$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json) Hash identifier: Mwk/kLmicn7nNqg7WFdjatlEGE830XdGsAtCBo83b1Q= Subject key identifier: A6:7A:71:E1:C8:AF:A7:3F:C3:49:FA:1C:B3:CB:27:C5:EE:6E:30:EC Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5 Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5 Certificate serial: 019D25F163A4A28E529B8F9812C86F4BF378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft Manifest number: 0EB3 Signing time: Wed 25 Mar 2026 17:01:09 +0000 Manifest this update: Wed 25 Mar 2026 17:01:09 +0000 Manifest next update: Thu 26 Mar 2026 17:01:09 +0000 Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: 8vrErh8C0zKiQBq/Pntu58xMQMNHDCFR12NSmt9y9e0=) 2: H5QErsI5RrGZOHFY6_FrSzEPwsg.roa (hash: BTdVxM8rbJfdiUp2j6fzsOE0ajTe0wntltZ6HVxnZpM=) 3: R0pEkuvaVLGxnylHvK6koPi4Qtk.asa (hash: yVimJbcLLcabqOeuTEnFLIbJZ1qdF0H9oXoiq2g92yI=) 4: TKRUQhbuG6vK-9YhYrYM4Xtl7Rk.roa (hash: DmxeQKQyfsvJvWQ6namIeD8pDbFVK71C7OVUciGGrUY=) 5: UtbWjP8TosULXxgOwSpGBsXAj1E.asa (hash: e7BKC4GZaIVKdGVBnnQIPsiQuksngCu2TeIqsWJLAi4=) 6: b7KDZwK5R28lE5M6tD1UYAgLTs0.roa (hash: chq9h/QyXrEES2o8hWXwMO8b44fg7JP3nOh0+1DILZ0=) 7: iTAqvs2G1UdUfx5Fmn2Z7H7-Wuo.roa (hash: L18Wb/sBRdrTPyOX3b7ZSqqO81GWE2YfQWPbOKytco8=) 8: n8wKAbeQwoniSlzobzWQkZPFQ90.roa (hash: gAASzqy3Nb3k3RF3IE7AiqoPFAF8THLrgzOMP+9Awr8=) 9: rxo-kMSJfYbIjml0McyLHchnJKw.roa (hash: 6yBdVD63LgbBLLvhVAYIbiNVvZCYYH7FdQZFXoIkCTo=) 10: x0-6NtH4vUkjT1y3qIl47BzSOGw.roa (hash: PnA5gMRP8NULFbWunx+4LpVvQH7waVlGce2Q/pkpzYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:63:a4:a2:8e:52:9b:8f:98:12:c8:6f:4b:f3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5 Validity Not Before: Mar 25 17:01:09 2026 GMT Not After : Mar 26 17:01:09 2026 GMT Subject: CN=a67a71e1c8afa73fc349fa1cb3cb27c5ee6e30ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:d3:09:fc:e4:2e:4f:9d:7c:fc:d8:00:b3: 34:24:94:d6:aa:eb:bf:14:b0:08:7c:cb:81:da:ab: ad:cd:ce:3e:9a:84:67:ba:ee:bf:b0:89:92:08:a8: 75:9b:dc:f4:ef:83:1c:e8:f1:10:65:85:eb:e9:32: fd:46:b2:62:14:bb:85:d0:75:02:78:10:90:0a:90: 2a:0b:dc:d7:0b:5c:42:3c:bb:2e:38:84:9f:cf:20: cf:db:00:81:7d:f8:cc:50:13:73:87:02:0c:43:11: 5b:ad:61:96:40:0f:11:f7:e1:2d:2a:59:da:33:82: a8:42:0c:a3:6f:d5:ab:b1:a0:dc:34:b2:81:cc:76: 83:7f:02:7e:4d:8c:51:f8:4b:bf:50:fd:1d:db:20: 28:3a:3b:7d:d8:fb:eb:1a:b3:98:08:b2:c9:4f:63: 0d:d6:0b:a8:0c:be:3f:5b:b9:df:a5:f1:21:9e:b7: 58:bd:0b:94:e0:a0:60:4a:b9:7a:02:3c:6e:d5:ec: 19:99:6e:97:9b:ea:2c:ca:e0:cc:3f:22:de:7b:ad: 7d:a7:64:80:1a:82:14:02:04:b4:e0:2d:23:84:5b: bd:da:12:fa:62:6e:62:b8:f9:52:0b:e9:d0:19:7c: e9:4b:e4:af:6a:fc:0c:bc:c4:c0:3f:e9:21:91:68: e4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7A:71:E1:C8:AF:A7:3F:C3:49:FA:1C:B3:CB:27:C5:EE:6E:30:EC X509v3 Authority Key Identifier: keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:7f:54:3c:cf:cf:78:60:1c:8a:8e:45:2b:f5:5f:08:ac:95: a9:0c:31:33:86:bf:69:12:ef:a4:5d:8c:57:be:38:29:17:52: 36:69:e0:ed:a4:12:02:d1:1d:d1:fc:38:ff:de:06:56:c4:48: 6e:a3:56:5d:03:79:7e:6c:7f:56:24:b7:bf:80:1d:25:9a:ee: a3:e6:fa:9e:58:42:f2:91:ab:4f:17:01:bd:25:24:f6:ed:18: 39:e1:60:de:cc:ba:e0:d8:70:08:38:80:6a:c5:30:7b:00:fe: b7:33:3b:eb:ae:c7:d4:65:5f:c2:07:1f:21:c0:2a:de:e9:21: a6:d7:9b:7b:c1:4b:63:af:d8:5f:c5:cd:ce:99:c1:46:a7:e0: 14:81:87:80:ac:97:34:6c:a8:cb:a8:cb:fa:37:66:da:a5:72: 11:6b:62:e6:77:4b:ea:e6:98:94:94:93:6e:c4:5e:81:5b:a7: 31:0c:71:f4:46:3e:a9:e4:90:e3:29:f5:3a:5a:82:a8:d1:2f: a5:97:86:2f:af:cd:f0:db:9b:02:59:f5:b6:f9:95:e7:bc:72: 37:c8:41:c2:30:f4:90:7e:5c:22:a3:8b:bc:4f:0d:a5:dc:c6: dc:bb:d2:68:b7:ca:1e:be:c0:c1:48:41:b5:8b:90:ad:70:b5: d3:18:c8:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8WOkoo5Sm4+YEshvS/N4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2 NGZhYTUwHhcNMjYwMzI1MTcwMTA5WhcNMjYwMzI2MTcwMTA5WjAzMTEwLwYDVQQD EyhhNjdhNzFlMWM4YWZhNzNmYzM0OWZhMWNiM2NiMjdjNWVlNmUzMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+TTCfzkLk+dfPzYALM0JJTWquu/ FLAIfMuB2qutzc4+moRnuu6/sImSCKh1m9z074Mc6PEQZYXr6TL9RrJiFLuF0HUC eBCQCpAqC9zXC1xCPLsuOISfzyDP2wCBffjMUBNzhwIMQxFbrWGWQA8R9+EtKlna M4KoQgyjb9WrsaDcNLKBzHaDfwJ+TYxR+Eu/UP0d2yAoOjt92PvrGrOYCLLJT2MN 1guoDL4/W7nfpfEhnrdYvQuU4KBgSrl6Ajxu1ewZmW6Xm+osyuDMPyLee619p2SA GoIUAgS04C0jhFu92hL6Ym5iuPlSC+nQGXzpS+SvavwMvMTAP+khkWjkuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZ6ceHIr6c/w0n6HLPLJ8XubjDsMB8GA1UdIwQY MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3 LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzX9UPM/P eGAcio5FK/VfCKyVqQwxM4a/aRLvpF2MV744KRdSNmng7aQSAtEd0fw4/94GVsRI bqNWXQN5fmx/ViS3v4AdJZruo+b6nlhC8pGrTxcBvSUk9u0YOeFg3sy64NhwCDiA asUwewD+tzM7667H1GVfwgcfIcAq3ukhptebe8FLY6/YX8XNzpnBRqfgFIGHgKyX NGyoy6jL+jdm2qVyEWti5ndL6uaYlJSTbsRegVunMQxx9EY+qeSQ4yn1OlqCqNEv pZeGL6/N8NubAln1tvmV57xyN8hBwjD0kH5cIqOLvE8NpdzG3LvSaLfKHr7AwUhB tYuQrXC10xjISA== -----END CERTIFICATE-----Generated at Wed Mar 25 21:24:39 2026 by rpki-client