$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json) Hash identifier: Tnhr4vgXydoZDKsn1ZDvt+QUc2S1djvxzxBVpfCHxUQ= Subject key identifier: 3F:05:75:24:4F:03:8E:4A:0F:9B:35:A4:4A:CA:28:75:7A:CA:44:A3 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019DAF7C0E491804FB9C58CA82ED826BEC73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft Manifest number: 1652 Signing time: Tue 21 Apr 2026 10:00:35 +0000 Manifest this update: Tue 21 Apr 2026 10:00:35 +0000 Manifest next update: Wed 22 Apr 2026 10:00:35 +0000 Files and hashes: 1: 1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa (hash: Ddu3dw5E5cMsctwBaCnCHBJl5vVM/XMeaSx8/U1wJfs=) 2: 1B2E5LozjiOiEEIVllZwGOlUoUc.roa (hash: DtZRGHhFLQ8RyYzUJ9AqMoeV1gGyFtUW3kQz1Kw7pNc=) 3: 1h3O8l_TW_Pt04UkNDvHQykjzBo.roa (hash: YPYjSO8A3RKdjeZ4kpCNyf7+uhxWq8m+nhKrC4aIRXo=) 4: 40ahziHyLtQx_pyEk0bHk67E8fw.roa (hash: rWZqu675dNYqvBqcBL0jVKw3VJWQVGQYGPhVN2Iiit0=) 5: 4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa (hash: X8RR+0PaypDLpsEOWttv6W/dtoMpGTgNbkp3JkclUF8=) 6: IQvdujgainvo4C34zkOLdjKY5vg.roa (hash: w17Fv3nrN5mdxpMpocz8vqnCEddTCZeK1yywJC7rkAQ=) 7: PhXZiIOr7piIHYlDtgFb-SE3XFc.roa (hash: kQ6KIuUu9lWGspD3sgkP3G1eQcAyvbDdP58M3rp8Fes=) 8: REtMs1U8A3vNupGfA8YHkLMBg20.roa (hash: 8cbxOjQg2znipTCYsgxq7I7rjGz0FDOmTb0bqODGJZQ=) 9: XIVBNcTJBnkT90tLXiCswsUi9O0.roa (hash: PPElf6bVEODRo+3cgHN5ArR3uE+ZQHhLBOE/ConPN30=) 10: Y8pdrR1f_MyWOe-YhGAK_aoFL8Q.roa (hash: 13k76cemt6Sf92ZNBW6R6RxtUCROzQCLop1b+iGGSUQ=) 11: Ys5uNWXcabyigl96ree5Jzjc4xQ.roa (hash: f+JccggJ2odV8dttKzqJrNMhrUYzKd+wSv2brX2GdxA=) 12: bLty7x4_bp6bJO68Cul62fRMxlU.roa (hash: kYiMfI9JDPevUGPZ1zVTj//0LProZnsEPqeHJe8gbiQ=) 13: c1of_GGOGBpj8gjfCUC0AsJuKNg.roa (hash: f3erzVhNqOm3b2k4MQozf9a0YdwKNFSjx0Hb4KbZctc=) 14: d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa (hash: ybFlHwrk0/bn9A8GTyAQQ72jsrneQsxgrXLeXX2L7mc=) 15: dCqQVizHmCbsgLcX6csX7Rciuic.roa (hash: sDGzeBpaeg3YAhNrnUWPuM/ODk832tRUJ5O2TTkUfds=) 16: hzNDyInh_bUBg7Uejg55aTvL-3Q.roa (hash: FJw1sBNqJdJQhACILp+itphyL4fweg2OQEEsFKom/I8=) 17: jFvJZaHKv8QwoukYCAhIunEqd4s.roa (hash: V1rH1de0PVsmx11Wg5/gIdXxuPL9QGcnJzJNtJ/w8PU=) 18: p8xrYoE8jgCdAonYCfT-ApjsEIQ.roa (hash: f7jnATXq/oP3S34j8++EJHwq/uX1I51J0Ibdj4DXw3g=) 19: rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa (hash: iB8AOxEYfvNU1/L6TivJBk9QHQFdeq4cJO6UXX1sPUM=) 20: s4XhO3zd68odlYNKfOcr66qKpYo.roa (hash: lGF4r2lhB2RKS4kFkLqdXXo14Ag7CA/0NH/w4b5IOWU=) 21: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: 0OPyMcHoFAZJh5yjeR85Naeine1rDoU83fbS2NTu7nI=) 22: yBju9251opQb0e4SsoLoTlY7kVM.roa (hash: eQSRE9eUeTSXYWB/iKLZnX5m98d5OnEnkEhe2IV+YaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 07:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:af:7c:0e:49:18:04:fb:9c:58:ca:82:ed:82:6b:ec:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Apr 21 10:00:35 2026 GMT Not After : Apr 22 10:00:35 2026 GMT Subject: CN=3f0575244f038e4a0f9b35a44aca28757aca44a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:a3:41:15:72:a2:42:6b:a9:02:05:11:b5: 59:db:1a:4a:56:90:60:ea:dd:4f:ea:80:aa:57:1a: 31:cf:b8:e3:e4:b4:6d:34:c1:31:1d:22:9f:f9:40: 76:50:dc:d0:1b:69:4c:c5:c0:a9:2e:0c:e5:10:6e: 2e:99:e8:17:68:0e:e9:70:62:8e:4a:3b:ec:e6:65: 96:aa:c7:61:e0:d1:cc:1d:39:86:cd:d9:c2:fb:7d: 67:43:e9:a3:13:47:0a:d4:e3:10:9c:c6:3c:c9:f7: 4b:99:cb:09:c4:f5:9f:1a:7c:e4:b9:4e:63:fa:59: 63:a9:bb:3c:6e:d6:a7:68:a9:76:96:2f:1c:88:ea: 5e:f6:f8:a2:94:de:0b:e7:9b:e2:84:3d:c2:72:df: 49:72:f5:9b:80:ff:74:54:99:03:f1:a1:4d:b1:f3: 30:a9:cf:c1:0d:c4:c2:68:78:66:77:77:02:5d:67: 76:e3:5c:18:d7:c8:be:c0:7b:e0:56:8b:27:13:ca: e2:91:7c:12:7b:5d:54:af:cc:59:04:e8:4c:e6:fc: 52:2e:ed:97:db:f5:fa:c4:df:f2:aa:2b:6c:f0:d2: 69:aa:a5:13:70:fc:36:95:33:b0:1b:da:f3:5e:2e: 72:9d:23:2e:32:43:aa:6d:06:91:8d:2a:e6:45:6c: 4a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:05:75:24:4F:03:8E:4A:0F:9B:35:A4:4A:CA:28:75:7A:CA:44:A3 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ba:ed:11:6f:a1:94:8c:8a:5c:28:fd:f1:e7:38:7d:af:00: 75:a5:a0:6a:f2:d3:15:13:5c:fd:17:11:aa:38:24:3c:c0:d7: 36:cb:4e:ad:76:01:5c:b4:10:03:ee:bd:a3:f8:31:96:03:9c: 75:a9:75:d7:9e:47:9d:09:81:46:15:1e:40:91:78:57:02:7b: 06:b0:bb:96:42:50:20:2a:ba:cd:a9:b5:00:60:33:78:b1:bf: bc:52:b1:e0:27:47:a9:34:c6:19:a3:fa:70:aa:b3:7c:78:48: c7:56:a3:c0:4a:76:f7:93:45:75:10:22:6d:ef:4e:0a:d3:a2: 8b:e2:25:03:6a:a2:cc:e3:b7:c5:b0:3c:78:ff:f2:42:c5:fc: b6:0f:14:cb:c5:ed:5b:fe:56:5f:fc:73:2b:5e:84:1f:26:88: 98:35:22:f3:d9:d0:a7:54:8f:d8:da:19:c9:76:43:d2:0f:79: 88:59:a9:e1:09:0e:d0:82:d8:16:47:ba:bf:a5:bb:ad:42:32: f9:da:33:42:3e:5a:26:c8:cf:bf:5d:78:fb:6d:90:9e:b7:99: 53:38:29:78:c7:04:33:83:72:97:f9:c6:4d:96:4a:59:7a:05: db:4e:4f:9a:6b:9b:81:a7:a7:77:9e:cd:17:af:42:46:6b:15: a7:24:13:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2vfA5JGAT7nFjKgu2Ca+xzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwNDIxMTAwMDM1WhcNMjYwNDIyMTAwMDM1WjAzMTEwLwYDVQQD EygzZjA1NzUyNDRmMDM4ZTRhMGY5YjM1YTQ0YWNhMjg3NTdhY2E0NGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskWjQRVyokJrqQIFEbVZ2xpKVpBg 6t1P6oCqVxoxz7jj5LRtNMExHSKf+UB2UNzQG2lMxcCpLgzlEG4umegXaA7pcGKO Sjvs5mWWqsdh4NHMHTmGzdnC+31nQ+mjE0cK1OMQnMY8yfdLmcsJxPWfGnzkuU5j +lljqbs8btanaKl2li8ciOpe9viilN4L55vihD3Cct9JcvWbgP90VJkD8aFNsfMw qc/BDcTCaHhmd3cCXWd241wY18i+wHvgVosnE8rikXwSe11Ur8xZBOhM5vxSLu2X 2/X6xN/yqits8NJpqqUTcPw2lTOwG9rzXi5ynSMuMkOqbQaRjSrmRWxKoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8FdSRPA45KD5s1pErKKHV6ykSjMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLrtEW+h lIyKXCj98ec4fa8AdaWgavLTFRNc/RcRqjgkPMDXNstOrXYBXLQQA+69o/gxlgOc dal1155HnQmBRhUeQJF4VwJ7BrC7lkJQICq6zam1AGAzeLG/vFKx4CdHqTTGGaP6 cKqzfHhIx1ajwEp295NFdRAibe9OCtOii+IlA2qizOO3xbA8eP/yQsX8tg8Uy8Xt W/5WX/xzK16EHyaImDUi89nQp1SP2NoZyXZD0g95iFmp4QkO0ILYFke6v6W7rUIy +dozQj5aJsjPv114+22QnreZUzgpeMcEM4Nyl/nGTZZKWXoF205Pmmubgaend57N F69CRmsVpyQT8g== -----END CERTIFICATE-----Generated at Tue Apr 21 13:37:56 2026 by rpki-client