnQohzHZr8uW9f2J4849lgRnNs.roa (hash: R/F7DsXRI6l5OyjK0XOgTrIjrxtiZQtQIcujVHWYsus=) 12: uLh37d-CZyi_CuBp_4qkf4KKeHY.roa (hash: 4Y8qT4eDZwwuj7P5bcinlRoVnttb6kb3uO1Y02tcU4g=) 13: wFfaatQDGVsMpN2fH-zvzPesV3g.roa (hash: 3ZM6HdXkNcqvPo4Y/liQTynJdayCJYTJLnDaTRRsnVI=) 14: wLx0CVIubWTYoCjwsL2Po__MQUM.roa (hash: F8k0Jt+fxP76purtLa3GdhBDmrpeFIZqPR/m/8/wT2Y=) 15: x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa (hash: DGtjPXc9IfmH8Lv2uA77Pdq/vDMpd2Jc/ZwXsO4TcZ0=) 16: yz9kj_FWQhCmpskN-2MCDdY5uBw.roa (hash: cgLL1yo6vIv8E9t7kQH/ixztHSmNjb1gmVnvmFzrVfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:55:11:e3:42:6b:59:a7:96:00:66:4f:78:33:e6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Sep 20 15:00:18 2026 GMT Not After : Sep 21 15:00:18 2026 GMT Subject: CN=56e544bc8c9034525a904eadc53d93f24c6d08c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:54:8d:b3:38:b7:2d:6e:9e:a1:32:65:c0:25: 90:da:87:59:02:e3:b0:61:e9:a0:28:7f:f7:a4:8d: 3b:b3:31:14:38:cb:da:86:38:c2:42:01:3c:50:28: 80:7d:4f:87:1e:38:d6:48:1f:88:d7:32:dd:51:2b: 5b:0c:f1:7d:27:83:ed:54:ed:7b:6b:d3:84:4a:3e: ef:a9:bb:db:be:8d:1c:8d:9b:6b:eb:9d:78:f7:8d: 82:2f:2a:01:1b:6b:6d:69:f3:cb:0d:b1:75:1e:b6: 55:78:99:2a:d5:03:d2:88:a1:61:c3:f0:9d:c3:a6: c7:5a:ac:e5:ce:b6:c3:66:d8:c6:3d:c3:a6:c4:7a: 1b:b3:9f:1a:f2:0d:44:76:3a:51:4d:b6:41:27:1a: 1e:a0:3a:f1:88:2d:4a:99:83:bc:de:1e:27:31:23: 51:d8:72:a5:ea:5a:af:f4:77:aa:87:9e:e9:b3:a5: 88:09:5f:a3:ea:12:df:e4:a5:5d:7b:3d:bc:92:e7: de:6b:51:1e:6b:11:bd:fb:fc:57:f2:06:7e:47:79: 2f:12:28:1a:7f:1c:4c:3b:3f:0e:c9:c9:75:cc:db: bb:1f:22:31:5d:97:2c:e9:78:1d:64:3f:35:50:c0: 8e:8d:a3:48:7a:e7:8a:0a:ba:33:4c:b5:ad:3e:ad: ee:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E5:44:BC:8C:90:34:52:5A:90:4E:AD:C5:3D:93:F2:4C:6D:08:C3 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ce:5b:b2:a5:e2:42:6b:a1:b3:ed:92:06:f7:fe:8a:a4:2f: 13:54:ec:46:28:2e:78:80:3f:e3:5e:a0:3a:fd:a0:16:90:bc: 5e:8f:d7:81:ce:0f:a3:09:97:08:d3:13:03:8d:53:88:1f:ea: 6e:e0:0b:e1:f1:75:0a:e9:9d:38:68:dd:68:14:d8:95:84:2f: a4:04:1e:ea:fb:84:96:ce:d4:36:ba:2d:00:8d:5a:a6:ff:85: d6:37:16:65:49:36:b3:9c:c6:0f:19:c0:0d:02:81:bd:db:f0: 7d:ac:97:94:8b:7d:16:39:4d:cc:42:d6:57:27:c8:cf:40:da: 21:c6:0c:0b:74:dc:4d:a1:da:ac:ed:4f:14:83:98:27:d4:4a: ae:35:e9:39:de:a3:59:91:b6:40:9d:e3:b3:14:b7:53:97:b2: 82:98:a6:bb:a6:fa:de:a9:b0:79:57:de:d6:b3:7a:b2:de:bb: c6:c7:8c:66:12:d7:9e:3c:4c:49:a2:7a:18:f7:8b:ac:d9:25: d6:f0:11:c3:2c:39:38:52:93:89:ef:30:c1:fa:78:3a:fa:ec: 76:8f:75:80:55:75:7e:56:a1:23:bf:6b:ca:77:ea:ab:a3:c3: 9a:32:78:de:12:3c:5f:ee:95:31:b6:72:6c:27:60:7f:8d:dd: 0c:a3:46:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/VRHjQmtZp5YAZk94M+a3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwOTIwMTUwMDE4WhcNMjYwOTIxMTUwMDE4WjAzMTEwLwYDVQQD Eyg1NmU1NDRiYzhjOTAzNDUyNWE5MDRlYWRjNTNkOTNmMjRjNmQwOGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FSNszi3LW6eoTJlwCWQ2odZAuOw YemgKH/3pI07szEUOMvahjjCQgE8UCiAfU+HHjjWSB+I1zLdUStbDPF9J4PtVO17 a9OESj7vqbvbvo0cjZtr6514942CLyoBG2ttafPLDbF1HrZVeJkq1QPSiKFhw/Cd w6bHWqzlzrbDZtjGPcOmxHobs58a8g1EdjpRTbZBJxoeoDrxiC1KmYO83h4nMSNR 2HKl6lqv9Heqh57ps6WICV+j6hLf5KVdez28kufea1EeaxG9+/xX8gZ+R3kvEiga fxxMOz8Oycl1zNu7HyIxXZcs6XgdZD81UMCOjaNIeueKCrozTLWtPq3uuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFblRLyMkDRSWpBOrcU9k/JMbQjDMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcs5bsqXi Qmuhs+2SBvf+iqQvE1TsRigueIA/416gOv2gFpC8Xo/Xgc4PowmXCNMTA41TiB/q buAL4fF1CumdOGjdaBTYlYQvpAQe6vuEls7UNrotAI1apv+F1jcWZUk2s5zGDxnA DQKBvdvwfayXlIt9FjlNzELWVyfIz0DaIcYMC3TcTaHarO1PFIOYJ9RKrjXpOd6j WZG2QJ3jsxS3U5eygpimu6b63qmweVfe1rN6st67xseMZhLXnjxMSaJ6GPeLrNkl 1vARwyw5OFKTie8wwfp4Ovrsdo91gFV1flahI79rynfqq6PDmjJ43hI8X+6VMbZy bCdgf43dDKNGCQ== -----END CERTIFICATE-----Generated at Sun Sep 20 21:40:07 2026 by rpki-client