$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: EGkI0Ugx3Di6tdflvkHQYzThQ/Grgb4ly129PhBiyzE= Subject key identifier: B5:9D:1A:10:DA:46:EB:0D:8E:B2:F1:A6:E1:4E:B1:7F:37:8F:B9:47 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 01A0E098F4AFB523C6AD3FAA90EC5E1D1C03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 04CA Signing time: Sun 27 Sep 2026 02:01:55 +0000 Manifest this update: Sun 27 Sep 2026 02:01:55 +0000 Manifest next update: Mon 28 Sep 2026 02:01:55 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: Is+o3jnvv5ODOkKqGz1aaqpOSOnWveImE+Hybvqs+Ok=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: 6JiMFaxCSZWHlWRw_c0MiJfjbgg.roa (hash: DpTH43Y5uaEsG5bOlwMcZuc/M6XoM1VbvdsQvk86pvc=) 5: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 6: Jnms41a00HHsZAaDUqDwXgA8zzI.roa (hash: RwShvg5rD/0/YSUaAR1xNnjMIINk+nGJ29Ri+9mwEx4=) 7: O0NaR63qYEYkKBX6khhH3sfwhso.roa (hash: lovVJhahsHXLyNDHuxIILDmOwnsX5JTEWJRzVms+kRw=) 8: PfVIpf3243WlCJ9AO0yLbQ2vGPY.roa (hash: fixeB4WnU7AtqSg73SbkUGJ+qRDw66pRPKdzTxkrzIU=) 9: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 10: Wy86CL2f4xLjz0vPQHZzN8a8unY.roa (hash: cXavtY5dvsiYw1vJsFA6Wzgu2etlowE0a/3vzxx5WuA=) 11: ZCawfFiEm8MWLQeXXIOT_dxU1U4.roa (hash: 4aycbuOygi1n+QX+zF05/A01dJNe+YAcN7Ic0dCYPTc=) 12: buFP3YQ0XQZEaAumgm6mnH5J-yE.roa (hash: AaWeY9oJG2eNuVhrXCNjBk4XbOhPTbIi+u4Z+27Es7I=) 13: gDGMFnBJLD30qto-o_gnRyl9xIo.roa (hash: IYpXszgMmGmDCIE7wSyYNrq3lEstGhkc0XA0OwHmr9A=) 14: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 15: mRRVOowOjRXJf-IU2ijf4UY9FbU.roa (hash: vI/jjC9GVOLKY66ayPKNMBj8qyuMxVqslWBZiRL9D0A=) 16: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 17: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) 18: xxc5xAyMxoRB0JYyqslJ3UmSDU0.roa (hash: 5NnOEcjd27P4vZWaJoKJUxgy0CmbiwJxaZCUGTIypGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 02:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e0:98:f4:af:b5:23:c6:ad:3f:aa:90:ec:5e:1d:1c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Sep 27 02:01:55 2026 GMT Not After : Sep 28 02:01:55 2026 GMT Subject: CN=b59d1a10da46eb0d8eb2f1a6e14eb17f378fb947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:9a:87:ec:35:b0:06:1f:63:c2:1e:3c:c6: 91:aa:a3:1b:35:69:d0:e2:73:0b:63:da:77:7c:5a: 91:87:1f:4b:55:55:e4:56:f7:07:68:bb:f9:21:03: d1:ba:ad:d5:62:f1:da:d4:40:74:cb:da:bb:96:e7: c4:f9:d9:1f:57:33:87:d6:29:be:83:a7:b5:0c:cc: f1:6b:0c:e6:2d:94:10:db:9f:a5:f1:15:b8:43:aa: 40:89:28:54:e3:26:d8:e7:95:fd:15:0e:7e:f8:37: a5:f7:25:46:9a:54:7f:ae:b6:de:18:78:4a:ee:14: 01:f7:bb:7e:86:5a:d8:0a:31:ad:a7:bc:50:1b:13: df:8e:65:e0:26:5c:bc:20:39:0d:27:61:8b:fb:61: 1b:7c:60:f9:b0:14:28:83:4c:df:57:c0:fa:e6:d2: 83:20:9b:ed:08:ae:c4:62:45:c8:e6:cc:9b:79:0a: 3a:73:38:97:08:3c:f7:71:c0:83:7c:9f:14:9b:93: 07:a1:dc:61:c9:2d:f2:46:16:8d:e6:3a:76:b6:12: f4:fb:45:53:7e:49:c0:74:a4:21:6b:be:76:e6:59: fa:7e:b1:17:9f:b6:7a:2f:d5:8e:b6:6f:22:4a:ae: 1d:17:7a:f4:50:a0:1c:72:24:38:dd:24:3c:6d:7b: 2f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9D:1A:10:DA:46:EB:0D:8E:B2:F1:A6:E1:4E:B1:7F:37:8F:B9:47 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:c7:3f:17:39:a3:9e:56:43:ea:ba:e3:20:fe:38:22:a6:2a: d0:21:3e:ed:00:10:9d:97:04:62:d6:9f:e9:08:ca:90:92:ba: 66:ba:1b:d9:57:09:eb:a7:b4:6f:8c:cb:6c:ae:13:47:6f:44: a0:bd:be:d0:f1:88:a9:1f:18:be:a5:c9:cf:82:c5:a5:2a:54: bd:26:4a:00:53:f9:f6:f8:e9:c2:c9:b6:48:1e:5c:e2:13:c1: 5f:90:93:72:ef:f8:02:ce:ac:64:a7:f5:37:bd:1b:f4:91:5c: af:19:e2:ab:09:f1:c0:05:c4:b1:fd:b5:46:3b:bc:9c:5f:6b: ab:84:24:4c:09:7e:f6:e7:21:b8:c7:e2:a0:4f:5b:46:15:e6: 48:71:2d:e9:7e:7a:c4:fa:5e:b3:04:0f:fb:28:34:1f:d2:2b: a7:af:44:83:87:9a:24:a7:4c:88:3b:0e:50:e5:70:e1:38:d8: 94:c2:46:eb:de:32:a5:91:bc:96:99:8b:1d:5a:92:9d:e5:d9: b9:d7:76:ad:d4:2d:aa:30:be:e5:04:b1:3e:8d:5d:03:a7:65: 99:f6:8f:82:42:97:67:3e:6d:07:fa:e6:e1:09:d4:12:f1:bb: e5:33:c7:96:98:f8:23:52:7e:c5:4f:c4:c2:b2:d5:b7:ab:34: 15:3d:5a:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDgmPSvtSPGrT+qkOxeHRwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwOTI3MDIwMTU1WhcNMjYwOTI4MDIwMTU1WjAzMTEwLwYDVQQD EyhiNTlkMWExMGRhNDZlYjBkOGViMmYxYTZlMTRlYjE3ZjM3OGZiOTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk2ah+w1sAYfY8IePMaRqqMbNWnQ 4nMLY9p3fFqRhx9LVVXkVvcHaLv5IQPRuq3VYvHa1EB0y9q7lufE+dkfVzOH1im+ g6e1DMzxawzmLZQQ25+l8RW4Q6pAiShU4ybY55X9FQ5++Del9yVGmlR/rrbeGHhK 7hQB97t+hlrYCjGtp7xQGxPfjmXgJly8IDkNJ2GL+2EbfGD5sBQog0zfV8D65tKD IJvtCK7EYkXI5sybeQo6cziXCDz3ccCDfJ8Um5MHodxhyS3yRhaN5jp2thL0+0VT fknAdKQha7525ln6frEXn7Z6L9WOtm8iSq4dF3r0UKAcciQ43SQ8bXsvbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWdGhDaRusNjrLxpuFOsX83j7lHMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsc/Fzmj nlZD6rrjIP44IqYq0CE+7QAQnZcEYtaf6QjKkJK6Zrob2VcJ66e0b4zLbK4TR29E oL2+0PGIqR8YvqXJz4LFpSpUvSZKAFP59vjpwsm2SB5c4hPBX5CTcu/4As6sZKf1 N70b9JFcrxniqwnxwAXEsf21Rju8nF9rq4QkTAl+9uchuMfioE9bRhXmSHEt6X56 xPpeswQP+yg0H9Irp69Eg4eaJKdMiDsOUOVw4TjYlMJG694ypZG8lpmLHVqSneXZ udd2rdQtqjC+5QSxPo1dA6dlmfaPgkKXZz5tB/rm4QnUEvG75TPHlpj4I1J+xU/E wrLVt6s0FT1a9Q== -----END CERTIFICATE-----Generated at Sun Sep 27 12:13:41 2026 by rpki-client