$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json) Hash identifier: Jti5dhwBH3hJCux/Z1Zan15R5xqDOUSLYBrOTdJ2nHI= Subject key identifier: 97:51:9E:03:BD:8B:B9:28:F6:66:A2:8F:1D:FC:88:E2:22:0B:4C:9B Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019D28844AD27CFD3B1FB1C45918BEEC7E50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft Manifest number: 179C Signing time: Thu 26 Mar 2026 05:00:51 +0000 Manifest this update: Thu 26 Mar 2026 05:00:51 +0000 Manifest next update: Fri 27 Mar 2026 05:00:51 +0000 Files and hashes: 1: 8GJJ4AKaUniX8s4WsSBMvXfO2is.roa (hash: HdAEUvEwsZFelbaCeF+bPALgo9css5LX1Q86gbTCpp4=) 2: Aq5wESOUolAkTosvnE7ETStDfyU.roa (hash: yfEBzyPkUQCnnTcx22tGTzIIsK+Ma5c/+X+c6Yry/fU=) 3: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=) 4: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=) 5: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=) 6: Fiisplv3w9_pcxosla-tTkhAJ08.roa (hash: P97Lb0EUKlBvkmhA1xwdZkUEdqeyjS045eltxd5n80c=) 7: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=) 8: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=) 9: O-i1rC1f7BE3Y8fLVkNpebeGeGs.roa (hash: bCqBB+ncUGUt72TM8p8OBDdOP6g9yB8O/RTZw31zEF8=) 10: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=) 11: SFnLmcRXNoAvKmHKtCKbBqiDke8.roa (hash: PBomLl2Jg/1jBfjMIeHic9H2KfOA2H8CNEl1uZ5aGRg=) 12: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=) 13: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=) 14: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: 3s28cT0SipX+LIM9mR6kzfXkcYVpp+4pYZHtv0YFdcw=) 15: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=) 16: iuRgfu21PTYsbZmCXChlKNQrvwY.roa (hash: bBVTlacYWROGx5pT6t29eLcMFfwpCwecFakjUlLqFkQ=) 17: sxM1hppwo8IA3sUIRWSmuh2DulM.roa (hash: d0rCe3Bx8Ky5qROI9ax/UnPDyR2WjD1W4X7Y8WVQZls=) 18: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=) 19: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (hash: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM=) 20: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=) 21: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:84:4a:d2:7c:fd:3b:1f:b1:c4:59:18:be:ec:7e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Mar 26 05:00:51 2026 GMT Not After : Mar 27 05:00:51 2026 GMT Subject: CN=97519e03bd8bb928f666a28f1dfc88e2220b4c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f3:73:e3:29:e4:f3:27:ba:b7:66:2f:d8:c2: 3c:a8:2f:ab:4a:10:3b:b9:96:52:8d:fb:e1:33:cf: f1:1e:8a:73:cc:7e:b4:25:43:87:86:db:e2:02:c1: 47:6f:6a:36:1d:be:da:8f:8a:27:be:28:b8:95:f7: b3:b5:63:2a:3b:7f:15:2f:23:ec:c4:dc:72:8c:37: 6a:8c:b9:8b:cb:ed:94:3a:38:92:b7:9c:a8:4f:25: 1a:30:0a:2f:ba:84:15:26:a8:45:4e:54:ee:a5:6b: 7e:ee:80:ae:49:c3:2e:b1:27:4a:94:85:dc:87:f6: 0a:b0:51:a5:8b:13:35:e9:5d:78:7b:27:5c:ca:f6: b1:0c:ed:df:33:39:88:c9:87:f6:5d:33:f7:92:c1: 6f:0a:ae:9d:fe:3e:9f:e6:6c:0a:72:78:97:7b:25: 50:6a:af:b2:27:e7:d6:af:31:ad:79:b4:8f:ba:62: 54:8a:d1:b4:a4:90:8d:be:28:8f:60:bd:70:67:bd: b9:20:8a:47:c8:59:fb:3b:f1:fd:f9:76:23:09:e8: 19:b9:08:57:7c:26:0b:63:ce:8e:8d:96:d6:64:b5: 43:9a:e5:26:2e:c9:b2:46:39:2f:03:89:c5:c4:53: 60:d6:e8:4f:19:a2:b0:7f:91:19:a5:07:2c:ba:b6: 17:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:51:9E:03:BD:8B:B9:28:F6:66:A2:8F:1D:FC:88:E2:22:0B:4C:9B X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d1:f8:bd:3d:62:13:e1:b5:ba:ab:b1:ba:a7:9d:16:4d:bd: 67:11:74:d6:71:50:b7:b9:3c:e1:c0:96:bb:bf:07:7e:b9:70: af:31:9e:93:3f:4f:4a:f3:59:86:54:fd:36:79:77:80:54:e1: 81:77:31:46:23:20:53:92:14:8d:f3:95:8f:11:f2:b8:26:6b: 21:3c:34:ac:02:89:12:3a:2a:67:2a:83:d1:c2:5c:30:6e:43: 0c:0b:78:b0:86:89:3b:d2:6a:7c:ed:16:88:fe:e1:b1:dc:a8: 02:a7:da:1b:87:fb:b9:f5:d0:12:3c:f5:ff:b7:d6:ee:51:cd: a1:e6:86:ac:cf:eb:13:41:d3:cd:d2:e4:f3:a4:78:00:50:1b: 25:df:00:85:80:e7:e9:0f:d2:c3:54:31:1b:af:58:d1:b8:0c: 8c:85:d2:05:2b:b1:f2:f1:c4:90:58:13:e7:a7:bf:b6:b9:ef: ff:25:ef:c1:a7:dd:61:fa:41:08:4e:74:03:36:8a:05:8c:fb: a3:bb:26:d0:48:ee:83:bb:fe:d3:99:b6:91:df:22:46:ad:22: b2:55:e8:58:99:bb:ef:42:a0:43:c7:a5:5b:65:c9:7b:f4:27: 27:6c:0b:fb:9a:a1:45:52:11:44:fb:10:cd:7d:5e:60:d7:8d: 90:7c:7b:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ohErSfP07H7HEWRi+7H5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMzI2MDUwMDUxWhcNMjYwMzI3MDUwMDUxWjAzMTEwLwYDVQQD Eyg5NzUxOWUwM2JkOGJiOTI4ZjY2NmEyOGYxZGZjODhlMjIyMGI0YzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPNz4ynk8ye6t2Yv2MI8qC+rShA7 uZZSjfvhM8/xHopzzH60JUOHhtviAsFHb2o2Hb7aj4onvii4lfeztWMqO38VLyPs xNxyjDdqjLmLy+2UOjiSt5yoTyUaMAovuoQVJqhFTlTupWt+7oCuScMusSdKlIXc h/YKsFGlixM16V14eydcyvaxDO3fMzmIyYf2XTP3ksFvCq6d/j6f5mwKcniXeyVQ aq+yJ+fWrzGtebSPumJUitG0pJCNviiPYL1wZ725IIpHyFn7O/H9+XYjCegZuQhX fCYLY86OjZbWZLVDmuUmLsmyRjkvA4nFxFNg1uhPGaKwf5EZpQcsurYXdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdRngO9i7ko9maijx38iOIiC0ybMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNH4vT1i E+G1uquxuqedFk29ZxF01nFQt7k84cCWu78HfrlwrzGekz9PSvNZhlT9Nnl3gFTh gXcxRiMgU5IUjfOVjxHyuCZrITw0rAKJEjoqZyqD0cJcMG5DDAt4sIaJO9JqfO0W iP7hsdyoAqfaG4f7ufXQEjz1/7fW7lHNoeaGrM/rE0HTzdLk86R4AFAbJd8AhYDn 6Q/Sw1QxG69Y0bgMjIXSBSux8vHEkFgT56e/trnv/yXvwafdYfpBCE50AzaKBYz7 o7sm0Ejug7v+05m2kd8iRq0islXoWJm770KgQ8elW2XJe/QnJ2wL+5qhRVIRRPsQ zX1eYNeNkHx7hQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:24:01 2026 by rpki-client