$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json) Hash identifier: HOA3boA8gEfJkU7lBKBvj+ZWDdrO2r8rLbU8UFC0+sc= Subject key identifier: F9:39:A4:40:9C:05:43:C7:44:3A:26:41:53:6E:5B:DA:1E:79:26:BE Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019DB510732B80E58E55029440057862E848 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft Manifest number: 0C29 Signing time: Wed 22 Apr 2026 12:00:47 +0000 Manifest this update: Wed 22 Apr 2026 12:00:47 +0000 Manifest next update: Thu 23 Apr 2026 12:00:47 +0000 Files and hashes: 1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=) 2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=) 3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=) 4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=) 5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=) 6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=) 7: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=) 8: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=) 9: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=) 10: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=) 11: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=) 12: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=) 13: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=) 14: RvoB02LV3HAYyjSpTynuepFZgZQ.roa (hash: IJ1ixOVD+h2rJ9Dsin8DqExrSUj/mMAvMHLaqQwlHdg=) 15: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: zBzInXNfoxf2nor8tuFev5LVMbsQMyr6uHf5q4ylQ0c=) 16: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=) 17: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=) 18: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=) 19: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=) 20: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=) 21: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Apr 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b5:10:73:2b:80:e5:8e:55:02:94:40:05:78:62:e8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Apr 22 12:00:47 2026 GMT Not After : Apr 23 12:00:47 2026 GMT Subject: CN=f939a4409c0543c7443a2641536e5bda1e7926be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:88:19:15:96:69:44:28:c8:77:b9:df:56:d3: 38:41:29:88:a4:ac:a9:c9:e3:7b:0b:b7:f7:38:fd: e4:2f:15:40:44:c3:7c:23:0b:25:9b:eb:55:f7:02: f5:ad:1d:5b:bf:5e:c6:00:77:05:e0:6c:7d:7c:e9: 16:8b:bc:6f:95:ec:0a:e3:a5:b5:dc:a0:40:ad:1d: 09:f6:18:0e:cc:e2:a4:70:2d:f2:95:0d:a8:6b:38: 2b:ef:a6:b6:70:cd:88:d1:e0:e8:fe:a2:73:57:be: 49:ed:e1:7a:af:fa:11:80:52:ac:2a:3f:58:62:52: 7b:b9:86:da:72:91:bf:01:70:09:bf:aa:27:a3:55: 33:4f:a0:ee:e7:41:82:6d:85:0e:56:94:91:03:a6: 33:74:99:34:3a:bb:08:34:7c:f0:45:a9:e4:26:9b: d8:03:25:9c:48:4c:a6:cf:5e:a5:31:e5:3d:ce:98: 70:57:e2:74:50:db:ec:07:bf:92:a4:72:5f:ff:2c: 23:78:9d:65:4e:84:c2:6c:d3:e1:42:84:63:b6:2a: 29:cc:61:67:b1:d4:cf:0e:5f:db:02:c8:93:fc:35: 5c:c4:f7:09:c8:2d:62:40:ef:57:9b:ca:cc:6f:b4: be:3a:bc:bb:00:cb:06:3b:fe:27:91:09:cb:af:e7: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:39:A4:40:9C:05:43:C7:44:3A:26:41:53:6E:5B:DA:1E:79:26:BE X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ad:61:19:9a:2e:14:e9:c2:62:74:28:34:12:13:e4:b2:26: 17:e3:f1:ef:88:cb:af:20:99:84:7c:10:42:04:46:5e:29:c9: 65:b8:67:81:74:1a:51:3b:76:65:e6:17:9d:18:af:6c:ff:00: a9:c8:62:30:48:1e:30:6f:b5:bc:b6:38:1c:19:80:0e:ad:4f: 82:fe:72:1b:f1:d9:5b:79:d6:a1:5c:da:21:43:da:8e:bf:7a: 98:f1:2f:5f:85:98:14:d1:60:c6:a7:d4:f7:45:c9:06:c9:3f: e7:e7:d6:4f:0c:ac:b3:5c:42:3b:54:62:ca:b3:d7:2c:d9:60: 36:80:d0:a7:87:e9:5e:00:ab:09:ef:8e:21:9e:76:b6:17:9d: bb:b7:1c:8f:65:e3:d5:d4:7a:83:10:07:90:3b:32:c6:e0:47: 40:3c:d8:7c:04:c7:cd:0b:44:5b:3f:15:56:7b:d8:bf:d8:b9: 25:fe:ba:a3:f7:84:3a:6b:a3:e4:ad:96:a7:5e:61:8f:32:6f: ae:97:00:57:81:87:6b:29:5c:c3:3d:7d:d7:a0:28:53:87:7c: 7d:77:d0:d7:ed:b8:3e:a9:f9:db:7f:d4:13:ef:9e:b4:da:ef: 51:59:9e:f3:b7:e1:3c:b9:4a:1b:bc:13:28:03:f9:33:26:45: b9:73:8a:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ21EHMrgOWOVQKUQAV4YuhIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwNDIyMTIwMDQ3WhcNMjYwNDIzMTIwMDQ3WjAzMTEwLwYDVQQD EyhmOTM5YTQ0MDljMDU0M2M3NDQzYTI2NDE1MzZlNWJkYTFlNzkyNmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44gZFZZpRCjId7nfVtM4QSmIpKyp yeN7C7f3OP3kLxVARMN8Iwslm+tV9wL1rR1bv17GAHcF4Gx9fOkWi7xvlewK46W1 3KBArR0J9hgOzOKkcC3ylQ2oazgr76a2cM2I0eDo/qJzV75J7eF6r/oRgFKsKj9Y YlJ7uYbacpG/AXAJv6ono1UzT6Du50GCbYUOVpSRA6YzdJk0OrsINHzwRankJpvY AyWcSEymz16lMeU9zphwV+J0UNvsB7+SpHJf/ywjeJ1lToTCbNPhQoRjtiopzGFn sdTPDl/bAsiT/DVcxPcJyC1iQO9Xm8rMb7S+Ory7AMsGO/4nkQnLr+eAdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPk5pECcBUPHRDomQVNuW9oeeSa+MB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjq1hGZou FOnCYnQoNBIT5LImF+Px74jLryCZhHwQQgRGXinJZbhngXQaUTt2ZeYXnRivbP8A qchiMEgeMG+1vLY4HBmADq1Pgv5yG/HZW3nWoVzaIUPajr96mPEvX4WYFNFgxqfU 90XJBsk/5+fWTwyss1xCO1RiyrPXLNlgNoDQp4fpXgCrCe+OIZ52thedu7ccj2Xj 1dR6gxAHkDsyxuBHQDzYfATHzQtEWz8VVnvYv9i5Jf66o/eEOmuj5K2Wp15hjzJv rpcAV4GHaylcwz1916AoU4d8fXfQ1+24Pqn523/UE++etNrvUVme87fhPLlKG7wT KAP5MyZFuXOKMw== -----END CERTIFICATE-----Generated at Wed Apr 22 17:29:43 2026 by rpki-client