$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json) Hash identifier: ggPGLP5rGxhsvS1ePOR6JidRsIg1qa1iAUpwSuvPxlI= Subject key identifier: BA:7E:59:0B:7C:2E:8D:98:18:90:F0:35:B6:65:0B:B2:9B:AC:77:3A Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019D9A3E9AB7C5C3F06A021B27247B8C3781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft Manifest number: 1647 Signing time: Fri 17 Apr 2026 07:01:26 +0000 Manifest this update: Fri 17 Apr 2026 07:01:26 +0000 Manifest next update: Sat 18 Apr 2026 07:01:26 +0000 Files and hashes: 1: 1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa (hash: Ddu3dw5E5cMsctwBaCnCHBJl5vVM/XMeaSx8/U1wJfs=) 2: 1B2E5LozjiOiEEIVllZwGOlUoUc.roa (hash: DtZRGHhFLQ8RyYzUJ9AqMoeV1gGyFtUW3kQz1Kw7pNc=) 3: 1h3O8l_TW_Pt04UkNDvHQykjzBo.roa (hash: YPYjSO8A3RKdjeZ4kpCNyf7+uhxWq8m+nhKrC4aIRXo=) 4: 40ahziHyLtQx_pyEk0bHk67E8fw.roa (hash: rWZqu675dNYqvBqcBL0jVKw3VJWQVGQYGPhVN2Iiit0=) 5: 4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa (hash: X8RR+0PaypDLpsEOWttv6W/dtoMpGTgNbkp3JkclUF8=) 6: IQvdujgainvo4C34zkOLdjKY5vg.roa (hash: w17Fv3nrN5mdxpMpocz8vqnCEddTCZeK1yywJC7rkAQ=) 7: PhXZiIOr7piIHYlDtgFb-SE3XFc.roa (hash: kQ6KIuUu9lWGspD3sgkP3G1eQcAyvbDdP58M3rp8Fes=) 8: REtMs1U8A3vNupGfA8YHkLMBg20.roa (hash: 8cbxOjQg2znipTCYsgxq7I7rjGz0FDOmTb0bqODGJZQ=) 9: XIVBNcTJBnkT90tLXiCswsUi9O0.roa (hash: PPElf6bVEODRo+3cgHN5ArR3uE+ZQHhLBOE/ConPN30=) 10: Y8pdrR1f_MyWOe-YhGAK_aoFL8Q.roa (hash: 13k76cemt6Sf92ZNBW6R6RxtUCROzQCLop1b+iGGSUQ=) 11: Ys5uNWXcabyigl96ree5Jzjc4xQ.roa (hash: f+JccggJ2odV8dttKzqJrNMhrUYzKd+wSv2brX2GdxA=) 12: bLty7x4_bp6bJO68Cul62fRMxlU.roa (hash: kYiMfI9JDPevUGPZ1zVTj//0LProZnsEPqeHJe8gbiQ=) 13: c1of_GGOGBpj8gjfCUC0AsJuKNg.roa (hash: f3erzVhNqOm3b2k4MQozf9a0YdwKNFSjx0Hb4KbZctc=) 14: d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa (hash: ybFlHwrk0/bn9A8GTyAQQ72jsrneQsxgrXLeXX2L7mc=) 15: dCqQVizHmCbsgLcX6csX7Rciuic.roa (hash: sDGzeBpaeg3YAhNrnUWPuM/ODk832tRUJ5O2TTkUfds=) 16: hzNDyInh_bUBg7Uejg55aTvL-3Q.roa (hash: FJw1sBNqJdJQhACILp+itphyL4fweg2OQEEsFKom/I8=) 17: jFvJZaHKv8QwoukYCAhIunEqd4s.roa (hash: V1rH1de0PVsmx11Wg5/gIdXxuPL9QGcnJzJNtJ/w8PU=) 18: p8xrYoE8jgCdAonYCfT-ApjsEIQ.roa (hash: f7jnATXq/oP3S34j8++EJHwq/uX1I51J0Ibdj4DXw3g=) 19: rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa (hash: iB8AOxEYfvNU1/L6TivJBk9QHQFdeq4cJO6UXX1sPUM=) 20: s4XhO3zd68odlYNKfOcr66qKpYo.roa (hash: lGF4r2lhB2RKS4kFkLqdXXo14Ag7CA/0NH/w4b5IOWU=) 21: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: DtKV4WImUjjj1KIr52aGvVQJjf+SzZTFzSuIJut00pQ=) 22: yBju9251opQb0e4SsoLoTlY7kVM.roa (hash: eQSRE9eUeTSXYWB/iKLZnX5m98d5OnEnkEhe2IV+YaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:3e:9a:b7:c5:c3:f0:6a:02:1b:27:24:7b:8c:37:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Apr 17 07:01:26 2026 GMT Not After : Apr 18 07:01:26 2026 GMT Subject: CN=ba7e590b7c2e8d981890f035b6650bb29bac773a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5c:7b:d8:f2:d8:8c:cd:1d:e5:eb:d3:9f:12: 2d:62:7a:9a:48:be:5c:de:ef:bf:70:19:ec:85:49: 03:67:88:b5:77:29:4d:08:34:a7:c8:a1:6b:57:cb: 2f:67:7a:c7:0b:ae:7f:89:15:47:8b:b0:14:fa:21: a7:f2:bc:1e:15:b9:dd:56:a4:f6:f6:f5:d5:57:3e: cd:b0:e7:68:9e:48:3c:9c:cf:32:c2:2d:66:34:d2: 1f:14:e0:fb:15:80:4b:e8:9b:32:5c:12:47:8d:96: d8:18:64:df:5c:66:66:b3:08:0e:36:87:06:2f:0c: f0:c6:87:41:70:6b:dd:47:02:b9:4f:7b:a0:50:cf: bd:35:ec:5c:27:2e:55:5e:6f:d7:fb:0e:9a:1a:c8: f4:20:cd:6d:f1:ec:b0:50:0a:a6:61:e8:1f:12:d5: 8b:9b:da:ea:b8:53:e5:b6:ef:9f:4d:80:de:d8:77: 55:22:ce:bb:73:77:f3:eb:3f:2a:ec:a0:76:79:af: 17:e0:ac:42:6d:2d:9a:ec:3d:58:fa:1e:25:ac:65: 68:bd:83:82:6e:b4:5e:5e:35:0d:71:bb:86:84:fc: ca:d9:24:ea:13:77:5d:ea:36:63:70:0f:fc:bb:f1: 1c:3f:07:6f:36:4d:64:ce:a6:b5:65:ed:b1:17:ca: 0b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7E:59:0B:7C:2E:8D:98:18:90:F0:35:B6:65:0B:B2:9B:AC:77:3A X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:4e:7c:86:1a:df:79:57:a2:9f:f3:4f:e4:38:e0:db:bc:22: 53:1a:06:c9:84:9d:f9:63:db:dd:45:de:b7:e1:79:2a:cf:00: 99:7f:2d:44:58:5d:82:15:c6:7e:d6:ea:ea:72:97:27:76:6d: a5:4f:1d:b7:d0:52:4b:6c:f5:d4:e8:c2:a6:6b:42:85:4c:3d: 0a:61:15:d4:7c:96:44:49:a0:6a:71:b5:ed:19:52:3e:0f:d2: b0:18:82:cf:43:ab:4c:75:9b:46:8e:34:be:3b:ef:e8:47:eb: 04:cd:11:17:b6:cd:4c:9d:7e:f7:1c:9e:93:14:ce:7a:21:35: d3:32:c3:ae:b5:78:b2:9e:c0:80:76:24:ba:fc:97:c8:22:6f: 2f:ea:bc:5d:aa:74:30:e7:c8:d7:9a:9c:9f:d9:50:a9:38:57: 24:80:ad:3b:c9:d5:ec:52:1c:1c:ba:98:34:7f:6b:42:51:a2: fe:74:54:24:6b:16:27:30:03:40:ec:3f:37:63:5f:ce:db:99: 53:8d:72:39:2b:1d:cb:0e:24:96:c1:0f:d6:47:8b:df:88:89: 25:5b:11:c3:45:6a:36:26:6d:dc:dc:d1:4b:f5:36:ec:ab:78: c4:75:18:a2:38:cd:05:ae:7f:16:fa:2f:ac:d6:5e:36:1b:f1: 9f:ca:f5:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aPpq3xcPwagIbJyR7jDeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwNDE3MDcwMTI2WhcNMjYwNDE4MDcwMTI2WjAzMTEwLwYDVQQD EyhiYTdlNTkwYjdjMmU4ZDk4MTg5MGYwMzViNjY1MGJiMjliYWM3NzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFx72PLYjM0d5evTnxItYnqaSL5c 3u+/cBnshUkDZ4i1dylNCDSnyKFrV8svZ3rHC65/iRVHi7AU+iGn8rweFbndVqT2 9vXVVz7NsOdonkg8nM8ywi1mNNIfFOD7FYBL6JsyXBJHjZbYGGTfXGZmswgONocG LwzwxodBcGvdRwK5T3ugUM+9NexcJy5VXm/X+w6aGsj0IM1t8eywUAqmYegfEtWL m9rquFPltu+fTYDe2HdVIs67c3fz6z8q7KB2ea8X4KxCbS2a7D1Y+h4lrGVovYOC brReXjUNcbuGhPzK2STqE3dd6jZjcA/8u/EcPwdvNk1kzqa1Ze2xF8oLOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLp+WQt8Lo2YGJDwNbZlC7KbrHc6MB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJk58hhrf eVein/NP5Djg27wiUxoGyYSd+WPb3UXet+F5Ks8AmX8tRFhdghXGftbq6nKXJ3Zt pU8dt9BSS2z11OjCpmtChUw9CmEV1HyWREmganG17RlSPg/SsBiCz0OrTHWbRo40 vjvv6EfrBM0RF7bNTJ1+9xyekxTOeiE10zLDrrV4sp7AgHYkuvyXyCJvL+q8Xap0 MOfI15qcn9lQqThXJICtO8nV7FIcHLqYNH9rQlGi/nRUJGsWJzADQOw/N2NfztuZ U41yOSsdyw4klsEP1keL34iJJVsRw0VqNiZt3NzRS/U27Kt4xHUYojjNBa5/Fvov rNZeNhvxn8r1Sw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:42:09 2026 by rpki-client