$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: j3QPFDTAosJenaMLg9u/KSunl/kjXQDxOmU9rE64OF4= Subject key identifier: F4:67:20:3B:0A:88:BF:EB:A1:99:91:9A:36:B1:F7:23:63:38:EA:77 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019E1CEB97E7C74F235EEFB63917B36EFE41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 162D Signing time: Tue 12 May 2026 16:01:02 +0000 Manifest this update: Tue 12 May 2026 16:01:02 +0000 Manifest next update: Wed 13 May 2026 16:01:02 +0000 Files and hashes: 1: 1UiUTiwKgTMIt2VTMxLe14f3nS4.roa (hash: pqQp2WmJbg2RhT73uD+Ys0RPrhInn/LiUGnsvcFLzWI=) 2: 2IRM0RAkwS2oAZ2BDb8uf2ChjCQ.roa (hash: JPioNw406pRxJydsBBDsLTocLaIvgiBjIbhi/i3xRcw=) 3: 99NN1WXl1e-tpKT6ABRzj8ek8js.roa (hash: 8o+XYKw0+50Z916SkqFv35kFc2HKB1Yb/OlTSFjUqWw=) 4: Gt42LNyKpJtcqVRywZEAUF7VLT4.roa (hash: 9z9Onu3kjDDPqyse/NwIrtPdYmJbza2UnnbQIfvOZ2I=) 5: LlDSn4AAdQvcio-w6ueKASNJzJc.roa (hash: Tt+ws0A+jguw/rGXSOQBHfD+EimDFMYYNfrKEOU8mto=) 6: S87lpzwpwcvhDVlbS4kDtqKKrpA.roa (hash: EL+FrGUGQI1F7I3SdqUWEFxAZnp0C1EKciCac/NeJoU=) 7: UlvxYSaKh8Oc3zweZMlSdRb-gtk.roa (hash: oQKB3We88m7rm0/lXA7VFioKwk6yZDH7U1EGDEWoMxw=) 8: b9R1mHou81pbTN845jWo8AY0dG8.roa (hash: 0MAAHxvRxGYVPd74Q6mtc12UmkhV79TPgssvbAGMnic=) 9: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: 5pz2OjpuXHfeR45H0tPZDkpH3el10sjcGPtBG+KIGzs=) 10: zKPJ1aUk7U9x8WVHRd4-RzORH30.roa (hash: oMQrL9GvdJqmjmfNbo6U4V/JwihFWzU7V32F6VSp6yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 16:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:eb:97:e7:c7:4f:23:5e:ef:b6:39:17:b3:6e:fe:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: May 12 16:01:02 2026 GMT Not After : May 13 16:01:02 2026 GMT Subject: CN=f467203b0a88bfeba199919a36b1f7236338ea77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:df:4b:3d:2d:a6:90:ae:a9:72:8c:4a:d3: 6b:85:c5:e3:6d:40:d2:79:1a:c3:11:8a:9b:b9:1f: ee:cf:33:69:28:02:73:bc:bb:33:fa:b6:cb:04:67: 6b:c6:20:a5:25:7e:10:f1:22:0d:f4:32:b8:56:d2: de:ac:a2:e9:08:d6:6c:7f:0f:2f:2a:d3:fa:b1:33: 21:f2:d7:d6:20:b7:c8:f6:a8:0d:0f:92:b1:b5:3d: d3:e5:49:49:3d:24:fa:64:90:42:1d:e9:d2:8b:92: b2:a8:f8:5e:2f:ac:0d:12:e1:f3:59:95:2b:c8:d2: 25:a7:04:5d:bd:69:5d:f1:e9:f1:24:a9:b3:27:f3: ef:3f:e8:57:02:5a:cf:97:d8:3a:d3:b9:7a:c8:9e: 43:d5:e8:7d:8c:2e:a3:a4:fd:75:45:73:99:30:f6: bd:01:f7:97:b6:35:09:7f:5d:75:31:d1:d9:77:49: 2c:b5:0e:89:06:42:c2:44:41:3f:04:b2:15:f3:50: b3:8e:66:6e:59:14:d4:d2:01:38:41:4c:96:0a:89: 09:1e:d7:af:b6:b4:55:36:ce:de:f9:ca:e9:50:a1: c4:79:1c:be:44:50:60:e5:84:15:a3:af:cd:53:49: 8f:50:b8:04:3a:67:67:e8:1b:db:79:df:98:03:4c: 5e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:67:20:3B:0A:88:BF:EB:A1:99:91:9A:36:B1:F7:23:63:38:EA:77 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:53:7e:b0:29:a6:ce:a8:b0:c9:c2:96:f1:8c:9c:50:ae:c8: 28:2f:ea:a3:ce:27:b6:f4:c7:75:fe:0b:a6:79:97:e1:08:42: 1e:0d:0f:0f:ff:e7:83:5e:be:63:14:7f:8e:ae:ee:75:b2:61: 71:15:33:a8:54:54:fc:85:5f:f5:ff:f6:de:94:ed:7b:a5:8e: f2:24:6d:f7:20:f7:f7:56:a5:7f:78:60:05:35:8c:bf:cd:99: aa:1d:eb:ce:85:36:be:18:e0:5e:b1:c3:06:ac:c8:2b:74:11: 0d:0e:a2:25:a6:d5:75:8e:9a:04:da:de:2e:5c:1a:25:bb:b1: 3f:be:d3:d7:b0:72:bf:9f:e3:2a:2e:9a:34:73:fc:0c:bf:cf: 9a:a1:06:ff:7f:91:09:3c:cb:69:d1:1a:06:96:11:f8:52:60: 32:9a:08:44:8e:5a:2b:e5:c8:3b:3d:b2:5d:16:1a:a9:c6:80: 69:ea:32:d7:a0:85:54:1f:4b:f9:08:94:f7:37:55:51:e0:3f: 17:ee:61:f7:82:e6:76:21:47:73:b7:9b:51:09:83:bb:41:5b: 8e:04:d7:0b:a6:f6:cc:18:e9:1a:61:dc:3c:aa:1b:e4:9d:2c: 7e:c8:6a:d4:fd:e7:fa:bf:89:ad:3e:44:6b:81:9e:58:b4:e9: a1:de:de:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4c65fnx08jXu+2ORezbv5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjYwNTEyMTYwMTAyWhcNMjYwNTEzMTYwMTAyWjAzMTEwLwYDVQQD EyhmNDY3MjAzYjBhODhiZmViYTE5OTkxOWEzNmIxZjcyMzYzMzhlYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVDfSz0tppCuqXKMStNrhcXjbUDS eRrDEYqbuR/uzzNpKAJzvLsz+rbLBGdrxiClJX4Q8SIN9DK4VtLerKLpCNZsfw8v KtP6sTMh8tfWILfI9qgND5KxtT3T5UlJPST6ZJBCHenSi5KyqPheL6wNEuHzWZUr yNIlpwRdvWld8enxJKmzJ/PvP+hXAlrPl9g607l6yJ5D1eh9jC6jpP11RXOZMPa9 AfeXtjUJf111MdHZd0kstQ6JBkLCREE/BLIV81CzjmZuWRTU0gE4QUyWCokJHtev trRVNs7e+crpUKHEeRy+RFBg5YQVo6/NU0mPULgEOmdn6Bvbed+YA0xeaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRnIDsKiL/roZmRmjax9yNjOOp3MB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv1N+sCmm zqiwycKW8YycUK7IKC/qo84ntvTHdf4LpnmX4QhCHg0PD//ng16+YxR/jq7udbJh cRUzqFRU/IVf9f/23pTte6WO8iRt9yD391alf3hgBTWMv82Zqh3rzoU2vhjgXrHD BqzIK3QRDQ6iJabVdY6aBNreLlwaJbuxP77T17Byv5/jKi6aNHP8DL/PmqEG/3+R CTzLadEaBpYR+FJgMpoIRI5aK+XIOz2yXRYaqcaAaeoy16CFVB9L+QiU9zdVUeA/ F+5h94LmdiFHc7ebUQmDu0FbjgTXC6b2zBjpGmHcPKob5J0sfshq1P3n+r+JrT5E a4GeWLTpod7enA== -----END CERTIFICATE-----Generated at Wed May 13 03:08:42 2026 by rpki-client