$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: S9Li5Pi9Mb2LcHZhX6DnY5KWGjFy2dxQAWb9Cr5JmKc= Subject key identifier: 9E:82:E6:09:1F:38:F6:D5:FB:6D:6F:B8:0C:8D:4F:51:F1:8D:6B:39 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019DCF071D3E799FEB5A91A56A686507C959 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 19C6 Signing time: Mon 27 Apr 2026 13:00:43 +0000 Manifest this update: Mon 27 Apr 2026 13:00:43 +0000 Manifest next update: Tue 28 Apr 2026 13:00:43 +0000 Files and hashes: 1: 4YYB6ffpsT4YH12UCSPN1gTEg8U.roa (hash: eczMMGPJcYoQqxyIakekiaVzhDhTpqkNdbnWoIF1bCM=) 2: 7BOKK6Tl9KRbFdrQtKoSEGrM2ns.roa (hash: 0WZmcRa658Us5LFqpepkQ3ZD0Z3AX8LDSbJ/uzthFek=) 3: BIHuSmhdOpjtcnW87Zk9AiIeUMQ.roa (hash: aXn6G6JWMLGKSkwGd9D9rKmqQqkEcgFv2BEiiTxQpl0=) 4: J1bOpzfz9N73oSFlFV1z4QDm-64.roa (hash: h6M5XtZ8RlW37k6FxTv2spT98MJgWMzY1tvdNHQE2Vg=) 5: Jv3rSUwyoFKj_-Gz986YwvPBaFM.roa (hash: 6U4sJQ5VadRvdcEbaCjDPXAYdE+ydK/NYVHISildXms=) 6: KVv7_M50V2iyBxYsG_dQpH_S9tQ.roa (hash: RkhZYcx1K+qPGt8mNSXPpba3hYgNZEfnfscSk3pS5x0=) 7: KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa (hash: 7kkTNpurW7ovwPOEHHf7JVghG0bKfPeVVb6gJUM+74E=) 8: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=) 9: NRslGXwzqXLsPOGISDrIoXtcmqY.roa (hash: DEaiL5GBQA1ssRMigPA8Fc7/Qa4ewlIX8LGF5gSXnqI=) 10: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=) 11: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=) 12: _NYoKUb2N9O5Kuha08Z6TeOlAr8.roa (hash: hBPKH/sFoPLiqzPdXoKvs5WcXNHmeMzZr7pF/u9rRGI=) 13: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: EdlvsiCnjZTWr7x3SUSVA8RwdRL43jz+/etOwJW+oNg=) 14: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=) 15: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=) 16: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=) 17: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=) 18: wHR1rjW-GyeAykDPRv2evn14daQ.roa (hash: 8uSH9PuLMUirtdt/ZPVP4wYc8PpyHx7s2sPU4VXGS4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cf:07:1d:3e:79:9f:eb:5a:91:a5:6a:68:65:07:c9:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Apr 27 13:00:43 2026 GMT Not After : Apr 28 13:00:43 2026 GMT Subject: CN=9e82e6091f38f6d5fb6d6fb80c8d4f51f18d6b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:47:d0:3a:a7:8b:45:9c:49:13:5c:9a:88: b5:67:e6:bd:b7:14:3f:28:95:16:a6:ee:9c:ab:81: 42:d8:f5:fe:39:95:4d:5d:9d:63:1e:c8:3f:2f:e6: c4:4f:e2:31:62:c1:ca:28:2e:de:cc:1b:7c:52:0a: 96:d8:37:d2:4a:23:2c:fe:0c:d5:7a:2a:84:c6:6e: 7f:a3:10:4a:9a:a6:3e:d0:0e:35:5e:c2:b6:26:09: b0:1f:69:45:30:6d:68:c4:db:34:08:87:19:3f:a9: a2:e0:74:9a:6d:21:a1:6c:fb:fe:9e:2d:84:2c:da: 93:2a:d0:38:bc:a7:52:a6:06:49:e1:63:3e:a9:77: 35:08:e5:19:3d:db:53:ad:86:19:58:61:58:7c:58: c8:c1:7e:3a:f9:13:52:19:0f:39:93:64:d2:6a:4c: 08:ac:23:d4:1b:a2:a5:f6:52:e9:64:e7:1a:55:e7: 64:d7:76:7d:2b:d1:ca:20:22:87:9e:f3:be:af:6c: 92:e4:a4:ea:54:0e:f8:b4:a4:02:b9:34:03:b8:9b: 10:03:b1:ce:07:bd:b8:fa:fb:54:2c:b3:81:48:f3: 00:41:24:2c:db:03:ef:aa:12:3e:7a:77:31:47:35: 8b:62:99:d9:bd:62:44:e6:0f:8b:99:b1:fd:5b:24: 40:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:82:E6:09:1F:38:F6:D5:FB:6D:6F:B8:0C:8D:4F:51:F1:8D:6B:39 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:16:80:d7:f8:35:f2:0e:ca:9d:e0:46:88:92:2a:8f:0c:47: c1:12:92:58:b0:4e:29:ab:f9:36:55:0b:07:3b:93:86:6a:7c: 04:a2:f0:5d:fe:c3:54:f4:db:cb:ee:bd:cc:fc:7e:85:0a:c7: db:7b:c1:95:5b:77:8e:a9:e3:19:75:9a:51:85:ab:ec:10:34: 44:c5:31:a3:57:31:e1:ba:4d:0a:c3:b6:dd:69:d4:b2:a3:fa: 00:19:cf:61:7b:15:d9:15:76:75:ad:93:be:61:23:f2:97:c2: a7:ec:0a:8b:cc:3d:56:ab:7f:03:73:bf:30:01:97:03:48:35: 2b:35:04:75:ef:a4:53:76:8e:79:09:ba:78:a0:77:fa:bb:ef: e3:68:72:5d:7d:c6:bf:6e:99:5d:e9:df:18:7f:0c:4d:06:15: ec:62:42:b4:c4:9c:2f:02:d5:b5:8f:95:34:14:c5:9a:f9:ae: 2c:b4:9e:98:94:88:4e:bd:fe:d2:86:8f:af:91:53:4d:98:fe: b6:5c:ef:a7:55:28:6d:69:98:7d:75:34:f6:12:42:50:a1:74: 26:0c:8d:b5:cc:26:8a:90:ee:d7:cb:f3:72:b1:60:1c:5f:d6: f2:5e:bf:b8:79:81:81:10:be:91:09:e7:f8:fe:64:fe:55:b2: 0a:e3:09:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3PBx0+eZ/rWpGlamhlB8lZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwNDI3MTMwMDQzWhcNMjYwNDI4MTMwMDQzWjAzMTEwLwYDVQQD Eyg5ZTgyZTYwOTFmMzhmNmQ1ZmI2ZDZmYjgwYzhkNGY1MWYxOGQ2YjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+pH0Dqni0WcSRNcmoi1Z+a9txQ/ KJUWpu6cq4FC2PX+OZVNXZ1jHsg/L+bET+IxYsHKKC7ezBt8UgqW2DfSSiMs/gzV eiqExm5/oxBKmqY+0A41XsK2JgmwH2lFMG1oxNs0CIcZP6mi4HSabSGhbPv+ni2E LNqTKtA4vKdSpgZJ4WM+qXc1COUZPdtTrYYZWGFYfFjIwX46+RNSGQ85k2TSakwI rCPUG6Kl9lLpZOcaVedk13Z9K9HKICKHnvO+r2yS5KTqVA74tKQCuTQDuJsQA7HO B724+vtULLOBSPMAQSQs2wPvqhI+encxRzWLYpnZvWJE5g+LmbH9WyRARQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6C5gkfOPbV+21vuAyNT1HxjWs5MB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxaA1/g1 8g7KneBGiJIqjwxHwRKSWLBOKav5NlULBzuThmp8BKLwXf7DVPTby+69zPx+hQrH 23vBlVt3jqnjGXWaUYWr7BA0RMUxo1cx4bpNCsO23WnUsqP6ABnPYXsV2RV2da2T vmEj8pfCp+wKi8w9Vqt/A3O/MAGXA0g1KzUEde+kU3aOeQm6eKB3+rvv42hyXX3G v26ZXenfGH8MTQYV7GJCtMScLwLVtY+VNBTFmvmuLLSemJSITr3+0oaPr5FTTZj+ tlzvp1UobWmYfXU09hJCUKF0JgyNtcwmipDu18vzcrFgHF/W8l6/uHmBgRC+kQnn +P5k/lWyCuMJhA== -----END CERTIFICATE-----Generated at Mon Apr 27 15:47:40 2026 by rpki-client