$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft File: bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json) Hash identifier: Xo+ODmLehfNJcDRYU20MG3BnhJ/GnHnAgLNP+QMcwZY= Subject key identifier: 83:73:79:99:DE:CE:E9:A8:5C:66:E4:5D:58:A1:28:93:ED:3A:CA:9E Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019D9A3F06B70B26CA4B9CC96755E7ABA010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft Manifest number: 115F Signing time: Fri 17 Apr 2026 07:01:54 +0000 Manifest this update: Fri 17 Apr 2026 07:01:54 +0000 Manifest next update: Sat 18 Apr 2026 07:01:54 +0000 Files and hashes: 1: 01O1H3vr-Xg2_Kt_tRxOoSePvYw.roa (hash: DTK4FxlalSIuFNse2BYUOpmcSGMhnqSmE/87aEUEtrg=) 2: 1-EqD6vgoA3IVAsjiLQYVEyyKW0U.roa (hash: Of+IRZAD6r3ftFWFR7yxzKwNLfYZjre35Dmg5UJV5ds=) 3: 3oqgYKPHjP4c1L0WVBDxXqGTNKs.roa (hash: PdT5GAbt00ZEVCyICmg6bHJkYgLa1nkpbJxhAhA4vnk=) 4: HB0FIxc95bfbXI-7nw5kY1VNoMs.roa (hash: 236zwT5kbl7DOv0ChJB+B8PFAcfi388Ks1QJGiJxQlM=) 5: RSEZnKImClpjfvRbvyGXO7YCT30.roa (hash: nbl9nzX5UblCyKX8B1eZxPxYHLEkClkhmOAKVpl4rkY=) 6: TCGXmp-ZcJuoO-eDyOqbUVRKJXI.roa (hash: zb8J86h3WDmjGOxtQQnoZ3rsuxycMmwLx3S1o5snyrE=) 7: XR-EYzoeTJi_gNpw5v85R8iIDCI.roa (hash: hr4Ank/yR0Q5kl1E1WgAYLVhDPaCeCKIZMYB9E/hjDs=) 8: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: N55MTLxomxwaCvAcTMVE2T67VTtkqq4Uwu50/Cxpz/4=) 9: fv8hSy-qTmyzkAkKRiqf7Cbw4Q8.roa (hash: JVsfqbqPGUHeKikh7Yf/w82XL596L03oNIzuxFbcXEQ=) 10: ngXBDJqFRHqY02oCl22jHBT8QTU.roa (hash: J4yIx0/GQQvuBdXMZZvAxL9Vevspg59Zpn25unHuRA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:3f:06:b7:0b:26:ca:4b:9c:c9:67:55:e7:ab:a0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Apr 17 07:01:54 2026 GMT Not After : Apr 18 07:01:54 2026 GMT Subject: CN=83737999decee9a85c66e45d58a12893ed3aca9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:d4:b2:4a:b8:ff:f9:b0:f5:e5:45:ae:fa: b9:4a:0f:80:6d:90:21:57:36:c2:11:75:de:77:49: ad:e5:84:d9:c2:a3:29:55:a5:f7:17:38:b5:ff:6d: 8e:5e:7f:2b:f7:18:e2:87:1b:87:c2:ea:ac:06:b8: 5f:17:24:ea:81:de:9c:74:c1:27:58:1f:d3:2f:3d: c2:98:f5:1a:52:75:ba:17:b2:13:0b:a0:cc:a6:f3: 5a:53:a8:fd:b9:ee:6a:fd:86:d5:49:74:97:bb:61: a3:0a:f0:a0:26:e4:ed:7e:8e:1f:cb:06:f9:84:b8: 18:b7:72:66:c6:3a:50:5e:63:a8:44:59:d3:ea:5a: 25:6b:64:fb:c6:c1:c5:ef:f4:6e:a0:a4:cc:a0:26: bc:f9:07:d7:b0:93:2f:37:34:26:64:fc:1f:11:cf: 39:93:a5:fd:46:40:40:0b:f4:ec:28:7c:c2:96:86: 97:9a:a4:ce:37:57:9f:0d:4b:79:d9:fb:fe:f0:34: f5:69:11:a2:4b:07:51:30:30:a8:37:52:1b:b4:cb: 55:21:36:cb:f1:88:a4:dc:07:b8:9f:ea:51:85:dd: 3a:90:89:cb:2b:90:f2:bd:79:6f:d3:35:e3:d5:bf: 35:60:c5:92:42:01:e3:b2:4a:8f:f8:b1:25:d4:d0: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:73:79:99:DE:CE:E9:A8:5C:66:E4:5D:58:A1:28:93:ED:3A:CA:9E X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:da:d7:8a:71:5e:6e:82:c5:6c:52:28:16:67:e3:14:d2:e2: 7d:96:0e:79:5b:b0:85:57:42:d5:e3:ee:a6:5f:89:06:20:f3: 8c:6f:ca:07:64:66:f6:98:14:6f:9c:b3:4a:e8:50:58:9b:b4: e0:36:98:47:60:b0:24:3d:c3:6f:7b:07:4e:91:41:4b:70:60: e8:9b:8e:65:22:1a:09:3b:1e:ab:b8:17:cd:d4:2c:d7:46:78: 31:69:26:73:f9:71:99:ca:e9:73:ed:b7:0e:49:99:d2:b3:fc: 32:38:da:5c:89:85:bf:3f:5a:62:0b:68:b9:dc:f9:4b:4a:bf: cb:b5:45:ed:96:39:c6:45:a4:42:80:5c:8a:b3:7e:81:37:9e: 07:ca:7a:e0:89:dd:05:d1:eb:1b:a4:1f:f4:e3:5c:02:71:82: df:0c:76:24:7b:06:f9:79:66:89:3e:0c:c7:c7:42:86:6d:a1: fa:8e:4d:4c:92:6e:9f:08:63:26:6f:85:09:d7:09:26:5b:ba: 47:80:ef:c6:6a:6d:aa:bd:21:e0:c2:6e:35:16:00:ed:0b:80: 9a:92:1c:b6:bb:4c:f6:b8:43:da:0a:94:ec:2d:48:d6:c8:56: 81:d3:66:25:bf:0c:a6:4e:d8:26:10:2b:e9:70:c8:0c:da:8a: 43:a4:e1:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aPwa3CybKS5zJZ1Xnq6AQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjYwNDE3MDcwMTU0WhcNMjYwNDE4MDcwMTU0WjAzMTEwLwYDVQQD Eyg4MzczNzk5OWRlY2VlOWE4NWM2NmU0NWQ1OGExMjg5M2VkM2FjYTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumfUskq4//mw9eVFrvq5Sg+AbZAh VzbCEXXed0mt5YTZwqMpVaX3Fzi1/22OXn8r9xjihxuHwuqsBrhfFyTqgd6cdMEn WB/TLz3CmPUaUnW6F7ITC6DMpvNaU6j9ue5q/YbVSXSXu2GjCvCgJuTtfo4fywb5 hLgYt3JmxjpQXmOoRFnT6lola2T7xsHF7/RuoKTMoCa8+QfXsJMvNzQmZPwfEc85 k6X9RkBAC/TsKHzCloaXmqTON1efDUt52fv+8DT1aRGiSwdRMDCoN1IbtMtVITbL 8Yik3Ae4n+pRhd06kInLK5DyvXlv0zXj1b81YMWSQgHjskqP+LEl1NBGJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINzeZnezumoXGbkXVihKJPtOsqeMB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdrXinFe boLFbFIoFmfjFNLifZYOeVuwhVdC1ePupl+JBiDzjG/KB2Rm9pgUb5yzSuhQWJu0 4DaYR2CwJD3Db3sHTpFBS3Bg6JuOZSIaCTseq7gXzdQs10Z4MWkmc/lxmcrpc+23 DkmZ0rP8MjjaXImFvz9aYgtoudz5S0q/y7VF7ZY5xkWkQoBcirN+gTeeB8p64Ind BdHrG6Qf9ONcAnGC3wx2JHsG+XlmiT4Mx8dChm2h+o5NTJJunwhjJm+FCdcJJlu6 R4Dvxmptqr0h4MJuNRYA7QuAmpIctrtM9rhD2gqU7C1I1shWgdNmJb8Mpk7YJhAr 6XDIDNqKQ6ThlA== -----END CERTIFICATE-----Generated at Fri Apr 17 16:57:11 2026 by rpki-client