$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: 4UALQ49GrDYyBA0/EIJ3mT5prVdjLWGo39VlubkfI0E= Subject key identifier: F5:4D:64:ED:FA:D2:D4:38:D2:73:6D:C5:DF:E2:5F:1B:DB:1A:E9:05 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019DDBE73CEF5FF139D2B30C5354D9D80015 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 191C Signing time: Thu 30 Apr 2026 01:00:57 +0000 Manifest this update: Thu 30 Apr 2026 01:00:57 +0000 Manifest next update: Fri 01 May 2026 01:00:57 +0000 Files and hashes: 1: 1mwQP2lzMEvGw5kmGSq2Q8zki4U.roa (hash: qQJpp5KgzZdIPG7oShddMej6G09vuXAjLCnl8RBdk+s=) 2: 4rApJRlRNhbsTXM3GNtTv_-FUaE.roa (hash: MLIFEUQfYL+dU3SVCCpJ59J8zRwtwP9iXKmocqpNGdw=) 3: 7blUbad0lyHYKT7BdmBvmq5380U.roa (hash: qY+U0bZ6/EBhOS0YQQ7vmCYh9mixFIWmdrvvPqY0Kxw=) 4: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: 4ARhwIx/p7fhXnvLzexbjcX66/brKnkBrrH7fwb3zr0=) 5: Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa (hash: VyyRwVBnaY4P+qhOH2Wi0cAjx6Up4dpdwhLbiAQ3CtY=) 6: Ep5McDs5t7WeZmyAgeWWCFiI58c.roa (hash: AOP9n/jwx2AwUV0sR9UZXO55UJCsgwtWlFLKT4Mnfww=) 7: IsNagTQeIBhCK_eEzJwts2JVNCw.roa (hash: 3EGVWuicI7zf/jhSqYDgo9FfBBbPEXmJZo6gLFFiDu0=) 8: Mf4shsIcdDvfGnZMAdD_3JbYLHI.roa (hash: fIqVNZkx0+PBJYyotNhU3sXFOq7EoMjw3ychtStfIfA=) 9: UNcwmzZVzRQr8GbUBkJ92x7O5eE.roa (hash: meiM5bZ9UOA85hqFTKPoirVYKHNyJXm9Ra4fb/AWC3o=) 10: VOWlrP6uxrDIr-SPRswUzsamv9U.roa (hash: /dzp7Tx7zIjQ7oHAEiDUYqeue5FxJSSNt6hajAHSmwM=) 11: WQCrfzsax6n4r3v1hlQuR83C7do.roa (hash: /xxAd/ECrPZwq/l5JXhCScWy45/GJ5XDOGHFeVobafw=) 12: amFStnp6j-M9lkAATZthidSAqw0.roa (hash: 59Yb1hJ/qsJeQiwwAKrwKY2dgVW1ie3YqDOq9IPX2gA=) 13: c4rU82ROk5JHMuzWaUDAf2UpHuw.roa (hash: vdJbphjmJNk0M/0ecXI7N6QbpMoGR7yuaCxGZ6rARpE=) 14: hJcSMIo_XaCF0Or6myoUtWgtRXI.roa (hash: N1SDE1a07aO/mfcGYBo3p0KglE5WOqK+rZ9H6S+AsVs=) 15: o25brRT35PQQTxAbPaDAC1qCbs0.roa (hash: rJyPNW15ukUlAPAy2zm9lVpgff4++kMCrXKJIi7Zi3s=) 16: r7cKixH3TdWYvxaPAQWsrvQ0hGo.roa (hash: 32j+tbL6tHhdIao29pkYwJtz2jR2ax5EQIkmfU8MT1g=) 17: sYV0gC_bNED6JuRG9OZx6sd2sNM.roa (hash: QkoUdyv92zyYef/ePnPDsDyA2gvOpaAc95PPopYOtrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Apr 2026 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:db:e7:3c:ef:5f:f1:39:d2:b3:0c:53:54:d9:d8:00:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Apr 30 01:00:57 2026 GMT Not After : May 1 01:00:57 2026 GMT Subject: CN=f54d64edfad2d438d2736dc5dfe25f1bdb1ae905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:53:3d:11:3b:bc:8d:ab:10:ea:c1:d2:1a: d8:a0:58:c2:23:25:03:ef:aa:76:3c:89:34:3b:ab: a3:9e:81:ee:b8:1d:13:4d:f6:e8:50:09:d8:24:18: 29:1c:7c:de:49:71:e5:41:a0:2a:74:80:bc:39:6b: d9:fb:40:61:25:3d:10:8e:33:d1:c2:90:7b:b8:12: fa:0e:7b:d7:54:65:c0:ea:4d:93:ce:fc:e0:3e:7d: f4:f9:fd:b5:9c:f0:1f:9f:a4:1d:64:15:63:36:4d: 18:4f:56:44:6e:21:16:97:58:d8:52:41:7f:47:79: e1:87:14:bb:ef:55:39:32:d7:d9:68:1e:8c:59:b2: 24:02:e6:d8:4c:ba:2b:2e:1c:f2:cc:ab:a3:ac:cb: f2:7d:42:2c:d4:3e:12:15:1c:8a:99:52:82:d0:d1: 7f:1f:c5:77:c8:ef:12:cb:b8:59:23:23:e3:4c:43: d1:16:fa:eb:86:b3:51:9b:a2:b8:d4:bf:50:81:b7: bf:bc:f0:c3:01:1f:8c:19:1a:cd:87:6b:47:89:0b: 38:54:a6:e8:78:c8:91:aa:82:93:ea:a7:31:05:02: 09:18:f5:11:49:7a:91:3b:da:34:b0:25:c4:97:6b: 1c:a5:64:ad:b4:6a:4c:df:b2:de:8a:a4:81:84:27: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4D:64:ED:FA:D2:D4:38:D2:73:6D:C5:DF:E2:5F:1B:DB:1A:E9:05 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b2:b3:81:01:8b:ee:02:13:63:28:68:75:5c:8b:b1:f2:22: 1f:f0:3c:7f:0c:98:92:0a:b6:6c:ef:eb:9e:b4:e6:cb:6c:23: b3:68:92:f7:96:1f:0b:8a:9e:39:d1:a9:36:dc:eb:df:4c:6f: 59:3c:e9:cc:2f:18:bc:6e:04:ee:6e:51:88:7d:d0:01:94:22: 12:15:57:bb:82:16:c7:ff:66:4c:9d:73:13:a7:45:4d:70:35: af:25:8f:62:82:1e:c6:26:07:d5:09:30:bd:18:2d:82:fc:3a: 70:3e:a3:a8:27:de:53:36:60:1f:b4:82:77:4c:4b:7d:81:69: 36:a2:c5:da:5e:19:ac:cd:9e:ff:79:57:32:04:ed:d6:af:ae: 69:3d:c3:8c:bf:d4:f8:f4:93:66:74:e3:f5:e7:f2:94:cc:8c: 3c:70:b8:8b:92:f3:c8:b1:fc:1e:7c:52:fc:3f:51:9e:f4:ff: 4c:f8:c7:f7:cd:ee:32:af:a4:d8:6d:11:34:6a:b4:13:e2:db: f4:8f:b4:04:63:59:48:83:f0:a8:c3:e3:ef:cd:55:5a:d6:63: 37:2f:dc:03:d4:4b:9e:e6:5f:5d:e2:cf:97:4b:de:42:73:9d: 61:e3:67:49:ec:f4:8a:8d:39:c1:76:55:46:2b:0b:f0:d1:7b: 74:2c:0c:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3b5zzvX/E50rMMU1TZ2AAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwNDMwMDEwMDU3WhcNMjYwNTAxMDEwMDU3WjAzMTEwLwYDVQQD EyhmNTRkNjRlZGZhZDJkNDM4ZDI3MzZkYzVkZmUyNWYxYmRiMWFlOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRNTPRE7vI2rEOrB0hrYoFjCIyUD 76p2PIk0O6ujnoHuuB0TTfboUAnYJBgpHHzeSXHlQaAqdIC8OWvZ+0BhJT0QjjPR wpB7uBL6DnvXVGXA6k2TzvzgPn30+f21nPAfn6QdZBVjNk0YT1ZEbiEWl1jYUkF/ R3nhhxS771U5MtfZaB6MWbIkAubYTLorLhzyzKujrMvyfUIs1D4SFRyKmVKC0NF/ H8V3yO8Sy7hZIyPjTEPRFvrrhrNRm6K41L9Qgbe/vPDDAR+MGRrNh2tHiQs4VKbo eMiRqoKT6qcxBQIJGPURSXqRO9o0sCXEl2scpWSttGpM37LeiqSBhCeOkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVNZO360tQ40nNtxd/iXxvbGukFMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrKzgQGL 7gITYyhodVyLsfIiH/A8fwyYkgq2bO/rnrTmy2wjs2iS95YfC4qeOdGpNtzr30xv WTzpzC8YvG4E7m5RiH3QAZQiEhVXu4IWx/9mTJ1zE6dFTXA1ryWPYoIexiYH1Qkw vRgtgvw6cD6jqCfeUzZgH7SCd0xLfYFpNqLF2l4ZrM2e/3lXMgTt1q+uaT3DjL/U +PSTZnTj9efylMyMPHC4i5LzyLH8HnxS/D9RnvT/TPjH983uMq+k2G0RNGq0E+Lb 9I+0BGNZSIPwqMPj781VWtZjNy/cA9RLnuZfXeLPl0veQnOdYeNnSez0io05wXZV RisL8NF7dCwM9A== -----END CERTIFICATE-----Generated at Thu Apr 30 07:26:05 2026 by rpki-client