$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json) Hash identifier: 9JT7WyU4THig44O9gv1z+VX66WAB+VzV4r5goA+j9eM= Subject key identifier: 57:33:AA:37:35:94:46:84:F2:11:FF:30:25:DE:D0:61:B3:62:FE:BD Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 01A1DFF1615750694BAF92CF3FFF323D9BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft Manifest number: 11BE Signing time: Sun 15 Nov 2026 16:01:40 +0000 Manifest this update: Sun 15 Nov 2026 16:01:40 +0000 Manifest next update: Mon 16 Nov 2026 16:01:40 +0000 Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: X1oMpL5U93ZWiJy/ahaiRgUzmJCZv/ciL11fSVSjI+w=) 2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=) 3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=) 4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=) 5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=) 6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=) 7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=) 8: Tvp9UTzcuphuhBetxzC7xnAANpk.roa (hash: XsVJrEsr9FE3t/s8zv/e1FiT9DrBI71L2xkk3P4iSPo=) 9: VqSk2F-cMltec__vt5GWmoZRbOs.asa (hash: DSTYqZUEAVPlYiwOcT/Aj9JtlDMu/1/7b3uouJr7QEg=) 10: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=) 11: kZL9IaKbIXWtSeLhiixRuouVuZw.roa (hash: +8djmGYeV8gJTDYzSfSw3gkTCCP8XO1MSarDOtJj7zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:f1:61:57:50:69:4b:af:92:cf:3f:ff:32:3d:9b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Nov 15 16:01:40 2026 GMT Not After : Nov 16 16:01:40 2026 GMT Subject: CN=5733aa3735944684f211ff3025ded061b362febd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:56:09:05:35:7d:8d:7f:7c:9e:6c:2b:53:32: e9:76:1a:eb:79:a9:d8:b9:16:47:cc:f2:47:9f:24: a8:7b:99:97:c3:d9:4d:a2:33:4d:a6:ae:63:06:ae: c9:03:c4:b8:45:19:a3:60:04:15:9c:84:9d:c1:da: c5:01:f6:f1:b9:64:fc:6a:60:1f:83:a8:d1:c2:52: 5f:5c:bb:97:d5:d2:8c:97:cc:b5:7d:b8:c4:fe:67: f1:be:e4:be:5e:a6:49:9f:07:ca:5b:9a:f0:88:f9: 46:22:83:45:50:09:09:aa:72:22:c3:4b:88:a0:70: 03:1d:d4:15:bc:2e:de:ef:2c:f1:0d:e2:0b:51:54: 7e:d7:67:99:69:33:80:32:d1:13:6b:27:3b:b1:d5: eb:ff:4b:f9:a3:6f:77:cc:ec:14:df:25:11:b2:69: 82:da:d8:89:14:7e:a4:65:ca:83:c4:db:44:88:88: 9e:54:ea:5d:52:5b:4c:be:38:35:8e:c9:c2:ee:50: d3:c2:06:e4:e5:26:33:8d:85:48:6f:4e:5b:3f:b7: 67:24:00:fc:87:d4:69:c9:c5:b3:af:fa:7d:ed:12: bc:15:88:67:d0:60:83:52:0b:71:a8:15:dd:5c:aa: 4c:77:19:6b:a3:db:b0:6b:54:df:12:c0:b2:15:b2: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:33:AA:37:35:94:46:84:F2:11:FF:30:25:DE:D0:61:B3:62:FE:BD X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:48:0e:e2:cf:39:71:e8:50:a4:a9:04:5c:ca:ff:f5:76:ec: 51:63:d7:f3:ce:6f:bf:73:6b:20:36:99:70:43:ff:b5:f9:a0: d2:bb:b3:0b:ab:8b:c1:7f:d1:df:a8:80:cc:0b:25:83:af:6e: b1:98:68:3c:7b:1a:e0:4e:75:4a:85:43:3e:40:a8:5f:a0:fb: 09:84:5a:6c:2e:bc:a9:d4:86:e5:07:b3:63:41:c7:aa:21:28: 14:fa:92:8f:1b:6e:dd:ba:ae:cf:4a:9a:db:25:88:10:18:4a: 1a:c9:9c:36:f6:c6:02:c7:94:b3:b0:5d:55:91:c4:e3:44:a6: 9e:3c:bc:46:52:20:a4:51:e8:2f:6e:d4:4a:34:9d:06:48:37: b5:35:75:52:d7:56:ff:60:a6:ff:62:19:7f:15:69:37:6a:0a: 99:9d:34:f9:6a:ae:7a:37:7c:be:bb:48:de:b1:d6:dd:25:19: c3:59:6b:ff:56:9d:fd:2e:30:8a:5a:d4:76:00:a7:78:09:fe: ef:5c:21:e1:b4:0e:6d:e8:b8:8b:61:b6:f6:28:5e:2d:77:b0: fa:0c:2f:0c:c3:c0:93:4f:ed:07:83:a0:60:13:f1:92:e4:b7: a8:53:ae:63:a6:f3:bf:dd:c2:07:25:b6:d4:fd:32:1f:4f:c1: 46:c8:f4:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHf8WFXUGlLr5LPP/8yPZu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjYxMTE1MTYwMTQwWhcNMjYxMTE2MTYwMTQwWjAzMTEwLwYDVQQD Eyg1NzMzYWEzNzM1OTQ0Njg0ZjIxMWZmMzAyNWRlZDA2MWIzNjJmZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFYJBTV9jX98nmwrUzLpdhrreanY uRZHzPJHnySoe5mXw9lNojNNpq5jBq7JA8S4RRmjYAQVnISdwdrFAfbxuWT8amAf g6jRwlJfXLuX1dKMl8y1fbjE/mfxvuS+XqZJnwfKW5rwiPlGIoNFUAkJqnIiw0uI oHADHdQVvC7e7yzxDeILUVR+12eZaTOAMtETayc7sdXr/0v5o293zOwU3yURsmmC 2tiJFH6kZcqDxNtEiIieVOpdUltMvjg1jsnC7lDTwgbk5SYzjYVIb05bP7dnJAD8 h9RpycWzr/p97RK8FYhn0GCDUgtxqBXdXKpMdxlro9uwa1TfEsCyFbKx/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFczqjc1lEaE8hH/MCXe0GGzYv69MB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUgO4s85 cehQpKkEXMr/9XbsUWPX885vv3NrIDaZcEP/tfmg0ruzC6uLwX/R36iAzAslg69u sZhoPHsa4E51SoVDPkCoX6D7CYRabC68qdSG5QezY0HHqiEoFPqSjxtu3bquz0qa 2yWIEBhKGsmcNvbGAseUs7BdVZHE40Smnjy8RlIgpFHoL27USjSdBkg3tTV1UtdW /2Cm/2IZfxVpN2oKmZ00+Wquejd8vrtI3rHW3SUZw1lr/1ad/S4wilrUdgCneAn+ 71wh4bQObei4i2G29iheLXew+gwvDMPAk0/tB4OgYBPxkuS3qFOuY6bzv93CByW2 1P0yH0/BRsj0IQ== -----END CERTIFICATE-----Generated at Sun Nov 15 20:47:00 2026 by rpki-client