$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: 5kw0VBbG/aNtNTBbKySiFYXmQ+TORLtqFJN4lb6UrEw= Subject key identifier: A5:2E:65:BB:CE:AC:1A:47:F3:34:D6:11:D7:B8:B8:EF:8E:3B:E7:9F Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 01A0D3EF23C01F5CAD2A39BD09E7A552882C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 17D3 Signing time: Thu 24 Sep 2026 15:00:59 +0000 Manifest this update: Thu 24 Sep 2026 15:00:59 +0000 Manifest next update: Fri 25 Sep 2026 15:00:59 +0000 Files and hashes: 1: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (hash: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU=) 2: 6v3_UhJ7MUeUjwMs45OUb0uqJnE.roa (hash: HmoRuDjbo63Mi/Ve6hqQucNjqbfAMk5jwYB8klrtmn4=) 3: 7geGfuYNebN29vuSfOy_GV5rEnI.roa (hash: HCwsGLsuz7RM9sjbDLuG2DbSJJu30k5afVWUwaIVEjo=) 4: B08LenF7yMg-N_h3Vsro44gwUvU.roa (hash: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk=) 5: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: osIai3Itdjl+/InsiFaapgUT1u4SukLUzc+5EbusgQc=) 6: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (hash: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg=) 7: HZdvkaCB4ILKrJSpSkIYqIrfW1k.roa (hash: FQaM849Za5tChtOyzAM+7VK73HDYttogAR0AVk6y8iE=) 8: MNqklcC3mDcAx_nY7EwvhOa8X9U.roa (hash: y5cME2lImwSwJDF/yo1BlC7NlPtCoBG+Fen0gJCa020=) 9: OeSFxPx28HOZ5SP5OFGE4eN9Dkw.roa (hash: IUd/UJp2vz5KGesc4FkG7eW+Uztewk/WazlNqWRZVZg=) 10: P2O8JsbQrSj7hbLlWPhRJkg8f3g.roa (hash: 97KV+nHVxx1mm0wDQuutRXEyv0WrBkuC6RQafxbvZg8=) 11: RYbdj0NLewtXWCgXlYi3OlXXkB4.roa (hash: 81qii9MMa1xqhNFHKwnbqG3tyFuEh9+IuizOP4tFZBA=) 12: RvSp46XarM4KQjsjmd8W8ihdY60.roa (hash: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY=) 13: YLjsu-ME555sTWq6xQaBk12RTHI.roa (hash: iZDrgab1o/HZT8v/s/c94kd+y7+rf2+jsai5MRtDr7U=) 14: YXJuTkaR2hNWDD-AQJZEPPH5ZUM.roa (hash: 0tbVorz/zIP5tFqTzCgpmpkbjskH9+GPr5OhsxgbofA=) 15: beJcu8jp7XoMcK6rAEcUFSDQrYI.roa (hash: zYxTg1jfn9EG78umE8ZucP90B5Y2rJZ1b3uK6DJnlYk=) 16: fAM3pa0EE7jiHrAFo6eOqMsPdek.roa (hash: jl6qmU6yzE54DspheNxyX+IEtosMtIzC14e7gTFFKCk=) 17: nu5qc3FurPA7ene0-Ao16QprmLc.roa (hash: jAdY6e3psk45qZp7fo2Mwz+KQFyicWuxyaHfYwP1ULM=) 18: oOrjHph7LCFfAGNpngQ3mhai8xA.roa (hash: mgAQXj5D8f8s+hAa9EBd/XiB7pdR7qEvc/zDtmhktUc=) 19: wW5pOo-Yi2Fr6-80PQNsGsyzCh0.roa (hash: XuJE9f/EqSb5uZJo5N71rfDUSYnvs1YtjC46AbxvWx4=) 20: wggGh2w-6sQB6ovzilMkq6DwW4c.roa (hash: PBLu8QpYUa8mUZdHc+q4W4ziy06dQNRUZGYN3WcmH2U=) 21: zKosVsnnSwnan5xK-AKXc-6q3RA.roa (hash: AR+C5oOYJwVvPymmFfXk0qR5THoCvoOhDXOz0Nd5wXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d3:ef:23:c0:1f:5c:ad:2a:39:bd:09:e7:a5:52:88:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Sep 24 15:00:59 2026 GMT Not After : Sep 25 15:00:59 2026 GMT Subject: CN=a52e65bbceac1a47f334d611d7b8b8ef8e3be79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2a:dd:ad:32:12:b8:4e:c0:e1:13:5b:52:5c: ac:ff:49:62:0e:49:8a:60:4d:9b:4e:07:7a:0a:04: df:ad:4d:5b:59:09:93:8b:36:f8:0a:3c:41:ba:4b: 1f:13:42:92:4d:72:29:a5:e6:4c:41:18:28:ad:20: bb:76:e9:62:4a:29:f2:0f:b4:2f:15:49:79:5c:64: 4b:6e:8d:21:ad:1f:82:49:81:c3:63:ee:a8:b9:57: da:b6:a4:f4:9f:54:8b:80:fb:ac:58:76:5a:a4:7a: 55:cd:be:25:9a:27:74:40:19:a3:9d:ce:e0:f3:d2: 97:55:7a:07:a1:95:53:0a:7b:c7:a9:bc:62:e5:7e: 0f:d6:7c:f7:ac:cf:a0:1c:fd:c7:25:4c:5d:60:43: 59:1d:62:0c:38:b5:08:55:4c:59:46:66:1c:64:e4: 35:94:b4:65:44:cf:b3:57:da:7b:c7:7b:31:51:68: 83:07:6d:ff:c7:45:c3:08:c5:9b:77:df:f7:ee:75: 9a:d8:b5:d3:37:5e:e8:93:32:e8:eb:d4:b4:22:e3: a7:0e:b3:ea:fd:fa:da:d4:f0:eb:b7:08:8b:1c:6b: cb:36:3c:eb:75:7f:2c:46:22:2e:4f:a4:56:7f:9b: b9:52:a5:2e:c9:50:70:5d:b1:a8:3a:77:fd:a8:f6: 7c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2E:65:BB:CE:AC:1A:47:F3:34:D6:11:D7:B8:B8:EF:8E:3B:E7:9F X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:62:4e:1e:3d:cb:0f:70:70:57:35:7b:68:7b:97:40:59:56: 64:7b:c7:93:af:4f:88:da:61:86:d9:22:a7:b6:28:d1:78:05: 64:cc:29:f9:f2:8b:a4:44:6e:97:0e:59:02:69:12:75:48:b1: 60:b7:c3:bd:f5:69:58:39:bb:34:fa:ff:84:6f:53:a7:d8:63: 2f:79:57:62:56:25:5a:2e:dd:da:f9:05:8d:98:84:bb:11:74: b1:d5:14:e4:fa:6d:fc:c6:6e:d5:83:72:81:0b:c3:2d:1b:1f: fc:89:40:71:af:04:cf:56:30:6d:f5:d6:57:38:4f:6a:d9:8e: fd:73:8c:f0:7f:8d:d7:8a:66:2a:b3:75:9b:f4:d6:f2:cf:59: 9d:b7:eb:2c:6f:e6:20:c1:b3:ea:ea:01:66:ba:5b:2a:af:85: 80:c7:ee:93:62:b7:fb:51:48:b7:e9:74:d0:bf:ba:1d:eb:2c: 7d:c9:5b:65:f5:64:97:48:67:3d:5e:a6:a4:92:07:e4:26:9a: 9b:d4:93:48:3c:ba:47:5b:b5:28:27:3c:9f:aa:3b:f9:6d:2a: 02:95:27:c2:f2:51:c0:aa:23:64:0d:59:48:c9:37:02:87:d1: 15:d2:a3:27:69:f2:dd:78:e2:51:71:96:b1:ad:d2:24:df:ad: 82:11:e0:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDT7yPAH1ytKjm9CeelUogsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwOTI0MTUwMDU5WhcNMjYwOTI1MTUwMDU5WjAzMTEwLwYDVQQD EyhhNTJlNjViYmNlYWMxYTQ3ZjMzNGQ2MTFkN2I4YjhlZjhlM2JlNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSrdrTISuE7A4RNbUlys/0liDkmK YE2bTgd6CgTfrU1bWQmTizb4CjxBuksfE0KSTXIppeZMQRgorSC7duliSinyD7Qv FUl5XGRLbo0hrR+CSYHDY+6ouVfatqT0n1SLgPusWHZapHpVzb4lmid0QBmjnc7g 89KXVXoHoZVTCnvHqbxi5X4P1nz3rM+gHP3HJUxdYENZHWIMOLUIVUxZRmYcZOQ1 lLRlRM+zV9p7x3sxUWiDB23/x0XDCMWbd9/37nWa2LXTN17okzLo69S0IuOnDrPq /fra1PDrtwiLHGvLNjzrdX8sRiIuT6RWf5u5UqUuyVBwXbGoOnf9qPZ8MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUuZbvOrBpH8zTWEde4uO+OO+efMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2JOHj3L D3BwVzV7aHuXQFlWZHvHk69PiNphhtkip7Yo0XgFZMwp+fKLpERulw5ZAmkSdUix YLfDvfVpWDm7NPr/hG9Tp9hjL3lXYlYlWi7d2vkFjZiEuxF0sdUU5Ppt/MZu1YNy gQvDLRsf/IlAca8Ez1YwbfXWVzhPatmO/XOM8H+N14pmKrN1m/TW8s9ZnbfrLG/m IMGz6uoBZrpbKq+FgMfuk2K3+1FIt+l00L+6HessfclbZfVkl0hnPV6mpJIH5Caa m9STSDy6R1u1KCc8n6o7+W0qApUnwvJRwKojZA1ZSMk3AofRFdKjJ2ny3XjiUXGW sa3SJN+tghHgDQ== -----END CERTIFICATE-----Generated at Thu Sep 24 19:05:10 2026 by rpki-client