$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft File: bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json) Hash identifier: uq7YeDXCI27Kgy22H9KtTIhBlZHmm5OZE6Nde1dcc2I= Subject key identifier: BF:C8:F7:47:C8:D5:3A:35:A5:F9:9C:AB:86:FA:81:11:35:79:89:ED Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019CACB48CE259E3AE8016FCF5C00D45397A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft Manifest number: 10E4 Signing time: Mon 02 Mar 2026 04:00:39 +0000 Manifest this update: Mon 02 Mar 2026 04:00:39 +0000 Manifest next update: Tue 03 Mar 2026 04:00:39 +0000 Files and hashes: 1: 01O1H3vr-Xg2_Kt_tRxOoSePvYw.roa (hash: DTK4FxlalSIuFNse2BYUOpmcSGMhnqSmE/87aEUEtrg=) 2: 1-EqD6vgoA3IVAsjiLQYVEyyKW0U.roa (hash: Of+IRZAD6r3ftFWFR7yxzKwNLfYZjre35Dmg5UJV5ds=) 3: 3oqgYKPHjP4c1L0WVBDxXqGTNKs.roa (hash: PdT5GAbt00ZEVCyICmg6bHJkYgLa1nkpbJxhAhA4vnk=) 4: HB0FIxc95bfbXI-7nw5kY1VNoMs.roa (hash: 236zwT5kbl7DOv0ChJB+B8PFAcfi388Ks1QJGiJxQlM=) 5: RSEZnKImClpjfvRbvyGXO7YCT30.roa (hash: nbl9nzX5UblCyKX8B1eZxPxYHLEkClkhmOAKVpl4rkY=) 6: TCGXmp-ZcJuoO-eDyOqbUVRKJXI.roa (hash: zb8J86h3WDmjGOxtQQnoZ3rsuxycMmwLx3S1o5snyrE=) 7: XR-EYzoeTJi_gNpw5v85R8iIDCI.roa (hash: hr4Ank/yR0Q5kl1E1WgAYLVhDPaCeCKIZMYB9E/hjDs=) 8: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: NDvEYlkoHU786AeS0omYtcrUQPu+qQuwRCACKsO674Q=) 9: fv8hSy-qTmyzkAkKRiqf7Cbw4Q8.roa (hash: JVsfqbqPGUHeKikh7Yf/w82XL596L03oNIzuxFbcXEQ=) 10: ngXBDJqFRHqY02oCl22jHBT8QTU.roa (hash: J4yIx0/GQQvuBdXMZZvAxL9Vevspg59Zpn25unHuRA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:b4:8c:e2:59:e3:ae:80:16:fc:f5:c0:0d:45:39:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Mar 2 04:00:39 2026 GMT Not After : Mar 3 04:00:39 2026 GMT Subject: CN=bfc8f747c8d53a35a5f99cab86fa8111357989ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:77:7b:ba:86:92:a5:ad:90:38:84:85:c1: 86:4d:cf:7f:db:da:30:4c:ec:de:7f:d7:ff:78:cb: f1:69:47:ec:80:7f:7c:63:aa:65:48:17:a6:a5:3c: 55:10:34:e4:b3:e3:5a:94:9d:b8:28:9e:c5:a9:6f: 94:06:23:70:21:ff:79:5b:07:a4:cc:c0:a0:dc:12: 10:47:c6:c6:6f:c5:fa:8a:2f:08:97:e7:32:76:54: 48:b3:8d:67:92:2d:53:8a:32:7c:57:f0:76:95:34: 6b:f8:45:47:ac:3c:44:95:58:4a:cb:e6:39:cb:05: ae:19:7c:05:ea:4f:64:a0:3f:28:03:9f:98:36:92: e8:48:2d:04:7f:1c:87:11:02:d7:4e:27:ee:a9:31: 2e:f7:11:aa:21:f4:63:b2:22:ad:0f:2e:fa:5f:89: b1:09:4f:e6:cc:f3:4b:4c:30:0b:53:ab:18:55:a1: b5:e8:a0:e3:6e:80:6e:9f:fa:59:0c:2e:79:02:c0: 49:e8:cd:94:63:49:c4:bd:90:4b:10:5d:56:57:18: af:9b:8d:82:f1:be:40:cf:c1:1a:fd:66:1b:87:3a: e6:f0:bb:d7:4e:db:b4:75:f4:08:20:54:d6:51:87: 9a:55:63:1f:74:47:6c:ea:55:d5:b7:c3:6d:41:a5: 1a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C8:F7:47:C8:D5:3A:35:A5:F9:9C:AB:86:FA:81:11:35:79:89:ED X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f1:52:db:87:f9:2f:2e:ec:4d:01:07:18:41:60:82:fd:3b: 39:5d:4e:77:ef:34:47:57:55:fc:16:e8:4e:4b:1f:69:8c:c8: f0:cc:28:3a:83:4f:e8:fa:c0:85:fc:25:61:b0:8f:ba:24:49: da:ef:a7:dc:51:71:c2:95:47:aa:a7:70:6e:70:82:e0:b1:21: 8d:76:d3:9f:c7:86:41:b5:5d:e4:e4:83:70:85:0c:bb:a7:73: 90:64:00:fa:49:d7:1b:ff:ee:2a:45:54:26:b4:e6:91:e7:7e: 08:69:63:e5:a3:a8:5b:b2:48:8d:fa:4d:d9:da:67:02:da:f2: cb:b8:f3:e0:f9:2b:5e:e0:84:1b:22:e9:8d:0d:9f:98:60:1c: 86:42:8f:27:52:91:90:8c:97:01:6e:42:01:a1:a2:0c:59:8e: 06:90:21:fa:f3:f6:e5:b8:6d:68:2d:4a:51:fb:8c:d3:9a:a8: 35:64:b1:4b:1e:0c:f7:ed:32:be:c2:74:58:59:04:56:7e:fa: 8f:2e:7c:bc:89:75:1c:b8:fc:f7:bb:d7:2e:59:98:d2:a3:91: ca:ae:27:fb:8d:b8:00:00:8a:a7:59:1e:a6:dd:8d:a6:6c:5e: f8:55:1d:e6:61:7e:fb:ea:5d:15:bc:46:9d:79:25:71:50:74: 57:e5:1c:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZystIziWeOugBb89cANRTl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjYwMzAyMDQwMDM5WhcNMjYwMzAzMDQwMDM5WjAzMTEwLwYDVQQD EyhiZmM4Zjc0N2M4ZDUzYTM1YTVmOTljYWI4NmZhODExMTM1Nzk4OWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyp3e7qGkqWtkDiEhcGGTc9/29ow TOzef9f/eMvxaUfsgH98Y6plSBempTxVEDTks+NalJ24KJ7FqW+UBiNwIf95Wwek zMCg3BIQR8bGb8X6ii8Il+cydlRIs41nki1TijJ8V/B2lTRr+EVHrDxElVhKy+Y5 ywWuGXwF6k9koD8oA5+YNpLoSC0EfxyHEQLXTifuqTEu9xGqIfRjsiKtDy76X4mx CU/mzPNLTDALU6sYVaG16KDjboBun/pZDC55AsBJ6M2UY0nEvZBLEF1WVxivm42C 8b5Az8Ea/WYbhzrm8LvXTtu0dfQIIFTWUYeaVWMfdEds6lXVt8NtQaUazwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/I90fI1To1pfmcq4b6gRE1eYntMB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/FS24f5 Ly7sTQEHGEFggv07OV1Od+80R1dV/BboTksfaYzI8MwoOoNP6PrAhfwlYbCPuiRJ 2u+n3FFxwpVHqqdwbnCC4LEhjXbTn8eGQbVd5OSDcIUMu6dzkGQA+knXG//uKkVU JrTmked+CGlj5aOoW7JIjfpN2dpnAtryy7jz4PkrXuCEGyLpjQ2fmGAchkKPJ1KR kIyXAW5CAaGiDFmOBpAh+vP25bhtaC1KUfuM05qoNWSxSx4M9+0yvsJ0WFkEVn76 jy58vIl1HLj897vXLlmY0qORyq4n+424AACKp1kept2Npmxe+FUd5mF+++pdFbxG nXklcVB0V+UcAw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:13 2026 by rpki-client