$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: u429A0qDiQHdDeRLc3hYAWKrEooPmE5XZPBER7TjgSc= Subject key identifier: 3E:42:E3:53:EE:70:86:3B:3C:7B:D4:37:27:DA:68:F2:26:42:C8:F5 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 019D265FE829B96A84F9FA7253D31E0D1420 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 1887 Signing time: Wed 25 Mar 2026 19:01:52 +0000 Manifest this update: Wed 25 Mar 2026 19:01:52 +0000 Manifest next update: Thu 26 Mar 2026 19:01:52 +0000 Files and hashes: 1: 299VDXb908RrjfhJ-5_K9PQZ2OU.roa (hash: JgnN5hmKTxIWi7DhnDUs85H4h2Usx3B4vuW3SXCz/uM=) 2: 2C7pZIVJXgaWMo1Q2QgcD-hueeI.roa (hash: uGrmvXvC7gEnKXoQKKmv+XIHcuaY4v0wNeu6T5g4Gcs=) 3: 2V6XsfRamSPZfXogwVvMnoXo6tg.roa (hash: Q3F6Dyqs7far05WQ9Q0YzexpZAHRXvbvDQ++2a4+MII=) 4: 8UgGPRjkNP2twoQEGeBFfsQ8b7U.roa (hash: nwNyQ/U0qeEN54sY8h57MP/vc19V4ZZPQJybv3Z+p4g=) 5: Aht0dpZHvLlZm49PYsO1wdj9-Nk.roa (hash: f/A04MrT12ymQ0ZVfN8ubwpm0ar44+1vbL53AKqACcw=) 6: MOC2f4RvJR6RnRmqnfW5PqtkNg4.roa (hash: 5q9firvMMHnQOvC8s2mQC74BmJjzY0Z1MY4DRufuMGk=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: dIFXe/VP5nQgVtxWAbc4NY/9EVF5VYbg//LI8EHzLyM=) 8: RWS9bhHErxhI76ViZIzuvYt-AP8.roa (hash: +RnK+fCwo61WgDiJVgO/R4YOMLNWXhkMeClRUVrunnE=) 9: aGebgJD8M8SS3wqeGa7wpznHAEw.roa (hash: SHW+2zTtMi0dPN2oweeZhLWRegjAho7EwIkU2ibvhL0=) 10: hf2tUKoMhw8WDED_AN-v6f1qkZQ.roa (hash: d3wXcLDNlCq8YksJf8KYY1HAUgrO4FjfqtmhHQ5Opbo=) 11: kzw9wdxbadrqtu7kVtbu2JLu-x8.roa (hash: Qk/H5R/hSYn97VwMdoQjOSY/SWlxXEJMhW6F91uFxtk=) 12: tAXj2lTAU4pGXnl2-mD0BbXNUxs.roa (hash: hasUWhaeJW5JTZvkwGQZNe+jO3cPWANP11u9M1UpMp4=) 13: vSQBHFObZlm24Pjxv8F-VIJ_MkM.roa (hash: 7Jcl58oiu4HJUlOPjoE4zGBRrUSoIh2IHKad1h+ytgU=) 14: vqZQVORPWZ1lXlQgDCRvTJCZfXo.roa (hash: s8+Y7767O5xM4xdOIqw3TNY342+4LMjbnHyZjQIRUhA=) 15: zBkkSJX_2Njc_SNmOPAvtm3tNcU.roa (hash: IuiiHnyFxCinYCJobiY1N8cUrmDaMTAPrwer2YRYn20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:5f:e8:29:b9:6a:84:f9:fa:72:53:d3:1e:0d:14:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Mar 25 19:01:52 2026 GMT Not After : Mar 26 19:01:52 2026 GMT Subject: CN=3e42e353ee70863b3c7bd43727da68f22642c8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:a8:f9:ff:dd:a1:7a:39:2a:e0:63:4b:50: 78:3f:2e:44:bf:1c:c3:77:c2:46:2d:52:47:c1:07: 9f:d2:ec:56:70:1f:6b:4b:f8:5d:bf:18:fa:10:38: b8:95:81:22:2e:48:11:61:18:ce:d8:d7:2e:da:b6: ac:62:3e:f3:e0:0d:02:40:6a:e4:3e:33:ba:e7:5e: 52:d3:30:46:60:ff:f8:3c:98:68:b4:3c:d8:29:3c: ef:90:6e:50:ba:2c:34:d6:92:d1:58:de:00:31:a5: 7a:77:c9:a0:b6:9d:4e:80:bf:14:7a:24:7b:fe:46: c1:6e:f3:c3:43:5a:a5:04:da:7e:a2:89:d5:e9:3e: 68:d7:8d:bf:2a:4b:32:d1:4d:5a:de:58:5d:b1:12: 28:ae:1a:36:91:61:30:f6:b6:12:2e:7b:c1:2a:81: 58:95:9b:20:f3:6f:46:88:42:f2:9f:62:17:b2:3a: c1:64:f8:10:0b:05:12:2a:36:ec:a2:c1:8b:20:a4: bf:7d:7b:2a:79:85:58:83:69:ed:1c:86:f5:37:94: 29:76:ae:0e:43:cd:76:0c:63:27:37:3d:dd:b8:05: 36:50:12:6e:b4:75:96:20:d0:7c:89:a0:0e:ce:97: e0:ad:85:e6:d4:e3:68:f4:d0:c3:a8:d4:7d:da:90: 90:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:42:E3:53:EE:70:86:3B:3C:7B:D4:37:27:DA:68:F2:26:42:C8:F5 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c9:e1:dc:67:05:f0:8c:1a:44:45:28:bb:56:65:3c:07:07: 15:b6:36:cc:64:06:4b:3d:42:04:be:5b:78:c0:fe:4e:70:8e: 3c:2a:d8:bd:f8:32:6c:bd:42:74:bd:a8:7b:15:e2:52:ac:48: 98:06:66:85:f7:f8:fe:5c:2a:57:91:ec:59:44:8d:2e:3c:e8: 35:9f:d7:32:82:4b:16:3d:f7:23:16:cc:8b:a9:1b:9f:72:6c: 7a:ed:d6:60:08:74:b9:1c:6c:55:6d:65:9d:0f:d1:25:9c:45: 42:1a:79:59:bf:46:b1:a4:de:0f:ed:de:d9:61:01:97:39:77: b3:a9:d3:f8:e9:15:11:dd:94:db:1f:78:e7:a2:5f:c3:8d:ab: 9b:8c:8b:1c:76:5c:45:f2:46:9e:8e:c3:e2:73:74:f0:10:65: 65:92:52:03:b1:3a:8c:cc:7e:19:b4:dd:48:4e:f8:26:40:a1: 30:fd:22:dd:42:9b:c2:87:d7:42:91:da:58:95:0c:d1:71:1d: 3d:42:61:18:37:f8:70:f9:69:4f:0f:6c:32:61:98:d4:33:44: af:f4:d2:7b:8a:12:07:a4:1c:91:4a:27:e4:31:3d:f3:96:4b: e3:57:60:85:bb:3b:03:cc:47:f1:23:de:70:a1:6a:62:17:33: 3e:f6:fd:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mX+gpuWqE+fpyU9MeDRQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjYwMzI1MTkwMTUyWhcNMjYwMzI2MTkwMTUyWjAzMTEwLwYDVQQD EygzZTQyZTM1M2VlNzA4NjNiM2M3YmQ0MzcyN2RhNjhmMjI2NDJjOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT6o+f/doXo5KuBjS1B4Py5EvxzD d8JGLVJHwQef0uxWcB9rS/hdvxj6EDi4lYEiLkgRYRjO2Ncu2rasYj7z4A0CQGrk PjO6515S0zBGYP/4PJhotDzYKTzvkG5Quiw01pLRWN4AMaV6d8mgtp1OgL8UeiR7 /kbBbvPDQ1qlBNp+oonV6T5o142/Kksy0U1a3lhdsRIorho2kWEw9rYSLnvBKoFY lZsg829GiELyn2IXsjrBZPgQCwUSKjbsosGLIKS/fXsqeYVYg2ntHIb1N5Qpdq4O Q812DGMnNz3duAU2UBJutHWWINB8iaAOzpfgrYXm1ONo9NDDqNR92pCQcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5C41PucIY7PHvUNyfaaPImQsj1MB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsnh3GcF 8IwaREUou1ZlPAcHFbY2zGQGSz1CBL5beMD+TnCOPCrYvfgybL1CdL2oexXiUqxI mAZmhff4/lwqV5HsWUSNLjzoNZ/XMoJLFj33IxbMi6kbn3Jseu3WYAh0uRxsVW1l nQ/RJZxFQhp5Wb9GsaTeD+3e2WEBlzl3s6nT+OkVEd2U2x9456Jfw42rm4yLHHZc RfJGno7D4nN08BBlZZJSA7E6jMx+GbTdSE74JkChMP0i3UKbwofXQpHaWJUM0XEd PUJhGDf4cPlpTw9sMmGY1DNEr/TSe4oSB6QckUon5DE985ZL41dghbs7A8xH8SPe cKFqYhczPvb9AA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:14:48 2026 by rpki-client