$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: P+dr2Rp5dKX6WzPghpv5pi5yy58118yx5dhmRj2K9Bc= Subject key identifier: AA:5C:F7:D8:A4:62:B2:EA:15:7F:DD:3F:9F:36:20:2F:05:49:74:AC Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019D9B50528755A452887486293A4944EF54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 1628 Signing time: Fri 17 Apr 2026 12:00:25 +0000 Manifest this update: Fri 17 Apr 2026 12:00:25 +0000 Manifest next update: Sat 18 Apr 2026 12:00:25 +0000 Files and hashes: 1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=) 2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=) 3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=) 4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=) 5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: 143ctKSLXUSveBaMHA3bVBrxGQmAxi/GzpLgi8qimeg=) 6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=) 7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=) 8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=) 9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=) 10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=) 11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=) 12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=) 13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=) 14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=) 15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=) 16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=) 17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=) 18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=) 19: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=) 20: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=) 21: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:50:52:87:55:a4:52:88:74:86:29:3a:49:44:ef:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Apr 17 12:00:25 2026 GMT Not After : Apr 18 12:00:25 2026 GMT Subject: CN=aa5cf7d8a462b2ea157fdd3f9f36202f054974ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:66:11:11:af:00:f4:14:19:4a:6f:0d:21:d6: b2:25:5a:7d:12:65:5a:7a:d4:53:14:28:35:e3:89: f9:fb:9b:1c:1e:36:92:9d:67:0f:2a:26:40:83:c8: cd:a2:42:d9:0e:1f:6f:bd:85:7a:be:fb:43:14:e3: 8f:3a:ef:bf:fc:2d:15:c5:76:de:97:13:3d:3b:20: 72:27:88:3e:9e:67:1b:c6:6f:88:ba:8e:6c:03:c9: e1:b2:b2:2e:ac:11:49:17:7d:c3:4c:6c:24:47:44: 9e:5a:77:bd:b3:5f:be:ef:26:10:47:1a:aa:c8:2e: 78:32:ee:32:b7:dc:70:ce:4d:1a:1f:90:4c:49:61: 15:c2:7a:53:2f:3a:02:81:1d:0a:92:db:39:f3:72: f8:10:f9:de:ae:51:b1:80:72:89:7c:df:83:b6:c5: 5f:8f:3d:c3:57:33:eb:34:ce:3f:5c:af:14:a7:5a: 43:38:b2:88:2e:ed:bc:17:26:f6:dc:ec:1c:82:d5: 29:ba:8b:d8:03:57:a7:a2:f7:21:f7:3c:36:a1:55: 22:cb:1b:d3:09:d2:45:91:28:ed:5e:2f:dd:ef:6c: 63:cf:bf:35:23:e3:00:43:f2:0c:7a:02:ca:a4:5b: 04:17:bf:ce:6f:19:54:f7:96:40:32:2e:e8:67:89: a1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5C:F7:D8:A4:62:B2:EA:15:7F:DD:3F:9F:36:20:2F:05:49:74:AC X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c2:cc:25:8c:ed:b5:6b:43:9c:2b:96:52:17:37:b9:6f:0f: 22:06:f3:6d:c3:76:4d:b9:d2:1c:da:4e:37:bf:5e:c3:74:20: ce:5e:36:f5:00:96:08:80:4e:11:ac:93:ea:7c:05:c2:f5:e1: d9:67:b9:49:4e:60:a6:4b:2e:82:49:7d:34:b3:a3:a5:c6:7e: 62:f4:59:58:59:74:b0:99:87:bf:d5:5d:90:ff:ee:53:48:ca: 0a:0d:f3:73:60:50:ed:29:2a:fa:1d:4e:54:53:6d:95:3c:4a: 9d:92:a8:44:69:b6:76:73:3b:a1:78:cc:b4:8f:66:d0:f9:48: eb:a5:78:4d:0f:5a:b5:3a:14:28:6f:d0:76:2b:70:75:b3:80: 96:22:0b:11:c4:2e:d7:d0:cc:30:59:b2:cd:7c:56:78:8c:ff: a6:1a:c1:e7:08:83:88:18:88:21:f6:ba:50:54:2e:95:79:c2: 16:ef:2a:a1:3d:a9:35:f4:b2:be:18:bf:14:37:76:17:4a:50: 25:30:08:a0:47:a4:4f:93:09:71:bd:5c:05:18:eb:7d:0d:fd: 34:67:02:88:16:c8:2b:23:71:5f:91:c6:e5:8a:66:0b:64:a2: 2e:ae:bd:c9:97:e9:41:f0:2c:6c:b0:df:6d:7f:0b:ed:ce:8d: ae:62:68:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bUFKHVaRSiHSGKTpJRO9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwNDE3MTIwMDI1WhcNMjYwNDE4MTIwMDI1WjAzMTEwLwYDVQQD EyhhYTVjZjdkOGE0NjJiMmVhMTU3ZmRkM2Y5ZjM2MjAyZjA1NDk3NGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GYREa8A9BQZSm8NIdayJVp9EmVa etRTFCg144n5+5scHjaSnWcPKiZAg8jNokLZDh9vvYV6vvtDFOOPOu+//C0VxXbe lxM9OyByJ4g+nmcbxm+Iuo5sA8nhsrIurBFJF33DTGwkR0SeWne9s1++7yYQRxqq yC54Mu4yt9xwzk0aH5BMSWEVwnpTLzoCgR0Kkts583L4EPnerlGxgHKJfN+DtsVf jz3DVzPrNM4/XK8Up1pDOLKILu28Fyb23OwcgtUpuovYA1enovch9zw2oVUiyxvT CdJFkSjtXi/d72xjz781I+MAQ/IMegLKpFsEF7/ObxlU95ZAMi7oZ4mhkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpc99ikYrLqFX/dP582IC8FSXSsMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsLMJYzt tWtDnCuWUhc3uW8PIgbzbcN2TbnSHNpON79ew3Qgzl429QCWCIBOEayT6nwFwvXh 2We5SU5gpksugkl9NLOjpcZ+YvRZWFl0sJmHv9VdkP/uU0jKCg3zc2BQ7Skq+h1O VFNtlTxKnZKoRGm2dnM7oXjMtI9m0PlI66V4TQ9atToUKG/QditwdbOAliILEcQu 19DMMFmyzXxWeIz/phrB5wiDiBiIIfa6UFQulXnCFu8qoT2pNfSyvhi/FDd2F0pQ JTAIoEekT5MJcb1cBRjrfQ39NGcCiBbIKyNxX5HG5YpmC2SiLq69yZfpQfAsbLDf bX8L7c6NrmJoAw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:17:42 2026 by rpki-client