$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json) Hash identifier: IyfyhL1h/VqKYwKQd5okdsyhm4Ve/FiXZngrWQXmn7E= Subject key identifier: C3:83:88:86:97:9B:FC:25:3C:5F:5B:1E:93:A7:97:FD:92:CF:17:D3 Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 019F8F1102CF4B01B677B4CED5C7A43D1765 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft Manifest number: 108B Signing time: Thu 23 Jul 2026 13:01:24 +0000 Manifest this update: Thu 23 Jul 2026 13:01:24 +0000 Manifest next update: Fri 24 Jul 2026 13:01:24 +0000 Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: Pb1roydWCnoYke4Q7PHRk24HhqypR4ouw1rcQSurL4o=) 2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=) 3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=) 4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=) 5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=) 6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=) 7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=) 8: Tvp9UTzcuphuhBetxzC7xnAANpk.roa (hash: XsVJrEsr9FE3t/s8zv/e1FiT9DrBI71L2xkk3P4iSPo=) 9: VqSk2F-cMltec__vt5GWmoZRbOs.asa (hash: DSTYqZUEAVPlYiwOcT/Aj9JtlDMu/1/7b3uouJr7QEg=) 10: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=) 11: kZL9IaKbIXWtSeLhiixRuouVuZw.roa (hash: +8djmGYeV8gJTDYzSfSw3gkTCCP8XO1MSarDOtJj7zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:11:02:cf:4b:01:b6:77:b4:ce:d5:c7:a4:3d:17:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Jul 23 13:01:24 2026 GMT Not After : Jul 24 13:01:24 2026 GMT Subject: CN=c3838886979bfc253c5f5b1e93a797fd92cf17d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8f:81:30:01:0d:8a:66:e0:da:17:48:78:60: 4a:91:b5:fe:cb:49:60:fd:e8:63:d0:99:4f:7b:62: a6:ea:9d:b7:1b:cc:a2:cc:87:42:2a:28:90:f7:78: fc:a7:f2:a5:10:75:62:c4:d6:c5:8d:a9:0a:84:b0: a8:c6:af:55:b3:67:75:1f:dd:fb:8e:8b:9c:fa:e0: 29:d2:fc:69:fe:8f:f3:de:f2:29:14:f6:2d:5b:74: 23:b1:29:8b:26:bc:ef:78:a1:a0:6b:80:33:05:ac: c0:6a:18:01:30:f6:64:78:d2:34:5f:9b:e5:fe:c2: 78:d1:85:6d:b1:ae:19:13:42:86:37:f7:e0:f1:a8: 1f:69:63:13:7b:59:48:3a:e2:ca:b5:70:71:c8:31: 08:04:de:06:1d:a8:4d:20:67:50:ce:c4:5e:b9:90: 7b:7e:c1:37:f6:11:f9:14:88:77:35:5b:b7:5c:55: 5b:ad:63:94:78:68:09:9b:7f:69:49:7c:ba:5c:26: 10:0e:2b:74:fe:83:21:81:ee:29:c1:16:b1:0d:83: 7c:e8:0a:7f:cd:50:cf:16:72:c1:d4:50:02:e5:47: f7:00:d1:3e:cc:54:50:9e:b4:3b:17:f2:e6:b4:70: 75:4d:4e:5d:07:b1:43:80:7f:44:b2:fb:16:7c:00: cf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:83:88:86:97:9B:FC:25:3C:5F:5B:1E:93:A7:97:FD:92:CF:17:D3 X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6c:13:61:39:9a:16:a2:5c:d9:53:71:b8:ef:4d:40:02:b7: 81:ab:02:4a:98:8f:4b:91:af:9c:e1:3e:af:aa:0c:e2:ed:ac: 20:94:b3:0d:cc:bf:b8:24:8c:b8:d9:a4:0f:7b:4b:59:bf:47: f4:a4:b0:53:9d:1c:47:ae:9c:75:cb:80:6e:e9:8c:4a:1a:dd: a1:ca:e0:4f:a2:fa:78:62:66:4f:eb:59:99:59:b8:4e:37:62: 3b:dd:74:ad:31:4c:56:22:39:6d:30:24:c3:9a:f0:3e:5d:1e: b6:81:12:83:3b:98:01:16:e7:e1:20:5d:43:bb:f9:ea:41:ac: 93:18:87:a1:91:45:33:37:41:92:49:07:b2:77:bd:ba:2e:8b: 9a:1a:97:4a:24:57:8e:8f:1e:d4:07:a4:3e:38:e0:81:cd:89: c8:6d:4e:2e:a4:80:43:2c:b6:d2:b0:3b:69:ff:39:df:67:8c: a1:71:1b:cb:b5:c4:bf:84:f9:6c:7d:3f:ac:b5:69:d6:c3:7b: 3d:3e:e5:b8:8a:01:9b:cc:3b:5a:45:d7:c8:af:9b:ef:cc:34: 12:42:95:4e:59:af:f3:41:e3:89:b1:74:79:c2:0b:51:1d:64: d0:53:07:df:5d:54:d5:45:1f:1e:a1:78:99:1d:ee:50:48:fe: ac:9b:5a:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PEQLPSwG2d7TO1cekPRdlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjYwNzIzMTMwMTI0WhcNMjYwNzI0MTMwMTI0WjAzMTEwLwYDVQQD EyhjMzgzODg4Njk3OWJmYzI1M2M1ZjViMWU5M2E3OTdmZDkyY2YxN2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4+BMAENimbg2hdIeGBKkbX+y0lg /ehj0JlPe2Km6p23G8yizIdCKiiQ93j8p/KlEHVixNbFjakKhLCoxq9Vs2d1H937 jouc+uAp0vxp/o/z3vIpFPYtW3QjsSmLJrzveKGga4AzBazAahgBMPZkeNI0X5vl /sJ40YVtsa4ZE0KGN/fg8agfaWMTe1lIOuLKtXBxyDEIBN4GHahNIGdQzsReuZB7 fsE39hH5FIh3NVu3XFVbrWOUeGgJm39pSXy6XCYQDit0/oMhge4pwRaxDYN86Ap/ zVDPFnLB1FAC5Uf3ANE+zFRQnrQ7F/LmtHB1TU5dB7FDgH9EsvsWfADPHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMODiIaXm/wlPF9bHpOnl/2SzxfTMB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmwTYTma FqJc2VNxuO9NQAK3gasCSpiPS5GvnOE+r6oM4u2sIJSzDcy/uCSMuNmkD3tLWb9H 9KSwU50cR66cdcuAbumMShrdocrgT6L6eGJmT+tZmVm4TjdiO910rTFMViI5bTAk w5rwPl0etoESgzuYARbn4SBdQ7v56kGskxiHoZFFMzdBkkkHsne9ui6LmhqXSiRX jo8e1AekPjjggc2JyG1OLqSAQyy20rA7af8532eMoXEby7XEv4T5bH0/rLVp1sN7 PT7luIoBm8w7WkXXyK+b78w0EkKVTlmv80HjibF0ecILUR1k0FMH311U1UUfHqF4 mR3uUEj+rJta/w== -----END CERTIFICATE-----Generated at Thu Jul 23 19:08:27 2026 by rpki-client