$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: 9a/+UmqkbRahDSmqLjtzKITFTdJwK/m60KP5mTMil1g= Subject key identifier: DA:BF:74:F0:1F:AE:E5:24:A9:D5:39:4A:1E:B0:B1:67:59:42:B4:4F Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019DA30A99ECDD94D46A6EBB6AFAA6024D6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 18FD Signing time: Sun 19 Apr 2026 00:01:14 +0000 Manifest this update: Sun 19 Apr 2026 00:01:14 +0000 Manifest next update: Mon 20 Apr 2026 00:01:14 +0000 Files and hashes: 1: 1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa (hash: qQJpp5KgzZdIPG7oShddMej6G09vuXAjLCnl8RBdk+s=) 2: 4rApJRlRNhbsTXM3GNtTv_-FUaE.roa (hash: MLIFEUQfYL+dU3SVCCpJ59J8zRwtwP9iXKmocqpNGdw=) 3: 7blUbad0lyHYKT7BdmBvmq5380U.roa (hash: qY+U0bZ6/EBhOS0YQQ7vmCYh9mixFIWmdrvvPqY0Kxw=) 4: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: yRfMlvafBtSf24klD+scE/dS6d7m7RughYC2gWN27e0=) 5: Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa (hash: VyyRwVBnaY4P+qhOH2Wi0cAjx6Up4dpdwhLbiAQ3CtY=) 6: Ep5McDs5t7WeZmyAgeWWCFiI58c.roa (hash: AOP9n/jwx2AwUV0sR9UZXO55UJCsgwtWlFLKT4Mnfww=) 7: IsNagTQeIBhCK_eEzJwts2JVNCw.roa (hash: 3EGVWuicI7zf/jhSqYDgo9FfBBbPEXmJZo6gLFFiDu0=) 8: UNcwmzZVzRQr8GbUBkJ92x7O5eE.roa (hash: meiM5bZ9UOA85hqFTKPoirVYKHNyJXm9Ra4fb/AWC3o=) 9: VOWlrP6uxrDIr-SPRswUzsamv9U.roa (hash: /dzp7Tx7zIjQ7oHAEiDUYqeue5FxJSSNt6hajAHSmwM=) 10: WQCrfzsax6n4r3v1hlQuR83C7do.roa (hash: /xxAd/ECrPZwq/l5JXhCScWy45/GJ5XDOGHFeVobafw=) 11: aa3gjPhQpHv-BaIkpsQYgGBQCPM.roa (hash: 8UFm1q7FERl7hmEhN4RSU3M8aef8QuPV/UHa7FsVID0=) 12: amFStnp6j-M9lkAATZthidSAqw0.roa (hash: 59Yb1hJ/qsJeQiwwAKrwKY2dgVW1ie3YqDOq9IPX2gA=) 13: c4rU82ROk5JHMuzWaUDAf2UpHuw.roa (hash: vdJbphjmJNk0M/0ecXI7N6QbpMoGR7yuaCxGZ6rARpE=) 14: hJcSMIo_XaCF0Or6myoUtWgtRXI.roa (hash: N1SDE1a07aO/mfcGYBo3p0KglE5WOqK+rZ9H6S+AsVs=) 15: o25brRT35PQQTxAbPaDAC1qCbs0.roa (hash: rJyPNW15ukUlAPAy2zm9lVpgff4++kMCrXKJIi7Zi3s=) 16: r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa (hash: 32j+tbL6tHhdIao29pkYwJtz2jR2ax5EQIkmfU8MT1g=) 17: sYV0gC_bNED6JuRG9OZx6sd2sNM.roa (hash: QkoUdyv92zyYef/ePnPDsDyA2gvOpaAc95PPopYOtrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 00:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:0a:99:ec:dd:94:d4:6a:6e:bb:6a:fa:a6:02:4d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Apr 19 00:01:14 2026 GMT Not After : Apr 20 00:01:14 2026 GMT Subject: CN=dabf74f01faee524a9d5394a1eb0b1675942b44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:aa:72:be:3a:60:8f:71:b3:6b:dd:fa:f5:c4: f8:53:46:d5:35:04:db:3f:2a:61:09:51:ac:19:3b: ae:b8:7e:3e:e2:37:ac:1d:69:f7:6c:2c:fe:27:28: 42:94:f5:20:7e:87:3d:fb:68:66:a6:c9:a4:34:25: 5f:ce:0a:e0:cd:ed:de:c3:3b:74:63:e6:93:c9:52: be:cc:15:66:91:3e:5b:8d:d0:77:15:82:aa:76:31: 0a:a0:e6:12:08:f5:e6:0f:07:27:af:7e:9f:5a:c8: 2e:8b:5e:36:c8:eb:fa:c2:f9:38:86:f9:54:b0:46: f1:35:29:4a:a3:5c:5a:84:51:32:0e:2a:84:88:3f: 25:52:b6:df:53:c4:3d:9f:9b:24:8d:ea:e7:a9:24: a1:92:1b:5f:c0:5d:81:fe:a7:0f:b2:69:06:19:aa: cc:e1:a4:8a:de:e4:d9:82:2e:7c:78:03:04:74:7a: 8b:40:31:ae:79:9f:9e:3a:4f:42:fe:9c:9a:b1:27: 48:df:2e:b6:ec:99:74:23:0d:d8:40:bf:da:55:a2: a2:de:6b:0d:11:60:5e:9c:0d:94:5c:01:66:1c:f0: 27:52:7c:53:cc:1f:66:33:74:a2:e1:1b:a6:11:9b: 1a:a5:5a:5c:f3:1f:22:ef:50:d7:30:65:8d:ee:6b: 06:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BF:74:F0:1F:AE:E5:24:A9:D5:39:4A:1E:B0:B1:67:59:42:B4:4F X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:19:62:d8:55:7c:4e:80:9b:65:59:15:d7:66:ba:f5:c2:c1: d0:15:19:e0:98:7d:fc:9a:a9:a4:74:cc:50:51:ad:28:cc:b5: 5d:2e:19:43:ca:9d:90:a6:b3:89:b1:29:73:38:39:b0:41:81: 28:95:b3:47:bc:94:b0:ab:4e:d5:54:9c:64:b7:1c:7c:00:91: 14:47:99:2d:5a:ed:7f:14:21:d6:0c:2e:85:90:24:de:82:6e: 95:6e:0b:7c:4a:03:88:06:f0:8c:13:80:77:7d:01:20:e3:a8: 3d:1a:81:fa:15:9f:79:1e:0c:0b:1a:b6:40:39:72:d5:d8:a9: c5:3c:f0:19:ea:09:08:e7:1b:7c:e7:aa:6e:aa:02:4c:4d:4d: c6:8a:62:63:52:e1:83:00:2d:05:47:6b:6b:10:d4:04:b3:33: cd:1e:2b:56:69:b2:82:3b:7f:2a:cd:f5:a1:30:0e:45:ad:ae: b5:75:b9:bd:03:0f:d5:cf:6c:a9:d3:20:2b:39:52:ac:3b:37: ea:5c:76:13:c5:1c:80:3c:00:cc:33:0d:dc:e1:51:f7:7d:1c: 8c:2c:7d:54:16:5e:d8:dc:13:68:26:de:3d:ac:29:d7:82:fa: 22:aa:de:15:1e:22:4d:df:67:f3:21:0c:cd:2c:c1:35:6e:0d: fa:5e:65:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jCpns3ZTUam67avqmAk1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwNDE5MDAwMTE0WhcNMjYwNDIwMDAwMTE0WjAzMTEwLwYDVQQD EyhkYWJmNzRmMDFmYWVlNTI0YTlkNTM5NGExZWIwYjE2NzU5NDJiNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6pyvjpgj3Gza9369cT4U0bVNQTb PyphCVGsGTuuuH4+4jesHWn3bCz+JyhClPUgfoc9+2hmpsmkNCVfzgrgze3ewzt0 Y+aTyVK+zBVmkT5bjdB3FYKqdjEKoOYSCPXmDwcnr36fWsgui142yOv6wvk4hvlU sEbxNSlKo1xahFEyDiqEiD8lUrbfU8Q9n5skjernqSShkhtfwF2B/qcPsmkGGarM 4aSK3uTZgi58eAMEdHqLQDGueZ+eOk9C/pyasSdI3y627Jl0Iw3YQL/aVaKi3msN EWBenA2UXAFmHPAnUnxTzB9mM3Si4RumEZsapVpc8x8i71DXMGWN7msGKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNq/dPAfruUkqdU5Sh6wsWdZQrRPMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRli2FV8 ToCbZVkV12a69cLB0BUZ4Jh9/JqppHTMUFGtKMy1XS4ZQ8qdkKazibEpczg5sEGB KJWzR7yUsKtO1VScZLccfACRFEeZLVrtfxQh1gwuhZAk3oJulW4LfEoDiAbwjBOA d30BIOOoPRqB+hWfeR4MCxq2QDly1dipxTzwGeoJCOcbfOeqbqoCTE1NxopiY1Lh gwAtBUdraxDUBLMzzR4rVmmygjt/Ks31oTAORa2utXW5vQMP1c9sqdMgKzlSrDs3 6lx2E8UcgDwAzDMN3OFR930cjCx9VBZe2NwTaCbePawp14L6IqreFR4iTd9n8yEM zSzBNW4N+l5lWQ== -----END CERTIFICATE-----Generated at Sun Apr 19 10:12:59 2026 by rpki-client