$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: wHWx6ji5lF0X4FgMXhD8ntq3zy8rqZJlXOeJORukXwg= Subject key identifier: 97:D1:7F:00:98:8B:82:8E:C2:77:39:75:67:F1:48:23:2F:69:17:9D Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019DF8DED5B44F68A17B68EE0F80A043C571 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0C0F Signing time: Tue 05 May 2026 16:00:46 +0000 Manifest this update: Tue 05 May 2026 16:00:46 +0000 Manifest next update: Wed 06 May 2026 16:00:46 +0000 Files and hashes: 1: 1-FaALXlMsFyTh9BoD33d67aHEeI.roa (hash: vrnFz1Kmq+5wOQAjBqsePEJkDcr2bnQe4L2j8uEu+qw=) 2: 1bCAUkvNoYD0zomW0iurtF9te8Q.roa (hash: Z9CJnEIWfCZlmGT2t+Vqj5cmYatgFLNVqvFiGcAhXS4=) 3: 2ZG1OxPA9lJyGthfBpRD7jHaL_Q.roa (hash: IHbK3thySVU9Np8f+PMKh3PQZI2WcY5GEAykoMyFvfA=) 4: 3PEJB7BEtrLxE4pQbBEXg2NJ0zM.roa (hash: z+UJ71RNNGVXWGUolTIwgBdwKGA2gX9wpBe2tOfMGEQ=) 5: 7RoJ9VAFHyX-FagiKQIhkGQ_c-Q.roa (hash: HkhHBOyfDP+gjtdcVY9wa2Y21nfYECLjXeRT5/sYvk0=) 6: ADRzfCr8-nkR6lRMT7eQyQ5uz2c.roa (hash: Zz8uOoQc0hbIxPblxdT0hBouk0wTSjJNAtxlR56BcEk=) 7: DvkRhCAztowgp0lKvjLU3U09Xpg.roa (hash: 1t/9feUa5ol6uYHCvs+WcaENRu5/18p6uTEUH0Zu6wU=) 8: J2ZRrTftrtV0_TjbPrZlFNP6xjY.roa (hash: igNt9ILvZZAjjU9Sm+2kCOHSTe7FUif0MtylGZarlYg=) 9: RxkQzIFpbR8h5Y7GlER0QvlZ_xo.roa (hash: QyQ3uZNSoqX601+GHgavM056pTz7tYKjCe54YFu8AJg=) 10: YcoX0FswwtJDNeSfLbzKnpX_Ncg.roa (hash: bSifOwZU31nSn4HWPxK/P+Uoua0/V7duu8jXadJB22w=) 11: _0fjxv0fjuqXsB_dEZmZt2gQyKo.roa (hash: jytC1G6IyWDZvWzadzg7tWo6vkVxU20E7eXcUSAboG0=) 12: abtquT29kdz8HKSwyxp8MDLf-rM.roa (hash: 9xlsXDDDbF8yj8g2zV/NUxjfsdOSQi7MgQZSbquwXwU=) 13: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: dexAKmSZ5FjHMfCEzeLt1tK+KkDVU0udutwcFFSLwPA=) 14: cagtjc8bDeRcNxkPpsNFtRSw4HA.roa (hash: aF1LQSDw1Bl5408F1vJ3i4//pV71kCpJdauO5OKZNZo=) 15: czj_PZMJsKJEUcCpGuFemJRiVXc.roa (hash: XIy6OGhmtMXoCJdKfW1aLecDFbIhje3cjpXyY92Ca30=) 16: dhgQMv5d9CMtFJpDdBdVdbTFSgs.roa (hash: b2TvzpSS1aAj+1tdL7elB6HMEo7lO6B9iw17wuzVv+k=) 17: dpKkGD2SgABNju9FzjICMh-bILM.roa (hash: eA7DrTniAuZ9y6HHMxZvWAMtE9cnaGhtY/mRIrHlXQg=) 18: jdeHBbAARHJbzNiwNCOXeI54EUg.roa (hash: th8vM6YWc/Ley5toEeaIWxyZTuv2x+5byblkSqcImLo=) 19: l6g5cRLwfzGSk8db5JuW24EySDI.roa (hash: vgdCsDG7+TIHFOHJjv7u8i4m1Io6EEjzSnBPC2bEVVY=) 20: tCiyGtakbmS-hkNH0HW8_YohxbE.roa (hash: 0kbqzbmcamtnxXVE6dSXdUJzJrO80eC7C3aPFLP4CRA=) 21: tZTnC5SbNTeL6PJ7RK2Vs68Zur0.roa (hash: caiAj7bgVqN8bpYH0jeyQ8RkddSmx6SR+nS6M3Lebv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 13:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f8:de:d5:b4:4f:68:a1:7b:68:ee:0f:80:a0:43:c5:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: May 5 16:00:46 2026 GMT Not After : May 6 16:00:46 2026 GMT Subject: CN=97d17f00988b828ec277397567f148232f69179d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:f9:81:fc:fe:d6:42:33:ba:5c:b5:ad:22: 25:1a:72:2d:49:77:fb:26:a1:8c:ac:c2:17:5f:fe: 2d:2f:0c:92:d3:cb:a6:a5:97:e7:46:f7:69:d5:0e: f5:9d:26:aa:06:ca:8e:69:e8:67:db:fb:12:3c:34: 16:9a:b3:6c:a6:23:b0:0a:f8:a7:c9:a2:0a:1b:db: e1:91:9b:79:98:39:91:b8:e7:e4:82:65:12:bf:32: d2:44:b0:d4:1b:22:db:70:ff:e3:ab:9a:40:e6:35: 6c:55:f4:d6:61:66:d4:76:24:69:ff:b7:b2:04:9c: 58:dc:b5:34:51:70:fb:94:74:c7:3f:f9:3a:e7:2a: f8:db:59:1a:50:dc:58:d4:bf:a2:18:b0:3a:6a:f5: 8c:20:bc:4c:8b:55:50:d0:e9:ef:1f:47:94:2b:91: ee:a8:72:30:95:62:7a:ab:ec:a9:a2:c2:ab:0b:6a: 90:58:ce:9a:46:07:f4:4a:5e:4c:ab:ff:b4:1f:13: 85:28:19:56:17:9a:ca:cb:23:a9:8b:dc:d1:e7:79: e2:f1:01:79:5f:1d:f9:92:dc:d3:6b:7e:ca:68:dc: 47:4f:d4:52:15:cc:ff:f8:89:da:54:81:70:65:a4: 18:68:eb:c2:70:7d:a3:79:f6:42:c9:f8:61:fc:4e: da:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D1:7F:00:98:8B:82:8E:C2:77:39:75:67:F1:48:23:2F:69:17:9D X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:10:4a:e7:11:50:23:b3:ed:4c:87:1b:31:b3:f0:e4:3c:d5: 8b:e1:0b:15:c9:8b:78:6f:84:ab:c5:6e:6c:c9:48:9c:e5:17: 29:0d:34:72:6c:29:81:ed:ee:12:72:e4:9c:f6:d5:33:cc:1c: dc:e0:22:11:bb:a6:22:57:09:b8:d9:bf:a8:a6:1d:e1:e3:2a: 76:80:79:37:91:5a:f4:f7:95:ba:7a:13:6f:fa:21:1d:1c:29: b5:5f:11:cd:01:66:fb:50:97:f4:e7:e1:35:b1:79:12:af:58: 22:7b:32:fb:10:9d:ac:ca:36:08:b3:bc:7f:90:08:50:d0:2e: 01:83:c5:71:d2:24:56:15:3f:96:63:a1:44:f5:58:43:07:e1: 8b:af:57:92:82:86:ba:dc:b9:0b:24:25:6e:80:37:32:a5:bf: 6e:f7:c8:a0:de:93:f8:9a:c2:03:8d:17:32:5b:d8:9c:50:5b: af:3f:82:b1:e1:dd:5a:ad:2b:07:35:67:b0:1d:74:5b:94:a2: bd:60:7a:04:82:b2:e8:50:e0:fd:e8:88:4e:7a:46:7c:e0:6e: 9c:4b:21:7c:d4:88:4c:ff:32:64:1b:53:62:95:9c:f9:f8:6d: ff:ba:7a:a7:35:06:c4:9e:fb:4e:09:9c:3e:bd:a8:c7:62:65: 17:0c:2e:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ343tW0T2ihe2juD4CgQ8VxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjYwNTA1MTYwMDQ2WhcNMjYwNTA2MTYwMDQ2WjAzMTEwLwYDVQQD Eyg5N2QxN2YwMDk4OGI4MjhlYzI3NzM5NzU2N2YxNDgyMzJmNjkxNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWj5gfz+1kIzuly1rSIlGnItSXf7 JqGMrMIXX/4tLwyS08umpZfnRvdp1Q71nSaqBsqOaehn2/sSPDQWmrNspiOwCvin yaIKG9vhkZt5mDmRuOfkgmUSvzLSRLDUGyLbcP/jq5pA5jVsVfTWYWbUdiRp/7ey BJxY3LU0UXD7lHTHP/k65yr421kaUNxY1L+iGLA6avWMILxMi1VQ0OnvH0eUK5Hu qHIwlWJ6q+yposKrC2qQWM6aRgf0Sl5Mq/+0HxOFKBlWF5rKyyOpi9zR53ni8QF5 Xx35ktzTa37KaNxHT9RSFcz/+InaVIFwZaQYaOvCcH2jefZCyfhh/E7aOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfRfwCYi4KOwnc5dWfxSCMvaRedMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhBK5xFQ I7PtTIcbMbPw5DzVi+ELFcmLeG+Eq8VubMlInOUXKQ00cmwpge3uEnLknPbVM8wc 3OAiEbumIlcJuNm/qKYd4eMqdoB5N5Fa9PeVunoTb/ohHRwptV8RzQFm+1CX9Ofh NbF5Eq9YInsy+xCdrMo2CLO8f5AIUNAuAYPFcdIkVhU/lmOhRPVYQwfhi69XkoKG uty5CyQlboA3MqW/bvfIoN6T+JrCA40XMlvYnFBbrz+CseHdWq0rBzVnsB10W5Si vWB6BIKy6FDg/eiITnpGfOBunEshfNSITP8yZBtTYpWc+fht/7p6pzUGxJ77Tgmc Pr2ox2JlFwwuxw== -----END CERTIFICATE-----Generated at Tue May 5 20:11:03 2026 by rpki-client