$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: 2gbRuIu3VuQd3X6+dlIHqNWpzSlaP6ND3ZTNw0dJsYc= Subject key identifier: 2C:73:05:B8:1E:37:98:8C:0A:0E:6A:F8:12:F1:D2:19:00:1C:F7:55 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019D984FC413593DB5563BA2BB6F7869E1B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 142A Signing time: Thu 16 Apr 2026 22:00:57 +0000 Manifest this update: Thu 16 Apr 2026 22:00:57 +0000 Manifest next update: Fri 17 Apr 2026 22:00:57 +0000 Files and hashes: 1: 4ZyYrxdMVPNrHL63nSmSHm7BJig.roa (hash: tkJ2qyLJeQtQKbXkAggvDNTWa3p6+Xzk5AaNc5VgTbY=) 2: 5Tkq8wpHcpeGz-f1egqNaUaEly4.roa (hash: UEQegGsLWicDIfmpSCpj13D1XKHb5j/U85IT8bxJWfc=) 3: CGlwaarm8XPHSfd_sN3ULyqaKUg.roa (hash: WkoSqWTtOvdRK1F0sTVTQcYIqle5HqEUONAxF4fdu+0=) 4: DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa (hash: YlvXpp8OBX054sUjgr0G/E8Fj1hyn6n9+pikSmik/yw=) 5: K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa (hash: UtI+N3jVMIi1MfArZauCcNJH+3Px9d37UixMPUZOoTo=) 6: ShZkdbcfCuq5QrnS0tkxoTrPpbs.roa (hash: XHG7GZRjOjY4apawH2DswiCRZMlr/Nymy0R/11/lHDk=) 7: _yP2m6cl8cRwC6MErd0OYqhk9uw.roa (hash: KC1xdvTrCnL148MmuC/CmRUv6swh9y2uLjAWg/EyWgo=) 8: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: X1R6NGteaFe2gpLsELCrdn693YpqTZfEJPGDfvqNArk=) 9: nr9k1CgFTONdLf6R9QxhHnNqn0s.roa (hash: p4nvZA3enPe2lQ5RM8LvTtTA0KKajVqsnKOLaWopgI8=) 10: tdnQohzHZr8uW9f2J4849lgRnNs.roa (hash: R/F7DsXRI6l5OyjK0XOgTrIjrxtiZQtQIcujVHWYsus=) 11: uLh37d-CZyi_CuBp_4qkf4KKeHY.roa (hash: 4Y8qT4eDZwwuj7P5bcinlRoVnttb6kb3uO1Y02tcU4g=) 12: wFfaatQDGVsMpN2fH-zvzPesV3g.roa (hash: 3ZM6HdXkNcqvPo4Y/liQTynJdayCJYTJLnDaTRRsnVI=) 13: wLx0CVIubWTYoCjwsL2Po__MQUM.roa (hash: F8k0Jt+fxP76purtLa3GdhBDmrpeFIZqPR/m/8/wT2Y=) 14: x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa (hash: DGtjPXc9IfmH8Lv2uA77Pdq/vDMpd2Jc/ZwXsO4TcZ0=) 15: yz9kj_FWQhCmpskN-2MCDdY5uBw.roa (hash: cgLL1yo6vIv8E9t7kQH/ixztHSmNjb1gmVnvmFzrVfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:4f:c4:13:59:3d:b5:56:3b:a2:bb:6f:78:69:e1:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Apr 16 22:00:57 2026 GMT Not After : Apr 17 22:00:57 2026 GMT Subject: CN=2c7305b81e37988c0a0e6af812f1d219001cf755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:c2:c6:09:d2:31:b0:e6:8e:e3:44:d0:91:b0: bc:f4:a2:c2:0d:13:9c:f8:da:36:d5:82:6b:3a:82: 93:47:e2:d0:b1:78:89:ff:6c:38:4e:7f:43:39:41: f9:a3:e7:23:6d:02:ba:2c:34:a8:4c:04:fc:75:44: cd:1e:9d:44:dc:b9:6b:e6:82:9e:b1:49:69:b8:e9: bb:c3:6e:3f:e1:29:84:0c:d0:88:cc:2b:f7:33:7e: f5:49:87:ff:bf:5e:b8:8c:11:9b:d4:fb:39:33:f9: 69:30:52:b4:91:18:ff:04:df:84:2e:8e:00:63:ce: 2a:31:c6:a1:bf:b5:9e:38:83:85:1e:4d:28:12:63: a9:d7:b8:97:59:ad:c6:7d:76:00:c8:52:df:61:ef: c2:e9:85:21:ff:6c:fe:2b:56:ca:ab:b6:8f:96:7f: e1:f7:67:ad:74:90:4a:07:91:9a:6e:4a:9a:54:1f: 13:cf:3e:bc:0c:5d:a5:71:2d:68:57:0a:c8:ba:4d: 21:81:99:73:98:92:f9:0b:56:65:6e:72:fd:b1:9a: d6:e2:91:69:f0:f5:92:8b:07:cc:47:54:c2:8b:b8: 4f:b1:26:b1:dd:19:7e:a4:ec:62:c2:a9:5a:a2:8f: ee:7e:ae:dd:94:ea:d0:f9:c8:1b:96:77:66:57:f0: 7c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:73:05:B8:1E:37:98:8C:0A:0E:6A:F8:12:F1:D2:19:00:1C:F7:55 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a9:c9:f4:7f:e7:87:09:86:72:d8:47:bf:d5:d2:06:5a:1f: 01:85:47:17:d2:1e:9d:5a:9e:86:74:6f:4c:7f:d1:19:cc:26: 1e:e3:2f:be:a8:33:b2:41:a3:d4:f9:ff:6d:42:25:a1:39:5c: a9:8d:ca:80:e8:21:7f:a5:74:28:80:96:bb:99:61:6f:f3:5c: fa:90:01:0c:4c:36:15:9e:98:4b:db:3e:f4:f9:f9:ee:4c:ee: 67:5e:20:15:6e:d3:66:1e:5e:77:16:f6:cd:a6:fc:7d:d8:c5: 1f:b6:50:89:1e:24:68:b4:d1:81:33:e1:d8:0b:43:8e:7e:cc: 98:3e:88:58:20:c4:32:3e:4e:73:02:90:78:eb:1a:c5:f8:d7: 31:30:13:1a:cd:d7:b8:9d:cd:52:c0:f3:3d:27:58:45:ff:38: fa:3e:32:49:6f:d9:90:32:22:45:f9:fb:ba:41:ef:79:65:81: f5:4f:9f:d7:79:f9:c8:cc:bd:2d:01:37:d9:fe:82:d9:76:83: d2:df:61:5c:d2:72:bc:23:ab:c5:3c:8e:54:d0:53:6e:c4:ea: a6:99:8f:9e:fd:fb:96:6e:b0:b7:3a:fa:6d:31:17:0b:90:95: a6:17:02:41:09:7a:e3:c7:e5:ab:4d:54:c4:07:55:3d:75:82: 09:94:60:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YT8QTWT21Vjuiu294aeG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwNDE2MjIwMDU3WhcNMjYwNDE3MjIwMDU3WjAzMTEwLwYDVQQD EygyYzczMDViODFlMzc5ODhjMGEwZTZhZjgxMmYxZDIxOTAwMWNmNzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+sLGCdIxsOaO40TQkbC89KLCDROc +No21YJrOoKTR+LQsXiJ/2w4Tn9DOUH5o+cjbQK6LDSoTAT8dUTNHp1E3Llr5oKe sUlpuOm7w24/4SmEDNCIzCv3M371SYf/v164jBGb1Ps5M/lpMFK0kRj/BN+ELo4A Y84qMcahv7WeOIOFHk0oEmOp17iXWa3GfXYAyFLfYe/C6YUh/2z+K1bKq7aPln/h 92etdJBKB5GabkqaVB8Tzz68DF2lcS1oVwrIuk0hgZlzmJL5C1ZlbnL9sZrW4pFp 8PWSiwfMR1TCi7hPsSax3Rl+pOxiwqlaoo/ufq7dlOrQ+cgblndmV/B84wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxzBbgeN5iMCg5q+BLx0hkAHPdVMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVanJ9H/n hwmGcthHv9XSBlofAYVHF9IenVqehnRvTH/RGcwmHuMvvqgzskGj1Pn/bUIloTlc qY3KgOghf6V0KICWu5lhb/Nc+pABDEw2FZ6YS9s+9Pn57kzuZ14gFW7TZh5edxb2 zab8fdjFH7ZQiR4kaLTRgTPh2AtDjn7MmD6IWCDEMj5OcwKQeOsaxfjXMTATGs3X uJ3NUsDzPSdYRf84+j4ySW/ZkDIiRfn7ukHveWWB9U+f13n5yMy9LQE32f6C2XaD 0t9hXNJyvCOrxTyOVNBTbsTqppmPnv37lm6wtzr6bTEXC5CVphcCQQl648flq01U xAdVPXWCCZRgvQ== -----END CERTIFICATE-----Generated at Fri Apr 17 07:21:26 2026 by rpki-client