$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: Ag/KumvOm1nnKDZzKAt8SG37WxWzl0AJIHIhYrfxiSw= Subject key identifier: 0A:9A:67:EB:C5:36:9C:61:00:A1:7A:C3:C0:F1:2E:BD:71:D2:8A:BC Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019D25F20DF9D80FCDC86BA10EB2B970A7CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: 0286 Signing time: Wed 25 Mar 2026 17:01:53 +0000 Manifest this update: Wed 25 Mar 2026 17:01:53 +0000 Manifest next update: Thu 26 Mar 2026 17:01:53 +0000 Files and hashes: 1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=) 2: Bdg271exhyz0CYhhKf6M3589gNE.roa (hash: ZrdLyfslw3wS4iBvsrm0qGwScbCJHNT3/0sq90OCkrs=) 3: FMjgHFX6C8tm6BE-gQMgr2HgUYw.roa (hash: LfGIyMkMrmZ8uM6zQmgdk3IubHKAEZoBTOFxAv5y66A=) 4: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: 5fgQkIgZ4L8POEtp12Zq+Aw0cH3spn4FskzCQigfVV8=) 5: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=) 6: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=) 7: Wrz1ohQ4Bg6Lcy_RljHi26OIOcI.roa (hash: BwR3/bSzpwYyFNp1z1EIKK8WM4mTGyDxSLdSo/6lNkw=) 8: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=) 9: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=) 10: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=) 11: d3NsCwXaLNlMMINMKcFuAk-oubQ.roa (hash: /AiHhFk3ZBz761wkghk16ZNJHaaQ87sydWhoH3LsKAA=) 12: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=) 13: kukH01xPLlTBz247GbTGc3lbklU.roa (hash: ihqpT+7lBiQwLFYGEZgqLSp2KH+KvSwRzzz598E3tgY=) 14: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=) 15: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f2:0d:f9:d8:0f:cd:c8:6b:a1:0e:b2:b9:70:a7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Mar 25 17:01:53 2026 GMT Not After : Mar 26 17:01:53 2026 GMT Subject: CN=0a9a67ebc5369c6100a17ac3c0f12ebd71d28abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:6d:6f:42:3c:5f:22:46:d7:5a:f6:ca:fb: 2e:0f:94:f0:00:57:8b:1b:5e:b6:9e:0c:4e:b0:ad: 8d:69:38:e2:3e:1a:8b:93:54:1f:40:a9:a1:a1:1d: 60:cb:b9:96:f6:90:3b:47:9f:88:de:df:33:a0:02: 35:6f:70:6a:c7:05:03:8e:ba:2e:7b:05:2b:5d:2e: 61:07:f8:7e:2f:65:e0:9d:68:c3:19:6e:3d:43:20: 89:a8:ec:4b:5f:64:a7:97:14:1c:f5:e5:d1:10:ea: 55:44:f9:ec:da:75:6d:45:a3:08:2b:a8:1b:d4:d4: 82:11:db:2c:08:81:fc:68:62:c0:eb:44:99:74:b5: ba:1b:a9:79:61:d3:7c:2b:49:b5:1c:6a:bc:38:82: 68:1a:ef:c2:78:d7:b2:21:2e:2a:f7:02:cc:c3:77: 71:90:9a:96:3e:14:f6:f9:a2:cd:b8:99:7b:50:d5: ea:b1:dc:6a:b5:7c:96:cb:2a:c8:4c:6a:25:c4:3c: 37:7d:93:27:31:88:33:33:01:05:e5:16:6a:93:aa: ff:b0:54:8f:30:77:e4:af:8e:b1:1a:56:fe:6e:c1: 27:ae:4f:16:59:f9:c9:05:b5:10:7c:9e:33:c2:5d: b1:98:d3:40:f5:1f:5f:7a:b1:0e:c6:21:73:2f:f2: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9A:67:EB:C5:36:9C:61:00:A1:7A:C3:C0:F1:2E:BD:71:D2:8A:BC X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:52:60:45:fd:be:81:8d:e9:f8:59:01:52:62:7f:74:43:1c: 89:d5:92:ed:3f:96:29:f4:5c:f8:19:16:79:80:6e:61:22:12: c6:a2:5d:29:02:02:80:3f:ec:51:6b:00:90:9c:68:97:49:d9: 51:00:71:20:34:44:d8:e7:29:ce:ee:76:a2:d3:c5:9d:19:3b: 5b:99:f3:e8:47:d3:d1:d5:d5:63:e2:d7:35:4e:77:64:31:2c: c9:e6:c1:f9:a6:97:e0:18:49:8c:53:74:cc:41:5a:87:28:b7: 13:a4:47:26:6b:3e:c7:67:fe:7a:1f:bc:e2:51:9e:42:f5:53: 06:79:ab:c3:99:4d:e0:a6:b5:21:8c:d2:20:fe:ef:c0:32:67: 8b:47:60:5a:c7:8b:59:ba:3a:21:79:aa:96:03:d7:de:39:e6: a8:ea:56:d5:18:9a:4b:f1:5e:9d:3f:d5:4f:ee:1b:38:2c:d3: ed:8f:86:26:27:6c:cc:4d:01:90:60:14:e0:0e:62:a3:06:40: a8:72:d2:6d:22:52:68:a7:6a:9e:39:79:7c:78:3e:5e:25:8f: df:8f:89:f1:6b:55:83:46:32:e5:b7:5d:a3:f3:16:bc:a5:c1: 61:60:a0:55:da:ac:34:14:c5:6e:c0:c4:7a:b5:92:ac:e4:38: 92:56:b2:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8g352A/NyGuhDrK5cKfLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwMzI1MTcwMTUzWhcNMjYwMzI2MTcwMTUzWjAzMTEwLwYDVQQD EygwYTlhNjdlYmM1MzY5YzYxMDBhMTdhYzNjMGYxMmViZDcxZDI4YWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJZtb0I8XyJG11r2yvsuD5TwAFeL G162ngxOsK2NaTjiPhqLk1QfQKmhoR1gy7mW9pA7R5+I3t8zoAI1b3BqxwUDjrou ewUrXS5hB/h+L2XgnWjDGW49QyCJqOxLX2SnlxQc9eXREOpVRPns2nVtRaMIK6gb 1NSCEdssCIH8aGLA60SZdLW6G6l5YdN8K0m1HGq8OIJoGu/CeNeyIS4q9wLMw3dx kJqWPhT2+aLNuJl7UNXqsdxqtXyWyyrITGolxDw3fZMnMYgzMwEF5RZqk6r/sFSP MHfkr46xGlb+bsEnrk8WWfnJBbUQfJ4zwl2xmNNA9R9ferEOxiFzL/I4ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqaZ+vFNpxhAKF6w8DxLr1x0oq8MB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFJgRf2+ gY3p+FkBUmJ/dEMcidWS7T+WKfRc+BkWeYBuYSISxqJdKQICgD/sUWsAkJxol0nZ UQBxIDRE2Ocpzu52otPFnRk7W5nz6EfT0dXVY+LXNU53ZDEsyebB+aaX4BhJjFN0 zEFahyi3E6RHJms+x2f+eh+84lGeQvVTBnmrw5lN4Ka1IYzSIP7vwDJni0dgWseL Wbo6IXmqlgPX3jnmqOpW1RiaS/FenT/VT+4bOCzT7Y+GJidszE0BkGAU4A5iowZA qHLSbSJSaKdqnjl5fHg+XiWP34+J8WtVg0Yy5bddo/MWvKXBYWCgVdqsNBTFbsDE erWSrOQ4klayJw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:30:31 2026 by rpki-client