$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: h7KAW04qxRE0E8TMaqQaFJTB40BtiAPV8tNtdsWK52E= Subject key identifier: A8:9D:CD:77:9F:D0:C4:AE:13:58:7F:0C:59:79:AB:63:76:7A:AE:3D Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019D277269178032B8ADD6362A3767A308B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 15EC Signing time: Thu 26 Mar 2026 00:01:42 +0000 Manifest this update: Thu 26 Mar 2026 00:01:42 +0000 Manifest next update: Fri 27 Mar 2026 00:01:42 +0000 Files and hashes: 1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=) 2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=) 3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=) 4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=) 5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: /gC0V65b4Wd7msXj7Jhv0ebNCH3SKA12Bcoldhr0l60=) 6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=) 7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=) 8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=) 9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=) 10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=) 11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=) 12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=) 13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=) 14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=) 15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=) 16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=) 17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=) 18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=) 19: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=) 20: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=) 21: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:69:17:80:32:b8:ad:d6:36:2a:37:67:a3:08:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Mar 26 00:01:42 2026 GMT Not After : Mar 27 00:01:42 2026 GMT Subject: CN=a89dcd779fd0c4ae13587f0c5979ab63767aae3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:20:1b:c8:49:0d:73:a8:f1:58:ce:1a:2a:f2: 0c:d7:16:c0:64:1d:a6:ac:aa:14:90:64:78:c8:41: 51:c2:25:8c:aa:aa:28:1b:11:cc:a2:a6:b0:34:10: 41:c1:83:73:40:c0:8a:4a:63:98:43:59:d8:3c:f1: d7:a5:1c:ba:61:77:ae:ef:4f:e7:e3:a7:7b:23:d4: 02:0f:05:74:6b:f2:d9:94:7d:1f:da:46:90:37:91: c7:72:d7:05:62:0e:78:5b:90:d5:78:be:b2:eb:59: 0c:64:52:fe:37:f1:fc:ba:56:b2:0a:06:df:b9:62: b4:ce:60:a3:27:fc:65:a8:0a:c4:15:c6:d8:eb:be: bf:1d:44:ac:57:e5:3f:02:83:7b:fb:cf:b7:5a:76: 8b:5b:68:eb:4c:6f:3d:d4:28:f8:f6:35:c4:35:85: e1:29:f0:bf:75:d1:4d:19:1a:b6:52:70:88:35:cd: 93:fd:0a:b9:f5:86:03:5c:0b:ac:34:29:ba:44:29: 7a:42:5d:7e:d3:5d:24:84:68:a7:0e:d9:20:e4:31: ff:27:f7:67:5b:65:f9:41:cf:c0:32:b3:09:b5:eb: f9:2f:03:5e:81:1d:d0:94:dd:a0:5c:b9:10:eb:fc: 67:f6:3b:dc:8b:70:34:c1:09:f3:ff:17:ed:04:4c: 09:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9D:CD:77:9F:D0:C4:AE:13:58:7F:0C:59:79:AB:63:76:7A:AE:3D X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:3d:c0:9f:e6:ce:78:7a:a4:19:7d:64:30:7e:76:57:c4:ab: 96:d4:13:43:3a:7f:df:cd:73:fe:ed:85:e9:63:33:19:2b:46: dc:57:b4:cb:ff:9b:65:d9:d8:af:77:d5:35:da:ab:0f:09:78: 10:2b:86:1e:ee:ec:bf:6d:b8:df:9b:28:63:dd:0f:b9:e7:52: fe:32:ce:82:06:da:3e:3d:a3:36:ad:08:95:f7:36:0d:c1:1d: e7:0e:68:f5:b5:d8:87:75:87:8e:3f:70:dc:55:d1:79:79:74: 07:9a:2f:38:a5:7e:dc:4f:48:4f:73:98:64:e2:4a:d2:8d:ae: 3f:bb:81:06:16:55:79:53:8c:11:53:24:ed:2d:2f:36:36:34: e6:2b:34:72:a7:ac:93:ae:db:fa:9f:39:9c:fb:10:87:cd:13: f0:2f:f2:9e:78:a7:4b:a8:e1:2c:41:dc:c1:e1:e2:e6:dc:95: 65:64:7c:75:bd:d8:16:17:93:38:e7:8c:0d:94:ef:9d:6c:6c: a1:56:3a:c7:34:b5:48:23:bf:0b:33:19:4e:d5:a7:12:9e:c2: 01:8d:6e:6d:8b:f8:f0:a2:39:1a:2e:28:bd:b0:d8:be:92:f1: c6:0d:3f:c4:45:46:7b:db:72:4f:29:92:aa:83:e3:06:e0:9e: 74:16:c5:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncmkXgDK4rdY2Kjdnowi5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMzI2MDAwMTQyWhcNMjYwMzI3MDAwMTQyWjAzMTEwLwYDVQQD EyhhODlkY2Q3NzlmZDBjNGFlMTM1ODdmMGM1OTc5YWI2Mzc2N2FhZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yAbyEkNc6jxWM4aKvIM1xbAZB2m rKoUkGR4yEFRwiWMqqooGxHMoqawNBBBwYNzQMCKSmOYQ1nYPPHXpRy6YXeu70/n 46d7I9QCDwV0a/LZlH0f2kaQN5HHctcFYg54W5DVeL6y61kMZFL+N/H8ulayCgbf uWK0zmCjJ/xlqArEFcbY676/HUSsV+U/AoN7+8+3WnaLW2jrTG891Cj49jXENYXh KfC/ddFNGRq2UnCINc2T/Qq59YYDXAusNCm6RCl6Ql1+010khGinDtkg5DH/J/dn W2X5Qc/AMrMJtev5LwNegR3QlN2gXLkQ6/xn9jvci3A0wQnz/xftBEwJpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKidzXef0MSuE1h/DFl5q2N2eq49MB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiD3An+bO eHqkGX1kMH52V8SrltQTQzp/381z/u2F6WMzGStG3Fe0y/+bZdnYr3fVNdqrDwl4 ECuGHu7sv22435soY90PuedS/jLOggbaPj2jNq0Ilfc2DcEd5w5o9bXYh3WHjj9w 3FXReXl0B5ovOKV+3E9IT3OYZOJK0o2uP7uBBhZVeVOMEVMk7S0vNjY05is0cqes k67b+p85nPsQh80T8C/ynninS6jhLEHcweHi5tyVZWR8db3YFheTOOeMDZTvnWxs oVY6xzS1SCO/CzMZTtWnEp7CAY1ubYv48KI5Gi4ovbDYvpLxxg0/xEVGe9tyTymS qoPjBuCedBbFPg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:52:33 2026 by rpki-client