$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: WEYhRSxTN2dBuQ84iojE0wPf09R04u9LAryplgPNkAA= Subject key identifier: D6:A5:F6:2A:5F:D1:36:18:99:36:E1:82:D6:BF:E1:A8:37:4B:A0:56 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019CBE4CFD9E893A7BF33DBF6FF2664F4E71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0B6A Signing time: Thu 05 Mar 2026 14:00:42 +0000 Manifest this update: Thu 05 Mar 2026 14:00:42 +0000 Manifest next update: Fri 06 Mar 2026 14:00:42 +0000 Files and hashes: 1: 1-FaALXlMsFyTh9BoD33d67aHEeI.roa (hash: vrnFz1Kmq+5wOQAjBqsePEJkDcr2bnQe4L2j8uEu+qw=) 2: 1bCAUkvNoYD0zomW0iurtF9te8Q.roa (hash: Z9CJnEIWfCZlmGT2t+Vqj5cmYatgFLNVqvFiGcAhXS4=) 3: 2ZG1OxPA9lJyGthfBpRD7jHaL_Q.roa (hash: IHbK3thySVU9Np8f+PMKh3PQZI2WcY5GEAykoMyFvfA=) 4: 7RoJ9VAFHyX-FagiKQIhkGQ_c-Q.roa (hash: HkhHBOyfDP+gjtdcVY9wa2Y21nfYECLjXeRT5/sYvk0=) 5: ADRzfCr8-nkR6lRMT7eQyQ5uz2c.roa (hash: Zz8uOoQc0hbIxPblxdT0hBouk0wTSjJNAtxlR56BcEk=) 6: DvkRhCAztowgp0lKvjLU3U09Xpg.roa (hash: 1t/9feUa5ol6uYHCvs+WcaENRu5/18p6uTEUH0Zu6wU=) 7: J2ZRrTftrtV0_TjbPrZlFNP6xjY.roa (hash: igNt9ILvZZAjjU9Sm+2kCOHSTe7FUif0MtylGZarlYg=) 8: RxkQzIFpbR8h5Y7GlER0QvlZ_xo.roa (hash: QyQ3uZNSoqX601+GHgavM056pTz7tYKjCe54YFu8AJg=) 9: UzSlGTe0E4r2h3-mqwUsXA6tkW4.roa (hash: 3NTHI+VFb0fZ77Mu9ozHFottk1f/uLdKjfthkLLIXP8=) 10: YcoX0FswwtJDNeSfLbzKnpX_Ncg.roa (hash: bSifOwZU31nSn4HWPxK/P+Uoua0/V7duu8jXadJB22w=) 11: abtquT29kdz8HKSwyxp8MDLf-rM.roa (hash: 9xlsXDDDbF8yj8g2zV/NUxjfsdOSQi7MgQZSbquwXwU=) 12: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: SpMnfAy+tVCYmpKigRYVRX0kJsZYEpYbQwUQYPcJnUU=) 13: cagtjc8bDeRcNxkPpsNFtRSw4HA.roa (hash: aF1LQSDw1Bl5408F1vJ3i4//pV71kCpJdauO5OKZNZo=) 14: czj_PZMJsKJEUcCpGuFemJRiVXc.roa (hash: XIy6OGhmtMXoCJdKfW1aLecDFbIhje3cjpXyY92Ca30=) 15: dhgQMv5d9CMtFJpDdBdVdbTFSgs.roa (hash: b2TvzpSS1aAj+1tdL7elB6HMEo7lO6B9iw17wuzVv+k=) 16: dpKkGD2SgABNju9FzjICMh-bILM.roa (hash: eA7DrTniAuZ9y6HHMxZvWAMtE9cnaGhtY/mRIrHlXQg=) 17: jdeHBbAARHJbzNiwNCOXeI54EUg.roa (hash: th8vM6YWc/Ley5toEeaIWxyZTuv2x+5byblkSqcImLo=) 18: l6g5cRLwfzGSk8db5JuW24EySDI.roa (hash: vgdCsDG7+TIHFOHJjv7u8i4m1Io6EEjzSnBPC2bEVVY=) 19: tZTnC5SbNTeL6PJ7RK2Vs68Zur0.roa (hash: caiAj7bgVqN8bpYH0jeyQ8RkddSmx6SR+nS6M3Lebv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Mar 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:be:4c:fd:9e:89:3a:7b:f3:3d:bf:6f:f2:66:4f:4e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Mar 5 14:00:42 2026 GMT Not After : Mar 6 14:00:42 2026 GMT Subject: CN=d6a5f62a5fd136189936e182d6bfe1a8374ba056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5f:aa:22:bd:29:63:4b:22:5e:71:8d:df:97: 8b:a2:d2:72:27:f0:7b:b1:f7:56:1b:d4:68:4d:c5: a0:04:87:95:38:47:77:56:ac:12:08:66:1f:32:7c: d3:fb:00:d1:fe:df:20:fe:1e:d6:81:4e:8a:ee:72: 4d:e8:6b:74:fe:15:85:03:9a:bb:29:e7:35:f7:63: ae:25:ba:66:69:ca:34:d2:67:ea:f7:20:84:b5:24: f6:67:e7:72:32:b5:b8:9d:fb:58:81:39:43:1e:6e: b9:32:ca:ff:0e:95:ea:e6:13:46:b5:91:14:1a:90: 07:df:81:58:07:9a:5b:8b:90:86:2c:52:42:9c:b7: 78:dc:7d:f2:03:27:fd:48:d6:25:5f:17:12:da:66: 31:86:b1:ba:79:0c:a6:94:b5:df:48:e8:4a:d1:3d: fa:b9:29:2a:b8:ad:d6:a3:c4:0e:72:c0:88:2e:6b: b4:cd:be:8c:6c:70:71:38:ee:3b:a4:4c:1d:e3:3b: ae:d9:9d:61:b1:36:fa:5c:34:1f:c9:50:56:87:6a: 8f:f1:3f:e7:60:28:1a:0c:cb:42:e4:d4:f2:a8:24: 7a:06:60:79:dc:8b:00:98:4c:02:12:48:97:0a:37: 27:d8:ae:ee:23:d1:21:9e:dd:6a:98:13:27:94:f7: 81:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A5:F6:2A:5F:D1:36:18:99:36:E1:82:D6:BF:E1:A8:37:4B:A0:56 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:15:3c:ac:b8:99:19:fb:9b:b0:72:55:ce:f1:2c:82:5b:12: b4:f6:59:6c:c0:f7:12:c0:fe:94:e9:e7:1e:ed:ff:b4:c6:ac: bc:17:e1:48:6d:9e:41:3a:64:fb:ed:d7:13:94:50:91:f6:01: 6d:89:0d:f7:51:91:90:65:59:ee:be:32:a7:7c:72:89:ee:fd: 0c:42:37:d8:f7:76:b8:4e:e5:cb:ab:5b:6f:90:04:39:b5:1d: a2:19:28:a1:8f:29:be:53:13:42:ae:d5:1f:36:0a:16:32:f8: 6c:a9:5d:b6:eb:04:bc:66:e1:4b:bc:2e:ed:61:9b:b1:1c:87: f1:62:69:c2:a1:ca:aa:26:a2:44:58:e2:39:b5:e2:ee:c0:77: a3:cb:ca:20:04:2f:5d:80:51:93:10:24:2b:2d:03:d5:71:9c: 6c:6d:7a:b3:e3:13:b4:12:c0:83:c2:06:ac:fb:f5:54:be:11: 42:91:73:53:0a:26:0f:b3:1b:b5:63:0b:c2:46:fa:30:11:55: e9:71:a9:82:b4:1a:dd:f3:ef:a4:67:34:c9:52:3b:53:ab:7f: 6c:1c:26:25:6f:fe:13:a3:97:bc:9d:77:4b:10:e7:31:5b:5b: de:3a:46:6b:e0:ca:14:da:e5:6f:1e:73:d5:f0:c3:e5:6a:da: bc:22:b7:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZy+TP2eiTp78z2/b/JmT05xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjYwMzA1MTQwMDQyWhcNMjYwMzA2MTQwMDQyWjAzMTEwLwYDVQQD EyhkNmE1ZjYyYTVmZDEzNjE4OTkzNmUxODJkNmJmZTFhODM3NGJhMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l+qIr0pY0siXnGN35eLotJyJ/B7 sfdWG9RoTcWgBIeVOEd3VqwSCGYfMnzT+wDR/t8g/h7WgU6K7nJN6Gt0/hWFA5q7 Kec192OuJbpmaco00mfq9yCEtST2Z+dyMrW4nftYgTlDHm65Msr/DpXq5hNGtZEU GpAH34FYB5pbi5CGLFJCnLd43H3yAyf9SNYlXxcS2mYxhrG6eQymlLXfSOhK0T36 uSkquK3Wo8QOcsCILmu0zb6MbHBxOO47pEwd4zuu2Z1hsTb6XDQfyVBWh2qP8T/n YCgaDMtC5NTyqCR6BmB53IsAmEwCEkiXCjcn2K7uI9Ehnt1qmBMnlPeBlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNal9ipf0TYYmTbhgta/4ag3S6BWMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxU8rLiZ GfubsHJVzvEsglsStPZZbMD3EsD+lOnnHu3/tMasvBfhSG2eQTpk++3XE5RQkfYB bYkN91GRkGVZ7r4yp3xyie79DEI32Pd2uE7ly6tbb5AEObUdohkooY8pvlMTQq7V HzYKFjL4bKldtusEvGbhS7wu7WGbsRyH8WJpwqHKqiaiRFjiObXi7sB3o8vKIAQv XYBRkxAkKy0D1XGcbG16s+MTtBLAg8IGrPv1VL4RQpFzUwomD7MbtWMLwkb6MBFV 6XGpgrQa3fPvpGc0yVI7U6t/bBwmJW/+E6OXvJ13SxDnMVtb3jpGa+DKFNrlbx5z 1fDD5WravCK3wg== -----END CERTIFICATE-----Generated at Thu Mar 5 16:51:09 2026 by rpki-client