$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json) Hash identifier: FOpKD+VmdRIX7iTBpNl3Tl5i6tKJOIJF7eyzM09fxPM= Subject key identifier: BB:03:EC:5F:61:3F:CA:D6:DB:FA:32:2D:22:3A:B8:45:CF:E7:56:BF Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 01A0CEFF6D65E8CF7B5B962981E1A0B7673E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft Manifest number: 1989 Signing time: Wed 23 Sep 2026 16:00:41 +0000 Manifest this update: Wed 23 Sep 2026 16:00:41 +0000 Manifest next update: Thu 24 Sep 2026 16:00:41 +0000 Files and hashes: 1: 55lTuhAI20BHIf-zeSdkeAFaMAg.roa (hash: 6WOjfM5Zbb9/cs9Lu29lst5KqtNeJQ6bLtoEOKJiPTQ=) 2: 7NA2LegCljPM-6ilz2F5cnaoBJw.roa (hash: qjOTsmyHG6MOUTIadkX/zmkZDlAkqPzHJKetzF1R3ds=) 3: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=) 4: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=) 5: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=) 6: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=) 7: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=) 8: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=) 9: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=) 10: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=) 11: OOZCU9RDZbWm90IHhggbkADAyok.roa (hash: yzkJaDkuzS/Q97fyxLhVwM/SdV10qs3BxmQUOzU77kU=) 12: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=) 13: X3TOXxPWXzlBaEZ6x5xVJV0GN2g.roa (hash: lAKtM50aILYHfyj/dnL/G2PsJlkpfMmR8vppwS3z8KU=) 14: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=) 15: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: fGq0ovxajRZxJEfEid1XSrVT7CMNrkiTyWTGFMT4R0w=) 16: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=) 17: e9owlvY-NY5qGBDhXZ7WFxeggIc.roa (hash: QGa2zFUrPTeR+OERG79pTeFCAO6qtUgwUx98rjXhrvE=) 18: jVvCjidFfK-8IL92OyEeuSlStW0.roa (hash: 95JD6YEa33c2IW5jEGSMsvaX4Vq46tjO1+Oed4maTyw=) 19: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=) 20: twRPR7YMxdedDnIoOoDSSMLLV5I.roa (hash: iG5iFiWGGZ1ctfdvgUYVkBJLEXDfn4PbykZkkKVwlz8=) 21: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (hash: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM=) 22: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=) 23: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ce:ff:6d:65:e8:cf:7b:5b:96:29:81:e1:a0:b7:67:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Sep 23 16:00:41 2026 GMT Not After : Sep 24 16:00:41 2026 GMT Subject: CN=bb03ec5f613fcad6dbfa322d223ab845cfe756bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d0:97:62:dc:63:df:fd:97:77:ee:c0:17:09: d2:d6:aa:3b:00:34:4f:1d:77:d1:0c:b5:8b:73:43: 08:f0:5c:7c:e1:91:7b:78:0a:38:86:1b:e2:d5:91: 22:71:a0:aa:5e:68:90:09:e8:2a:8e:5b:51:5b:c0: 3e:8f:44:ed:12:af:bc:6f:ff:39:a2:63:07:9c:86: 94:8b:08:4a:09:25:b0:5c:2f:b1:c4:9b:b6:f9:f2: 2b:95:df:3e:b7:d6:bb:bb:05:f8:4e:81:46:87:89: 40:3a:2c:e8:c8:30:82:7c:2a:99:55:05:f8:67:01: df:9f:6c:38:08:b1:cd:3d:43:7b:d6:d1:c1:2f:f1: 7f:6d:16:65:c9:44:02:14:2d:0d:ff:63:35:71:78: 76:ae:5a:5c:ec:e1:f7:bc:33:5a:a4:bb:aa:b7:29: 47:e8:1e:4a:e4:0e:df:c9:f6:32:7a:85:7f:d7:9f: 38:79:0b:0a:16:d2:57:b0:17:61:da:0a:71:0a:2d: 77:e1:7f:3c:ee:87:05:b0:4f:08:57:1e:4c:42:19: 55:86:16:c4:f1:b2:d1:51:91:d6:1c:5c:95:6a:b2: 56:02:bd:25:d0:76:0b:2c:bc:20:54:e2:66:6a:c5: b3:11:cd:60:ec:a7:b0:bf:8f:44:25:74:77:a9:db: d6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:03:EC:5F:61:3F:CA:D6:DB:FA:32:2D:22:3A:B8:45:CF:E7:56:BF X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:35:39:be:85:25:c6:12:83:3c:5d:22:a8:cb:e9:da:93:84: dd:64:dc:31:1c:d8:20:33:b8:4e:37:c9:65:61:c6:4a:eb:13: fe:83:92:94:18:07:3c:db:7a:39:02:95:cf:43:cf:12:6e:86: 59:92:10:c7:8c:8c:81:ea:5c:56:02:cf:01:c9:3e:a8:32:de: 20:7c:12:43:65:69:a3:3d:4b:ef:34:80:c8:ce:3e:9e:db:cb: 24:64:40:5c:cf:05:cf:46:46:09:78:32:e6:57:8c:d7:0d:79: b3:f4:43:4d:db:77:cd:ac:78:8d:74:11:cf:a2:4f:56:d8:46: 69:9f:16:24:eb:dd:75:5c:4f:7c:cd:19:a7:bd:ab:44:c9:37: 87:11:95:57:64:93:e8:2f:9b:30:3f:66:19:0b:ee:66:20:de: 89:77:70:c2:9a:37:9f:16:15:7e:83:5a:94:f8:1a:ea:a8:76: 7b:f7:b4:e0:f7:fc:6d:97:d7:9d:23:00:c9:b4:37:5c:bf:60: de:e5:20:61:ec:2c:fc:94:8c:7a:31:3e:8d:17:83:74:08:8f: 09:5b:68:53:6c:f3:3c:82:7c:a6:c6:6f:85:83:51:af:7e:42: ee:54:bb:d0:81:5c:5e:df:79:6a:dc:31:01:d7:38:60:47:f1: 53:22:1b:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDO/21l6M97W5YpgeGgt2c+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwOTIzMTYwMDQxWhcNMjYwOTI0MTYwMDQxWjAzMTEwLwYDVQQD EyhiYjAzZWM1ZjYxM2ZjYWQ2ZGJmYTMyMmQyMjNhYjg0NWNmZTc1NmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtCXYtxj3/2Xd+7AFwnS1qo7ADRP HXfRDLWLc0MI8Fx84ZF7eAo4hhvi1ZEicaCqXmiQCegqjltRW8A+j0TtEq+8b/85 omMHnIaUiwhKCSWwXC+xxJu2+fIrld8+t9a7uwX4ToFGh4lAOizoyDCCfCqZVQX4 ZwHfn2w4CLHNPUN71tHBL/F/bRZlyUQCFC0N/2M1cXh2rlpc7OH3vDNapLuqtylH 6B5K5A7fyfYyeoV/1584eQsKFtJXsBdh2gpxCi134X887ocFsE8IVx5MQhlVhhbE 8bLRUZHWHFyVarJWAr0l0HYLLLwgVOJmasWzEc1g7Kewv49EJXR3qdvWhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsD7F9hP8rW2/oyLSI6uEXP51a/MB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzU5voUl xhKDPF0iqMvp2pOE3WTcMRzYIDO4TjfJZWHGSusT/oOSlBgHPNt6OQKVz0PPEm6G WZIQx4yMgepcVgLPAck+qDLeIHwSQ2Vpoz1L7zSAyM4+ntvLJGRAXM8Fz0ZGCXgy 5leM1w15s/RDTdt3zax4jXQRz6JPVthGaZ8WJOvddVxPfM0Zp72rRMk3hxGVV2ST 6C+bMD9mGQvuZiDeiXdwwpo3nxYVfoNalPga6qh2e/e04Pf8bZfXnSMAybQ3XL9g 3uUgYews/JSMejE+jReDdAiPCVtoU2zzPIJ8psZvhYNRr35C7lS70IFcXt95atwx Adc4YEfxUyIbaQ== -----END CERTIFICATE-----Generated at Wed Sep 23 23:05:08 2026 by rpki-client