$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: d9nGad6xDB2vlQ4rlv6j0hJxAf5IJGECMGaqr3ynbhA= Subject key identifier: 88:F7:55:7B:32:E3:46:1E:65:C4:79:FC:68:25:62:E7:09:0B:36:0D Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019D99CFE885FDD2A5C5C9418ED5BD1ECB24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 18C9 Signing time: Fri 17 Apr 2026 05:00:32 +0000 Manifest this update: Fri 17 Apr 2026 05:00:32 +0000 Manifest next update: Sat 18 Apr 2026 05:00:32 +0000 Files and hashes: 1: 0QB4hGdmgQ23kjW-TUuSRzgPgow.roa (hash: 6Se7JsiswvT1Isj5Z4FQYmLgX+k5jQ8Jw0+TE5Kr+c4=) 2: 3MEm9k86Krnq6wM36cluZIFqGPg.roa (hash: WOCoI9HcLnxBGRGXT70xKNe6H/yvXh7uvM6Oo5uJP3Q=) 3: 3yNd9VkULSQcG9kJM76wCWWOkVk.roa (hash: UTrG8pi1T1NYTtzshkel8Sz3UcEv2ZYniPPBW76pobo=) 4: 58Z_30RmGqTf6FCU3PrZd5bogs8.roa (hash: TXG7g3IJzMwe+V0RYfLs59E5lWWsjUfuIPwuhzRGQhQ=) 5: 5Njr2mqPF2SIUOGWRVBmVFry3-w.roa (hash: nHGTx1wNDs5K/IAjCY5ZwTLkqSDSDFcvxCbH3GdIFEY=) 6: 7RtMm2j-PlOCYgaaTNEF5okOR88.roa (hash: o9nbppRhQLGi1iXoR8bUr5miDVbhGF0IKswvoLQNlQM=) 7: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: BeJTs+NsZgBkNandIK9BDmOz+DRJE6cHAGTNvfsyMjQ=) 8: EJLUutCnpxs2buS5GTPPkrccxLQ.roa (hash: Bg7r4OK7LAMvfuKSI5cI+lyL8O8THM0mepcAvupe9MY=) 9: HdGHnGCkN60BBCoXO82KCD8KQP8.roa (hash: z19vVo7hZRhugrpovSRveacrmaNy4ZTI7h7Sd6ab6rY=) 10: R45A0fnYR44iqIervecEpC1ordo.roa (hash: aZsd9rhCHtUKSRJxzYhontkb9M1Vrxj8yjglwRZI5PQ=) 11: RToCJQ8Zab4JalWn6Lr2OlTkjew.roa (hash: a7mEGZfpxYM4XL6HEWYcs75/o/LzQJt7jAWEACQc+js=) 12: bsUz9cF8qY7V0b9wRwRaSnvK5Yg.roa (hash: 3c8/iFfmXp38D8OaIkv0JpI0gwPXq0roTqUMx6p8HGA=) 13: hMC8ouPga06DMuQ-1nVP3iL6_yU.roa (hash: bNzck35dxk6Gqi9cN9AAQtvE47sk8feFX04wDlazWdw=) 14: i-N27op-z7hkiqBEGNqq-kz27FM.roa (hash: rCF63L7W07eBpUJCTAH9Z0zj4zxOfcnsBXrV71Po2W0=) 15: lPSRXM3S12fXdtxx39QF8F0M4c0.roa (hash: /A9PCEl9b+e1T3TwSmFYBvVgodse+T5jSTXaVD1y3ew=) 16: mCIC92cl3T6GhQbTB55U2XIIpv8.roa (hash: BhbC6w4oNSw9OhA9aYn5uXWLSKczbBtQQF01ljl/Mwc=) 17: nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa (hash: jpd/2EiqLqE6nX/flK1O6v0FBcAaum0uMoBRy0MGwis=) 18: sHElLf18TxGbbXvAPZQGdYP7kkw.roa (hash: 3CUPvhimZaYLNzOkJz6mBA1rVGWDpwcyNJmFCreMmeg=) 19: u0kOnQHraAVT7o1gAfkttQSk4Bk.roa (hash: dgXDfIBoMWGFiXWqkB6XiT3zkjqB22mMq42VAOQ4S2Y=) 20: ump-T-Zk5smBJGROWuvq0wKLYtU.roa (hash: d7Jxavk2v4nvC9HxmOaWBHBF05sdZuO02u6a4JXxdtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:cf:e8:85:fd:d2:a5:c5:c9:41:8e:d5:bd:1e:cb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Apr 17 05:00:32 2026 GMT Not After : Apr 18 05:00:32 2026 GMT Subject: CN=88f7557b32e3461e65c479fc682562e7090b360d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:06:07:af:74:7e:8b:88:7b:92:16:b4:f3: 47:3d:8b:4c:02:87:6c:6d:e0:6b:d0:60:0c:53:2e: 46:4f:19:18:32:ca:05:2f:69:9f:e0:c0:a7:8b:9a: 64:c4:36:6b:d4:72:c6:49:c6:80:37:ef:5d:52:72: cc:3c:c5:16:f7:cb:39:e4:7e:02:42:31:6a:4f:0b: 4f:12:7b:35:99:da:0f:94:6f:05:cb:fb:e1:64:3b: cf:76:d3:4e:20:9c:04:30:94:ff:c8:81:b7:da:8c: 07:a7:9f:8d:02:10:9c:4c:0c:78:18:2d:e1:fb:42: 1d:23:b7:33:3d:23:d0:cf:3b:88:4d:b9:f0:13:53: 44:85:c3:50:d2:87:4a:6f:93:bb:ca:e6:d1:d4:95: b6:bb:35:9a:e7:3e:97:dd:c7:c6:23:ea:63:3b:c1: 20:40:82:e3:57:66:64:4b:41:42:8d:79:60:85:72: 75:f1:42:50:5c:18:cc:99:64:10:7f:80:e3:5e:40: 32:9a:a7:bd:09:24:e7:79:69:b4:c9:be:cb:83:0e: 7b:b0:f2:16:48:6e:1e:cf:8f:b5:11:a3:ae:77:c8: 57:54:2d:5b:5f:46:b2:8f:a3:17:44:02:dd:82:88: b8:25:ba:92:6a:d8:31:2f:0f:ba:97:a6:b4:c5:3e: 3c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F7:55:7B:32:E3:46:1E:65:C4:79:FC:68:25:62:E7:09:0B:36:0D X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ad:8b:8c:ac:ac:13:40:21:fa:a7:60:1b:36:1d:e2:b0:3d: 87:d6:ea:63:63:96:7e:a2:88:d6:eb:28:59:95:0d:47:c9:02: 8e:94:dc:24:c7:e6:8b:7d:cc:95:9a:06:87:98:c8:48:3c:73: e2:55:e3:ff:f5:27:6d:ec:ce:e0:f2:6f:61:fa:2b:91:a9:20: be:1e:83:dc:c7:5b:6d:f7:08:04:99:ee:30:ba:c1:4b:b2:60: 6f:65:a6:3d:44:0a:20:10:56:66:5e:61:32:2d:20:24:2e:d4: ca:1d:25:25:37:21:19:0d:9f:7d:35:c2:97:e6:6d:02:6d:bf: 5d:af:7a:05:86:b5:e8:07:e3:b1:b6:bc:52:d8:bd:d8:0b:fd: dc:2e:1b:0f:9b:60:6f:ee:da:fc:6b:63:d9:42:62:89:c5:48: fd:bf:4e:8e:76:76:52:52:76:e1:be:30:1e:b0:98:ee:64:73: d2:df:33:9d:b5:33:a3:a8:92:d6:47:64:cb:25:68:6d:40:0a: 41:ac:f5:9b:0f:e9:91:c4:4a:2f:99:27:7f:f1:a5:cb:f6:60: b1:b2:f1:da:df:60:67:0d:d4:a0:47:91:67:1d:a8:80:49:a8: d5:8e:65:56:65:53:52:50:e1:34:a7:bd:c5:06:db:59:b4:3b: 3b:e9:c6:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Zz+iF/dKlxclBjtW9HsskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjYwNDE3MDUwMDMyWhcNMjYwNDE4MDUwMDMyWjAzMTEwLwYDVQQD Eyg4OGY3NTU3YjMyZTM0NjFlNjVjNDc5ZmM2ODI1NjJlNzA5MGIzNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBcGB690fouIe5IWtPNHPYtMAods beBr0GAMUy5GTxkYMsoFL2mf4MCni5pkxDZr1HLGScaAN+9dUnLMPMUW98s55H4C QjFqTwtPEns1mdoPlG8Fy/vhZDvPdtNOIJwEMJT/yIG32owHp5+NAhCcTAx4GC3h +0IdI7czPSPQzzuITbnwE1NEhcNQ0odKb5O7yubR1JW2uzWa5z6X3cfGI+pjO8Eg QILjV2ZkS0FCjXlghXJ18UJQXBjMmWQQf4DjXkAymqe9CSTneWm0yb7Lgw57sPIW SG4ez4+1EaOud8hXVC1bX0ayj6MXRALdgoi4JbqSatgxLw+6l6a0xT48kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIj3VXsy40YeZcR5/GglYucJCzYNMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgK2LjKys E0Ah+qdgGzYd4rA9h9bqY2OWfqKI1usoWZUNR8kCjpTcJMfmi33MlZoGh5jISDxz 4lXj//UnbezO4PJvYforkakgvh6D3MdbbfcIBJnuMLrBS7Jgb2WmPUQKIBBWZl5h Mi0gJC7Uyh0lJTchGQ2ffTXCl+ZtAm2/Xa96BYa16Afjsba8Uti92Av93C4bD5tg b+7a/Gtj2UJiicVI/b9OjnZ2UlJ24b4wHrCY7mRz0t8znbUzo6iS1kdkyyVobUAK Qaz1mw/pkcRKL5knf/Gly/ZgsbLx2t9gZw3UoEeRZx2ogEmo1Y5lVmVTUlDhNKe9 xQbbWbQ7O+nGZA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:04:01 2026 by rpki-client