$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: HqiGEeEa5jIfzRbkg0rJBE353qQ/+Nm6N/xL0T2eb+A= Subject key identifier: C3:CD:40:0B:1D:36:7B:D5:9F:3E:E1:97:50:39:87:4E:14:D5:9C:53 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019E1DFE1A6FB48D4794E332CF2E3C47A7B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 198D Signing time: Tue 12 May 2026 21:00:52 +0000 Manifest this update: Tue 12 May 2026 21:00:52 +0000 Manifest next update: Wed 13 May 2026 21:00:52 +0000 Files and hashes: 1: TjYcJALyGbmW-x31ry7QsUvdQtQ.roa (hash: knhLPKVdJjwTBCuKiy0BNSL8TQGPgiu2tFYYWRO2204=) 2: baEkayAg80jmYDBU-ExaHSLpuaI.roa (hash: nAErtQy9uElHFQjfJS5ckQ4epiwL6hvpsQEYN9BEeqw=) 3: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: cSLFhvGNhj08M3II63nqQpdPQKZaQbBYLdVKa77CKnU=) 4: cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa (hash: W7uHnT9KoPvCIjHy/wyMQaAb03AUeFyxBB7Do1XvIvI=) 5: ebSZBecc7df92SgP59-y12trz8Y.roa (hash: eWLHCXv7jbIrxX4dZcu1pV/1wCL3MzIiRwN/vf2jitQ=) 6: nmGtGkrhBfqxDaqozTHEU7woU_8.roa (hash: myNlScXFtUNhqDOYxLDED2mEeSRwem2M2mluAw2qbGU=) 7: oRALtbh2nuCRd23sDYqfy35X5z0.roa (hash: jC6NP1kM59PVY3etFPE/j9NV0XqouvnOb2E4RPSGrX4=) 8: pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa (hash: 5cp4WqQX2Fq4/2gG8NNXNJQnzkTkhV+uz8kgPR8ik8M=) 9: pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa (hash: BVbd5i0a2oHy3QrO+gV4ifjJEQxi06QcvV9UBgsyx9E=) 10: rWySjgHmxws3lM6jmie75S8CDBw.roa (hash: At0oBHsNt1VyqDJTW3hMzgCfUrv9SJ/hPxisShjHIa0=) 11: yYjK6TLqyOsG3tmiBYFMP1Aoexg.roa (hash: 3ZWyZKdoBkHem28rqJLRhRuGSLJ2oX1IHJZHOWmP0p0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:1a:6f:b4:8d:47:94:e3:32:cf:2e:3c:47:a7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: May 12 21:00:52 2026 GMT Not After : May 13 21:00:52 2026 GMT Subject: CN=c3cd400b1d367bd59f3ee1975039874e14d59c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:54:56:f9:d7:e3:42:23:de:c5:a5:9f:d3: 4c:1c:94:e1:e4:19:dd:98:38:9b:b8:64:af:5d:cd: c1:69:bb:42:5f:e4:9c:90:5e:be:f0:f6:b9:99:91: db:c8:25:af:c4:3a:ef:e2:bc:92:87:7e:a3:4e:43: 7c:ab:4b:61:86:82:8a:16:e1:26:2f:8d:e3:b1:d9: 15:d9:90:db:9e:62:33:c2:d4:94:38:39:5a:91:2d: 77:df:1b:87:4d:ac:fc:6e:ce:ac:9d:7e:36:aa:df: a6:9b:0f:43:3f:c0:5c:1a:9e:af:ef:91:8e:79:5a: a0:0e:44:cd:b7:d3:03:8e:34:24:aa:e4:63:2f:9a: c5:09:5d:0d:a2:34:8c:b0:bb:56:2b:a9:9e:67:33: b5:d9:80:e5:cb:8f:0b:18:a7:bf:bc:c9:1d:00:d3: 52:8c:15:36:35:56:92:b6:7d:9b:9c:27:a5:fd:b9: 19:b1:32:92:44:2c:d0:bc:77:82:86:53:24:42:0b: ed:be:26:bb:65:90:fc:7e:40:e9:7d:39:6a:8c:87: 42:4d:bb:16:54:20:97:ce:bc:15:1e:36:c7:ad:64: 21:d4:af:29:1a:68:0c:0a:9e:56:26:40:2f:c3:8f: 78:f6:a5:49:60:d7:60:92:1d:4e:78:b8:2c:2b:8f: 67:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CD:40:0B:1D:36:7B:D5:9F:3E:E1:97:50:39:87:4E:14:D5:9C:53 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9a:77:f9:b1:07:83:e0:99:81:d4:83:a1:1f:56:d4:85:f8: 93:b1:73:61:8d:fb:06:f0:26:b7:de:28:b0:33:71:e6:43:62: ef:d3:bd:24:a7:9b:07:32:02:a3:5f:83:09:10:4f:c1:94:aa: 7c:df:56:fd:39:8d:2e:74:e0:06:23:1f:06:2f:45:8e:09:d5: 2e:94:79:a9:69:f6:7e:71:3a:61:b4:30:ce:fd:09:18:4f:e7: a2:9b:83:00:a2:89:44:63:5d:e8:31:2f:fa:c8:a2:3f:ac:36: a3:8f:8e:35:e8:e4:92:b2:10:df:b0:df:91:71:7e:0a:31:de: 68:38:cc:55:89:4a:ef:9e:88:1d:d8:bf:47:5d:22:b2:5f:7b: 7f:e9:e5:0b:7e:30:2e:2a:dd:73:56:7d:64:d9:61:ff:49:da: 37:2c:f8:db:34:be:9b:31:df:3b:c0:46:f8:af:e1:4c:56:b1: 5a:60:c1:1b:ed:09:fe:9b:92:4c:a9:8d:81:f9:dc:de:d0:5e: 0b:b3:69:c8:75:7f:67:54:da:de:1b:50:5f:ee:b4:83:4b:51: 3e:5d:40:a8:7c:07:93:f4:fc:bd:54:7c:c5:a4:4e:e2:e3:25: b0:4c:c2:b1:f6:98:d8:2f:e4:f4:87:40:32:68:c1:b8:34:0a: 4c:1d:94:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/hpvtI1HlOMyzy48R6e1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwNTEyMjEwMDUyWhcNMjYwNTEzMjEwMDUyWjAzMTEwLwYDVQQD EyhjM2NkNDAwYjFkMzY3YmQ1OWYzZWUxOTc1MDM5ODc0ZTE0ZDU5YzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjFUVvnX40Ij3sWln9NMHJTh5Bnd mDibuGSvXc3BabtCX+SckF6+8Pa5mZHbyCWvxDrv4rySh36jTkN8q0thhoKKFuEm L43jsdkV2ZDbnmIzwtSUODlakS133xuHTaz8bs6snX42qt+mmw9DP8BcGp6v75GO eVqgDkTNt9MDjjQkquRjL5rFCV0NojSMsLtWK6meZzO12YDly48LGKe/vMkdANNS jBU2NVaStn2bnCel/bkZsTKSRCzQvHeChlMkQgvtvia7ZZD8fkDpfTlqjIdCTbsW VCCXzrwVHjbHrWQh1K8pGmgMCp5WJkAvw4949qVJYNdgkh1OeLgsK49nQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPNQAsdNnvVnz7hl1A5h04U1ZxTMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5p3+bEH g+CZgdSDoR9W1IX4k7FzYY37BvAmt94osDNx5kNi79O9JKebBzICo1+DCRBPwZSq fN9W/TmNLnTgBiMfBi9FjgnVLpR5qWn2fnE6YbQwzv0JGE/nopuDAKKJRGNd6DEv +siiP6w2o4+ONejkkrIQ37DfkXF+CjHeaDjMVYlK756IHdi/R10isl97f+nlC34w Lirdc1Z9ZNlh/0naNyz42zS+mzHfO8BG+K/hTFaxWmDBG+0J/puSTKmNgfnc3tBe C7NpyHV/Z1Ta3htQX+60g0tRPl1AqHwHk/T8vVR8xaRO4uMlsEzCsfaY2C/k9IdA MmjBuDQKTB2UQg== -----END CERTIFICATE-----Generated at Wed May 13 02:23:20 2026 by rpki-client