$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: 2IdLl/E9+qwq2iKtqM76TliswnaL89tTZMqQrK4cYE4= Subject key identifier: DC:D7:04:C8:BB:F3:69:C2:69:CE:9F:E6:0A:DF:5E:EB:87:E6:89:CB Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019D31BEEB4B64EC12D30D89E3FAAEC254C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 1891 Signing time: Sat 28 Mar 2026 00:01:28 +0000 Manifest this update: Sat 28 Mar 2026 00:01:28 +0000 Manifest next update: Sun 29 Mar 2026 00:01:28 +0000 Files and hashes: 1: 0QB4hGdmgQ23kjW-TUuSRzgPgow.roa (hash: 6Se7JsiswvT1Isj5Z4FQYmLgX+k5jQ8Jw0+TE5Kr+c4=) 2: 3MEm9k86Krnq6wM36cluZIFqGPg.roa (hash: WOCoI9HcLnxBGRGXT70xKNe6H/yvXh7uvM6Oo5uJP3Q=) 3: 3yNd9VkULSQcG9kJM76wCWWOkVk.roa (hash: UTrG8pi1T1NYTtzshkel8Sz3UcEv2ZYniPPBW76pobo=) 4: 58Z_30RmGqTf6FCU3PrZd5bogs8.roa (hash: TXG7g3IJzMwe+V0RYfLs59E5lWWsjUfuIPwuhzRGQhQ=) 5: 5Njr2mqPF2SIUOGWRVBmVFry3-w.roa (hash: nHGTx1wNDs5K/IAjCY5ZwTLkqSDSDFcvxCbH3GdIFEY=) 6: 7RtMm2j-PlOCYgaaTNEF5okOR88.roa (hash: o9nbppRhQLGi1iXoR8bUr5miDVbhGF0IKswvoLQNlQM=) 7: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: 6gW0Vs/JS2pjU4OXyHE/ohvqwiojICtVTksf1pgwJbQ=) 8: EJLUutCnpxs2buS5GTPPkrccxLQ.roa (hash: Bg7r4OK7LAMvfuKSI5cI+lyL8O8THM0mepcAvupe9MY=) 9: R45A0fnYR44iqIervecEpC1ordo.roa (hash: aZsd9rhCHtUKSRJxzYhontkb9M1Vrxj8yjglwRZI5PQ=) 10: RToCJQ8Zab4JalWn6Lr2OlTkjew.roa (hash: a7mEGZfpxYM4XL6HEWYcs75/o/LzQJt7jAWEACQc+js=) 11: bsUz9cF8qY7V0b9wRwRaSnvK5Yg.roa (hash: 3c8/iFfmXp38D8OaIkv0JpI0gwPXq0roTqUMx6p8HGA=) 12: hMC8ouPga06DMuQ-1nVP3iL6_yU.roa (hash: bNzck35dxk6Gqi9cN9AAQtvE47sk8feFX04wDlazWdw=) 13: i-N27op-z7hkiqBEGNqq-kz27FM.roa (hash: rCF63L7W07eBpUJCTAH9Z0zj4zxOfcnsBXrV71Po2W0=) 14: lPSRXM3S12fXdtxx39QF8F0M4c0.roa (hash: /A9PCEl9b+e1T3TwSmFYBvVgodse+T5jSTXaVD1y3ew=) 15: mCIC92cl3T6GhQbTB55U2XIIpv8.roa (hash: BhbC6w4oNSw9OhA9aYn5uXWLSKczbBtQQF01ljl/Mwc=) 16: nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa (hash: jpd/2EiqLqE6nX/flK1O6v0FBcAaum0uMoBRy0MGwis=) 17: u0kOnQHraAVT7o1gAfkttQSk4Bk.roa (hash: dgXDfIBoMWGFiXWqkB6XiT3zkjqB22mMq42VAOQ4S2Y=) 18: ump-T-Zk5smBJGROWuvq0wKLYtU.roa (hash: d7Jxavk2v4nvC9HxmOaWBHBF05sdZuO02u6a4JXxdtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:31:be:eb:4b:64:ec:12:d3:0d:89:e3:fa:ae:c2:54:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Mar 28 00:01:28 2026 GMT Not After : Mar 29 00:01:28 2026 GMT Subject: CN=dcd704c8bbf369c269ce9fe60adf5eeb87e689cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:37:6a:33:0d:b1:7a:23:a3:b8:6d:b2:a8:78: 87:7c:64:e9:49:d3:e4:23:fa:61:d7:1a:e3:ba:4d: ae:e7:e7:c1:fa:47:0b:be:7d:cb:ef:48:59:7c:a5: 15:c7:b0:ad:af:57:f8:f7:66:35:08:b3:2e:1f:ea: 68:9d:58:fd:78:b6:49:f8:c4:04:7f:29:26:d6:5d: 43:75:ba:a7:16:d5:f8:b6:2d:60:ca:97:30:75:dd: 30:0b:90:c1:b7:04:b2:89:f4:88:0a:59:15:b3:39: 2b:6b:55:61:55:7b:eb:b6:36:c1:26:f8:cd:9d:d8: 65:bc:34:21:a8:75:6c:90:50:b7:b5:36:86:5a:85: 0b:e8:37:d4:cc:e7:39:ef:dc:fc:67:17:d3:d0:87: 1c:75:9a:41:7c:3a:ea:3d:95:0d:a2:0f:4e:e9:bb: 1a:55:41:df:81:a5:19:6d:e4:67:21:a9:79:f4:b4: 0b:17:28:e2:0d:4d:72:92:a7:f9:ed:75:01:e2:aa: 87:d4:6f:65:fc:f9:e9:f5:6a:55:12:c2:11:24:7a: 9e:59:80:87:10:06:c4:a2:54:a2:09:60:50:9b:a9: 45:b2:db:1d:2f:03:de:db:54:25:84:b7:0f:fd:d5: 08:8e:06:53:7a:84:55:c0:2e:08:00:02:95:da:83: 07:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D7:04:C8:BB:F3:69:C2:69:CE:9F:E6:0A:DF:5E:EB:87:E6:89:CB X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:58:06:e6:c1:37:63:2a:ee:d0:19:f3:a1:3a:17:21:68:d3: 3d:5c:18:9e:1a:3c:9a:61:52:2a:5b:90:36:a8:46:8c:08:96: 66:c7:74:44:5c:c9:ce:6a:ce:f3:eb:bc:21:e4:04:ad:df:d8: 4e:48:2b:df:30:ec:39:b4:2f:e5:d8:ac:cc:e2:5a:ae:6a:9d: b4:29:cd:a4:62:d6:ed:74:aa:6d:91:63:18:96:fb:e2:3b:80: e3:1b:56:d6:ed:19:12:88:6c:0c:25:8a:42:0d:42:65:2c:bb: ce:d9:10:97:66:e0:d4:ec:ff:71:0e:9a:82:c4:a4:6d:3e:fd: 16:1c:e3:f6:8b:d7:09:f1:27:29:87:d2:9d:a7:1e:d9:85:ef: 12:b3:20:bc:fe:1c:7d:9b:38:65:4d:f4:cf:d4:3d:66:4c:52: 84:40:1b:42:02:84:be:6f:aa:bd:d9:83:29:56:e7:0b:aa:e7: 53:96:01:c0:0e:75:da:ca:6a:d5:68:d0:c7:78:b9:36:87:14: d5:5b:56:2f:d3:e6:fd:b5:4c:12:ea:75:21:7f:2f:7c:77:31: ac:f5:bd:42:e1:e1:ca:83:51:92:39:98:d7:04:49:03:37:92: 03:2c:c7:ac:78:82:46:09:62:3b:ec:e3:16:d3:c0:61:8c:fd: 64:a9:6c:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0xvutLZOwS0w2J4/quwlTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjYwMzI4MDAwMTI4WhcNMjYwMzI5MDAwMTI4WjAzMTEwLwYDVQQD EyhkY2Q3MDRjOGJiZjM2OWMyNjljZTlmZTYwYWRmNWVlYjg3ZTY4OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjdqMw2xeiOjuG2yqHiHfGTpSdPk I/ph1xrjuk2u5+fB+kcLvn3L70hZfKUVx7Ctr1f492Y1CLMuH+ponVj9eLZJ+MQE fykm1l1DdbqnFtX4ti1gypcwdd0wC5DBtwSyifSIClkVszkra1VhVXvrtjbBJvjN ndhlvDQhqHVskFC3tTaGWoUL6DfUzOc579z8ZxfT0IccdZpBfDrqPZUNog9O6bsa VUHfgaUZbeRnIal59LQLFyjiDU1ykqf57XUB4qqH1G9l/Pnp9WpVEsIRJHqeWYCH EAbEolSiCWBQm6lFstsdLwPe21QlhLcP/dUIjgZTeoRVwC4IAAKV2oMH8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzXBMi782nCac6f5grfXuuH5onLMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVgG5sE3 Yyru0BnzoToXIWjTPVwYnho8mmFSKluQNqhGjAiWZsd0RFzJzmrO8+u8IeQErd/Y Tkgr3zDsObQv5diszOJarmqdtCnNpGLW7XSqbZFjGJb74juA4xtW1u0ZEohsDCWK Qg1CZSy7ztkQl2bg1Oz/cQ6agsSkbT79Fhzj9ovXCfEnKYfSnace2YXvErMgvP4c fZs4ZU30z9Q9ZkxShEAbQgKEvm+qvdmDKVbnC6rnU5YBwA512spq1WjQx3i5NocU 1VtWL9Pm/bVMEup1IX8vfHcxrPW9QuHhyoNRkjmY1wRJAzeSAyzHrHiCRgliO+zj FtPAYYz9ZKlsxA== -----END CERTIFICATE-----Generated at Sat Mar 28 06:18:11 2026 by rpki-client