$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: aNi5/bmp6dZ7Ldv+hNNFZGhZyruuMsmxLxPiscguzZE= Subject key identifier: 24:99:98:A6:51:BA:BD:86:44:3A:DC:66:36:18:78:69:78:A3:27:19 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 01A0DC4D9D3588E01321DA77256B2CABF4FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 15E0 Signing time: Sat 26 Sep 2026 06:01:09 +0000 Manifest this update: Sat 26 Sep 2026 06:01:09 +0000 Manifest next update: Sun 27 Sep 2026 06:01:09 +0000 Files and hashes: 1: 0H6OsPKc9Cn6xVwU-sMeX-aEEII.roa (hash: xwsVWakw+x28jhWY0Coi0m/7f/xKAGYT9zdsjIu1sdk=) 2: 4ZyYrxdMVPNrHL63nSmSHm7BJig.roa (hash: tkJ2qyLJeQtQKbXkAggvDNTWa3p6+Xzk5AaNc5VgTbY=) 3: 5Tkq8wpHcpeGz-f1egqNaUaEly4.roa (hash: UEQegGsLWicDIfmpSCpj13D1XKHb5j/U85IT8bxJWfc=) 4: CGlwaarm8XPHSfd_sN3ULyqaKUg.roa (hash: WkoSqWTtOvdRK1F0sTVTQcYIqle5HqEUONAxF4fdu+0=) 5: DWJLSkrTBQVA1mKPBHJjQ0UYwUo.roa (hash: YlvXpp8OBX054sUjgr0G/E8Fj1hyn6n9+pikSmik/yw=) 6: GT1TKA4rV1OP_xJGzsCFQYpWhGg.roa (hash: HG/pHQ1DuBKD68MX3r3/b2+tAgjgwKx/kNjIgxZtYug=) 7: K-Snqx_g_sH4OkoyUvNFtlxX6dY.roa (hash: UtI+N3jVMIi1MfArZauCcNJH+3Px9d37UixMPUZOoTo=) 8: a9jE-TX9k6OHwBgKQbFeNgu9t74.roa (hash: HbwU/n/E/rQdZGHVXYtZfsfswxUEspontCNM306GAQg=) 9: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: bw3fMWkbuaEFFQY2nNC6SMHfLcnvLXQJYHre7DDlGms=) 10: nr9k1CgFTONdLf6R9QxhHnNqn0s.roa (hash: p4nvZA3enPe2lQ5RM8LvTtTA0KKajVqsnKOLaWopgI8=) 11: tdnQohzHZr8uW9f2J4849lgRnNs.roa (hash: R/F7DsXRI6l5OyjK0XOgTrIjrxtiZQtQIcujVHWYsus=) 12: uLh37d-CZyi_CuBp_4qkf4KKeHY.roa (hash: 4Y8qT4eDZwwuj7P5bcinlRoVnttb6kb3uO1Y02tcU4g=) 13: wFfaatQDGVsMpN2fH-zvzPesV3g.roa (hash: 3ZM6HdXkNcqvPo4Y/liQTynJdayCJYTJLnDaTRRsnVI=) 14: wLx0CVIubWTYoCjwsL2Po__MQUM.roa (hash: F8k0Jt+fxP76purtLa3GdhBDmrpeFIZqPR/m/8/wT2Y=) 15: x5Qwhv7R0VHh2__9bUe3MfdsZS8.roa (hash: DGtjPXc9IfmH8Lv2uA77Pdq/vDMpd2Jc/ZwXsO4TcZ0=) 16: yz9kj_FWQhCmpskN-2MCDdY5uBw.roa (hash: cgLL1yo6vIv8E9t7kQH/ixztHSmNjb1gmVnvmFzrVfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dc:4d:9d:35:88:e0:13:21:da:77:25:6b:2c:ab:f4:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Sep 26 06:01:09 2026 GMT Not After : Sep 27 06:01:09 2026 GMT Subject: CN=249998a651babd86443adc663618786978a32719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0d:85:86:32:3d:16:fc:ba:98:57:0b:a2:81: a7:b4:a4:21:cb:16:6e:97:75:89:55:a2:89:02:47: 08:5c:fa:76:dc:37:8e:37:e7:1e:bb:e3:ab:dc:79: 05:3b:a4:81:57:52:1b:3a:8e:31:ae:1b:15:51:df: 21:9a:43:52:fd:95:52:fd:ba:55:b0:e3:ce:8c:3e: 9b:08:ff:9d:7a:e3:33:3c:0a:35:77:94:9c:ba:87: d9:a0:24:30:30:ea:2f:58:20:4c:f0:a5:60:b0:2f: 3b:a5:c2:65:1e:33:87:34:80:30:fe:8f:c1:3c:ae: 8c:aa:5a:bf:bc:56:d5:18:a0:c2:e1:d7:8a:5c:df: 7c:86:08:a4:d0:42:81:11:5a:31:b0:b1:b1:7e:2b: fb:c9:b9:98:0c:35:9a:07:d9:d9:34:cd:59:b2:b0: 9d:2c:f6:85:ea:21:43:f2:46:d8:cc:89:42:35:e1: a9:d3:2f:30:8f:73:1e:f5:4a:0b:d0:a2:fc:b0:cd: 4e:2f:00:f1:7e:40:3b:76:1c:f1:62:59:32:9f:93: 6f:5f:4f:8c:ed:a5:32:6b:a2:43:d0:f1:81:d5:44: 54:61:c8:74:c3:3d:17:fd:36:f9:e1:8a:d0:2a:ab: 0f:9f:76:f2:ef:d2:b5:8d:b8:96:d3:fc:ce:7c:22: 13:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:99:98:A6:51:BA:BD:86:44:3A:DC:66:36:18:78:69:78:A3:27:19 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:86:62:e4:a2:f1:91:a9:98:2c:8a:0c:5c:b8:34:c4:dd:52: fb:c9:be:eb:1c:c2:e1:9b:e2:de:c8:c4:57:1f:dd:6d:db:3a: e2:7f:4b:6b:de:a8:22:b0:88:a1:f6:61:dc:04:58:6c:d8:05: a5:bc:97:b8:31:2b:4d:36:50:04:50:08:e5:e6:d3:40:2a:49: 86:fd:e9:29:b4:74:a0:de:0d:a9:e7:71:15:fe:a3:57:93:5a: 8c:21:cf:ba:d3:0e:7f:5e:33:e9:18:4b:94:a5:be:0e:10:4a: 18:93:f4:de:ed:bd:27:3a:4d:57:b4:68:41:f6:e7:6e:7b:3f: e5:08:a4:aa:6b:81:69:85:9f:82:40:b6:fa:5f:0c:fe:e8:5a: a8:c0:03:9b:6b:6c:a1:3a:d3:b7:c7:7d:16:a1:78:bf:05:91: 58:25:74:13:60:0a:c5:7f:bf:f1:aa:2b:ed:df:d5:1a:8c:9b: 5a:b3:7b:6c:1e:46:ec:e4:74:52:53:cf:98:44:57:ec:36:63: 9b:9e:c4:69:f9:00:f0:a3:18:41:b5:46:5d:7b:74:a3:f9:a9: 52:32:89:96:ff:fe:0e:88:c9:1f:f1:be:5a:ba:72:0c:2d:ce: a7:33:ec:9a:7c:00:2d:a1:73:e2:ce:f4:d6:83:32:e8:eb:79: 0b:90:f3:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDcTZ01iOATIdp3JWssq/T7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwOTI2MDYwMTA5WhcNMjYwOTI3MDYwMTA5WjAzMTEwLwYDVQQD EygyNDk5OThhNjUxYmFiZDg2NDQzYWRjNjYzNjE4Nzg2OTc4YTMyNzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg2FhjI9Fvy6mFcLooGntKQhyxZu l3WJVaKJAkcIXPp23DeON+ceu+Or3HkFO6SBV1IbOo4xrhsVUd8hmkNS/ZVS/bpV sOPOjD6bCP+deuMzPAo1d5ScuofZoCQwMOovWCBM8KVgsC87pcJlHjOHNIAw/o/B PK6Mqlq/vFbVGKDC4deKXN98hgik0EKBEVoxsLGxfiv7ybmYDDWaB9nZNM1ZsrCd LPaF6iFD8kbYzIlCNeGp0y8wj3Me9UoL0KL8sM1OLwDxfkA7dhzxYlkyn5NvX0+M 7aUya6JD0PGB1URUYch0wz0X/Tb54YrQKqsPn3by79K1jbiW0/zOfCITQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSZmKZRur2GRDrcZjYYeGl4oycZMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYZi5KLx kamYLIoMXLg0xN1S+8m+6xzC4Zvi3sjEVx/dbds64n9La96oIrCIofZh3ARYbNgF pbyXuDErTTZQBFAI5ebTQCpJhv3pKbR0oN4NqedxFf6jV5NajCHPutMOf14z6RhL lKW+DhBKGJP03u29JzpNV7RoQfbnbns/5QikqmuBaYWfgkC2+l8M/uhaqMADm2ts oTrTt8d9FqF4vwWRWCV0E2AKxX+/8aor7d/VGoybWrN7bB5G7OR0UlPPmERX7DZj m57EafkA8KMYQbVGXXt0o/mpUjKJlv/+DojJH/G+WrpyDC3OpzPsmnwALaFz4s70 1oMy6Ot5C5Dz4w== -----END CERTIFICATE-----Generated at Sat Sep 26 14:56:03 2026 by rpki-client