$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft File: r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json) Hash identifier: 6nAemRN4etrYwLpYElq9M2iy8KVnGB1k/7p9DL7LeNA= Subject key identifier: 75:73:C1:1E:3D:17:E6:2F:07:EF:3E:C2:21:16:95:47:75:51:3E:14 Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8 Certificate serial: 019E1E35CAB5C6A2D4B5DBB09C880AADF42B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft Manifest number: 1602 Signing time: Tue 12 May 2026 22:01:42 +0000 Manifest this update: Tue 12 May 2026 22:01:42 +0000 Manifest next update: Wed 13 May 2026 22:01:42 +0000 Files and hashes: 1: 3Adh7KtHVqwqgZmtyDo8Ej6pQKM.roa (hash: wUQuxvOgY7UYkYHJtGk8LL5BCyN5FZHPBwwIxJwHIq4=) 2: 5utcJHsfBrjTs_UOTB5AJlV11DM.roa (hash: p9JiIAKdi3ntcnSsoekfJmDvvRvUwFnZwfz4Ft5kAjc=) 3: 9QLofWBXVC7R3PGVThvNOVE9b90.roa (hash: 8q2PTehDaT3hGi/AO3gfkCERrwpDuk8iVLdkhe1JooQ=) 4: InOi1f3veo98pW4OGTBEIEXKEZE.roa (hash: Xjh3PenXVS46SZGt58mV2dcaP4QPqA5YhhKDh/W7EIA=) 5: J41thO8T8h3ECLAtFbEa63FQ07k.roa (hash: 7SAVb1xYsKsQiyuIDRpxE3uEw5S/EAv/z+BlKDTZqQY=) 6: ceEv1t749F4uxJkZjXzVLrcY0W4.roa (hash: CPEu9mzzQjkaDfnSXyi14ADFRqiihJHheO6fccq1E38=) 7: leUezOsMyq96-d8mJ8nIjjD7JvA.roa (hash: g5CFKJHlpq/pgKR++1ZaNjuNwVvKoATKegh0uW1A5JI=) 8: ohU1cnvjNfxWuepVkjRa06OJfuU.roa (hash: 30e5bsuiYaaP9kH7j7NGuQ8fKIB7hM+APPzNsaPzyUo=) 9: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: ZL0srxPVDNgPVXehKZAYs86cpFE36AmrAn043R7s+II=) 10: uoFFO71WiREgY844RuKE1yCVJAI.roa (hash: qctNyKkUd5I2cpGY+ypr0Dn6bPJwy7oeCGkLPyDoqRs=) 11: xwd7sohdrx5YU3LTJIWIxQ7gJnc.roa (hash: 0vwAzftKk4tcR77oFqQ7h1CZN6cHODVRJzedfJTmcvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:35:ca:b5:c6:a2:d4:b5:db:b0:9c:88:0a:ad:f4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8 Validity Not Before: May 12 22:01:42 2026 GMT Not After : May 13 22:01:42 2026 GMT Subject: CN=7573c11e3d17e62f07ef3ec22116954775513e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:79:ed:11:f9:47:69:35:68:1e:6b:2d:0e: 7c:07:d2:f5:cb:87:23:87:14:53:38:3a:3d:b4:fe: fd:12:c7:dc:90:5e:0b:8b:ef:4d:30:7a:bf:b8:ce: c5:e4:57:ce:f6:d3:80:c3:7c:32:03:60:f4:ec:1c: 2b:14:73:29:ea:e0:a6:a4:17:77:e1:dc:1c:4c:c3: fe:a5:32:6b:10:68:33:c0:86:ba:a7:c2:29:3b:2b: 98:5b:c1:74:9d:e1:86:f3:27:19:5d:ac:b6:90:52: 07:8c:7f:79:cb:a5:d1:7f:a4:e2:56:50:67:10:9e: 6d:1a:cb:43:db:cc:64:2f:9b:fd:b5:e4:2a:cf:24: 76:85:dc:5d:0d:2b:2d:7c:22:9f:b5:81:18:a3:15: fa:d4:d9:a1:79:e8:84:58:22:90:c4:8f:d2:7d:fa: 26:c3:3b:8f:d3:4b:1b:04:fc:b0:b2:ba:f3:26:42: d2:4a:78:10:67:0c:a0:8d:77:0e:ee:d3:a6:e7:b2: d9:ed:5e:99:1a:b6:17:ee:b9:38:1d:c9:df:af:08: 76:e7:38:7a:fc:a8:ba:24:84:a7:ad:8a:65:1c:e2: b5:11:f4:65:62:89:6d:6f:16:0f:6c:06:a5:21:36: 9f:c3:3f:64:6e:bc:a7:06:1c:82:9f:4e:59:ff:be: 48:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:73:C1:1E:3D:17:E6:2F:07:EF:3E:C2:21:16:95:47:75:51:3E:14 X509v3 Authority Key Identifier: keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:4d:78:c5:34:a7:14:ff:4c:84:df:88:00:44:ac:d0:90:79: 6f:97:bf:1d:81:10:53:bd:89:3b:dc:0c:e1:32:7b:73:14:a0: f4:ad:b6:0c:a6:5e:db:25:b4:16:52:74:0b:c7:1c:d6:4d:76: 06:6e:23:bd:67:05:9c:86:16:f4:79:b7:80:fa:8e:f5:b8:30: 22:f3:43:8f:86:83:83:da:eb:04:f3:58:86:8a:a0:bb:f0:56: 84:67:db:46:b7:ab:9d:27:1e:ca:1a:52:35:93:65:47:c1:5c: b0:8f:cc:c3:00:3f:3a:60:4c:1b:5a:4e:32:38:c4:f4:b2:63: b6:08:de:af:55:60:bf:6e:fb:a5:c1:43:15:02:ad:ff:30:f0: 34:d8:29:cb:bd:3b:e6:f6:e5:85:bb:2a:89:e8:a5:97:ec:99: 2e:dc:06:0f:c8:27:99:a5:ef:44:dc:2e:2c:ab:52:39:c7:05: d4:5d:6b:9c:d6:18:db:7e:d7:ea:43:9e:19:48:e4:69:5c:fc: 42:0a:52:bb:fd:19:1b:ff:a0:e0:d3:e6:48:7a:9f:fe:8d:26: 36:28:60:bb:cd:7b:19:13:ec:27:34:2d:1b:89:66:ff:26:b2: 81:85:88:aa:82:5f:49:5e:9f:a2:b7:a6:83:ab:32:d9:53:38: 61:db:41:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eNcq1xqLUtduwnIgKrfQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk ZmQ5YTgwHhcNMjYwNTEyMjIwMTQyWhcNMjYwNTEzMjIwMTQyWjAzMTEwLwYDVQQD Eyg3NTczYzExZTNkMTdlNjJmMDdlZjNlYzIyMTE2OTU0Nzc1NTEzZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGt57RH5R2k1aB5rLQ58B9L1y4cj hxRTODo9tP79EsfckF4Li+9NMHq/uM7F5FfO9tOAw3wyA2D07BwrFHMp6uCmpBd3 4dwcTMP+pTJrEGgzwIa6p8IpOyuYW8F0neGG8ycZXay2kFIHjH95y6XRf6TiVlBn EJ5tGstD28xkL5v9teQqzyR2hdxdDSstfCKftYEYoxX61NmheeiEWCKQxI/Sffom wzuP00sbBPywsrrzJkLSSngQZwygjXcO7tOm57LZ7V6ZGrYX7rk4Hcnfrwh25zh6 /Ki6JISnrYplHOK1EfRlYoltbxYPbAalITafwz9kbrynBhyCn05Z/75IcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVzwR49F+YvB+8+wiEWlUd1UT4UMB8GA1UdIwQY MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt MThkMWE0MDZhYWVkLzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlk14xTSn FP9MhN+IAESs0JB5b5e/HYEQU72JO9wM4TJ7cxSg9K22DKZe2yW0FlJ0C8cc1k12 Bm4jvWcFnIYW9Hm3gPqO9bgwIvNDj4aDg9rrBPNYhoqgu/BWhGfbRrernSceyhpS NZNlR8FcsI/MwwA/OmBMG1pOMjjE9LJjtgjer1Vgv277pcFDFQKt/zDwNNgpy707 5vblhbsqieill+yZLtwGD8gnmaXvRNwuLKtSOccF1F1rnNYY237X6kOeGUjkaVz8 QgpSu/0ZG/+g4NPmSHqf/o0mNihgu817GRPsJzQtG4lm/yaygYWIqoJfSV6forem g6sy2VM4YdtBDA== -----END CERTIFICATE-----Generated at Wed May 13 01:44:20 2026 by rpki-client