$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: UtumQmvcj0PZfctk+/vPuHzUn9bcON+Y5qtGkyxQQLo= Subject key identifier: AC:29:8B:03:90:D4:B5:4E:43:5E:96:CF:3F:2F:C4:A3:46:00:8B:0A Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019D284D5962FCE740F0A6A1EA8148023984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 1966 Signing time: Thu 26 Mar 2026 04:00:50 +0000 Manifest this update: Thu 26 Mar 2026 04:00:50 +0000 Manifest next update: Fri 27 Mar 2026 04:00:50 +0000 Files and hashes: 1: 1-j2_96SOx1ukEFdit_O2T_yb5bw.roa (hash: uAjesrCnFYS2clX9EiMVgOpOxvLDGRa2pdi/Q+Yh8ko=) 2: 1-nNXdlWd7N6m82YTHjIM8iqVL8E.roa (hash: s3AoaeSVezr+WMzWPVC3CpYW+KDhdj/4ARSrxY5Tk/w=) 3: ANTFJ4BzMqza6ZI-Fr_L18YA0Xw.roa (hash: c+s8a2xq9a8wP0AN9c3of5I2bj0dvSL1hF6a6ZH0OhQ=) 4: BIHuSmhdOpjtcnW87Zk9AiIeUMQ.roa (hash: aXn6G6JWMLGKSkwGd9D9rKmqQqkEcgFv2BEiiTxQpl0=) 5: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=) 6: MloCUaQjIaff5rD0I_V7IQUgMHA.roa (hash: z4QEYPJ8c5S4F1m2QTf25snrDWXe9stPlhx7/VyKtfE=) 7: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=) 8: QMUp40kkrX2lJ_rIuAHzjFB0NVE.roa (hash: fV/Lnx4b62P680dfjuQ/4qY/FhgqUMdLzbc7uTbhNeY=) 9: TQhyBdChk9_Rhmq0Oldtic0fnDg.roa (hash: c+9ScdzkUwx5Y7oDpf+Ep09dPjsRmf9SsgMbyHlrEYk=) 10: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=) 11: _UxWHzYGn4yMpwKtCiHPPTg7qik.roa (hash: pQVqzd45w1mVuJHpnE6n+ZNlFfYK2qMT5pCdBeA0rL8=) 12: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: PuydU57x9ZwFOkYlnhfzt1mVz/TRUhYTJKe2KP7+hcg=) 13: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=) 14: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=) 15: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=) 16: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=) 17: xch1OTrgwhompJ-XKic-UzKZ2zQ.roa (hash: mlOvwHkD0mxwoqmcv+JuS61IKgE7oNpZSE3msWqExWA=) 18: y2YOxq73wxqpsD0YZ8pOXdLitLk.roa (hash: c4b5W1/zwM1DY57UKacEsED6Yc4dNYwQiO/KOLoutlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4d:59:62:fc:e7:40:f0:a6:a1:ea:81:48:02:39:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Mar 26 04:00:50 2026 GMT Not After : Mar 27 04:00:50 2026 GMT Subject: CN=ac298b0390d4b54e435e96cf3f2fc4a346008b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:67:4b:94:21:68:ed:74:60:cb:7f:60:57: bd:89:e0:e8:a6:79:fc:5e:e9:f4:de:32:f0:70:a4: 36:37:d5:3c:59:f7:cb:72:fe:54:a1:75:27:e6:40: f3:d0:a0:70:77:ca:21:5a:4c:40:34:90:a3:b8:b7: e7:bb:2a:8f:11:26:4f:9f:72:5d:9d:d9:ac:70:06: 08:bd:9a:78:aa:24:df:bb:6c:2d:19:66:71:f7:df: 02:8e:1e:97:b6:39:32:36:89:4c:e0:69:c7:48:e9: f4:59:b4:d7:fb:70:79:2b:96:bc:c4:a1:ce:5f:af: 54:05:97:80:93:7f:06:cf:47:17:3c:de:56:d3:d0: a6:e6:43:5d:87:09:27:c1:89:c1:0c:f8:88:72:66: 8c:2c:20:d3:17:c6:85:8a:45:6c:f9:75:94:91:53: fb:3e:22:10:99:21:b5:84:a6:52:7f:03:d2:93:37: 9f:4b:36:d7:01:95:17:f9:fd:dc:ba:87:95:42:db: 9b:56:fd:12:48:cd:2e:81:2c:78:a9:8a:9d:56:8c: e4:7e:4f:57:42:42:97:7c:67:fb:72:bf:fd:dd:69: 69:39:f9:35:a2:2f:8a:9e:4f:ec:d7:40:7c:71:27: 0a:b4:4f:ba:82:6f:0a:de:17:25:72:6f:5f:3b:25: 46:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:29:8B:03:90:D4:B5:4E:43:5E:96:CF:3F:2F:C4:A3:46:00:8B:0A X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e0:cd:77:c1:9f:99:5f:74:c5:75:24:42:26:37:36:8e:13: 48:7d:97:f0:47:3a:d4:b4:31:78:6b:38:e2:c4:d3:50:50:61: ed:39:5a:49:c0:48:65:c0:42:7c:61:f9:85:72:df:2d:d9:21: b4:41:e7:30:95:5e:55:9f:54:f0:d3:77:1f:74:9a:f0:04:90: 6b:96:24:99:3c:d6:9d:6d:eb:4f:4d:f0:52:16:91:af:b4:3d: 10:5f:3d:f3:c5:8c:12:9a:46:48:eb:1a:03:ba:bf:49:19:0a: 52:ae:71:7f:66:41:0d:cf:36:82:c9:2a:18:af:d5:bd:b5:d3: 5e:45:c8:3c:9f:9b:63:25:f9:d0:c7:f6:fb:19:a7:56:8d:d8: 3a:78:69:d2:3a:e8:96:c2:73:c1:94:ca:bf:3d:63:51:e0:b0: 05:01:60:73:f3:0d:51:75:8a:4d:b8:ea:d9:c8:01:f3:ac:45: cf:03:6b:f4:aa:61:9e:f5:e1:57:6f:3a:f4:08:73:8c:85:2b: cd:f4:9b:25:3d:1e:92:f9:a5:25:af:03:c6:43:61:2e:68:94: a5:b0:6d:2c:be:e9:45:79:cf:77:a6:bf:64:f8:41:d8:30:86: 43:34:56:8d:48:4b:d9:01:a9:54:9a:35:2c:29:c6:14:2a:b7: 9f:d1:62:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oTVli/OdA8Kah6oFIAjmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwMzI2MDQwMDUwWhcNMjYwMzI3MDQwMDUwWjAzMTEwLwYDVQQD EyhhYzI5OGIwMzkwZDRiNTRlNDM1ZTk2Y2YzZjJmYzRhMzQ2MDA4YjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4ZnS5QhaO10YMt/YFe9ieDopnn8 Xun03jLwcKQ2N9U8WffLcv5UoXUn5kDz0KBwd8ohWkxANJCjuLfnuyqPESZPn3Jd ndmscAYIvZp4qiTfu2wtGWZx998Cjh6XtjkyNolM4GnHSOn0WbTX+3B5K5a8xKHO X69UBZeAk38Gz0cXPN5W09Cm5kNdhwknwYnBDPiIcmaMLCDTF8aFikVs+XWUkVP7 PiIQmSG1hKZSfwPSkzefSzbXAZUX+f3cuoeVQtubVv0SSM0ugSx4qYqdVozkfk9X QkKXfGf7cr/93WlpOfk1oi+Knk/s10B8cScKtE+6gm8K3hclcm9fOyVGtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwpiwOQ1LVOQ16Wzz8vxKNGAIsKMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAODNd8Gf mV90xXUkQiY3No4TSH2X8Ec61LQxeGs44sTTUFBh7TlaScBIZcBCfGH5hXLfLdkh tEHnMJVeVZ9U8NN3H3Sa8ASQa5YkmTzWnW3rT03wUhaRr7Q9EF8988WMEppGSOsa A7q/SRkKUq5xf2ZBDc82gskqGK/VvbXTXkXIPJ+bYyX50Mf2+xmnVo3YOnhp0jro lsJzwZTKvz1jUeCwBQFgc/MNUXWKTbjq2cgB86xFzwNr9KphnvXhV2869AhzjIUr zfSbJT0ekvmlJa8DxkNhLmiUpbBtLL7pRXnPd6a/ZPhB2DCGQzRWjUhL2QGpVJo1 LCnGFCq3n9FiJg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:58:35 2026 by rpki-client