$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json) Hash identifier: STzIBa/nPo4qA5SQVHH0HC/BRnCCgZox3PyT2rKrIV0= Subject key identifier: 3D:5D:EE:07:16:1C:36:2B:11:C7:F8:E7:9C:DD:B6:58:92:61:83:54 Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 01A08340C06449ED31C03DDA28C14B7DF3D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft Manifest number: 0D9E Signing time: Tue 08 Sep 2026 23:00:53 +0000 Manifest this update: Tue 08 Sep 2026 23:00:53 +0000 Manifest next update: Wed 09 Sep 2026 23:00:53 +0000 Files and hashes: 1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=) 2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=) 3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=) 4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=) 5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=) 6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=) 7: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=) 8: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=) 9: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=) 10: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=) 11: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=) 12: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=) 13: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=) 14: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: XB48n+JWfWdKFXFCC7lPylrszHiCo0uzrYIu7BqAGT4=) 15: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=) 16: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=) 17: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=) 18: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=) 19: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=) 20: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Sep 2026 22:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:83:40:c0:64:49:ed:31:c0:3d:da:28:c1:4b:7d:f3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Sep 8 23:00:53 2026 GMT Not After : Sep 9 23:00:53 2026 GMT Subject: CN=3d5dee07161c362b11c7f8e79cddb65892618354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:db:f7:22:b8:f7:54:dc:18:d1:95:3e:ed:76: ff:f5:40:21:fb:2a:13:70:a8:9c:a1:cc:ff:9d:8c: 9b:32:9d:21:57:87:e4:af:07:36:dd:aa:8a:62:36: f7:74:07:91:05:c4:dc:fb:d4:78:52:26:69:09:22: f9:29:22:b3:3c:01:17:0a:a9:dc:eb:04:81:60:57: bd:da:b1:64:71:29:19:c3:f3:4c:ab:06:e5:4b:0c: 64:a1:c3:9f:c0:63:30:31:44:87:f3:1e:c0:90:74: bf:28:61:e5:4e:a7:63:af:66:0e:9d:53:da:16:1a: ab:50:1e:8f:59:b3:1a:49:8c:97:9c:0a:bc:d5:e3: f0:2f:91:4d:cf:61:48:82:72:81:00:d7:05:f9:70: 0d:da:43:53:06:ff:c4:d4:19:64:aa:75:74:8d:ff: 34:69:52:3b:dd:9b:90:0b:3b:aa:ac:06:da:b8:8b: f1:ed:d0:1a:1b:e4:52:1e:b2:50:05:56:18:1a:dc: 13:7b:9f:60:a2:0e:68:6e:c1:27:80:53:10:4c:62: d9:6e:5c:ff:47:28:2c:dd:a2:17:2e:53:2c:76:55: 5c:72:be:84:b7:74:53:29:ef:10:7c:fa:7b:1f:bf: 04:56:63:b7:43:32:55:b1:30:7a:47:7f:9f:35:a2: 1f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5D:EE:07:16:1C:36:2B:11:C7:F8:E7:9C:DD:B6:58:92:61:83:54 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:36:cc:c8:99:81:7d:95:05:24:c2:d8:f1:ef:1e:bf:be:7c: 03:97:01:ab:52:68:bc:36:92:0e:98:be:f6:97:ce:4a:31:76: 5e:c3:67:87:bd:7b:1e:be:2b:4f:5c:5c:2e:ba:4d:85:cd:47: 3c:85:14:df:89:2f:2e:da:ee:80:cf:93:cf:ae:f5:f0:c5:42: aa:2b:0a:2e:c7:87:f0:bd:5c:f1:9f:b8:3b:94:dc:6b:6d:63: b5:be:05:c2:ef:46:75:87:af:bc:9a:f6:65:52:23:11:dd:46: 87:bd:79:06:2a:80:23:32:40:1c:88:fc:9d:4c:3b:a7:a9:e0: 4c:86:ae:b1:36:f7:d4:ec:ef:39:d6:72:28:a6:30:5b:78:4e: 23:fe:83:75:78:41:79:7b:ae:1f:dc:31:a6:7c:ab:01:ad:8d: 95:3f:53:eb:16:11:d9:11:94:d3:c4:5d:1e:95:67:0e:29:e3: df:5d:fa:58:61:c6:b6:a8:96:cb:5d:4d:be:a7:28:10:fc:03: 1a:ac:ee:97:1b:94:bb:4c:bb:e5:15:8b:f0:d6:05:24:f2:b3: be:72:f3:1f:c9:a0:8c:c1:a0:63:67:fd:60:a5:70:5e:c5:23: af:1f:71:f0:77:90:3c:43:e0:c6:28:3c:9c:d1:e5:0f:12:4b: 4b:f7:7e:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCDQMBkSe0xwD3aKMFLffPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwOTA4MjMwMDUzWhcNMjYwOTA5MjMwMDUzWjAzMTEwLwYDVQQD EygzZDVkZWUwNzE2MWMzNjJiMTFjN2Y4ZTc5Y2RkYjY1ODkyNjE4MzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dv3Irj3VNwY0ZU+7Xb/9UAh+yoT cKicocz/nYybMp0hV4fkrwc23aqKYjb3dAeRBcTc+9R4UiZpCSL5KSKzPAEXCqnc 6wSBYFe92rFkcSkZw/NMqwblSwxkocOfwGMwMUSH8x7AkHS/KGHlTqdjr2YOnVPa FhqrUB6PWbMaSYyXnAq81ePwL5FNz2FIgnKBANcF+XAN2kNTBv/E1BlkqnV0jf80 aVI73ZuQCzuqrAbauIvx7dAaG+RSHrJQBVYYGtwTe59gog5obsEngFMQTGLZblz/ Rygs3aIXLlMsdlVccr6Et3RTKe8QfPp7H78EVmO3QzJVsTB6R3+fNaIfHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1d7gcWHDYrEcf455zdtliSYYNUMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwjbMyJmB fZUFJMLY8e8ev758A5cBq1JovDaSDpi+9pfOSjF2XsNnh717Hr4rT1xcLrpNhc1H PIUU34kvLtrugM+Tz6718MVCqisKLseH8L1c8Z+4O5Tca21jtb4Fwu9GdYevvJr2 ZVIjEd1Gh715BiqAIzJAHIj8nUw7p6ngTIausTb31OzvOdZyKKYwW3hOI/6DdXhB eXuuH9wxpnyrAa2NlT9T6xYR2RGU08RdHpVnDinj3136WGHGtqiWy11NvqcoEPwD GqzulxuUu0y75RWL8NYFJPKzvnLzH8mgjMGgY2f9YKVwXsUjrx9x8HeQPEPgxig8 nNHlDxJLS/d+eQ== -----END CERTIFICATE-----Generated at Wed Sep 9 01:33:27 2026 by rpki-client