$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: hz2tgJa9udxohuz/KBw8ODRY3UbAYaZWeSHG/noCGto= Subject key identifier: CC:FC:BF:AB:24:CE:B5:8B:F2:42:76:98:EE:4E:AE:0A:C3:24:29:9C Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019D27DF90950224EC87E6467BFAB56D9B57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 1997 Signing time: Thu 26 Mar 2026 02:00:56 +0000 Manifest this update: Thu 26 Mar 2026 02:00:56 +0000 Manifest next update: Fri 27 Mar 2026 02:00:56 +0000 Files and hashes: 1: 19Q2Dwhtepvh3WfcRXocelqULL8.roa (hash: 5gim+c2a2kpRDHritwN6RumGls9psmp/ew2vMiVkt54=) 2: 4SJJucH40Dscf3Ue62wtU0DfH6E.roa (hash: QGCBTFVXrzql7PtcPo7oGZ6zg9NODVzu4Qj7AspLapc=) 3: 9NFbvxj2w7VM6vxKq1Roz_jojjQ.roa (hash: kit6Kwkn9tJ2JznDgHVoh92jAz03quG3UuogXP7lLQY=) 4: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: IPCFlcnPeCArBKYwUBNeQWEX2O5uXzgx/aZmdepOprE=) 5: Fm8UQDDxRj3AapGVONseve1Vu_c.roa (hash: /MMrY/Cw2vuv3Ihg0AIYNFIDKJbp4cDD3gVv3uf72Gk=) 6: GM3ERJU6CIy7dwdH0zdNwprJcyY.roa (hash: IlzjX1IkwyvBmzjj9sSoXNpn+4Aebe2rR4YjxBC4Rpw=) 7: HOHhNiuwB0cMh5RUFF-1lXt5zw8.roa (hash: k0AGLs0YgoPPmCz6XJ6TT1Z/0Wgwq5Qa6Ym6t+Mb83g=) 8: HmuiSy6DiqyFIS3hKu7LdivnQl0.roa (hash: AUDFtOT4GZ2PlVwxPCH5qqp0l2hQvma3gFblT+w1Ox0=) 9: IKu2yGBkoazXpkiiazb1p4jf3OI.roa (hash: sGPG+CicCuj6ii9AJ1UODtX4hYRlCD8JM7C2FLI0Fac=) 10: PQMgW1HRfhVCC4A0rqKkLRtSKgI.roa (hash: NWh4sEhWXJV1zztcEC8I1G7mQeHGMVng7Y6sdknUnN0=) 11: RahpEOjDk8JGqVaMnjYNHjqMCDk.roa (hash: 3i16wtfdxMwVP4jwU43s2Etd+QzTAEC6HDDbzF8Ohw4=) 12: TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa (hash: tFzELYSe05eXp55I4gzQwEHo9uvcyGGItcMS2z7uaLI=) 13: fEta2vA_p4CjY1pDg-RimYq34mY.roa (hash: b9obHJSS4Jb/9AwsjyBqdVleI2tLbis3YKXXfB+zeLk=) 14: fuRxNjIE-qr9KmN8J_hE59ecEq4.roa (hash: 3CHRC0a/akTbPAJFu8OuUkQRKmDMyUzzK4GIXg8sWws=) 15: oe9__c4vQI-1sLDyADedRP1CO-k.roa (hash: oY6L5eGC8aMPjhIdr6obVmsLpQESXuitNzVikpRUca0=) 16: pXmxylidYiS8qdJ3VaZ9yLskNbE.roa (hash: TusGBQalo9CLc6zboQZGITSpw51x7npY2VYZcmB0+eY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:df:90:95:02:24:ec:87:e6:46:7b:fa:b5:6d:9b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Mar 26 02:00:56 2026 GMT Not After : Mar 27 02:00:56 2026 GMT Subject: CN=ccfcbfab24ceb58bf2427698ee4eae0ac324299c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:22:d2:94:d6:19:a8:2e:92:74:cb:dd:b2:4e: 27:12:58:ac:c2:3e:75:3f:a8:f2:38:47:72:d6:f6: d6:13:50:3d:d3:9a:07:d9:34:c0:e6:7e:5b:d2:25: 07:4f:59:29:e5:91:e8:e4:16:6d:72:60:3c:8b:34: 69:ae:ab:c5:68:00:34:8e:95:e0:29:37:2a:8d:73: 18:1b:58:b3:ff:4a:58:22:46:70:0f:e2:e5:3e:c9: 5a:37:e1:1a:3f:85:16:9e:03:50:8c:d1:a3:72:a5: 22:af:af:8a:4d:80:61:e7:36:6c:68:80:6e:06:bd: de:d9:f3:8a:d0:1a:66:01:f8:85:ed:57:6d:c1:25: c7:c2:58:2d:ba:a2:c9:b4:78:5c:45:54:96:1e:f3: 96:b4:80:3a:c6:8c:48:2f:00:3a:cc:38:c2:6e:f8: 40:e6:00:a7:f5:08:9a:fd:59:eb:6c:3f:19:73:0f: ab:a6:b8:44:5c:27:2f:f2:a9:d0:39:7f:c0:5e:a6: 60:99:13:83:eb:d0:11:79:bc:c8:20:71:82:b7:7f: de:84:2a:32:73:3a:76:35:1d:76:d8:38:69:19:e7: d9:7a:cf:4e:29:91:db:c7:f9:4c:80:21:86:dc:a0: 39:59:1d:e5:b4:98:41:5f:8c:8a:57:20:d8:0d:9b: 28:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FC:BF:AB:24:CE:B5:8B:F2:42:76:98:EE:4E:AE:0A:C3:24:29:9C X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b4:74:e6:59:2a:7b:ed:a6:24:fb:02:6f:f7:b2:9b:05:9e: 54:8c:5c:f1:55:69:ba:fa:03:a6:75:e9:3a:b4:71:2a:0d:bc: ff:ce:46:3c:e0:49:1b:85:ad:91:6c:6e:2c:51:21:88:e3:3e: 19:85:f7:e6:38:4e:ff:72:d9:7c:ce:36:92:34:51:d4:dc:ca: 9f:84:db:78:f1:1e:76:16:44:1a:5c:a6:f0:27:f7:d2:a4:ff: 48:28:c2:4a:fe:3c:3d:51:fd:35:30:1e:be:97:47:ba:66:d3: 7e:36:b4:32:38:ed:79:4a:22:83:cf:cd:4e:ae:46:2b:59:6a: d3:94:4c:a7:60:6b:1d:af:61:b0:7b:e4:8f:66:7b:1d:be:b1: d3:ec:16:25:3c:c1:76:67:0f:f7:e8:bf:57:8a:9a:83:88:a8: 2b:f8:05:f8:f6:86:55:2b:a5:07:1a:1a:da:13:ad:a8:fe:83: 52:25:40:3e:82:26:21:c6:86:09:1b:76:c1:f6:2a:ed:9b:65: 04:89:56:49:3b:e9:82:ea:9f:0e:48:87:9e:b8:b0:43:4e:21: 76:c1:cb:21:8d:98:b2:17:39:fc:5d:b9:cb:40:5e:84:0c:47: 89:c2:cc:99:87:30:df:c7:64:6e:b0:69:40:74:d5:27:68:fe: f4:73:78:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0n35CVAiTsh+ZGe/q1bZtXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwMzI2MDIwMDU2WhcNMjYwMzI3MDIwMDU2WjAzMTEwLwYDVQQD EyhjY2ZjYmZhYjI0Y2ViNThiZjI0Mjc2OThlZTRlYWUwYWMzMjQyOTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSLSlNYZqC6SdMvdsk4nEliswj51 P6jyOEdy1vbWE1A905oH2TTA5n5b0iUHT1kp5ZHo5BZtcmA8izRprqvFaAA0jpXg KTcqjXMYG1iz/0pYIkZwD+LlPslaN+EaP4UWngNQjNGjcqUir6+KTYBh5zZsaIBu Br3e2fOK0BpmAfiF7VdtwSXHwlgtuqLJtHhcRVSWHvOWtIA6xoxILwA6zDjCbvhA 5gCn9Qia/VnrbD8Zcw+rprhEXCcv8qnQOX/AXqZgmROD69ARebzIIHGCt3/ehCoy czp2NR122DhpGefZes9OKZHbx/lMgCGG3KA5WR3ltJhBX4yKVyDYDZsolQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMz8v6skzrWL8kJ2mO5OrgrDJCmcMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7R05lkq e+2mJPsCb/eymwWeVIxc8VVpuvoDpnXpOrRxKg28/85GPOBJG4WtkWxuLFEhiOM+ GYX35jhO/3LZfM42kjRR1NzKn4TbePEedhZEGlym8Cf30qT/SCjCSv48PVH9NTAe vpdHumbTfja0MjjteUoig8/NTq5GK1lq05RMp2BrHa9hsHvkj2Z7Hb6x0+wWJTzB dmcP9+i/V4qag4ioK/gF+PaGVSulBxoa2hOtqP6DUiVAPoImIcaGCRt2wfYq7Ztl BIlWSTvpguqfDkiHnriwQ04hdsHLIY2Yshc5/F25y0BehAxHicLMmYcw38dkbrBp QHTVJ2j+9HN4yQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:13:13 2026 by rpki-client