$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: jBQBVYa5g+ZP0u8r3XSyPpvIZmENXrRAflizOU1eM5U= Subject key identifier: 26:7B:B2:73:37:D1:79:4C:4C:EC:44:25:33:ED:E6:C3:A2:53:D2:32 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019D39AEB73927FBFABA1508F480FB9B7DB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 15B7 Signing time: Sun 29 Mar 2026 13:00:44 +0000 Manifest this update: Sun 29 Mar 2026 13:00:44 +0000 Manifest next update: Mon 30 Mar 2026 13:00:44 +0000 Files and hashes: 1: 1UiUTiwKgTMIt2VTMxLe14f3nS4.roa (hash: pqQp2WmJbg2RhT73uD+Ys0RPrhInn/LiUGnsvcFLzWI=) 2: 99NN1WXl1e-tpKT6ABRzj8ek8js.roa (hash: 8o+XYKw0+50Z916SkqFv35kFc2HKB1Yb/OlTSFjUqWw=) 3: Gt42LNyKpJtcqVRywZEAUF7VLT4.roa (hash: 9z9Onu3kjDDPqyse/NwIrtPdYmJbza2UnnbQIfvOZ2I=) 4: LlDSn4AAdQvcio-w6ueKASNJzJc.roa (hash: Tt+ws0A+jguw/rGXSOQBHfD+EimDFMYYNfrKEOU8mto=) 5: S87lpzwpwcvhDVlbS4kDtqKKrpA.roa (hash: EL+FrGUGQI1F7I3SdqUWEFxAZnp0C1EKciCac/NeJoU=) 6: UlvxYSaKh8Oc3zweZMlSdRb-gtk.roa (hash: oQKB3We88m7rm0/lXA7VFioKwk6yZDH7U1EGDEWoMxw=) 7: b9R1mHou81pbTN845jWo8AY0dG8.roa (hash: 0MAAHxvRxGYVPd74Q6mtc12UmkhV79TPgssvbAGMnic=) 8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: qI3UOakVXrr1N/wf/uM5nn7YLrgwfMRNthjPQuc314w=) 9: vTKohdF56IFQgah9DuO0JGwcH9U.roa (hash: bsUg8Uy5yocfoi+JUcF+13tkU1rzb4BDrWJjTlHrS6I=) 10: zKPJ1aUk7U9x8WVHRd4-RzORH30.roa (hash: oMQrL9GvdJqmjmfNbo6U4V/JwihFWzU7V32F6VSp6yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:ae:b7:39:27:fb:fa:ba:15:08:f4:80:fb:9b:7d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Mar 29 13:00:44 2026 GMT Not After : Mar 30 13:00:44 2026 GMT Subject: CN=267bb27337d1794c4cec442533ede6c3a253d232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ad:05:48:e1:26:a7:2c:bd:74:9a:7d:1a:a3: 2e:a5:6c:a4:75:c3:09:10:f6:cb:2b:0b:b2:88:a5: fb:e9:d6:09:cc:11:2b:45:66:47:0b:61:d2:17:fe: 8d:d8:ad:c6:bf:8d:73:5e:0a:0f:09:90:9e:d8:88: e0:66:82:8d:b9:25:b3:fc:a9:87:7c:b7:9f:24:92: 17:b7:ce:9b:b0:25:27:6e:f3:1b:68:bd:a4:9e:a7: 96:33:2e:aa:32:27:b0:5b:72:b6:99:89:d5:e8:69: f4:5b:38:6c:c6:56:0b:92:cc:15:f8:52:90:75:ec: 39:a1:06:06:87:0a:0c:da:1b:9e:53:e5:84:80:39: 20:40:88:49:23:45:42:d8:56:8f:be:97:bc:b2:30: ad:96:63:b9:6d:f4:ed:0a:2c:9e:e8:da:d1:0e:a2: 25:f4:7f:b8:48:06:67:31:79:8c:b8:e4:44:6e:9a: 4f:3a:0f:84:a4:62:d7:1a:17:17:07:b6:96:a5:03: 27:ee:14:f5:1c:da:cc:02:8c:6c:1f:e8:c7:20:2c: a4:e0:01:5d:36:9c:e8:34:de:d5:10:9e:38:80:73: f2:ec:f5:1a:ae:45:a8:6a:c3:c4:45:d0:17:f1:84: 1c:f4:46:dc:89:d4:aa:47:80:3c:98:e9:eb:fe:74: f0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7B:B2:73:37:D1:79:4C:4C:EC:44:25:33:ED:E6:C3:A2:53:D2:32 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:09:c1:6c:28:0a:22:c9:47:21:73:7d:6b:cf:8a:e6:51:71: 78:45:bd:c0:ae:c1:d0:80:05:1d:ad:52:15:da:c2:a4:b9:ed: d2:bf:a8:91:35:8f:59:d7:0b:2d:f7:50:1a:de:46:17:31:bc: 36:c9:3f:60:52:96:20:12:a3:df:aa:99:7b:46:4b:93:da:a5: ea:48:77:33:a6:3a:25:ec:11:74:f8:d2:23:1e:4d:a6:63:6a: b3:a9:78:e2:2d:36:57:64:bc:29:71:e4:46:17:4a:ce:42:2e: d8:c8:52:c4:77:af:5c:d6:67:5c:70:db:f0:17:df:dd:de:84: 3b:35:9b:2d:a5:2a:09:b2:06:9a:fa:a9:d1:61:91:72:c3:f0: ad:64:ac:c4:87:ec:4a:9d:47:c7:96:e1:3c:2f:9c:85:c8:76: da:bf:ba:43:80:81:95:a1:32:b2:1d:8e:c7:3b:c1:9c:48:f3: b1:b6:f2:96:56:8b:94:89:21:3f:9b:55:12:6e:d4:1d:58:bd: bd:83:f5:94:36:06:4d:e3:1e:ba:60:30:08:ef:84:e9:29:85: 8a:c0:63:7c:37:51:81:fd:54:fb:1c:5a:85:e4:fa:0c:e9:75: e5:36:64:f7:ce:5d:e1:74:51:6e:2b:0a:43:c6:3b:8e:9a:4a: 2e:58:a8:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05rrc5J/v6uhUI9ID7m32zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjYwMzI5MTMwMDQ0WhcNMjYwMzMwMTMwMDQ0WjAzMTEwLwYDVQQD EygyNjdiYjI3MzM3ZDE3OTRjNGNlYzQ0MjUzM2VkZTZjM2EyNTNkMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK0FSOEmpyy9dJp9GqMupWykdcMJ EPbLKwuyiKX76dYJzBErRWZHC2HSF/6N2K3Gv41zXgoPCZCe2IjgZoKNuSWz/KmH fLefJJIXt86bsCUnbvMbaL2knqeWMy6qMiewW3K2mYnV6Gn0WzhsxlYLkswV+FKQ dew5oQYGhwoM2hueU+WEgDkgQIhJI0VC2FaPvpe8sjCtlmO5bfTtCiye6NrRDqIl 9H+4SAZnMXmMuOREbppPOg+EpGLXGhcXB7aWpQMn7hT1HNrMAoxsH+jHICyk4AFd NpzoNN7VEJ44gHPy7PUarkWoasPERdAX8YQc9EbcidSqR4A8mOnr/nTw5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZ7snM30XlMTOxEJTPt5sOiU9IyMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgnBbCgK IslHIXN9a8+K5lFxeEW9wK7B0IAFHa1SFdrCpLnt0r+okTWPWdcLLfdQGt5GFzG8 Nsk/YFKWIBKj36qZe0ZLk9ql6kh3M6Y6JewRdPjSIx5NpmNqs6l44i02V2S8KXHk RhdKzkIu2MhSxHevXNZnXHDb8Bff3d6EOzWbLaUqCbIGmvqp0WGRcsPwrWSsxIfs Sp1Hx5bhPC+chch22r+6Q4CBlaEysh2OxzvBnEjzsbbyllaLlIkhP5tVEm7UHVi9 vYP1lDYGTeMeumAwCO+E6SmFisBjfDdRgf1U+xxaheT6DOl15TZk985d4XRRbisK Q8Y7jppKLlioVQ== -----END CERTIFICATE-----Generated at Sun Mar 29 16:26:28 2026 by rpki-client