$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: yIHKU5R4AafWyrRCtZXdQqPr5r/WCZy9tVgtiltXRVI= Subject key identifier: E6:40:8B:DF:FA:D8:CC:DC:B7:CB:59:4C:7F:3A:05:D4:CA:54:E1:79 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 01A0889EB328DD41F1BB5B60F3376C04467C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 17AC Signing time: Thu 10 Sep 2026 00:01:36 +0000 Manifest this update: Thu 10 Sep 2026 00:01:36 +0000 Manifest next update: Fri 11 Sep 2026 00:01:36 +0000 Files and hashes: 1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=) 2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=) 3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=) 4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=) 5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: 2oGXhbeZ+l1tq/LFNzfK++z3avl8Ql9jBwRN0dookv0=) 6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=) 7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=) 8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=) 9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=) 10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=) 11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=) 12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=) 13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=) 14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=) 15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=) 16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=) 17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=) 18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=) 19: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=) 20: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=) 21: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 00:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:88:9e:b3:28:dd:41:f1:bb:5b:60:f3:37:6c:04:46:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Sep 10 00:01:36 2026 GMT Not After : Sep 11 00:01:36 2026 GMT Subject: CN=e6408bdffad8ccdcb7cb594c7f3a05d4ca54e179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:08:24:1f:7e:d2:18:ff:08:6c:db:16:e6: 98:df:97:8e:a7:5a:cc:41:0c:2b:2e:e8:40:cc:cf: f5:a2:34:d4:8d:ab:ee:ed:0b:af:93:58:66:5d:26: da:ad:21:07:4a:02:5e:21:ab:26:65:70:02:23:53: b9:ed:42:41:bc:39:72:50:2d:c7:5e:e0:c9:09:e4: 3d:c0:d0:2e:08:c8:90:87:43:5d:f5:be:54:35:eb: a2:1f:5b:ee:61:a2:d5:16:c6:f2:0a:f6:9e:4f:a1: 91:75:d7:89:5b:f6:3e:78:7a:60:67:48:4f:b5:95: 8a:1c:cf:b3:cd:61:af:6d:0d:83:d2:41:d9:63:30: 8a:c2:a3:64:90:de:2c:4c:a9:2a:43:ee:21:7c:95: 8f:9e:dc:21:90:7c:60:65:64:dd:35:52:e6:5f:b1: 10:85:31:dd:7c:21:1c:27:17:1c:25:7e:a7:f6:e6: 71:47:38:5a:94:0f:96:9f:80:87:74:cf:01:7c:c9: c7:ab:26:24:71:ff:e5:53:5a:5b:9a:cc:ee:da:50: 38:f3:ad:dd:d8:92:d9:60:a7:a4:97:8b:51:d8:ba: 2e:f1:86:87:f8:14:a4:95:78:e7:ca:e4:4c:d3:da: b1:42:b8:a5:f9:db:84:f7:42:91:22:2c:7d:92:12: 39:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:40:8B:DF:FA:D8:CC:DC:B7:CB:59:4C:7F:3A:05:D4:CA:54:E1:79 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:69:06:38:01:99:2d:72:57:c7:7e:ca:48:07:4f:35:d8:7e: e1:8e:84:7d:cb:38:12:69:5d:c1:28:a9:37:5c:e4:42:ee:c5: fc:43:f6:ac:8d:a8:41:df:67:69:c4:3a:01:84:aa:2c:4d:a5: 27:b5:4a:56:2f:c4:f2:59:f6:a4:46:82:f1:b6:a4:17:f4:f8: bf:cc:c0:ca:3d:7a:18:01:10:9e:69:10:a1:50:6a:c4:6d:17: f2:92:94:50:c3:9f:58:3c:d2:a9:13:cb:62:bc:a8:be:67:6c: 37:a8:fe:1d:fc:3b:81:64:df:3d:e5:97:2b:70:94:62:03:05: 80:bc:c8:b4:0f:a4:2f:33:04:75:f9:8e:f6:ca:b4:e8:2c:bc: d4:13:a6:d3:94:ff:7e:10:81:1f:f6:60:db:4b:f0:f5:90:d2: 16:9f:54:51:91:c8:1e:ee:93:82:b0:44:c9:ff:a4:8d:1c:ae: b7:e2:25:40:9f:cb:f9:95:c9:e1:fe:48:c1:8f:3e:2b:f3:f1: 42:1c:9d:91:c8:3c:a6:3b:bb:aa:e9:46:e1:70:a0:5b:43:c5: f8:fd:47:3a:67:f8:13:34:d2:07:a2:83:07:38:24:32:9d:89: 12:33:19:97:83:a9:52:94:37:77:6d:b0:b4:de:e1:38:0c:91: 39:bb:cf:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCInrMo3UHxu1tg8zdsBEZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwOTEwMDAwMTM2WhcNMjYwOTExMDAwMTM2WjAzMTEwLwYDVQQD EyhlNjQwOGJkZmZhZDhjY2RjYjdjYjU5NGM3ZjNhMDVkNGNhNTRlMTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzsIJB9+0hj/CGzbFuaY35eOp1rM QQwrLuhAzM/1ojTUjavu7Quvk1hmXSbarSEHSgJeIasmZXACI1O57UJBvDlyUC3H XuDJCeQ9wNAuCMiQh0Nd9b5UNeuiH1vuYaLVFsbyCvaeT6GRddeJW/Y+eHpgZ0hP tZWKHM+zzWGvbQ2D0kHZYzCKwqNkkN4sTKkqQ+4hfJWPntwhkHxgZWTdNVLmX7EQ hTHdfCEcJxccJX6n9uZxRzhalA+Wn4CHdM8BfMnHqyYkcf/lU1pbmszu2lA4863d 2JLZYKekl4tR2Lou8YaH+BSklXjnyuRM09qxQril+duE90KRIix9khI5XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZAi9/62Mzct8tZTH86BdTKVOF5MB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGkGOAGZ LXJXx37KSAdPNdh+4Y6Efcs4EmldwSipN1zkQu7F/EP2rI2oQd9nacQ6AYSqLE2l J7VKVi/E8ln2pEaC8bakF/T4v8zAyj16GAEQnmkQoVBqxG0X8pKUUMOfWDzSqRPL YryovmdsN6j+Hfw7gWTfPeWXK3CUYgMFgLzItA+kLzMEdfmO9sq06Cy81BOm05T/ fhCBH/Zg20vw9ZDSFp9UUZHIHu6TgrBEyf+kjRyut+IlQJ/L+ZXJ4f5IwY8+K/Px Qhydkcg8pju7qulG4XCgW0PF+P1HOmf4EzTSB6KDBzgkMp2JEjMZl4OpUpQ3d22w tN7hOAyRObvPrQ== -----END CERTIFICATE-----Generated at Thu Sep 10 10:51:10 2026 by rpki-client