$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json) Hash identifier: X9BWl8f2J/Kg1lmCdk0zaHx9xdkqMv4SNrFZaqqjOqo= Subject key identifier: 46:6D:22:FE:C6:B6:8C:C6:4E:20:B0:CF:38:74:8D:9C:7D:B6:67:94 Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 01A0C9D891CFA8A6FD3755BC8A435113EA0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft Manifest number: 112E Signing time: Tue 22 Sep 2026 16:00:08 +0000 Manifest this update: Tue 22 Sep 2026 16:00:08 +0000 Manifest next update: Wed 23 Sep 2026 16:00:08 +0000 Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: TW1npUaS/GP7F5By4rTUvJOu4nGXuXDqGAQqLdWqsEc=) 2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=) 3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=) 4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=) 5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=) 6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=) 7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=) 8: Tvp9UTzcuphuhBetxzC7xnAANpk.roa (hash: XsVJrEsr9FE3t/s8zv/e1FiT9DrBI71L2xkk3P4iSPo=) 9: VqSk2F-cMltec__vt5GWmoZRbOs.asa (hash: DSTYqZUEAVPlYiwOcT/Aj9JtlDMu/1/7b3uouJr7QEg=) 10: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=) 11: kZL9IaKbIXWtSeLhiixRuouVuZw.roa (hash: +8djmGYeV8gJTDYzSfSw3gkTCCP8XO1MSarDOtJj7zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:d8:91:cf:a8:a6:fd:37:55:bc:8a:43:51:13:ea:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Sep 22 16:00:08 2026 GMT Not After : Sep 23 16:00:08 2026 GMT Subject: CN=466d22fec6b68cc64e20b0cf38748d9c7db66794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:c3:bc:7a:5f:0e:8c:c3:62:a6:ed:4b:8d: 82:bc:cd:6b:f6:02:f7:d5:ee:29:bd:32:69:18:f2: e9:9e:ed:a8:6a:b9:54:e3:3d:16:3e:bb:98:5b:f5: 43:cf:90:8f:af:c4:95:aa:bf:24:70:5a:95:82:5f: 0c:cf:c5:6a:64:16:01:9f:96:66:7f:d5:09:88:48: 01:8b:57:42:38:ac:43:8d:5b:da:c6:26:81:13:e3: a0:b0:33:5e:88:84:1b:e9:f3:5f:31:ec:5c:35:c1: 8e:86:b2:e1:e6:e8:07:2c:34:aa:1f:89:41:b1:1a: 23:f0:e2:ff:5c:ed:95:73:2a:e5:3c:49:43:68:e9: a4:c9:42:0d:04:ca:e7:ce:25:0d:44:36:3a:45:49: 20:5c:1e:35:f8:60:55:8b:6a:c2:20:2b:a9:66:7d: f2:39:7c:0d:c5:e9:10:f5:94:2c:c4:da:29:27:f0: a2:b3:90:b9:6b:63:2a:0a:f0:e6:8a:94:41:16:f9: 44:2f:9c:4c:71:cb:38:84:2e:6e:a0:84:09:9b:30: d4:6b:ba:23:0b:c6:b5:55:24:fa:87:d6:ee:39:51: 05:9d:14:b0:47:09:19:c0:83:ef:8f:4e:4c:71:7e: d1:63:2a:29:10:5d:3c:0d:36:40:21:7c:d2:22:66: b6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6D:22:FE:C6:B6:8C:C6:4E:20:B0:CF:38:74:8D:9C:7D:B6:67:94 X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3d:96:4c:46:dd:fb:a5:ae:e7:b7:2d:47:f2:c3:5c:d0:fb: 46:9c:ea:8a:4e:a9:e9:9a:89:13:cc:89:a0:27:cf:30:a6:d1: 13:97:a9:0f:7c:05:fd:2c:91:a7:7c:b6:52:07:47:6b:be:ad: fb:aa:57:3e:e8:00:a3:8b:72:99:0c:a6:aa:3e:d8:3d:bd:ed: 31:1b:02:4e:1e:c1:f9:29:3b:cb:2d:4b:c4:8d:a1:86:4f:8c: 1c:28:34:ab:e1:79:f8:ff:55:d6:0b:02:b7:0a:b6:a3:3e:14: 7d:19:97:66:b8:da:23:ff:b4:36:73:a5:02:d6:66:51:72:9a: 6d:d4:b6:e5:9f:35:da:ee:89:95:cc:61:58:3a:e5:c1:d7:82: 39:46:67:89:f4:20:9f:c6:22:2d:da:c1:e9:17:28:86:1f:ad: f5:a0:5d:40:5a:86:fe:dc:34:da:ea:c2:88:e4:87:3c:eb:46: 4b:10:40:b3:c1:f6:5c:34:ad:ae:40:1e:95:c2:98:2d:88:7c: 86:f5:ee:f4:28:78:c1:22:f9:7c:d3:02:18:4f:b5:83:63:11: b2:63:cb:22:3d:c8:20:86:ae:68:70:f6:ac:cc:06:f0:bc:22: 0d:97:f1:e2:79:35:ad:58:98:10:16:46:6f:18:01:44:b1:7b: ab:8f:be:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDJ2JHPqKb9N1W8ikNRE+oKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjYwOTIyMTYwMDA4WhcNMjYwOTIzMTYwMDA4WjAzMTEwLwYDVQQD Eyg0NjZkMjJmZWM2YjY4Y2M2NGUyMGIwY2YzODc0OGQ5YzdkYjY2Nzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPTDvHpfDozDYqbtS42CvM1r9gL3 1e4pvTJpGPLpnu2oarlU4z0WPruYW/VDz5CPr8SVqr8kcFqVgl8Mz8VqZBYBn5Zm f9UJiEgBi1dCOKxDjVvaxiaBE+OgsDNeiIQb6fNfMexcNcGOhrLh5ugHLDSqH4lB sRoj8OL/XO2VcyrlPElDaOmkyUINBMrnziUNRDY6RUkgXB41+GBVi2rCICupZn3y OXwNxekQ9ZQsxNopJ/Cis5C5a2MqCvDmipRBFvlEL5xMccs4hC5uoIQJmzDUa7oj C8a1VST6h9buOVEFnRSwRwkZwIPvj05McX7RYyopEF08DTZAIXzSIma2dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZtIv7GtozGTiCwzzh0jZx9tmeUMB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALD2WTEbd +6Wu57ctR/LDXND7Rpzqik6p6ZqJE8yJoCfPMKbRE5epD3wF/SyRp3y2UgdHa76t +6pXPugAo4tymQymqj7YPb3tMRsCTh7B+Sk7yy1LxI2hhk+MHCg0q+F5+P9V1gsC twq2oz4UfRmXZrjaI/+0NnOlAtZmUXKabdS25Z812u6JlcxhWDrlwdeCOUZnifQg n8YiLdrB6Rcohh+t9aBdQFqG/tw02urCiOSHPOtGSxBAs8H2XDStrkAelcKYLYh8 hvXu9Ch4wSL5fNMCGE+1g2MRsmPLIj3IIIauaHD2rMwG8LwiDZfx4nk1rViYEBZG bxgBRLF7q4++fA== -----END CERTIFICATE-----Generated at Tue Sep 22 21:42:43 2026 by rpki-client