$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: ysYu1HikD9nEe0tGTIm1E/36qoQi82aA6JxcrQlv7M4= Subject key identifier: 71:DF:54:34:95:77:00:B9:BE:43:E5:CB:FF:31:05:33:40:9C:71:2C Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019D265FC9B8B96213711B382C68704F1E0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 15AD Signing time: Wed 25 Mar 2026 19:01:44 +0000 Manifest this update: Wed 25 Mar 2026 19:01:44 +0000 Manifest next update: Thu 26 Mar 2026 19:01:44 +0000 Files and hashes: 1: 1UiUTiwKgTMIt2VTMxLe14f3nS4.roa (hash: pqQp2WmJbg2RhT73uD+Ys0RPrhInn/LiUGnsvcFLzWI=) 2: 99NN1WXl1e-tpKT6ABRzj8ek8js.roa (hash: 8o+XYKw0+50Z916SkqFv35kFc2HKB1Yb/OlTSFjUqWw=) 3: Gt42LNyKpJtcqVRywZEAUF7VLT4.roa (hash: 9z9Onu3kjDDPqyse/NwIrtPdYmJbza2UnnbQIfvOZ2I=) 4: LlDSn4AAdQvcio-w6ueKASNJzJc.roa (hash: Tt+ws0A+jguw/rGXSOQBHfD+EimDFMYYNfrKEOU8mto=) 5: S87lpzwpwcvhDVlbS4kDtqKKrpA.roa (hash: EL+FrGUGQI1F7I3SdqUWEFxAZnp0C1EKciCac/NeJoU=) 6: UlvxYSaKh8Oc3zweZMlSdRb-gtk.roa (hash: oQKB3We88m7rm0/lXA7VFioKwk6yZDH7U1EGDEWoMxw=) 7: b9R1mHou81pbTN845jWo8AY0dG8.roa (hash: 0MAAHxvRxGYVPd74Q6mtc12UmkhV79TPgssvbAGMnic=) 8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: whFAtZr3DR95I79oOMyD1mvx29lKwo1U1NYIAYN0PoY=) 9: vTKohdF56IFQgah9DuO0JGwcH9U.roa (hash: bsUg8Uy5yocfoi+JUcF+13tkU1rzb4BDrWJjTlHrS6I=) 10: zKPJ1aUk7U9x8WVHRd4-RzORH30.roa (hash: oMQrL9GvdJqmjmfNbo6U4V/JwihFWzU7V32F6VSp6yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 19:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:5f:c9:b8:b9:62:13:71:1b:38:2c:68:70:4f:1e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Mar 25 19:01:44 2026 GMT Not After : Mar 26 19:01:44 2026 GMT Subject: CN=71df5434957700b9be43e5cbff310533409c712c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b2:20:c2:4a:80:9b:08:3c:4d:2b:ce:f9:13: 66:66:89:f7:41:a0:1f:49:97:86:fa:14:73:be:ce: fa:1d:b3:00:a0:cb:41:66:d5:bc:38:cc:f6:19:a9: b2:55:f0:d1:d3:6d:cc:31:bc:da:51:ed:0a:78:db: b1:b3:62:cc:fd:da:02:f1:83:57:94:1d:0e:83:2f: e8:22:8c:1e:4a:bc:a3:07:bd:e5:d1:a5:bd:f8:ee: c6:13:97:fc:c4:65:36:33:67:26:af:24:e4:69:c3: 1e:ae:7c:2c:cf:21:df:52:c0:64:32:cf:e7:cf:2a: f6:7a:a5:92:3b:ad:42:73:6a:c4:94:f6:d7:fa:d8: 57:37:a4:ff:98:da:f9:64:0e:3b:d3:4c:51:83:77: de:1c:03:fe:8f:83:3a:1d:ef:0d:83:fc:c5:58:f0: 0c:ef:5f:c0:bf:d5:34:f6:86:5d:09:c1:af:2f:71: 71:e6:5f:76:90:cb:7f:a1:8b:de:9d:72:d7:9b:6a: a3:ab:da:df:06:6e:40:67:ee:e9:13:c7:a7:6e:08: e0:32:1a:1c:db:dc:03:f9:ae:c7:f2:c8:9f:23:a4: 6a:b0:02:39:4b:cf:7a:d3:75:62:a3:5c:eb:57:60: c3:ac:8b:3b:f3:95:70:16:79:28:3f:99:1f:7e:7a: 9d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DF:54:34:95:77:00:B9:BE:43:E5:CB:FF:31:05:33:40:9C:71:2C X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:05:90:5e:c5:d1:4b:c5:0f:5c:fa:d3:7d:cb:26:ed:36:76: e2:19:8c:7d:88:ec:37:0c:01:f8:d7:06:23:5b:18:56:4e:63: 7e:2c:36:d8:8a:53:cf:90:9a:cb:41:fc:4d:0d:59:17:a4:ff: 77:9d:86:53:b0:80:38:65:32:3b:f6:38:dc:43:dd:ae:d5:16: 82:a2:35:36:41:96:f7:24:a3:26:4c:8f:f6:ea:04:7c:d2:05: b2:93:2a:25:8f:f0:03:1d:e0:86:84:bd:6b:b8:90:bc:74:84: f3:a2:ab:8d:df:42:a0:ff:b1:e2:3c:f9:a7:f0:31:5b:3f:8e: 26:98:dc:f6:3a:ce:b1:4a:7c:90:98:4d:57:69:62:77:4c:0a: 67:00:aa:e0:d2:db:41:98:1b:64:a9:63:46:09:d8:b8:60:24: 38:79:b7:82:07:4a:8b:63:39:0f:5a:b3:32:ea:50:ea:4a:63: 98:f9:01:cc:3c:9c:19:3e:d2:f6:30:67:32:bc:0c:b5:45:9f: 8a:aa:cb:d4:73:09:da:66:5c:ae:51:a6:40:de:c5:f4:23:f9: fd:f4:de:08:2a:05:37:54:01:46:69:0a:5f:57:1f:93:30:0d: 49:be:55:61:18:67:4f:d4:72:3e:60:7b:6d:7f:7b:72:4b:ce: ee:86:87:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mX8m4uWITcRs4LGhwTx4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjYwMzI1MTkwMTQ0WhcNMjYwMzI2MTkwMTQ0WjAzMTEwLwYDVQQD Eyg3MWRmNTQzNDk1NzcwMGI5YmU0M2U1Y2JmZjMxMDUzMzQwOWM3MTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLIgwkqAmwg8TSvO+RNmZon3QaAf SZeG+hRzvs76HbMAoMtBZtW8OMz2GamyVfDR023MMbzaUe0KeNuxs2LM/doC8YNX lB0Ogy/oIoweSryjB73l0aW9+O7GE5f8xGU2M2cmryTkacMernwszyHfUsBkMs/n zyr2eqWSO61Cc2rElPbX+thXN6T/mNr5ZA4700xRg3feHAP+j4M6He8Ng/zFWPAM 71/Av9U09oZdCcGvL3Fx5l92kMt/oYvenXLXm2qjq9rfBm5AZ+7pE8enbgjgMhoc 29wD+a7H8sifI6RqsAI5S89603Vio1zrV2DDrIs785VwFnkoP5kffnqdtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHfVDSVdwC5vkPly/8xBTNAnHEsMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQWQXsXR S8UPXPrTfcsm7TZ24hmMfYjsNwwB+NcGI1sYVk5jfiw22IpTz5Cay0H8TQ1ZF6T/ d52GU7CAOGUyO/Y43EPdrtUWgqI1NkGW9ySjJkyP9uoEfNIFspMqJY/wAx3ghoS9 a7iQvHSE86Krjd9CoP+x4jz5p/AxWz+OJpjc9jrOsUp8kJhNV2lid0wKZwCq4NLb QZgbZKljRgnYuGAkOHm3ggdKi2M5D1qzMupQ6kpjmPkBzDycGT7S9jBnMrwMtUWf iqrL1HMJ2mZcrlGmQN7F9CP5/fTeCCoFN1QBRmkKX1cfkzANSb5VYRhnT9RyPmB7 bX97ckvO7oaHZg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:52:06 2026 by rpki-client