$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: 55QrwQ3Uxh/czQ8/R0SWD2Z0Y7Rgb0k7anCRog98UEQ= Subject key identifier: 9C:4C:22:84:30:53:6E:DB:C2:C9:20:87:2E:F3:3F:51:1C:5C:8C:44 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019E1D2268185CF37EDBA8FD70279385040B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 190D Signing time: Tue 12 May 2026 17:00:54 +0000 Manifest this update: Tue 12 May 2026 17:00:54 +0000 Manifest next update: Wed 13 May 2026 17:00:54 +0000 Files and hashes: 1: 0QB4hGdmgQ23kjW-TUuSRzgPgow.roa (hash: 6Se7JsiswvT1Isj5Z4FQYmLgX+k5jQ8Jw0+TE5Kr+c4=) 2: 3MEm9k86Krnq6wM36cluZIFqGPg.roa (hash: WOCoI9HcLnxBGRGXT70xKNe6H/yvXh7uvM6Oo5uJP3Q=) 3: 3yNd9VkULSQcG9kJM76wCWWOkVk.roa (hash: UTrG8pi1T1NYTtzshkel8Sz3UcEv2ZYniPPBW76pobo=) 4: 58Z_30RmGqTf6FCU3PrZd5bogs8.roa (hash: TXG7g3IJzMwe+V0RYfLs59E5lWWsjUfuIPwuhzRGQhQ=) 5: 5Njr2mqPF2SIUOGWRVBmVFry3-w.roa (hash: nHGTx1wNDs5K/IAjCY5ZwTLkqSDSDFcvxCbH3GdIFEY=) 6: 7RtMm2j-PlOCYgaaTNEF5okOR88.roa (hash: o9nbppRhQLGi1iXoR8bUr5miDVbhGF0IKswvoLQNlQM=) 7: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: +Qjt0RJxW4lopQoSS40xzgDtel85lzJYESImPy+OXok=) 8: EJLUutCnpxs2buS5GTPPkrccxLQ.roa (hash: Bg7r4OK7LAMvfuKSI5cI+lyL8O8THM0mepcAvupe9MY=) 9: HdGHnGCkN60BBCoXO82KCD8KQP8.roa (hash: z19vVo7hZRhugrpovSRveacrmaNy4ZTI7h7Sd6ab6rY=) 10: R45A0fnYR44iqIervecEpC1ordo.roa (hash: aZsd9rhCHtUKSRJxzYhontkb9M1Vrxj8yjglwRZI5PQ=) 11: RToCJQ8Zab4JalWn6Lr2OlTkjew.roa (hash: a7mEGZfpxYM4XL6HEWYcs75/o/LzQJt7jAWEACQc+js=) 12: bsUz9cF8qY7V0b9wRwRaSnvK5Yg.roa (hash: 3c8/iFfmXp38D8OaIkv0JpI0gwPXq0roTqUMx6p8HGA=) 13: hMC8ouPga06DMuQ-1nVP3iL6_yU.roa (hash: bNzck35dxk6Gqi9cN9AAQtvE47sk8feFX04wDlazWdw=) 14: i-N27op-z7hkiqBEGNqq-kz27FM.roa (hash: rCF63L7W07eBpUJCTAH9Z0zj4zxOfcnsBXrV71Po2W0=) 15: lPSRXM3S12fXdtxx39QF8F0M4c0.roa (hash: /A9PCEl9b+e1T3TwSmFYBvVgodse+T5jSTXaVD1y3ew=) 16: mCIC92cl3T6GhQbTB55U2XIIpv8.roa (hash: BhbC6w4oNSw9OhA9aYn5uXWLSKczbBtQQF01ljl/Mwc=) 17: nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa (hash: jpd/2EiqLqE6nX/flK1O6v0FBcAaum0uMoBRy0MGwis=) 18: sHElLf18TxGbbXvAPZQGdYP7kkw.roa (hash: 3CUPvhimZaYLNzOkJz6mBA1rVGWDpwcyNJmFCreMmeg=) 19: u0kOnQHraAVT7o1gAfkttQSk4Bk.roa (hash: dgXDfIBoMWGFiXWqkB6XiT3zkjqB22mMq42VAOQ4S2Y=) 20: ump-T-Zk5smBJGROWuvq0wKLYtU.roa (hash: d7Jxavk2v4nvC9HxmOaWBHBF05sdZuO02u6a4JXxdtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:22:68:18:5c:f3:7e:db:a8:fd:70:27:93:85:04:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: May 12 17:00:54 2026 GMT Not After : May 13 17:00:54 2026 GMT Subject: CN=9c4c228430536edbc2c920872ef33f511c5c8c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b0:e2:3a:79:af:89:b0:d9:ef:05:74:a3:b0: 1b:87:47:0d:55:c3:e3:f9:82:e4:85:ae:d8:14:78: 82:bb:e2:29:71:7d:56:e1:1d:aa:48:3d:e5:6e:a3: f0:9a:bb:3d:a6:52:ee:b8:a4:9d:92:82:f5:27:6f: 9b:fe:ef:a2:e0:8a:58:2a:2b:44:27:6f:55:92:a0: 11:00:55:e5:21:bb:69:c3:23:7d:86:72:fa:fa:d9: e3:36:1d:95:80:09:00:75:cb:e9:3e:b4:96:a1:6f: 2d:f3:d6:ef:a5:99:63:e7:fd:99:4d:69:9f:7f:d3: 23:0f:22:6a:b6:d2:e8:34:ff:b9:ba:0d:95:3d:e1: 3f:a0:f3:22:3b:0d:67:b8:98:c6:7e:b8:a4:5b:6a: 8d:3c:d9:7e:33:10:00:b3:87:48:e6:20:0d:c1:e0: 16:6b:1e:d4:09:d7:82:64:f5:e9:9c:10:7f:c4:17: 5d:86:24:d5:46:a4:0a:9b:04:25:5e:f7:65:49:52: 0c:9f:10:df:2d:1c:19:95:0b:e7:c9:99:c3:9e:dd: e1:31:9f:5d:41:58:5d:d7:5d:1d:19:0c:b1:c6:d7: 32:bf:1c:09:de:e3:95:d7:34:ff:9b:2c:41:16:66: f6:2b:81:c8:91:a4:17:42:88:bd:1d:30:8a:5f:cf: d2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4C:22:84:30:53:6E:DB:C2:C9:20:87:2E:F3:3F:51:1C:5C:8C:44 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b1:6e:22:29:f1:3e:55:55:93:08:8e:a4:3e:38:dc:cb:0a: fb:fb:cb:24:7e:4e:51:3f:4c:09:34:17:cc:ed:5a:4e:d4:3f: 4c:60:3a:46:22:f4:0c:cc:02:fb:61:8c:a9:62:ba:0d:88:8a: 96:2a:93:57:8d:6a:5b:27:71:31:3b:90:c4:d5:da:d5:0a:8f: aa:7c:06:4b:95:f2:32:ed:64:f0:c0:db:f0:ac:6d:40:9d:f9: e0:4f:6a:ef:43:80:cc:5f:54:2d:4c:c3:79:7d:7b:c5:62:83: a8:d9:34:42:28:fa:8d:a6:ea:22:c9:d4:96:75:f9:35:4f:7e: 5e:91:69:2f:53:f1:16:00:13:f2:b1:77:ef:7e:bb:a6:5b:20: 6b:a2:45:92:02:f0:ca:ad:5b:a7:c9:37:60:62:9f:cb:12:bc: fd:33:e6:0d:72:c1:f0:1b:db:9d:2d:4b:2f:d9:08:38:81:5d: 2f:30:e5:21:78:02:8f:fd:da:77:b7:8b:a1:41:cf:5b:59:1d: aa:a8:c5:a2:7a:a6:83:df:8a:61:d0:10:52:f0:2c:e0:37:33: 23:26:66:41:fc:ef:65:f9:42:b6:9f:b7:b1:2f:bb:df:3d:6b: 96:e7:bf:56:a7:90:e2:f0:33:e4:ee:24:39:98:05:1e:ec:f0: 97:c2:4c:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dImgYXPN+26j9cCeThQQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjYwNTEyMTcwMDU0WhcNMjYwNTEzMTcwMDU0WjAzMTEwLwYDVQQD Eyg5YzRjMjI4NDMwNTM2ZWRiYzJjOTIwODcyZWYzM2Y1MTFjNWM4YzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7DiOnmvibDZ7wV0o7Abh0cNVcPj +YLkha7YFHiCu+IpcX1W4R2qSD3lbqPwmrs9plLuuKSdkoL1J2+b/u+i4IpYKitE J29VkqARAFXlIbtpwyN9hnL6+tnjNh2VgAkAdcvpPrSWoW8t89bvpZlj5/2ZTWmf f9MjDyJqttLoNP+5ug2VPeE/oPMiOw1nuJjGfrikW2qNPNl+MxAAs4dI5iANweAW ax7UCdeCZPXpnBB/xBddhiTVRqQKmwQlXvdlSVIMnxDfLRwZlQvnyZnDnt3hMZ9d QVhd110dGQyxxtcyvxwJ3uOV1zT/myxBFmb2K4HIkaQXQoi9HTCKX8/SjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxMIoQwU27bwskghy7zP1EcXIxEMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7FuIinx PlVVkwiOpD443MsK+/vLJH5OUT9MCTQXzO1aTtQ/TGA6RiL0DMwC+2GMqWK6DYiK liqTV41qWydxMTuQxNXa1QqPqnwGS5XyMu1k8MDb8KxtQJ354E9q70OAzF9ULUzD eX17xWKDqNk0Qij6jabqIsnUlnX5NU9+XpFpL1PxFgAT8rF37367plsga6JFkgLw yq1bp8k3YGKfyxK8/TPmDXLB8BvbnS1LL9kIOIFdLzDlIXgCj/3ad7eLoUHPW1kd qqjFonqmg9+KYdAQUvAs4DczIyZmQfzvZflCtp+3sS+73z1rlue/VqeQ4vAz5O4k OZgFHuzwl8JMNw== -----END CERTIFICATE-----Generated at Tue May 12 21:31:18 2026 by rpki-client