$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: xN3UbUjxHSBcz1G7JpLvNs8iAUDRgQXAGgygR+Z4yCk= Subject key identifier: 04:77:BB:F9:42:CB:2F:FC:04:52:02:AE:CF:A3:CC:34:49:B4:8B:DE Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019CA97CC8BE861E10E31DF4319C5BCD952D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0B5E Signing time: Sun 01 Mar 2026 13:00:53 +0000 Manifest this update: Sun 01 Mar 2026 13:00:53 +0000 Manifest next update: Mon 02 Mar 2026 13:00:53 +0000 Files and hashes: 1: 1-FaALXlMsFyTh9BoD33d67aHEeI.roa (hash: vrnFz1Kmq+5wOQAjBqsePEJkDcr2bnQe4L2j8uEu+qw=) 2: 1bCAUkvNoYD0zomW0iurtF9te8Q.roa (hash: Z9CJnEIWfCZlmGT2t+Vqj5cmYatgFLNVqvFiGcAhXS4=) 3: 2ZG1OxPA9lJyGthfBpRD7jHaL_Q.roa (hash: IHbK3thySVU9Np8f+PMKh3PQZI2WcY5GEAykoMyFvfA=) 4: 7RoJ9VAFHyX-FagiKQIhkGQ_c-Q.roa (hash: HkhHBOyfDP+gjtdcVY9wa2Y21nfYECLjXeRT5/sYvk0=) 5: ADRzfCr8-nkR6lRMT7eQyQ5uz2c.roa (hash: Zz8uOoQc0hbIxPblxdT0hBouk0wTSjJNAtxlR56BcEk=) 6: DvkRhCAztowgp0lKvjLU3U09Xpg.roa (hash: 1t/9feUa5ol6uYHCvs+WcaENRu5/18p6uTEUH0Zu6wU=) 7: J2ZRrTftrtV0_TjbPrZlFNP6xjY.roa (hash: igNt9ILvZZAjjU9Sm+2kCOHSTe7FUif0MtylGZarlYg=) 8: RxkQzIFpbR8h5Y7GlER0QvlZ_xo.roa (hash: QyQ3uZNSoqX601+GHgavM056pTz7tYKjCe54YFu8AJg=) 9: UzSlGTe0E4r2h3-mqwUsXA6tkW4.roa (hash: 3NTHI+VFb0fZ77Mu9ozHFottk1f/uLdKjfthkLLIXP8=) 10: YcoX0FswwtJDNeSfLbzKnpX_Ncg.roa (hash: bSifOwZU31nSn4HWPxK/P+Uoua0/V7duu8jXadJB22w=) 11: abtquT29kdz8HKSwyxp8MDLf-rM.roa (hash: 9xlsXDDDbF8yj8g2zV/NUxjfsdOSQi7MgQZSbquwXwU=) 12: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: 1iO4kC0RsOcJHq9bd8kNrgRGkxbQpCFa4ronJYzCUmw=) 13: cagtjc8bDeRcNxkPpsNFtRSw4HA.roa (hash: aF1LQSDw1Bl5408F1vJ3i4//pV71kCpJdauO5OKZNZo=) 14: czj_PZMJsKJEUcCpGuFemJRiVXc.roa (hash: XIy6OGhmtMXoCJdKfW1aLecDFbIhje3cjpXyY92Ca30=) 15: dhgQMv5d9CMtFJpDdBdVdbTFSgs.roa (hash: b2TvzpSS1aAj+1tdL7elB6HMEo7lO6B9iw17wuzVv+k=) 16: hE_NggneCURW4oVGtlWg3JHt5_Q.roa (hash: Mnqw5Z33MoKiV3g11K3G81p5sDcXUCDIvpdqPdvjqlk=) 17: jdeHBbAARHJbzNiwNCOXeI54EUg.roa (hash: th8vM6YWc/Ley5toEeaIWxyZTuv2x+5byblkSqcImLo=) 18: l6g5cRLwfzGSk8db5JuW24EySDI.roa (hash: vgdCsDG7+TIHFOHJjv7u8i4m1Io6EEjzSnBPC2bEVVY=) 19: tZTnC5SbNTeL6PJ7RK2Vs68Zur0.roa (hash: caiAj7bgVqN8bpYH0jeyQ8RkddSmx6SR+nS6M3Lebv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:7c:c8:be:86:1e:10:e3:1d:f4:31:9c:5b:cd:95:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Mar 1 13:00:53 2026 GMT Not After : Mar 2 13:00:53 2026 GMT Subject: CN=0477bbf942cb2ffc045202aecfa3cc3449b48bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f4:95:16:3a:70:a1:aa:4c:47:42:09:76:b1: f4:e0:50:1f:82:71:a7:02:ed:d9:85:5e:96:fe:3a: 60:c6:4c:1b:59:8d:f4:74:3c:00:75:e2:38:d3:6d: 7e:5d:2b:81:0a:1b:41:4e:af:69:42:0f:5f:ab:92: 9d:23:f5:a1:24:b4:3f:fa:15:e8:f1:d5:2a:b1:45: 86:8d:97:a9:e4:8c:14:21:12:69:ac:30:94:71:98: fb:ca:79:25:a2:24:b9:53:16:30:b1:57:9c:76:86: 64:65:5e:ca:be:6b:41:08:4c:5c:39:85:c3:6f:4a: 0e:91:4c:07:2c:64:2d:f4:a4:f8:34:51:a5:03:47: 09:d4:54:e0:ea:c1:9d:8c:1a:ee:c7:60:fb:5a:85: 92:50:09:5c:94:69:66:8d:0a:ce:6b:88:b0:98:6a: 89:35:7c:80:1e:fb:b2:57:35:81:a3:d8:57:91:ae: a8:a2:db:20:b2:d8:b2:76:0b:c1:a5:f9:21:89:81: 3a:db:8c:c3:4b:f1:db:30:46:1b:fe:dc:a5:17:13: 9d:ad:6b:53:bd:af:ec:16:30:0d:84:1e:7b:f4:28: c2:46:5b:87:6b:ed:45:88:1d:df:ab:46:41:5f:9e: db:ea:5c:37:68:d7:82:fb:d3:4a:4a:d0:f5:23:5a: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:77:BB:F9:42:CB:2F:FC:04:52:02:AE:CF:A3:CC:34:49:B4:8B:DE X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:57:68:1c:fc:8f:5a:a7:7b:05:ef:dd:87:1c:fa:f2:67:63: bf:42:3e:fd:b7:49:ed:92:b2:78:d9:96:77:0f:20:42:68:e8: 86:27:64:61:ec:97:88:43:cd:ba:94:9c:23:e7:e7:47:9e:a3: e4:e6:90:3b:1e:ca:df:e5:a0:dd:82:04:39:ef:32:08:b6:28: f1:44:98:3c:02:eb:f8:23:f6:6e:8c:8a:4e:01:f8:91:a2:aa: 59:71:dc:e9:fc:48:3e:59:f7:41:38:92:fc:77:83:2e:8f:e3: 96:2d:44:11:cd:e0:a0:26:03:8a:4a:4e:21:a4:66:30:7b:ee: ff:52:08:9e:8f:a8:55:fd:a2:d7:bd:b6:62:12:0a:d8:31:de: 56:ec:84:c9:7d:4e:e9:1a:1d:9c:94:91:c8:35:9c:69:82:bf: 5f:c3:36:b6:85:6e:0c:67:a6:76:67:49:34:4f:67:2a:1f:1d: c2:7a:0b:aa:1e:f8:59:64:fb:71:80:a2:3f:58:88:f5:8f:08: a3:c1:8a:67:ad:3e:fb:cc:cc:6b:bc:94:9c:b2:dc:28:25:04: b8:58:09:c6:1c:27:99:f5:96:01:ad:5a:d8:ce:0b:e2:50:1e: 07:ce:2b:77:74:3a:e3:e4:d5:41:61:b6:cd:da:d9:65:0d:8f: 62:11:d3:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypfMi+hh4Q4x30MZxbzZUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjYwMzAxMTMwMDUzWhcNMjYwMzAyMTMwMDUzWjAzMTEwLwYDVQQD EygwNDc3YmJmOTQyY2IyZmZjMDQ1MjAyYWVjZmEzY2MzNDQ5YjQ4YmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovSVFjpwoapMR0IJdrH04FAfgnGn Au3ZhV6W/jpgxkwbWY30dDwAdeI4021+XSuBChtBTq9pQg9fq5KdI/WhJLQ/+hXo 8dUqsUWGjZep5IwUIRJprDCUcZj7ynkloiS5UxYwsVecdoZkZV7KvmtBCExcOYXD b0oOkUwHLGQt9KT4NFGlA0cJ1FTg6sGdjBrux2D7WoWSUAlclGlmjQrOa4iwmGqJ NXyAHvuyVzWBo9hXka6ootsgstiydgvBpfkhiYE624zDS/HbMEYb/tylFxOdrWtT va/sFjANhB579CjCRluHa+1FiB3fq0ZBX57b6lw3aNeC+9NKStD1I1p1qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAR3u/lCyy/8BFICrs+jzDRJtIveMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1doHPyP Wqd7Be/dhxz68mdjv0I+/bdJ7ZKyeNmWdw8gQmjohidkYeyXiEPNupScI+fnR56j 5OaQOx7K3+Wg3YIEOe8yCLYo8USYPALr+CP2boyKTgH4kaKqWXHc6fxIPln3QTiS /HeDLo/jli1EEc3goCYDikpOIaRmMHvu/1IIno+oVf2i1722YhIK2DHeVuyEyX1O 6RodnJSRyDWcaYK/X8M2toVuDGemdmdJNE9nKh8dwnoLqh74WWT7cYCiP1iI9Y8I o8GKZ60++8zMa7yUnLLcKCUEuFgJxhwnmfWWAa1a2M4L4lAeB84rd3Q64+TVQWG2 zdrZZQ2PYhHTlQ== -----END CERTIFICATE-----Generated at Sun Mar 1 18:21:03 2026 by rpki-client