$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: 7TktUOQZzEN3b4ljaMrRc0Iu4+tm7tiGmxY3ZscZOBw= Subject key identifier: 8F:F3:BC:74:D0:CA:95:C8:CF:76:5F:72:D8:FB:DF:F4:73:40:4B:E5 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 01A0D94CF0F09400BB3056688E5783033931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 089B Signing time: Fri 25 Sep 2026 16:01:33 +0000 Manifest this update: Fri 25 Sep 2026 16:01:33 +0000 Manifest next update: Sat 26 Sep 2026 16:01:33 +0000 Files and hashes: 1: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: T8bYfMxYR5kDN+Gc5BNA6Xrlff3K2zt8oz7T8jluw84=) 2: 3MMGuyxk5BA1h4yKFwGuekYBWpE.roa (hash: qDDPw4rjqe8Of6FqTmZ8vNfrRu70pioyOFhkznkxbn0=) 3: 7PMwWghG1f2GH2kcgJJT1T19mKA.roa (hash: iSWM8zD4dnBfc8rm3hdCfD29wpDU7MXGImntX+CzTys=) 4: CUZDkD-NcFvyMKKqxpqKTImWldI.roa (hash: BjgaQINh/o8BqluKWpCRQpHRBGijPayFIzTWLEZZ+ZQ=) 5: Dhrq3603FXAC1wqjo20wzUmr4F8.roa (hash: 93F+LmWkBd0KITwFzxwwnm7wh1Nm582E0rUj/2gWiKA=) 6: DlLXddAis5e2NiYpDlPFgCC2fqQ.roa (hash: wChHj1a1SOAqKO2XbDKNiJzmDLWZ4VK+PUQtszQXCaA=) 7: aoX3qgSrCGpVmGI2-sNdQlbBEmo.roa (hash: fUASGNwLnomXxmckWPpEyeY/fBQ9vTiFVyQieAo28z4=) 8: cojKfvUL96n8v0NW6xv7i34QuKg.roa (hash: lYPKoP4F96eul1kxPLkPqkS5F4CgrEIREjfk+V+jg3o=) 9: f-9ciEqv18Kub9fxi8gMgTEDiN8.roa (hash: ys7Se75WP1iZvGd8oeyIka2FlXVNvmTKA8g4Bz+pUFE=) 10: pPL6_ILH_OSb0uend9BsYY1M5zM.roa (hash: uPRcSj9Qet/R5RDAAlJ1xCgadEw0HnsrDGUuZztgzUc=) 11: qse_CjeAhZ5mrJaaeqQbXdzwq6c.roa (hash: DcaCDcXxQuFqUhYc0T6gyos8/cyyoYS+q0uMnwfEmhU=) 12: qvL5cNpCo_XaFCNykh7Gx2HPj7A.roa (hash: Je87v5hgNV1x62aPiR7j/Cjy7ey6GNmVdBbyWoayWLE=) 13: rtaxspuDF4uli6my-kG3x-CfzyM.roa (hash: Mbr6HPYPHlUpdc2sSsGgV2VBSnLTCf311AToZ6BeZWw=) 14: sRTNLbJ3g2jrnoN7xO2uBbfWguU.roa (hash: 97xAwvGhhXW1GC5fGvIVMkcoGK7MfJbMcwrs0H6Prc8=) 15: sSEuPuJKSwvGPl8OYtUAbNgjLFs.roa (hash: t6MnFRdD+DMOOopxl5hauoDky6UirAHK0zqLM5bjQWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d9:4c:f0:f0:94:00:bb:30:56:68:8e:57:83:03:39:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Sep 25 16:01:33 2026 GMT Not After : Sep 26 16:01:33 2026 GMT Subject: CN=8ff3bc74d0ca95c8cf765f72d8fbdff473404be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:df:94:dc:5f:09:23:d1:1d:93:7c:0b:5b: c3:41:9b:83:86:b9:62:48:7d:0f:0b:9f:21:e3:4c: 0d:d8:2a:f2:d0:fb:77:e8:dc:30:ee:ed:8a:dd:be: 0d:8d:c9:ee:3b:0b:9a:ec:07:64:2b:eb:d8:12:39: 23:fc:f0:3c:9b:c1:df:f1:f3:fa:da:2b:4f:99:db: 65:e2:23:8c:86:49:a8:a8:1a:9c:46:d7:ca:92:58: c8:f5:41:67:c4:03:96:48:af:28:3a:9b:8b:8e:79: 17:24:02:89:c6:19:49:d2:b5:b1:0d:ef:7f:f0:dd: 33:80:f1:12:6e:81:e0:37:25:7c:76:b9:d9:e7:8c: cf:e7:76:38:d8:74:4d:dd:e4:d0:09:10:b2:bc:3c: 96:f3:82:3e:86:0b:8c:9b:74:fa:c3:3c:9c:a4:fc: bd:cf:ac:1d:18:4e:89:fe:21:9e:37:81:2a:7e:7c: b6:38:5b:d5:20:aa:33:56:21:ce:8f:d2:0d:4a:2d: e9:c9:a9:49:7d:3c:df:28:07:be:19:b1:64:5c:e8: b3:ad:d2:59:24:fd:ac:2e:db:44:f8:a5:9a:d9:83: 32:1b:a8:c3:d9:19:95:b0:df:8c:8a:89:77:ad:ce: b8:81:91:96:71:88:02:dd:01:2e:af:8a:8d:e9:e2: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F3:BC:74:D0:CA:95:C8:CF:76:5F:72:D8:FB:DF:F4:73:40:4B:E5 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c7:ff:ba:5d:70:7f:53:f7:68:48:77:84:cb:47:58:0f:e1: f0:0a:96:75:85:47:11:91:3f:47:55:58:e7:3d:54:86:b3:2f: fd:c2:e4:6c:56:3f:db:d4:57:13:65:7a:c1:e8:c5:2c:08:84: 19:10:8e:14:d5:49:de:2e:9e:9a:b2:a3:d6:74:df:7e:ed:4e: 62:cc:d3:60:14:81:e7:80:63:9e:f2:66:24:ab:b4:26:1d:83: 45:32:7d:8a:a1:ea:35:4c:fc:cc:29:eb:b4:47:ce:43:50:c1: c7:bf:b4:a9:34:9f:a2:91:6f:eb:ac:ff:59:a5:27:a4:6f:0f: 89:7a:e6:d0:99:0b:b3:db:81:05:e1:f2:b7:b2:d7:13:72:29: e4:fd:54:8e:a9:66:8d:a2:b1:e1:15:a0:0b:92:a4:9d:a9:2d: 73:7d:0a:71:d9:88:a1:cb:c1:c1:29:91:04:42:74:e8:04:3b: 55:a9:eb:29:20:d2:34:29:cb:d5:21:d6:90:2c:48:f9:59:ec: ff:74:b6:c6:3a:18:fd:ab:16:43:53:f1:2f:8e:24:c7:e1:f4: 1d:35:d1:2b:7e:df:4a:d0:ad:4b:cc:53:1f:02:91:d8:07:ac: 3a:d1:d0:e0:4d:79:c5:ef:e5:c1:4e:9e:21:10:80:2f:ff:e4: 5e:5b:98:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDZTPDwlAC7MFZojleDAzkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwOTI1MTYwMTMzWhcNMjYwOTI2MTYwMTMzWjAzMTEwLwYDVQQD Eyg4ZmYzYmM3NGQwY2E5NWM4Y2Y3NjVmNzJkOGZiZGZmNDczNDA0YmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V7flNxfCSPRHZN8C1vDQZuDhrli SH0PC58h40wN2Cry0Pt36Nww7u2K3b4NjcnuOwua7AdkK+vYEjkj/PA8m8Hf8fP6 2itPmdtl4iOMhkmoqBqcRtfKkljI9UFnxAOWSK8oOpuLjnkXJAKJxhlJ0rWxDe9/ 8N0zgPESboHgNyV8drnZ54zP53Y42HRN3eTQCRCyvDyW84I+hguMm3T6wzycpPy9 z6wdGE6J/iGeN4Eqfny2OFvVIKozViHOj9INSi3pyalJfTzfKAe+GbFkXOizrdJZ JP2sLttE+KWa2YMyG6jD2RmVsN+Miol3rc64gZGWcYgC3QEur4qN6eKeMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/zvHTQypXIz3Zfctj73/RzQEvlMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsf/ul1w f1P3aEh3hMtHWA/h8AqWdYVHEZE/R1VY5z1UhrMv/cLkbFY/29RXE2V6wejFLAiE GRCOFNVJ3i6emrKj1nTffu1OYszTYBSB54BjnvJmJKu0Jh2DRTJ9iqHqNUz8zCnr tEfOQ1DBx7+0qTSfopFv66z/WaUnpG8PiXrm0JkLs9uBBeHyt7LXE3Ip5P1Ujqlm jaKx4RWgC5Kknaktc30KcdmIocvBwSmRBEJ06AQ7VanrKSDSNCnL1SHWkCxI+Vns /3S2xjoY/asWQ1PxL44kx+H0HTXRK37fStCtS8xTHwKR2AesOtHQ4E15xe/lwU6e IRCAL//kXluYsA== -----END CERTIFICATE-----Generated at Fri Sep 25 20:05:40 2026 by rpki-client