$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json) Hash identifier: jmHHTiSuue/2XPOZDq3Zq7qOrDiHIbq8nbKMaEgI9Rg= Subject key identifier: 49:1D:09:8B:A2:CF:E8:13:51:31:26:CE:4E:1B:53:AB:53:B4:3B:DB Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019D33ACFC5651F01404E690D7C35E654522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft Manifest number: 0BE6 Signing time: Sat 28 Mar 2026 09:01:07 +0000 Manifest this update: Sat 28 Mar 2026 09:01:07 +0000 Manifest next update: Sun 29 Mar 2026 09:01:07 +0000 Files and hashes: 1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=) 2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=) 3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=) 4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=) 5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=) 6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=) 7: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=) 8: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=) 9: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=) 10: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=) 11: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=) 12: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=) 13: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=) 14: RvoB02LV3HAYyjSpTynuepFZgZQ.roa (hash: IJ1ixOVD+h2rJ9Dsin8DqExrSUj/mMAvMHLaqQwlHdg=) 15: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: A8b59imy1O3NI5kAjIwqTmodmOxK8TMsPwggLm6GAns=) 16: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=) 17: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=) 18: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=) 19: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=) 20: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=) 21: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 04:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:33:ac:fc:56:51:f0:14:04:e6:90:d7:c3:5e:65:45:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Mar 28 09:01:07 2026 GMT Not After : Mar 29 09:01:07 2026 GMT Subject: CN=491d098ba2cfe813513126ce4e1b53ab53b43bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:83:73:ca:3f:09:5f:b5:07:32:73:0e:54:09: ff:ed:5f:1f:2c:4e:0b:78:5f:02:e1:37:bc:fb:e4: 6d:4e:00:6a:65:36:6f:ce:37:f9:a6:3a:dd:e1:c4: 29:24:18:01:7c:e1:f1:b9:52:ac:d4:73:08:85:b6: d4:99:a0:8c:00:07:a7:98:09:de:61:ca:ef:7b:2b: 6d:e8:fd:88:ca:3b:39:2b:67:6c:f3:80:67:10:b9: 0c:5f:aa:bf:da:60:d0:e1:5e:ae:c3:7e:e9:a9:50: e9:72:af:3d:8e:43:2a:fc:3f:a7:40:75:d3:34:77: a3:fd:de:6c:6e:7d:38:f2:c5:8d:8a:04:94:80:7b: 9c:0e:eb:f7:f5:54:78:af:3e:fe:cf:1a:5f:03:5c: d3:69:9f:52:51:bd:27:7d:7a:6e:5b:1b:00:c0:73: 0e:1a:78:23:87:f0:bc:ad:b7:cf:8d:86:9e:8a:3b: f9:7c:58:ab:35:28:d3:14:83:21:31:f2:cd:7b:dc: 39:17:15:ce:df:6b:24:d8:ae:4d:90:61:49:45:f9: 3a:2f:45:22:f3:0d:94:27:ce:a8:b3:65:c3:9b:fe: 56:72:1a:7a:7f:60:0c:ef:19:91:90:05:54:1b:89: 29:58:c9:82:d3:57:10:03:8a:32:7a:ec:49:fe:ab: 54:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1D:09:8B:A2:CF:E8:13:51:31:26:CE:4E:1B:53:AB:53:B4:3B:DB X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:24:2e:08:f8:01:c9:25:fa:5b:7f:53:17:35:2b:d0:24:6e: 14:f8:73:40:85:6b:e3:b7:7f:c4:81:96:ac:1f:28:1e:fa:e7: aa:55:a4:64:40:c7:8f:7c:ce:64:17:63:bd:de:bd:c2:15:f3: 1d:84:b2:64:54:38:50:7e:2a:72:f2:79:d4:64:a7:f9:1e:05: b8:97:f5:5f:25:5e:6e:49:65:2a:ec:8a:bc:38:ad:e7:c2:16: cb:b6:ea:96:c4:93:42:4e:0f:da:b1:c5:3e:8b:b9:c8:d9:5a: ee:3b:4e:50:11:e8:ff:e6:d3:db:91:7d:70:ad:fa:14:fb:2f: 0d:fe:56:64:23:7e:2e:b0:88:f0:6f:b5:b5:3f:3f:c9:4a:4f: cb:91:2e:e4:c8:f6:48:d6:7a:bd:c3:28:58:35:44:71:d0:c0: 42:c3:3e:22:81:9c:cb:ea:8c:6c:4d:86:81:0d:e0:87:fa:c4: dd:70:bc:88:fd:2c:46:88:92:f5:92:88:d4:c9:9f:bf:38:ad: 3a:7e:fa:04:30:3c:8d:0f:33:6e:43:f7:c0:09:e2:60:12:fa: 14:5d:ce:38:94:40:84:66:f8:61:86:a4:2a:59:e0:92:a4:38: 2f:5d:a4:da:cc:7d:9d:c2:34:6c:13:48:70:ad:c9:7b:bc:01: 3a:b1:43:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0zrPxWUfAUBOaQ18NeZUUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMzI4MDkwMTA3WhcNMjYwMzI5MDkwMTA3WjAzMTEwLwYDVQQD Eyg0OTFkMDk4YmEyY2ZlODEzNTEzMTI2Y2U0ZTFiNTNhYjUzYjQzYmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oNzyj8JX7UHMnMOVAn/7V8fLE4L eF8C4Te8++RtTgBqZTZvzjf5pjrd4cQpJBgBfOHxuVKs1HMIhbbUmaCMAAenmAne Ycrveytt6P2Iyjs5K2ds84BnELkMX6q/2mDQ4V6uw37pqVDpcq89jkMq/D+nQHXT NHej/d5sbn048sWNigSUgHucDuv39VR4rz7+zxpfA1zTaZ9SUb0nfXpuWxsAwHMO Gngjh/C8rbfPjYaeijv5fFirNSjTFIMhMfLNe9w5FxXO32sk2K5NkGFJRfk6L0Ui 8w2UJ86os2XDm/5Wchp6f2AM7xmRkAVUG4kpWMmC01cQA4oyeuxJ/qtUYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkdCYuiz+gTUTEmzk4bU6tTtDvbMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCQuCPgB ySX6W39TFzUr0CRuFPhzQIVr47d/xIGWrB8oHvrnqlWkZEDHj3zOZBdjvd69whXz HYSyZFQ4UH4qcvJ51GSn+R4FuJf1XyVebkllKuyKvDit58IWy7bqlsSTQk4P2rHF Pou5yNla7jtOUBHo/+bT25F9cK36FPsvDf5WZCN+LrCI8G+1tT8/yUpPy5Eu5Mj2 SNZ6vcMoWDVEcdDAQsM+IoGcy+qMbE2GgQ3gh/rE3XC8iP0sRoiS9ZKI1Mmfvzit On76BDA8jQ8zbkP3wAniYBL6FF3OOJRAhGb4YYakKlngkqQ4L12k2sx9ncI0bBNI cK3Je7wBOrFDWg== -----END CERTIFICATE-----Generated at Sat Mar 28 12:08:14 2026 by rpki-client