$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft File: gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json) Hash identifier: K90/j68xAH2t5sUkxnc4fpH+RKEOn5wWph2k/t0OwTE= Subject key identifier: 2F:31:7C:5C:88:FB:DB:38:D2:9E:D3:56:CE:26:22:6F:93:1A:DA:6D Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 019D26966E127C529188F4F2BF1F452A14D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft Manifest number: 17EA Signing time: Wed 25 Mar 2026 20:01:25 +0000 Manifest this update: Wed 25 Mar 2026 20:01:25 +0000 Manifest next update: Thu 26 Mar 2026 20:01:25 +0000 Files and hashes: 1: 6Qgdh3WcW0KDG9I-xMVNXaKtYSc.roa (hash: n217wGPfHiNRTtY8nnF+yR0z3LLQ6JHk8tpE1xzv/GY=) 2: 9DOAu8axwGa0FsfS7ExMHAQ6nvo.roa (hash: ObCOCbyuoWr7L7d8fgGC8bt1I+db3t0fWPHAO97QZUk=) 3: Fu8KZHLDLt0PcTCFQ_1SdjKZ0uk.roa (hash: ZRYOD/e/KtPDQ1uvXRpnm6kp6bHpp7HGPUjvUzSoMsM=) 4: UyEyoxYffVHMgek2KWRxc9EkWzI.roa (hash: b9ia7zBPnauhiAFfLtEGaadCmnS7C4S6xG4WG0fb70o=) 5: VDK5rygMjyMJ5JHBL2WeMUvvQHw.roa (hash: HQ1V1J6+aXUqpfVBB8t9zNFEnzgS4StmEMgPyMgGXOM=) 6: XBEJ733ai7-gmnDdQh8pwux3l5s.roa (hash: Q0EvpOJnp7oR8ap1Xu0coNs93jICexWOPJZwwEl/yME=) 7: YFx7AMGBmNvIEEF0rkpFhBQPEA0.roa (hash: BrjcqRRz5NSmt9i/9E/oQ4g12kumuE1CB1/Rk3lBLvM=) 8: agNWFJ6lYT9cYM9QENETvOLZPI0.roa (hash: F2addx2SByXtigLyYiMUDmpNtycaXyju8G/xXyoPRII=) 9: dM9zh5E81r9UWVSK8u7mzgQlyvU.roa (hash: aq1TqgSAbBjOuDN0o6DtvSCaK7Bm/i/PBbH93DWX1FE=) 10: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: byAboPHy1YlObcEf4IPDJQdFHIUAWn0jW+jJT1lY+M8=) 11: wYQUPYTD0bYQdwZYQkAgn3uAbHw.roa (hash: DPOkDtJzUAKeVM1PYYwP4Xv66zWe8nDRva28kFk1TDQ=) 12: z2VeS6Cr-FUTndI9erFU_xgXeQc.roa (hash: VfSkmN7U5VY7VVnLMw0WuSWj2FuFIlacIGmckDk9o2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 20:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:96:6e:12:7c:52:91:88:f4:f2:bf:1f:45:2a:14:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Mar 25 20:01:25 2026 GMT Not After : Mar 26 20:01:25 2026 GMT Subject: CN=2f317c5c88fbdb38d29ed356ce26226f931ada6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:64:39:e5:76:26:31:0d:35:ff:30:0f:87:df: da:11:a8:5e:df:40:54:00:63:6f:8e:b4:7f:1a:3c: 40:c0:61:e3:0b:42:f0:3c:31:a9:c3:02:00:9e:3f: 43:6d:f4:49:5f:36:61:65:54:87:e2:90:82:f2:91: 82:05:d0:07:8d:56:27:7a:90:0f:f5:76:04:a7:ee: a9:06:95:d4:64:30:3c:af:c4:a7:03:90:65:0b:aa: 87:07:be:d5:31:d7:07:4d:df:25:df:b3:ca:15:37: 0c:66:9d:2a:df:61:6a:cf:c7:5c:65:3e:c7:52:63: b9:b4:a2:30:72:6c:6c:bf:24:c3:b3:f5:c0:b6:ef: 8b:08:9b:74:cd:96:ac:86:9e:61:de:ec:bd:e1:64: 6b:8e:48:ae:88:67:76:df:d3:e7:bf:08:4f:83:15: 1b:58:f2:5a:16:a6:a0:41:44:40:aa:3c:dc:b8:48: d5:8a:de:ec:d5:72:07:a6:ea:74:45:96:ba:18:f7: ae:ac:9d:37:3f:25:14:50:53:48:52:db:f0:cc:33: 7d:9f:98:7d:9d:41:cc:d9:a6:32:c0:9a:8d:2f:02: 76:61:e0:ca:be:70:81:69:32:e5:86:1c:a0:ac:a3: 5c:99:00:8d:ea:79:51:d1:95:1f:4e:86:5c:3d:3d: 78:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:31:7C:5C:88:FB:DB:38:D2:9E:D3:56:CE:26:22:6F:93:1A:DA:6D X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a2:9e:9d:7d:4d:69:45:f9:04:b8:ce:7e:1e:e7:67:ff:ba: 2d:48:70:90:fe:e5:d2:4a:1c:2d:93:a7:c9:db:34:06:27:1d: 51:1b:99:89:88:26:7c:c5:95:2c:92:1f:77:be:df:4d:00:31: 93:57:98:47:39:8d:55:1a:95:69:a0:21:40:87:7d:62:aa:6f: 07:71:17:02:7f:a2:51:2c:b4:cb:58:63:c0:7f:d1:5d:3c:86: 4d:0b:0e:cf:e9:32:52:db:0f:8b:3a:f2:4d:e2:e1:17:aa:bf: a6:14:5b:0b:93:ca:1a:55:a8:36:73:ee:ce:2f:ee:09:e0:54: 0f:0f:89:1a:66:fd:c3:fc:9c:75:ac:5b:81:7a:35:f2:e7:ef: f8:6c:5f:a6:2d:6c:e5:04:92:a4:30:d9:fb:06:50:e5:04:df: 44:03:7e:38:9e:bb:6f:99:c0:18:a2:26:3c:0f:09:ec:6a:c9: 43:e7:fa:43:da:d3:21:3f:fd:14:18:00:3b:e9:3c:0b:a6:cf: d2:44:86:89:2b:76:47:d8:b2:ae:d9:89:0c:7b:cf:07:9b:e4: c7:98:6f:68:71:0c:79:84:58:42:cb:4c:0d:b8:45:84:6d:af: dc:ff:e3:b0:a7:03:71:eb:2b:db:85:1e:48:43:c4:b5:ff:c5: b0:4a:8a:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mlm4SfFKRiPTyvx9FKhTQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjYwMzI1MjAwMTI1WhcNMjYwMzI2MjAwMTI1WjAzMTEwLwYDVQQD EygyZjMxN2M1Yzg4ZmJkYjM4ZDI5ZWQzNTZjZTI2MjI2ZjkzMWFkYTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGQ55XYmMQ01/zAPh9/aEahe30BU AGNvjrR/GjxAwGHjC0LwPDGpwwIAnj9DbfRJXzZhZVSH4pCC8pGCBdAHjVYnepAP 9XYEp+6pBpXUZDA8r8SnA5BlC6qHB77VMdcHTd8l37PKFTcMZp0q32Fqz8dcZT7H UmO5tKIwcmxsvyTDs/XAtu+LCJt0zZashp5h3uy94WRrjkiuiGd239PnvwhPgxUb WPJaFqagQURAqjzcuEjVit7s1XIHpup0RZa6GPeurJ03PyUUUFNIUtvwzDN9n5h9 nUHM2aYywJqNLwJ2YeDKvnCBaTLlhhygrKNcmQCN6nlR0ZUfToZcPT14CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8xfFyI+9s40p7TVs4mIm+TGtptMB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaKenX1N aUX5BLjOfh7nZ/+6LUhwkP7l0kocLZOnyds0BicdURuZiYgmfMWVLJIfd77fTQAx k1eYRzmNVRqVaaAhQId9YqpvB3EXAn+iUSy0y1hjwH/RXTyGTQsOz+kyUtsPizry TeLhF6q/phRbC5PKGlWoNnPuzi/uCeBUDw+JGmb9w/ycdaxbgXo18ufv+Gxfpi1s 5QSSpDDZ+wZQ5QTfRAN+OJ67b5nAGKImPA8J7GrJQ+f6Q9rTIT/9FBgAO+k8C6bP 0kSGiSt2R9iyrtmJDHvPB5vkx5hvaHEMeYRYQstMDbhFhG2v3P/jsKcDcesr24Ue SEPEtf/FsEqK5A== -----END CERTIFICATE-----Generated at Thu Mar 26 05:04:48 2026 by rpki-client