$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json) Hash identifier: 5dkOGjNgRtAOdgHZSbvdQKvOtS52UXF8rhv+qC8f+mc= Subject key identifier: 42:E7:B8:9C:FE:92:1E:74:B2:7D:49:B7:AF:63:0F:D2:72:73:5C:54 Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 019E1C4783A886E22C10DEDE54EE1D820D6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft Manifest number: 0FCB Signing time: Tue 12 May 2026 13:01:49 +0000 Manifest this update: Tue 12 May 2026 13:01:49 +0000 Manifest next update: Wed 13 May 2026 13:01:49 +0000 Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: GuFUj3yagX5432oFXeOMYkjqZt+/nM1EhVYZ6vMloTo=) 2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=) 3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=) 4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=) 5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=) 6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=) 7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=) 8: Tvp9UTzcuphuhBetxzC7xnAANpk.roa (hash: XsVJrEsr9FE3t/s8zv/e1FiT9DrBI71L2xkk3P4iSPo=) 9: VqSk2F-cMltec__vt5GWmoZRbOs.asa (hash: DSTYqZUEAVPlYiwOcT/Aj9JtlDMu/1/7b3uouJr7QEg=) 10: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=) 11: kZL9IaKbIXWtSeLhiixRuouVuZw.roa (hash: +8djmGYeV8gJTDYzSfSw3gkTCCP8XO1MSarDOtJj7zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 13:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:47:83:a8:86:e2:2c:10:de:de:54:ee:1d:82:0d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: May 12 13:01:49 2026 GMT Not After : May 13 13:01:49 2026 GMT Subject: CN=42e7b89cfe921e74b27d49b7af630fd272735c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:19:5b:d1:b8:84:0b:06:9c:24:e1:0a:a9:77: e8:64:54:7c:b7:df:86:38:8b:2e:70:17:fd:65:95: c3:e2:01:ce:ca:a8:82:40:16:16:12:9f:c2:db:e2: 2b:30:9a:64:5f:99:0e:88:02:c1:70:58:14:39:02: 9f:a5:c9:29:89:06:ba:24:bc:04:f9:64:7e:2c:16: be:d5:38:8f:9b:58:96:03:7f:19:14:ea:39:aa:9b: 29:9a:0a:d2:c6:6d:8d:7f:5a:6b:02:90:e9:10:0b: b3:17:04:76:98:2f:bb:fa:ac:b8:06:63:8c:fd:eb: 56:34:8b:b3:da:65:a0:b3:71:ea:79:bc:28:58:ba: 32:60:e6:7d:b3:e7:65:a8:cf:cf:fa:22:da:bb:21: 57:a9:79:16:1d:2e:14:cb:c9:d5:bf:a9:fc:ea:c4: 41:fc:21:05:ef:4d:69:7e:d3:aa:7f:09:5b:04:d7: b5:81:55:2a:83:2f:e2:b8:4d:bf:d2:a9:c2:1b:93: 72:cb:56:f8:06:91:6a:54:d6:1b:3c:de:f5:c7:97: 08:87:e4:5f:38:b5:a1:8e:89:01:aa:db:af:18:a5: 90:5c:66:7b:cf:e5:4e:98:95:fd:e7:58:6c:e1:4c: ff:2c:b7:d4:d8:6d:28:23:2d:05:51:da:96:8a:b5: 41:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E7:B8:9C:FE:92:1E:74:B2:7D:49:B7:AF:63:0F:D2:72:73:5C:54 X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:13:6b:fe:e0:8a:da:a5:0c:6f:19:92:7d:c6:01:e2:17:82: ca:c8:fe:90:69:3e:c9:f0:83:e0:9a:86:9f:45:c3:3e:7f:7e: fa:27:c0:b1:06:fb:96:94:40:12:b2:f7:ff:b7:ea:02:90:61: db:a1:85:97:61:c1:44:4d:f4:9e:90:26:39:59:79:58:f7:ec: 02:1d:d3:2d:2c:59:5e:48:a7:a6:25:86:47:ba:b3:fa:ee:dd: 3d:d8:8c:10:71:da:cc:67:36:0b:cb:6e:16:50:03:9c:8d:38: f6:76:a8:7f:69:ba:43:fb:84:1e:39:6c:f3:95:93:1b:11:83: 28:e7:ab:5f:c1:0e:b6:b4:ee:7e:74:cf:10:58:be:5f:2d:db: 46:2c:95:95:78:5f:f5:7b:8d:00:a7:8e:5f:2b:83:9e:61:26: e5:2c:f7:d6:f9:ca:c6:62:6f:3b:13:56:4b:6f:c4:cf:36:97: d4:4e:18:6b:ae:ae:09:f4:1b:5e:c3:3a:6a:65:95:16:05:59: 3a:06:d2:4a:d8:10:4c:3c:73:f2:6e:15:8f:4b:25:0d:d8:d4: 50:e1:93:bb:8f:88:69:2e:11:72:34:c2:39:71:18:32:90:db: 43:1d:73:c2:61:5b:9d:37:be:bc:8b:82:f3:4d:c8:4d:57:95: e5:b1:71:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4cR4OohuIsEN7eVO4dgg1uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjYwNTEyMTMwMTQ5WhcNMjYwNTEzMTMwMTQ5WjAzMTEwLwYDVQQD Eyg0MmU3Yjg5Y2ZlOTIxZTc0YjI3ZDQ5YjdhZjYzMGZkMjcyNzM1YzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Blb0biECwacJOEKqXfoZFR8t9+G OIsucBf9ZZXD4gHOyqiCQBYWEp/C2+IrMJpkX5kOiALBcFgUOQKfpckpiQa6JLwE +WR+LBa+1TiPm1iWA38ZFOo5qpspmgrSxm2Nf1prApDpEAuzFwR2mC+7+qy4BmOM /etWNIuz2mWgs3HqebwoWLoyYOZ9s+dlqM/P+iLauyFXqXkWHS4Uy8nVv6n86sRB /CEF701pftOqfwlbBNe1gVUqgy/iuE2/0qnCG5Nyy1b4BpFqVNYbPN71x5cIh+Rf OLWhjokBqtuvGKWQXGZ7z+VOmJX951hs4Uz/LLfU2G0oIy0FUdqWirVBSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELnuJz+kh50sn1Jt69jD9Jyc1xUMB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxNr/uCK 2qUMbxmSfcYB4heCysj+kGk+yfCD4JqGn0XDPn9++ifAsQb7lpRAErL3/7fqApBh 26GFl2HBRE30npAmOVl5WPfsAh3TLSxZXkinpiWGR7qz+u7dPdiMEHHazGc2C8tu FlADnI049naof2m6Q/uEHjls85WTGxGDKOerX8EOtrTufnTPEFi+Xy3bRiyVlXhf 9XuNAKeOXyuDnmEm5Sz31vnKxmJvOxNWS2/EzzaX1E4Ya66uCfQbXsM6amWVFgVZ OgbSStgQTDxz8m4Vj0slDdjUUOGTu4+IaS4RcjTCOXEYMpDbQx1zwmFbnTe+vIuC 803ITVeV5bFxfw== -----END CERTIFICATE-----Generated at Tue May 12 21:29:22 2026 by rpki-client