$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: neAMJIJDMPE2ybGb7BX+GhRT/NFVDefy6De4scaYA4U= Subject key identifier: 52:63:02:9E:2A:8B:3C:BE:ED:14:DC:D7:90:37:FC:84:E9:3E:51:15 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019E1D9027AD8F33381ADE3B973B576A8E25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: 0314 Signing time: Tue 12 May 2026 19:00:46 +0000 Manifest this update: Tue 12 May 2026 19:00:46 +0000 Manifest next update: Wed 13 May 2026 19:00:46 +0000 Files and hashes: 1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=) 2: C2k_ry-5nUB31fUOzP7TTIFMyJY.roa (hash: ATU8gyUnpCXWsUsJP4hbZmzcEdI4j0CYhulo4Isa9c4=) 3: FKDB1nLn_ZS_a9rdy0c5mxFNjAw.roa (hash: 2sgSFU9TG23xIm09t4WNIN0wcgWuOUk3p2yOrCzVZt8=) 4: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: yN45bCRXKTX0WlYUzmlJIkxsF5XJ3I7IF6vUClYWwvk=) 5: KJN38pRPOBW46EybVe4mhGvlUME.roa (hash: dWxCrgYYVFE5zhW3EZCQ5eX/EmJykjk/YvpmtR3H2Js=) 6: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=) 7: Ky8s4Lu3M8j3F784s3VxKx1e75k.roa (hash: 9Gc23uMOAcwKEfyzeLAFLWHetYWPfkRMND3EMrVpfX0=) 8: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=) 9: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=) 10: YQKMXVm06N8zD3NDnbfHYsCtcuU.roa (hash: 4zO+32jaiCVPHg0DG0Z719jsGnydWv+/YMvSSq/GIt4=) 11: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=) 12: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=) 13: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=) 14: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=) 15: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:90:27:ad:8f:33:38:1a:de:3b:97:3b:57:6a:8e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: May 12 19:00:46 2026 GMT Not After : May 13 19:00:46 2026 GMT Subject: CN=5263029e2a8b3cbeed14dcd79037fc84e93e5115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fe:89:c1:b2:f7:69:43:c7:5e:e7:ac:29:71: 16:5b:66:60:2d:b1:59:64:48:f5:22:9f:13:4e:37: d5:fa:81:3a:c1:ed:77:13:c9:1b:9f:0d:db:64:51: fb:47:71:e2:06:9f:57:74:86:8a:e5:54:77:e5:9d: f6:79:5e:1b:a8:8c:37:98:b7:21:ac:d1:f3:a6:fc: f3:28:08:c3:77:5a:a6:e8:07:33:81:87:0e:4d:88: ba:b8:0a:80:b7:35:e0:3b:5d:b2:d3:9b:7a:af:4d: 7b:49:a8:e4:dc:bd:5e:40:df:b1:8c:92:96:3e:72: 76:84:1e:45:ef:da:25:28:0c:20:73:47:b1:1e:3a: 72:47:e5:0e:f9:85:9b:9a:32:e3:42:ff:d8:d8:68: 07:b9:28:75:7d:33:1f:fd:b9:1b:ca:67:6f:f3:54: 9c:73:ba:60:be:1f:6a:73:40:57:9f:f9:79:75:d0: b3:a2:f7:f1:46:60:33:37:04:bb:1f:7e:fe:ab:d3: 60:af:7a:95:35:b4:b5:88:37:0a:76:f6:2a:09:8f: 0e:b0:a8:12:f7:a2:cb:d0:90:ac:d5:f8:98:8e:bb: 52:40:81:da:cb:27:b2:49:bf:b6:e2:fc:ee:c8:0f: 12:b8:48:29:9c:0b:41:ae:29:48:15:15:e1:06:d7: 9d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:63:02:9E:2A:8B:3C:BE:ED:14:DC:D7:90:37:FC:84:E9:3E:51:15 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:92:ab:6c:f7:ef:5a:c5:9e:f3:22:b5:75:dc:44:cd:31:a3: 0c:bf:a9:b7:16:5a:f8:5e:b5:2a:a8:7a:bf:8b:2e:17:75:7a: 1f:bb:eb:4c:9c:6b:ae:dd:f3:2a:ef:c9:11:d2:5e:2f:2b:61: 8e:2d:58:fa:2e:37:0a:f7:91:a3:83:fa:18:3e:b0:37:e1:dc: 5d:1a:e0:04:b4:57:23:92:b8:09:b3:05:17:9d:fb:fa:9d:b8: 1d:d6:95:d3:fa:da:ae:6b:2c:55:f2:f8:7b:91:bc:d3:a8:6c: fb:a7:23:45:1b:a2:f5:60:89:be:80:63:43:d3:7c:5d:92:a5: 7c:ee:0a:90:ad:d8:c8:bb:ba:0c:59:f2:67:51:f8:a6:60:bf: 1d:c2:4e:45:89:fb:ca:e0:65:09:07:99:81:0e:6c:4b:0d:70: 78:b0:2f:b1:b1:b5:e0:1f:07:71:e5:e8:2c:69:f7:6c:66:95: 62:76:7b:89:53:fe:e5:bc:e1:30:b9:23:ac:1b:98:7f:a4:a8: 9f:28:20:a0:a8:93:67:b3:47:e7:04:0d:9c:01:d8:f8:7f:1a: 2e:91:e7:16:c5:27:f8:06:b5:f2:d0:6e:11:89:05:b0:75:7f: 68:0f:e9:0e:fc:7f:5a:42:fa:26:63:5c:2b:f5:3d:40:44:90: ba:cf:b0:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dkCetjzM4Gt47lztXao4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwNTEyMTkwMDQ2WhcNMjYwNTEzMTkwMDQ2WjAzMTEwLwYDVQQD Eyg1MjYzMDI5ZTJhOGIzY2JlZWQxNGRjZDc5MDM3ZmM4NGU5M2U1MTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P6JwbL3aUPHXuesKXEWW2ZgLbFZ ZEj1Ip8TTjfV+oE6we13E8kbnw3bZFH7R3HiBp9XdIaK5VR35Z32eV4bqIw3mLch rNHzpvzzKAjDd1qm6AczgYcOTYi6uAqAtzXgO12y05t6r017Sajk3L1eQN+xjJKW PnJ2hB5F79olKAwgc0exHjpyR+UO+YWbmjLjQv/Y2GgHuSh1fTMf/bkbymdv81Sc c7pgvh9qc0BXn/l5ddCzovfxRmAzNwS7H37+q9Ngr3qVNbS1iDcKdvYqCY8OsKgS 96LL0JCs1fiYjrtSQIHayyeySb+24vzuyA8SuEgpnAtBrilIFRXhBtedUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJjAp4qizy+7RTc15A3/ITpPlEVMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJKrbPfv WsWe8yK1ddxEzTGjDL+ptxZa+F61Kqh6v4suF3V6H7vrTJxrrt3zKu/JEdJeLyth ji1Y+i43CveRo4P6GD6wN+HcXRrgBLRXI5K4CbMFF537+p24HdaV0/rarmssVfL4 e5G806hs+6cjRRui9WCJvoBjQ9N8XZKlfO4KkK3YyLu6DFnyZ1H4pmC/HcJORYn7 yuBlCQeZgQ5sSw1weLAvsbG14B8HceXoLGn3bGaVYnZ7iVP+5bzhMLkjrBuYf6So nyggoKiTZ7NH5wQNnAHY+H8aLpHnFsUn+Aa18tBuEYkFsHV/aA/pDvx/WkL6JmNc K/U9QESQus+w7A== -----END CERTIFICATE-----Generated at Wed May 13 01:20:55 2026 by rpki-client