$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: TaJAXju/QnJvHI1vfwxrH1iw/Bw6JakZOwfsx+TP4ps= Subject key identifier: 7E:3F:B9:FD:6A:D5:62:D3:25:28:37:E1:B7:81:5E:91:9F:4C:5D:2D Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019CAC46D8459810AC873CDD235B88D25D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 187D Signing time: Mon 02 Mar 2026 02:00:49 +0000 Manifest this update: Mon 02 Mar 2026 02:00:49 +0000 Manifest next update: Tue 03 Mar 2026 02:00:49 +0000 Files and hashes: 1: 1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa (hash: qQJpp5KgzZdIPG7oShddMej6G09vuXAjLCnl8RBdk+s=) 2: 4rApJRlRNhbsTXM3GNtTv_-FUaE.roa (hash: MLIFEUQfYL+dU3SVCCpJ59J8zRwtwP9iXKmocqpNGdw=) 3: 7blUbad0lyHYKT7BdmBvmq5380U.roa (hash: qY+U0bZ6/EBhOS0YQQ7vmCYh9mixFIWmdrvvPqY0Kxw=) 4: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: ZU7owq0rR/UiUm9qy9pzA8cO3VRwBFy7Bcv59hrgBvM=) 5: Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa (hash: VyyRwVBnaY4P+qhOH2Wi0cAjx6Up4dpdwhLbiAQ3CtY=) 6: Ep5McDs5t7WeZmyAgeWWCFiI58c.roa (hash: AOP9n/jwx2AwUV0sR9UZXO55UJCsgwtWlFLKT4Mnfww=) 7: IsNagTQeIBhCK_eEzJwts2JVNCw.roa (hash: 3EGVWuicI7zf/jhSqYDgo9FfBBbPEXmJZo6gLFFiDu0=) 8: UNcwmzZVzRQr8GbUBkJ92x7O5eE.roa (hash: meiM5bZ9UOA85hqFTKPoirVYKHNyJXm9Ra4fb/AWC3o=) 9: VOWlrP6uxrDIr-SPRswUzsamv9U.roa (hash: /dzp7Tx7zIjQ7oHAEiDUYqeue5FxJSSNt6hajAHSmwM=) 10: WQCrfzsax6n4r3v1hlQuR83C7do.roa (hash: /xxAd/ECrPZwq/l5JXhCScWy45/GJ5XDOGHFeVobafw=) 11: aa3gjPhQpHv-BaIkpsQYgGBQCPM.roa (hash: 8UFm1q7FERl7hmEhN4RSU3M8aef8QuPV/UHa7FsVID0=) 12: amFStnp6j-M9lkAATZthidSAqw0.roa (hash: 59Yb1hJ/qsJeQiwwAKrwKY2dgVW1ie3YqDOq9IPX2gA=) 13: c4rU82ROk5JHMuzWaUDAf2UpHuw.roa (hash: vdJbphjmJNk0M/0ecXI7N6QbpMoGR7yuaCxGZ6rARpE=) 14: o25brRT35PQQTxAbPaDAC1qCbs0.roa (hash: rJyPNW15ukUlAPAy2zm9lVpgff4++kMCrXKJIi7Zi3s=) 15: r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa (hash: 32j+tbL6tHhdIao29pkYwJtz2jR2ax5EQIkmfU8MT1g=) 16: sYV0gC_bNED6JuRG9OZx6sd2sNM.roa (hash: QkoUdyv92zyYef/ePnPDsDyA2gvOpaAc95PPopYOtrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:46:d8:45:98:10:ac:87:3c:dd:23:5b:88:d2:5d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Mar 2 02:00:49 2026 GMT Not After : Mar 3 02:00:49 2026 GMT Subject: CN=7e3fb9fd6ad562d3252837e1b7815e919f4c5d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d3:53:b1:27:46:31:ef:a4:51:48:78:71:c5: 50:b5:3e:b9:a4:41:5d:2f:79:f3:75:29:9d:e8:cf: 62:67:e5:c3:c3:b0:f2:c1:d3:43:ae:87:6c:e4:5d: 02:98:b8:a1:e3:aa:42:91:f1:36:0c:ca:85:dd:5d: af:39:db:b4:9e:f2:3f:88:ed:10:e1:66:30:6a:1c: 8b:bc:45:b7:ec:1d:99:9e:ec:0d:48:a3:73:b8:52: 9e:74:0b:7c:f5:08:53:42:b6:ee:6b:92:f4:3c:41: 89:6d:8a:c7:11:34:79:90:4b:1b:c2:45:8e:52:b6: 63:76:54:a2:63:d5:0a:ee:b9:f8:96:0b:05:ea:b1: 54:ad:39:f8:f2:76:07:9f:ff:2d:f6:1b:d5:51:ae: 44:4a:7b:46:d2:58:0e:47:e3:e1:a3:ea:50:b3:3e: 9a:69:d3:02:a6:3d:5a:b2:8d:28:13:41:ab:22:87: 9c:9f:91:ae:63:82:83:aa:20:9d:13:26:bc:39:25: 6f:41:c1:df:88:be:31:b8:17:5d:c2:dc:c1:be:90: fa:1f:f9:9f:c1:ce:21:98:ac:04:23:09:2d:4b:85: 24:bb:31:7f:de:31:ad:18:1d:8b:02:b3:b4:cf:81: 4e:32:85:95:a2:e7:d1:8c:97:14:6f:16:ca:96:69: 9c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3F:B9:FD:6A:D5:62:D3:25:28:37:E1:B7:81:5E:91:9F:4C:5D:2D X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:cd:a8:ef:2b:2b:72:06:5d:d3:86:e9:7a:26:2a:a9:e8:40: 5b:e3:21:0d:4a:0a:7b:a0:8d:ff:88:e8:26:20:f6:71:64:49: 93:b0:06:23:c9:8b:f5:8d:15:20:5a:ab:ba:0e:d9:c9:45:a7: 01:b6:e0:f9:57:8a:ba:fa:26:9e:56:0d:9e:07:f1:79:93:1d: 31:ed:96:24:67:e2:cb:f2:e9:ac:79:c2:78:a4:c5:91:22:6a: a2:9c:19:83:79:d7:74:29:b2:aa:50:64:f2:8a:d8:f5:57:25: 30:ab:d1:a9:da:d5:d7:70:38:ab:73:cb:2d:81:05:8e:a9:4d: a4:fc:a1:6e:2d:17:e8:64:46:01:da:3d:06:93:74:82:57:58: 42:40:b4:87:d0:5b:6b:d6:c3:1d:29:96:a2:8f:46:7f:7d:97: 82:ba:8d:37:25:4e:76:96:94:1d:49:b0:55:9c:34:92:39:58: 5e:1b:3c:1c:c0:85:bc:4e:ca:d2:f9:78:36:4c:93:6b:e1:5e: bf:ba:e4:b7:af:47:23:81:52:d3:34:85:fb:ba:3c:0d:18:7b: b1:c4:2b:74:ca:39:e3:c5:27:b3:7e:2d:fe:ce:fd:62:d7:d1: db:15:50:86:94:97:e5:00:80:b5:76:99:5e:7e:b5:ee:50:cf: 08:ff:0a:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysRthFmBCshzzdI1uI0l05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwMzAyMDIwMDQ5WhcNMjYwMzAzMDIwMDQ5WjAzMTEwLwYDVQQD Eyg3ZTNmYjlmZDZhZDU2MmQzMjUyODM3ZTFiNzgxNWU5MTlmNGM1ZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9NTsSdGMe+kUUh4ccVQtT65pEFd L3nzdSmd6M9iZ+XDw7DywdNDrods5F0CmLih46pCkfE2DMqF3V2vOdu0nvI/iO0Q 4WYwahyLvEW37B2ZnuwNSKNzuFKedAt89QhTQrbua5L0PEGJbYrHETR5kEsbwkWO UrZjdlSiY9UK7rn4lgsF6rFUrTn48nYHn/8t9hvVUa5ESntG0lgOR+Pho+pQsz6a adMCpj1aso0oE0GrIoecn5GuY4KDqiCdEya8OSVvQcHfiL4xuBddwtzBvpD6H/mf wc4hmKwEIwktS4UkuzF/3jGtGB2LArO0z4FOMoWVoufRjJcUbxbKlmmcwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4/uf1q1WLTJSg34beBXpGfTF0tMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASc2o7ysr cgZd04bpeiYqqehAW+MhDUoKe6CN/4joJiD2cWRJk7AGI8mL9Y0VIFqrug7ZyUWn Abbg+VeKuvomnlYNngfxeZMdMe2WJGfiy/LprHnCeKTFkSJqopwZg3nXdCmyqlBk 8orY9VclMKvRqdrV13A4q3PLLYEFjqlNpPyhbi0X6GRGAdo9BpN0gldYQkC0h9Bb a9bDHSmWoo9Gf32XgrqNNyVOdpaUHUmwVZw0kjlYXhs8HMCFvE7K0vl4NkyTa+Fe v7rkt69HI4FS0zSF+7o8DRh7scQrdMo548Uns34t/s79YtfR2xVQhpSX5QCAtXaZ Xn617lDPCP8KVw== -----END CERTIFICATE-----Generated at Mon Mar 2 09:01:25 2026 by rpki-client