$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: k4klrD0oyoySlVbHHTUJDLGlDPSObqHcrYHUGdQOW4E= Subject key identifier: 4D:AF:7A:56:B0:9F:0E:73:F9:4A:3F:15:F6:CC:86:BC:56:B3:6B:B9 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019D273B39F66272FE49F671B38A43D145A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 02D2 Signing time: Wed 25 Mar 2026 23:01:25 +0000 Manifest this update: Wed 25 Mar 2026 23:01:25 +0000 Manifest next update: Thu 26 Mar 2026 23:01:25 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: cr4I9E/zRg7WWBvAuN86wpjtvqA0quKHwLRNj0TcWR8=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 5: O0NaR63qYEYkKBX6khhH3sfwhso.roa (hash: lovVJhahsHXLyNDHuxIILDmOwnsX5JTEWJRzVms+kRw=) 6: O203bP1wCT1tFTJWpeV4GwvRr-E.roa (hash: M8T4zxdIfcPsrQz2e4NE8yV9cJaheu4EatHoWhBRGz0=) 7: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 8: Tm68QJ2snSiuZawcjur25m8_gQQ.roa (hash: DaUiCgZt3YWuCz48bPSV79DF4D1Dc2incnzoilZzt30=) 9: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 10: ohXUok_zW7NMmajjFQxMHMt_T0Y.roa (hash: BmIJzfQHz5sgq48QzLBSe6fOOMb8+aHYQoGWrM4uQdc=) 11: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 12: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) 13: xiLzKMbsP2hR2dinGnnh2ffYdNg.roa (hash: UNKk8UicZLwGLHFDEuUZ+yTryGyRHEhcFM6P+iXQVAg=) 14: xxc5xAyMxoRB0JYyqslJ3UmSDU0.roa (hash: 5NnOEcjd27P4vZWaJoKJUxgy0CmbiwJxaZCUGTIypGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:3b:39:f6:62:72:fe:49:f6:71:b3:8a:43:d1:45:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Mar 25 23:01:25 2026 GMT Not After : Mar 26 23:01:25 2026 GMT Subject: CN=4daf7a56b09f0e73f94a3f15f6cc86bc56b36bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c3:0b:43:92:9a:47:5d:2b:33:06:79:65:f4: 97:f8:97:55:d2:1d:e5:b8:3e:4d:21:79:f7:46:a7: dc:83:89:24:26:e5:e4:ff:37:fa:26:42:c4:04:3b: b1:f9:e1:b8:1c:5f:65:05:e3:be:81:e5:36:3a:76: e3:8a:d2:e9:da:2a:ca:ae:72:4e:18:9a:fa:04:e8: ce:f2:e7:4d:0a:22:5d:17:50:0a:9c:89:ad:85:0d: 2d:6a:06:3c:26:c5:f3:09:3d:da:f3:7a:27:d9:68: bc:2e:ca:2a:cc:9f:7b:7c:52:e1:be:77:28:b3:a9: fe:3d:bf:c0:82:03:16:2e:6f:4a:9d:2e:db:f5:7c: 61:b6:65:0b:f3:40:40:4a:8b:10:2f:0c:86:30:05: 12:f9:e1:4e:7c:84:bb:48:2b:22:7c:34:81:dd:0f: 98:b0:17:a3:b1:ce:4b:8b:69:cf:73:9f:86:9b:5c: ab:92:0c:0f:96:ba:ff:7a:4a:29:72:06:7a:8f:c2: 0c:60:54:96:ca:48:7a:53:5f:f8:cf:50:fd:f2:ad: a0:59:aa:3f:81:20:8b:12:85:dc:f6:70:b7:17:fd: af:32:66:db:81:e4:ee:89:bb:f4:44:1f:56:23:c9: 85:d5:4c:b1:fa:86:44:7c:30:cb:15:fe:30:16:83: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AF:7A:56:B0:9F:0E:73:F9:4A:3F:15:F6:CC:86:BC:56:B3:6B:B9 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:36:4f:67:26:f3:ba:29:c1:7a:15:f4:16:e0:77:d3:1f:04: 39:bf:d4:fb:1b:15:1e:e0:7d:48:46:1b:9c:0b:0d:06:3d:fb: 34:5a:9d:02:a4:dd:1c:f3:d7:2a:cd:97:c4:68:0d:3c:58:c6: 25:38:e1:4d:da:d0:94:3b:5b:c9:c8:aa:cc:84:02:de:78:6a: 17:22:b5:4b:86:18:96:3a:cb:0d:83:d0:6d:e3:5c:53:77:10: c0:39:64:d4:f0:2d:42:ec:66:a9:3c:99:3c:63:24:59:47:35: 2e:13:e5:17:8f:5e:aa:b4:11:e3:6b:5b:24:57:9f:35:32:f2: 02:96:a5:9c:dc:52:0d:95:fb:cd:55:4c:de:ee:df:e2:11:2e: 6d:c8:5a:02:80:4f:11:de:e7:ba:48:78:ad:dd:14:7f:e5:b2: 6d:60:61:d8:82:75:0d:97:7e:61:35:d3:96:30:ad:16:07:f0: 77:b8:80:76:51:90:28:3a:19:99:2f:70:f4:79:0c:fd:96:1c: 57:08:d9:c1:b5:a4:76:12:69:a2:95:49:00:1c:3c:7c:b9:63: 04:85:9d:bc:a2:73:55:1e:70:75:80:8c:98:87:0c:28:a7:11: f6:d3:72:22:c1:e8:2b:b1:19:65:63:dc:02:3a:f2:4e:1b:1a: a6:f0:2c:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nOzn2YnL+SfZxs4pD0UWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwMzI1MjMwMTI1WhcNMjYwMzI2MjMwMTI1WjAzMTEwLwYDVQQD Eyg0ZGFmN2E1NmIwOWYwZTczZjk0YTNmMTVmNmNjODZiYzU2YjM2YmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sMLQ5KaR10rMwZ5ZfSX+JdV0h3l uD5NIXn3Rqfcg4kkJuXk/zf6JkLEBDux+eG4HF9lBeO+geU2OnbjitLp2irKrnJO GJr6BOjO8udNCiJdF1AKnImthQ0tagY8JsXzCT3a83on2Wi8LsoqzJ97fFLhvnco s6n+Pb/AggMWLm9KnS7b9XxhtmUL80BASosQLwyGMAUS+eFOfIS7SCsifDSB3Q+Y sBejsc5Li2nPc5+Gm1yrkgwPlrr/ekopcgZ6j8IMYFSWykh6U1/4z1D98q2gWao/ gSCLEoXc9nC3F/2vMmbbgeTuibv0RB9WI8mF1Uyx+oZEfDDLFf4wFoP9KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2velawnw5z+Uo/FfbMhrxWs2u5MB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzZPZybz uinBehX0FuB30x8EOb/U+xsVHuB9SEYbnAsNBj37NFqdAqTdHPPXKs2XxGgNPFjG JTjhTdrQlDtbyciqzIQC3nhqFyK1S4YYljrLDYPQbeNcU3cQwDlk1PAtQuxmqTyZ PGMkWUc1LhPlF49eqrQR42tbJFefNTLyApalnNxSDZX7zVVM3u7f4hEubchaAoBP Ed7nukh4rd0Uf+WybWBh2IJ1DZd+YTXTljCtFgfwd7iAdlGQKDoZmS9w9HkM/ZYc VwjZwbWkdhJpopVJABw8fLljBIWdvKJzVR5wdYCMmIcMKKcR9tNyIsHoK7EZZWPc AjryThsapvAslg== -----END CERTIFICATE-----Generated at Thu Mar 26 05:38:03 2026 by rpki-client