$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: XEL1ub3QK4XDDtYS/Z5/nTfh0PyTSrLjI3o4jTgIEE8= Subject key identifier: 08:11:24:6B:B2:BF:50:5C:29:65:6B:CA:37:60:C2:FE:2D:55:43:F1 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 01A175F02101E021B856D8B469A213B4B564 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 1BCB Signing time: Mon 26 Oct 2026 02:00:33 +0000 Manifest this update: Mon 26 Oct 2026 02:00:33 +0000 Manifest next update: Tue 27 Oct 2026 02:00:33 +0000 Files and hashes: 1: 0r3kkbCIc2trczoA0tV0PpuHTqk.roa (hash: hYQwD9eKL8aadDbtj9scQfTVqsN0ThTdN4voLWbulpc=) 2: 1-HMehk4Z5593y_16dRGWIQyy-Ng.roa (hash: EurbSdpdbDWY2LP7kxCHMWSabQW2ttzuwZ+l6NbR48o=) 3: 1-UoxoSMEC7fhgBoOjZVdac590gk.roa (hash: 5bAv8KKm/MXSzBl8Q7+F+Ol4WLDtdAozCIXNu5GOvJM=) 4: 1-X4bKI6-aRWPTWyha2-mcJDV5oc.roa (hash: 6cLgqkkczMgwqjoX9O8ZUYIiYWMo+g0mz7AzYqMvkpM=) 5: 1_KRUxZDt1nOEzN5je4zDlX6DKk.roa (hash: ZiFYtKQxpjSVcy7fwBfCh1IAGdVcF01miZ/J0ijhbvg=) 6: CDjWTyoS71DXASo2Nj7eHKZDgBU.roa (hash: 0MjLF8Ccc2qdY2KgDxvd+hMdzbz7ozx3zfAkryxvvg0=) 7: EPBqQkdx7GD5hYF24Z7UGR81Qo8.roa (hash: d9xe8thzz0W/d4MTXJUjxHzBqyaFRNrSeI5OVZiP6OY=) 8: J1bOpzfz9N73oSFlFV1z4QDm-64.roa (hash: h6M5XtZ8RlW37k6FxTv2spT98MJgWMzY1tvdNHQE2Vg=) 9: KVv7_M50V2iyBxYsG_dQpH_S9tQ.roa (hash: RkhZYcx1K+qPGt8mNSXPpba3hYgNZEfnfscSk3pS5x0=) 10: KXN5i1ksyLJ3gWuszNVJ4lkPFkA.roa (hash: yrzgi/xgwBaka39UCK/DNXA3vvLMwfJcozcKOOGIcnk=) 11: KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa (hash: 7kkTNpurW7ovwPOEHHf7JVghG0bKfPeVVb6gJUM+74E=) 12: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=) 13: NRslGXwzqXLsPOGISDrIoXtcmqY.roa (hash: DEaiL5GBQA1ssRMigPA8Fc7/Qa4ewlIX8LGF5gSXnqI=) 14: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=) 15: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=) 16: _yYeoQViTIjqsYE0h5QCAQRGd04.roa (hash: ZBg3y/n8GjKrQaC1IigA7ZREsnmFDIrXAnas9eg3WXo=) 17: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: F4OPdW9NFS6Evpsbho8YnB4YUNFZIMJ3uWYRzxPH8O4=) 18: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=) 19: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=) 20: rqm1V5tbsI8BVPLwQqMpU9HsTvM.roa (hash: kK5Lre4ke8T7RVSthZIaXfJkjjEm07UzsHJnItRj210=) 21: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=) 22: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=) 23: x2-UOiQ1JkGjRhg5Y3BKO6HEghI.roa (hash: Sqa+wceVkaOOyPhxXULzb2svO17UJ0RHxLUOfuxIaDY=) 24: xm5rLebeuc7oaSjRe_mW9yrd7D8.roa (hash: hHiFRvAT7BEhkvXlVt37YLHfgymkAvzsvrr1jEmcw4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 23:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:75:f0:21:01:e0:21:b8:56:d8:b4:69:a2:13:b4:b5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Oct 26 02:00:33 2026 GMT Not After : Oct 27 02:00:33 2026 GMT Subject: CN=0811246bb2bf505c29656bca3760c2fe2d5543f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:e0:fb:a6:fa:80:e4:4b:04:cf:3d:72:cb: 7d:51:b4:54:6e:ee:a9:47:2c:00:81:10:19:b4:ca: 80:e0:7a:db:ff:4c:4a:98:b9:16:f1:0e:37:a2:57: c7:79:ec:00:5c:d6:a2:94:7f:88:46:e6:3f:a7:6c: e6:1a:dc:6a:c2:0b:0e:b9:dd:40:cc:01:e6:20:46: 71:73:72:79:d4:57:cc:a1:79:89:7d:4d:a1:9d:c2: e2:1a:d0:62:a0:50:c6:60:f0:4f:ca:08:f3:e3:30: e4:18:d8:f7:fa:f2:fb:ba:17:7a:15:70:2b:04:90: 7a:ad:52:01:74:6c:6b:e8:d6:b8:4b:6f:e1:25:3b: 96:55:67:73:95:e7:06:af:d8:f2:ee:8d:ce:04:74: e6:03:84:64:e7:3a:69:ca:1d:8d:c0:9e:b5:ca:1c: 7d:64:cd:72:02:7f:16:d0:d8:1b:61:7b:87:04:50: 87:d2:79:0c:2b:68:23:03:4d:74:4d:d0:9d:8f:39: b9:b3:f6:a2:6b:28:87:c5:59:e0:4b:98:95:d4:65: 80:ed:75:9f:71:b2:a4:62:01:1c:44:1c:60:aa:bf: 4a:bd:0b:c8:bb:06:41:ba:46:84:af:c6:f5:56:da: 44:7b:83:57:2b:72:ea:98:d7:d7:90:84:14:cb:af: 6e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:11:24:6B:B2:BF:50:5C:29:65:6B:CA:37:60:C2:FE:2D:55:43:F1 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:78:01:c2:cb:f7:36:42:18:86:aa:03:a4:ab:7a:bb:1d:e7: b5:ca:db:52:6e:75:bd:e9:6e:b8:5a:ad:ef:27:b2:05:df:88: 1c:83:18:c2:87:b3:3b:d9:be:5e:00:69:6e:92:4f:61:21:d8: 1b:0f:8f:c7:0a:28:cb:51:52:31:9b:78:57:61:9b:5d:05:d6: 6e:8c:09:46:c2:06:e3:3d:c3:9c:d8:31:6f:7c:d5:61:87:2b: ad:c5:96:c1:67:f7:76:ca:8d:66:95:fb:7e:55:73:33:cb:98: ca:d6:5b:d4:be:35:5a:6a:f4:ad:9b:3d:2f:93:f1:d4:9e:98: fe:3a:eb:e2:dc:00:65:84:f6:8c:35:e2:c3:4c:cb:2d:83:5a: 79:ff:ef:d3:6f:67:9d:77:79:75:c3:d0:66:66:94:b7:42:86: 54:f9:c3:a9:f1:e3:f7:2e:0b:87:45:95:ea:f9:22:ba:41:64: 58:27:ff:d9:ae:08:1a:9c:65:ec:d7:ad:7c:ba:a7:45:c4:c1: 44:30:dc:10:c4:9d:15:a8:8e:e1:17:48:06:cc:3f:35:39:5e: 20:c1:47:48:be:97:0a:97:9f:0d:e5:6e:b6:4c:64:cb:e1:2f: 73:7c:99:be:bd:5a:96:69:65:3a:22:b0:fa:35:fc:89:99:18: 69:e3:e9:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF18CEB4CG4Vti0aaITtLVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYxMDI2MDIwMDMzWhcNMjYxMDI3MDIwMDMzWjAzMTEwLwYDVQQD EygwODExMjQ2YmIyYmY1MDVjMjk2NTZiY2EzNzYwYzJmZTJkNTU0M2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzHg+6b6gORLBM89cst9UbRUbu6p RywAgRAZtMqA4Hrb/0xKmLkW8Q43olfHeewAXNailH+IRuY/p2zmGtxqwgsOud1A zAHmIEZxc3J51FfMoXmJfU2hncLiGtBioFDGYPBPygjz4zDkGNj3+vL7uhd6FXAr BJB6rVIBdGxr6Na4S2/hJTuWVWdzlecGr9jy7o3OBHTmA4Rk5zppyh2NwJ61yhx9 ZM1yAn8W0NgbYXuHBFCH0nkMK2gjA010TdCdjzm5s/aiayiHxVngS5iV1GWA7XWf cbKkYgEcRBxgqr9KvQvIuwZBukaEr8b1VtpEe4NXK3LqmNfXkIQUy69umQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgRJGuyv1BcKWVryjdgwv4tVUPxMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfngBwsv3 NkIYhqoDpKt6ux3ntcrbUm51veluuFqt7yeyBd+IHIMYwoezO9m+XgBpbpJPYSHY Gw+Pxwooy1FSMZt4V2GbXQXWbowJRsIG4z3DnNgxb3zVYYcrrcWWwWf3dsqNZpX7 flVzM8uYytZb1L41Wmr0rZs9L5Px1J6Y/jrr4twAZYT2jDXiw0zLLYNaef/v029n nXd5dcPQZmaUt0KGVPnDqfHj9y4Lh0WV6vkiukFkWCf/2a4IGpxl7NetfLqnRcTB RDDcEMSdFaiO4RdIBsw/NTleIMFHSL6XCpefDeVutkxky+Evc3yZvr1almllOiKw +jX8iZkYaePpRQ== -----END CERTIFICATE-----Generated at Mon Oct 26 08:27:35 2026 by rpki-client