$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft File: bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json) Hash identifier: 4oLBrseewvy6okntUjFx67bSkI8j9D4ih7MACOpckKY= Subject key identifier: 24:EB:DA:AF:B8:30:2E:CE:45:F7:4F:82:23:99:BC:5D:72:D4:1A:08 Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019D284E1AB3BF2A46255B700EE221650F0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft Manifest number: 1124 Signing time: Thu 26 Mar 2026 04:01:40 +0000 Manifest this update: Thu 26 Mar 2026 04:01:40 +0000 Manifest next update: Fri 27 Mar 2026 04:01:40 +0000 Files and hashes: 1: 01O1H3vr-Xg2_Kt_tRxOoSePvYw.roa (hash: DTK4FxlalSIuFNse2BYUOpmcSGMhnqSmE/87aEUEtrg=) 2: 1-EqD6vgoA3IVAsjiLQYVEyyKW0U.roa (hash: Of+IRZAD6r3ftFWFR7yxzKwNLfYZjre35Dmg5UJV5ds=) 3: 3oqgYKPHjP4c1L0WVBDxXqGTNKs.roa (hash: PdT5GAbt00ZEVCyICmg6bHJkYgLa1nkpbJxhAhA4vnk=) 4: HB0FIxc95bfbXI-7nw5kY1VNoMs.roa (hash: 236zwT5kbl7DOv0ChJB+B8PFAcfi388Ks1QJGiJxQlM=) 5: RSEZnKImClpjfvRbvyGXO7YCT30.roa (hash: nbl9nzX5UblCyKX8B1eZxPxYHLEkClkhmOAKVpl4rkY=) 6: TCGXmp-ZcJuoO-eDyOqbUVRKJXI.roa (hash: zb8J86h3WDmjGOxtQQnoZ3rsuxycMmwLx3S1o5snyrE=) 7: XR-EYzoeTJi_gNpw5v85R8iIDCI.roa (hash: hr4Ank/yR0Q5kl1E1WgAYLVhDPaCeCKIZMYB9E/hjDs=) 8: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: dYVrjyNZ/cWbzVxFqZCyNtDqhxScZjYlvPP7VARt3nM=) 9: fv8hSy-qTmyzkAkKRiqf7Cbw4Q8.roa (hash: JVsfqbqPGUHeKikh7Yf/w82XL596L03oNIzuxFbcXEQ=) 10: ngXBDJqFRHqY02oCl22jHBT8QTU.roa (hash: J4yIx0/GQQvuBdXMZZvAxL9Vevspg59Zpn25unHuRA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4e:1a:b3:bf:2a:46:25:5b:70:0e:e2:21:65:0f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Mar 26 04:01:40 2026 GMT Not After : Mar 27 04:01:40 2026 GMT Subject: CN=24ebdaafb8302ece45f74f822399bc5d72d41a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:55:2e:3a:30:06:f1:d5:62:c6:03:e8:42:cd: da:40:05:86:a8:a9:25:e3:68:72:41:1a:ac:b8:9d: 68:90:d1:57:1b:7c:ae:ad:48:1f:3e:10:58:23:b2: b9:ad:75:61:1e:74:d0:87:57:e9:9c:80:75:87:a8: 8f:38:7c:56:d0:4e:64:cd:07:d4:66:a0:50:9c:2c: d3:39:d2:82:52:35:6b:73:4e:a0:1a:d9:7e:23:ea: e0:31:6f:63:5e:c1:97:86:e5:4e:b8:5b:d3:42:74: 7d:16:91:5c:d3:0e:79:89:f3:fa:a6:9c:10:a5:bd: 0d:c6:eb:4a:88:d7:b6:81:21:e5:eb:8c:7f:71:37: 89:a9:8b:f9:70:6c:e1:83:ae:94:ef:9b:28:ec:5f: 20:30:2b:bc:a8:a7:26:db:d6:46:a5:0e:c1:29:59: 04:58:cd:d0:9c:4e:31:ab:6b:92:5c:80:03:72:ef: b4:d5:39:6f:f1:dc:89:88:ef:f4:4d:03:e9:92:18: 5f:ec:75:50:f0:7c:d7:06:d5:24:0f:6d:a3:49:6f: ab:77:cb:a4:e3:e6:c3:b2:a7:ab:95:ad:cc:7f:31: 5d:6d:cd:3b:39:4a:1e:86:dd:86:4c:61:bf:8f:3c: 6f:1c:9c:6b:60:12:2b:ee:21:72:31:0f:75:c6:01: f2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EB:DA:AF:B8:30:2E:CE:45:F7:4F:82:23:99:BC:5D:72:D4:1A:08 X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:2f:d7:77:de:81:fe:17:39:38:6f:f6:2b:07:60:72:41:d8: 9e:8b:65:79:75:ff:b5:c2:be:f9:bf:22:bc:09:d7:66:92:d4: d3:45:43:c5:3e:ec:14:af:26:41:5c:a9:a3:6d:1e:d2:8f:94: 7f:f1:82:96:b4:d2:64:c7:08:13:a6:9b:a5:f1:85:94:be:d1: 63:22:9b:61:41:f8:11:a3:19:81:22:c6:1e:df:7a:23:b2:0c: 17:d6:22:29:1c:9c:f0:c0:53:a2:c6:08:03:33:2a:89:46:57: 1a:3f:07:73:b5:45:1b:6d:e3:3b:45:19:73:4b:78:9f:0e:74: 1d:7c:b4:27:f6:fd:e9:77:39:89:a6:88:4f:9c:17:21:2e:fa: 40:1f:2d:96:45:f2:48:74:16:c0:e6:56:04:9b:00:36:5d:ed: b6:9d:74:56:7a:f7:a3:d7:ea:87:d2:07:5c:ae:80:76:9b:e5: 67:5f:ca:16:a7:80:ee:c2:45:5b:11:7b:88:7b:67:29:e2:a4: 5f:0b:b1:f8:c0:d8:f6:cf:88:b5:c2:66:c0:77:87:e9:e4:e3: ba:fa:43:15:53:67:cf:a8:4a:bc:29:86:ee:aa:c7:4f:b6:0f: 89:6b:3f:79:50:10:45:59:29:65:c3:32:e7:f7:98:5d:e5:55: 39:42:ea:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oThqzvypGJVtwDuIhZQ8OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjYwMzI2MDQwMTQwWhcNMjYwMzI3MDQwMTQwWjAzMTEwLwYDVQQD EygyNGViZGFhZmI4MzAyZWNlNDVmNzRmODIyMzk5YmM1ZDcyZDQxYTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1UuOjAG8dVixgPoQs3aQAWGqKkl 42hyQRqsuJ1okNFXG3yurUgfPhBYI7K5rXVhHnTQh1fpnIB1h6iPOHxW0E5kzQfU ZqBQnCzTOdKCUjVrc06gGtl+I+rgMW9jXsGXhuVOuFvTQnR9FpFc0w55ifP6ppwQ pb0NxutKiNe2gSHl64x/cTeJqYv5cGzhg66U75so7F8gMCu8qKcm29ZGpQ7BKVkE WM3QnE4xq2uSXIADcu+01Tlv8dyJiO/0TQPpkhhf7HVQ8HzXBtUkD22jSW+rd8uk 4+bDsqerla3MfzFdbc07OUoeht2GTGG/jzxvHJxrYBIr7iFyMQ91xgHyKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTr2q+4MC7ORfdPgiOZvF1y1BoIMB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJi/Xd96B /hc5OG/2KwdgckHYnotleXX/tcK++b8ivAnXZpLU00VDxT7sFK8mQVypo20e0o+U f/GClrTSZMcIE6abpfGFlL7RYyKbYUH4EaMZgSLGHt96I7IMF9YiKRyc8MBTosYI AzMqiUZXGj8Hc7VFG23jO0UZc0t4nw50HXy0J/b96Xc5iaaIT5wXIS76QB8tlkXy SHQWwOZWBJsANl3ttp10Vnr3o9fqh9IHXK6AdpvlZ1/KFqeA7sJFWxF7iHtnKeKk Xwux+MDY9s+ItcJmwHeH6eTjuvpDFVNnz6hKvCmG7qrHT7YPiWs/eVAQRVkpZcMy 5/eYXeVVOULqig== -----END CERTIFICATE-----Generated at Thu Mar 26 08:42:46 2026 by rpki-client