$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: 0pM3+2KJiZVhW7QtVoVEB1AAifIva9qAWocsPG3ZKBk= Subject key identifier: 56:E7:2A:5B:78:91:51:73:0F:2B:7B:B0:A3:B1:8E:92:2A:8F:94:94 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019D9850ADE773ADF1DEC06384064DA476E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0BDC Signing time: Thu 16 Apr 2026 22:01:57 +0000 Manifest this update: Thu 16 Apr 2026 22:01:57 +0000 Manifest next update: Fri 17 Apr 2026 22:01:57 +0000 Files and hashes: 1: 1-FaALXlMsFyTh9BoD33d67aHEeI.roa (hash: vrnFz1Kmq+5wOQAjBqsePEJkDcr2bnQe4L2j8uEu+qw=) 2: 1bCAUkvNoYD0zomW0iurtF9te8Q.roa (hash: Z9CJnEIWfCZlmGT2t+Vqj5cmYatgFLNVqvFiGcAhXS4=) 3: 2ZG1OxPA9lJyGthfBpRD7jHaL_Q.roa (hash: IHbK3thySVU9Np8f+PMKh3PQZI2WcY5GEAykoMyFvfA=) 4: 7RoJ9VAFHyX-FagiKQIhkGQ_c-Q.roa (hash: HkhHBOyfDP+gjtdcVY9wa2Y21nfYECLjXeRT5/sYvk0=) 5: ADRzfCr8-nkR6lRMT7eQyQ5uz2c.roa (hash: Zz8uOoQc0hbIxPblxdT0hBouk0wTSjJNAtxlR56BcEk=) 6: DvkRhCAztowgp0lKvjLU3U09Xpg.roa (hash: 1t/9feUa5ol6uYHCvs+WcaENRu5/18p6uTEUH0Zu6wU=) 7: J2ZRrTftrtV0_TjbPrZlFNP6xjY.roa (hash: igNt9ILvZZAjjU9Sm+2kCOHSTe7FUif0MtylGZarlYg=) 8: RxkQzIFpbR8h5Y7GlER0QvlZ_xo.roa (hash: QyQ3uZNSoqX601+GHgavM056pTz7tYKjCe54YFu8AJg=) 9: YcoX0FswwtJDNeSfLbzKnpX_Ncg.roa (hash: bSifOwZU31nSn4HWPxK/P+Uoua0/V7duu8jXadJB22w=) 10: _0fjxv0fjuqXsB_dEZmZt2gQyKo.roa (hash: jytC1G6IyWDZvWzadzg7tWo6vkVxU20E7eXcUSAboG0=) 11: abtquT29kdz8HKSwyxp8MDLf-rM.roa (hash: 9xlsXDDDbF8yj8g2zV/NUxjfsdOSQi7MgQZSbquwXwU=) 12: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: keee8ZdwBLPhjoiL+lddjMk+A8+TUGv3cYyq/SJDPyM=) 13: cagtjc8bDeRcNxkPpsNFtRSw4HA.roa (hash: aF1LQSDw1Bl5408F1vJ3i4//pV71kCpJdauO5OKZNZo=) 14: czj_PZMJsKJEUcCpGuFemJRiVXc.roa (hash: XIy6OGhmtMXoCJdKfW1aLecDFbIhje3cjpXyY92Ca30=) 15: dhgQMv5d9CMtFJpDdBdVdbTFSgs.roa (hash: b2TvzpSS1aAj+1tdL7elB6HMEo7lO6B9iw17wuzVv+k=) 16: dpKkGD2SgABNju9FzjICMh-bILM.roa (hash: eA7DrTniAuZ9y6HHMxZvWAMtE9cnaGhtY/mRIrHlXQg=) 17: jdeHBbAARHJbzNiwNCOXeI54EUg.roa (hash: th8vM6YWc/Ley5toEeaIWxyZTuv2x+5byblkSqcImLo=) 18: l6g5cRLwfzGSk8db5JuW24EySDI.roa (hash: vgdCsDG7+TIHFOHJjv7u8i4m1Io6EEjzSnBPC2bEVVY=) 19: tZTnC5SbNTeL6PJ7RK2Vs68Zur0.roa (hash: caiAj7bgVqN8bpYH0jeyQ8RkddSmx6SR+nS6M3Lebv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:50:ad:e7:73:ad:f1:de:c0:63:84:06:4d:a4:76:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Apr 16 22:01:57 2026 GMT Not After : Apr 17 22:01:57 2026 GMT Subject: CN=56e72a5b789151730f2b7bb0a3b18e922a8f9494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e2:ef:3a:9c:26:49:a3:40:70:8c:d9:db:61: 81:70:4d:32:fd:6a:54:91:b5:dc:bb:50:12:76:42: e3:e0:17:dc:66:f2:8d:17:97:83:e5:04:7f:4c:0c: e8:96:0e:01:5c:ff:c3:0e:9e:46:56:e3:2c:bc:d3: d1:c5:98:9c:f1:68:c4:2c:02:16:82:74:63:ff:61: 00:20:c3:46:1d:d6:5c:0a:2f:7f:e0:bb:ea:6d:a5: 6b:99:d1:93:2e:f9:c9:46:7e:59:cf:bf:81:5f:9b: 54:2e:8b:63:34:de:d3:93:b2:4a:9c:92:6c:5b:94: 00:01:b9:e3:1e:a2:40:06:97:8c:1c:e2:0e:fb:b2: b4:89:ba:0a:f2:de:5b:a1:50:19:13:19:70:f3:68: 11:25:75:ba:1c:06:fd:3d:8c:a0:42:86:b1:90:51: 9b:02:65:64:a8:2b:e2:31:65:ff:5a:35:b1:3c:5d: 6e:83:fd:1d:4e:e8:47:4e:e6:ae:f9:4b:4a:80:0a: 6c:5e:67:b5:06:a6:10:c6:27:2c:9f:56:a6:d9:9a: ae:62:b5:9a:a1:ec:94:63:dd:41:1b:6c:1a:6c:3a: 52:15:a0:9f:0f:be:32:85:6c:e8:0b:21:fb:07:de: e1:f8:a3:cc:98:c0:d2:67:9b:bb:5d:d0:da:80:fb: cc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E7:2A:5B:78:91:51:73:0F:2B:7B:B0:A3:B1:8E:92:2A:8F:94:94 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:33:04:10:63:84:51:27:d2:da:52:d2:9c:ab:b6:45:8a:35: cd:e5:60:90:9a:45:d7:b8:52:80:a9:78:59:e1:4f:08:78:e0: 03:3f:2f:20:e0:84:50:ed:54:97:ca:3b:76:3a:08:b9:94:d7: f3:57:a0:5e:62:0c:4b:e4:fd:6a:76:68:40:46:a7:e8:be:00: a5:1b:7f:c7:2f:f7:b7:65:7c:f9:5d:3e:f1:9a:75:94:e0:fa: 00:17:35:60:af:da:e7:b9:80:27:97:7b:9d:50:6d:95:b0:7d: 78:5e:cd:fa:72:ac:b5:7b:d3:8a:c4:2b:1d:a9:db:f6:55:d1: 09:ce:5b:67:c3:b9:ec:63:b8:e7:00:6c:6f:f3:a2:5d:49:4a: f5:11:90:52:e8:8f:90:3d:10:fe:ec:2a:e3:e9:fd:94:38:da: 02:0b:3f:c0:57:a1:cd:1b:af:ae:c6:61:90:12:60:93:1e:3b: 9d:60:2b:e2:4b:b0:e0:f0:d2:91:64:06:f3:aa:b6:69:4a:93: d9:9b:e3:aa:95:c6:76:f4:2d:84:5d:22:5b:d4:ca:5a:6b:f0: 3f:33:79:a5:d4:6a:e2:13:28:db:15:46:2b:8e:1d:19:27:fe: 7a:b0:8b:10:27:63:83:88:96:d4:8c:c9:c4:c8:06:f3:9f:41: f6:9d:c4:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YUK3nc63x3sBjhAZNpHbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjYwNDE2MjIwMTU3WhcNMjYwNDE3MjIwMTU3WjAzMTEwLwYDVQQD Eyg1NmU3MmE1Yjc4OTE1MTczMGYyYjdiYjBhM2IxOGU5MjJhOGY5NDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eLvOpwmSaNAcIzZ22GBcE0y/WpU kbXcu1ASdkLj4BfcZvKNF5eD5QR/TAzolg4BXP/DDp5GVuMsvNPRxZic8WjELAIW gnRj/2EAIMNGHdZcCi9/4LvqbaVrmdGTLvnJRn5Zz7+BX5tULotjNN7Tk7JKnJJs W5QAAbnjHqJABpeMHOIO+7K0iboK8t5boVAZExlw82gRJXW6HAb9PYygQoaxkFGb AmVkqCviMWX/WjWxPF1ug/0dTuhHTuau+UtKgApsXme1BqYQxicsn1am2ZquYrWa oeyUY91BG2wabDpSFaCfD74yhWzoCyH7B97h+KPMmMDSZ5u7XdDagPvMMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbnKlt4kVFzDyt7sKOxjpIqj5SUMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDMEEGOE USfS2lLSnKu2RYo1zeVgkJpF17hSgKl4WeFPCHjgAz8vIOCEUO1Ul8o7djoIuZTX 81egXmIMS+T9anZoQEan6L4ApRt/xy/3t2V8+V0+8Zp1lOD6ABc1YK/a57mAJ5d7 nVBtlbB9eF7N+nKstXvTisQrHanb9lXRCc5bZ8O57GO45wBsb/OiXUlK9RGQUuiP kD0Q/uwq4+n9lDjaAgs/wFehzRuvrsZhkBJgkx47nWAr4kuw4PDSkWQG86q2aUqT 2ZvjqpXGdvQthF0iW9TKWmvwPzN5pdRq4hMo2xVGK44dGSf+erCLECdjg4iW1IzJ xMgG859B9p3Eag== -----END CERTIFICATE-----Generated at Fri Apr 17 03:53:06 2026 by rpki-client