$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: N0SaeUrqaDbV5tJjOUs1sbBqxTy1e2F396LRz10BadI= Subject key identifier: 3D:72:9C:97:96:4D:0D:57:C3:06:9B:A2:80:F8:CE:3A:B0:32:36:49 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019D9962A4654A272AEA2545B0ACFBED435A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 1627 Signing time: Fri 17 Apr 2026 03:01:11 +0000 Manifest this update: Fri 17 Apr 2026 03:01:11 +0000 Manifest next update: Sat 18 Apr 2026 03:01:11 +0000 Files and hashes: 1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=) 2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=) 3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=) 4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=) 5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: MN2EkcapzpsTYPUhNM8bJ3dMevx9kFwCy160nNaxZ8k=) 6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=) 7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=) 8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=) 9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=) 10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=) 11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=) 12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=) 13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=) 14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=) 15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=) 16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=) 17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=) 18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=) 19: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=) 20: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=) 21: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:62:a4:65:4a:27:2a:ea:25:45:b0:ac:fb:ed:43:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Apr 17 03:01:11 2026 GMT Not After : Apr 18 03:01:11 2026 GMT Subject: CN=3d729c97964d0d57c3069ba280f8ce3ab0323649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:fd:e6:9a:28:00:38:e1:87:70:57:86:f9: c7:78:a2:e2:97:72:16:1a:08:7b:77:a5:17:de:a3: fa:8b:80:b3:e0:87:50:96:2a:46:54:94:49:ae:c0: 22:08:bd:d0:c3:d4:d7:4f:4c:d4:17:77:4a:4e:6e: da:eb:66:7b:d6:46:11:7b:de:b9:c9:ee:fb:67:06: fa:5b:23:53:c7:47:16:ad:26:59:73:d7:40:22:b6: c2:a6:89:e4:ce:b2:88:1f:f4:54:f3:a1:c9:fd:42: 11:73:2a:0e:19:ee:85:92:96:e0:13:c6:84:c0:3b: cb:9b:c9:10:e9:b2:ca:6d:b5:d4:32:59:5d:a1:d9: 2e:52:ed:4f:15:04:8b:1a:54:14:14:8c:fd:51:2a: 07:67:3b:05:54:99:b8:8c:26:21:b0:5c:29:a8:71: 59:b5:14:04:18:05:a9:00:dc:d9:25:34:37:ec:ac: f8:2b:91:9a:38:77:a6:d7:98:7c:9a:61:71:ad:a7: ba:f8:d0:2f:e2:11:38:17:99:5b:2a:c3:2d:a5:13: e5:98:b4:8f:cb:52:14:0a:9a:c6:63:5a:54:25:1b: f4:1c:d5:cb:69:38:3a:9f:5d:f6:51:a7:49:48:df: fa:5d:6f:74:c7:7c:7d:83:00:d2:fc:69:43:6a:4d: 39:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:72:9C:97:96:4D:0D:57:C3:06:9B:A2:80:F8:CE:3A:B0:32:36:49 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:85:ed:60:6e:75:09:ae:80:dc:6e:92:59:a8:fc:4c:81:a1: 79:02:82:99:48:d8:72:7a:1c:97:4e:24:6f:52:62:64:c1:99: a0:e1:e5:68:ac:34:39:53:96:e9:ea:fa:d3:74:23:1e:8e:b5: c0:dc:b1:4a:80:74:e9:97:40:4d:f4:e1:17:6c:33:13:d0:0e: a0:d9:cb:8c:03:a2:e6:c9:77:45:24:ad:3f:ab:94:22:cf:30: bb:a5:61:65:7d:17:8b:19:9e:b1:61:02:19:a6:32:4b:16:76: d6:3c:4b:6c:35:e5:3d:37:b5:1d:a8:7f:8e:cb:54:a5:ea:33: 77:77:a2:21:47:56:29:d7:57:7e:ed:6f:53:ab:af:12:1d:83: 2e:ba:ef:b2:8f:c3:bf:fd:2e:52:f4:4c:81:bc:d0:1d:84:a1: 81:6a:c8:8a:94:53:2f:52:16:6d:ae:61:f3:e2:b8:3b:e9:f6: 4f:1c:d5:e2:d1:a3:0f:8c:79:03:fd:33:d9:18:3b:46:4c:ab: 25:eb:1b:57:82:fe:23:ff:30:bd:5e:b8:ec:77:db:f4:5a:98: b6:06:ef:32:17:de:a6:28:24:93:ee:28:e9:38:c9:23:b3:c1: 64:19:bf:5c:c5:7b:b1:46:12:22:e4:d5:49:50:21:86:9a:a0: ac:00:0b:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZYqRlSicq6iVFsKz77UNaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwNDE3MDMwMTExWhcNMjYwNDE4MDMwMTExWjAzMTEwLwYDVQQD EygzZDcyOWM5Nzk2NGQwZDU3YzMwNjliYTI4MGY4Y2UzYWIwMzIzNjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvv95pooADjhh3BXhvnHeKLil3IW Ggh7d6UX3qP6i4Cz4IdQlipGVJRJrsAiCL3Qw9TXT0zUF3dKTm7a62Z71kYRe965 ye77Zwb6WyNTx0cWrSZZc9dAIrbCponkzrKIH/RU86HJ/UIRcyoOGe6FkpbgE8aE wDvLm8kQ6bLKbbXUMlldodkuUu1PFQSLGlQUFIz9USoHZzsFVJm4jCYhsFwpqHFZ tRQEGAWpANzZJTQ37Kz4K5GaOHem15h8mmFxrae6+NAv4hE4F5lbKsMtpRPlmLSP y1IUCprGY1pUJRv0HNXLaTg6n132UadJSN/6XW90x3x9gwDS/GlDak05aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1ynJeWTQ1XwwabooD4zjqwMjZJMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYXtYG51 Ca6A3G6SWaj8TIGheQKCmUjYcnocl04kb1JiZMGZoOHlaKw0OVOW6er603QjHo61 wNyxSoB06ZdATfThF2wzE9AOoNnLjAOi5sl3RSStP6uUIs8wu6VhZX0XixmesWEC GaYySxZ21jxLbDXlPTe1Hah/jstUpeozd3eiIUdWKddXfu1vU6uvEh2DLrrvso/D v/0uUvRMgbzQHYShgWrIipRTL1IWba5h8+K4O+n2TxzV4tGjD4x5A/0z2Rg7Rkyr JesbV4L+I/8wvV647Hfb9FqYtgbvMhfepigkk+4o6TjJI7PBZBm/XMV7sUYSIuTV SVAhhpqgrAALPQ== -----END CERTIFICATE-----Generated at Fri Apr 17 13:14:01 2026 by rpki-client