$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft File: r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json) Hash identifier: t84Lvx0YOfbew//LqPgSaU4Y4UnRV5XP1IMtC8NAIjw= Subject key identifier: 91:83:2D:FC:8E:75:3B:20:C5:74:8D:6F:EC:87:02:C8:D7:71:EE:B6 Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8 Certificate serial: 019D2771D05EEC9CB71ADE9D8CD8994693A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft Manifest number: 1582 Signing time: Thu 26 Mar 2026 00:01:03 +0000 Manifest this update: Thu 26 Mar 2026 00:01:03 +0000 Manifest next update: Fri 27 Mar 2026 00:01:03 +0000 Files and hashes: 1: 3Adh7KtHVqwqgZmtyDo8Ej6pQKM.roa (hash: wUQuxvOgY7UYkYHJtGk8LL5BCyN5FZHPBwwIxJwHIq4=) 2: 5utcJHsfBrjTs_UOTB5AJlV11DM.roa (hash: p9JiIAKdi3ntcnSsoekfJmDvvRvUwFnZwfz4Ft5kAjc=) 3: InOi1f3veo98pW4OGTBEIEXKEZE.roa (hash: Xjh3PenXVS46SZGt58mV2dcaP4QPqA5YhhKDh/W7EIA=) 4: J41thO8T8h3ECLAtFbEa63FQ07k.roa (hash: 7SAVb1xYsKsQiyuIDRpxE3uEw5S/EAv/z+BlKDTZqQY=) 5: ceEv1t749F4uxJkZjXzVLrcY0W4.roa (hash: CPEu9mzzQjkaDfnSXyi14ADFRqiihJHheO6fccq1E38=) 6: leUezOsMyq96-d8mJ8nIjjD7JvA.roa (hash: g5CFKJHlpq/pgKR++1ZaNjuNwVvKoATKegh0uW1A5JI=) 7: ohU1cnvjNfxWuepVkjRa06OJfuU.roa (hash: 30e5bsuiYaaP9kH7j7NGuQ8fKIB7hM+APPzNsaPzyUo=) 8: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: A+c2PlWqVV1fqE9sHHTNsuPaD3MZc7oMdoQkO6mtJM8=) 9: uoFFO71WiREgY844RuKE1yCVJAI.roa (hash: qctNyKkUd5I2cpGY+ypr0Dn6bPJwy7oeCGkLPyDoqRs=) 10: xwd7sohdrx5YU3LTJIWIxQ7gJnc.roa (hash: 0vwAzftKk4tcR77oFqQ7h1CZN6cHODVRJzedfJTmcvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:71:d0:5e:ec:9c:b7:1a:de:9d:8c:d8:99:46:93:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8 Validity Not Before: Mar 26 00:01:03 2026 GMT Not After : Mar 27 00:01:03 2026 GMT Subject: CN=91832dfc8e753b20c5748d6fec8702c8d771eeb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7e:5d:a4:ca:f1:a5:4e:05:93:a8:21:57:10: 7b:92:f5:1f:5d:05:fe:99:7e:ce:52:3a:82:c7:d5: 46:2d:b5:e5:68:6d:95:de:a8:ef:54:a5:71:99:b3: 04:c4:44:86:fb:02:57:f4:18:02:5f:55:ce:71:c0: e8:a7:15:fd:c4:02:2b:00:b9:ce:a7:fc:6a:5d:1a: 30:d2:c6:c8:4b:ea:0e:ae:6e:f1:4a:6a:e5:fa:dc: fd:20:3a:ba:6e:a4:bf:1f:2b:64:09:43:ca:5a:c7: 1d:63:48:b0:64:57:86:9a:87:e9:2d:b5:a5:db:b8: b6:3b:a3:cb:7f:79:87:dd:d0:2d:98:91:5a:36:26: d3:b2:75:fd:83:11:a4:25:52:39:dd:af:46:5a:c7: 7f:71:79:ad:93:f2:90:dc:27:20:a1:6e:f4:09:22: b4:86:3a:af:9f:4e:e6:ea:34:2f:3d:23:d4:82:70: f4:a8:eb:6e:18:5d:8f:ec:f3:d3:34:9d:58:a4:6c: 6a:f6:3c:ed:99:1f:62:1c:ac:e0:70:ce:b0:d7:a9: 3a:8f:5f:f9:99:86:ad:43:c4:6a:9e:75:69:85:c2: b8:42:92:fd:ec:60:87:99:4c:18:12:7f:d1:bf:35: 1e:cc:11:be:71:1e:ff:14:af:ba:71:3f:54:9f:4d: 58:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:83:2D:FC:8E:75:3B:20:C5:74:8D:6F:EC:87:02:C8:D7:71:EE:B6 X509v3 Authority Key Identifier: keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:08:9d:3b:35:9d:cd:ac:06:f6:e5:97:b7:a2:f9:ab:d4:87: 39:65:fc:7d:4b:ce:56:bc:a1:8a:cc:e3:de:94:5e:d2:63:46: 36:56:e0:6d:b3:7d:86:50:f7:3b:61:0a:15:ea:44:a8:a2:6a: 62:d8:bb:be:de:05:4f:44:e1:0e:04:00:43:04:54:e0:15:9c: c2:05:0a:64:f8:07:7c:c0:47:c8:a9:93:fb:26:e7:74:d1:43: 93:6b:00:91:ec:12:a2:7e:b3:a7:10:fe:58:c5:5d:83:bd:32: a8:48:86:69:90:32:19:f7:7b:bb:e7:d9:1d:33:39:0f:9b:c3: ed:f1:39:1f:7f:36:95:41:bf:16:67:a8:77:c2:eb:12:35:75: 9a:dd:10:44:53:ea:44:ba:78:97:40:07:37:6c:1f:1a:21:be: 53:18:14:71:07:dd:a4:67:3e:ea:33:84:a4:2a:e1:f9:ff:dd: bb:87:03:31:4c:a3:6e:5a:27:66:74:93:dc:65:4d:83:03:58: b1:7d:1e:69:ea:77:97:3c:60:4d:b0:84:ed:54:e4:12:09:7d: ca:a2:79:b1:49:38:41:da:cf:84:a6:7d:16:70:83:f4:49:dd: 46:80:c7:16:84:81:94:f4:b8:bd:d2:ad:d1:be:ce:37:73:7e: 22:8c:a1:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0ncdBe7Jy3Gt6djNiZRpOkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk ZmQ5YTgwHhcNMjYwMzI2MDAwMTAzWhcNMjYwMzI3MDAwMTAzWjAzMTEwLwYDVQQD Eyg5MTgzMmRmYzhlNzUzYjIwYzU3NDhkNmZlYzg3MDJjOGQ3NzFlZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl35dpMrxpU4Fk6ghVxB7kvUfXQX+ mX7OUjqCx9VGLbXlaG2V3qjvVKVxmbMExESG+wJX9BgCX1XOccDopxX9xAIrALnO p/xqXRow0sbIS+oOrm7xSmrl+tz9IDq6bqS/HytkCUPKWscdY0iwZFeGmofpLbWl 27i2O6PLf3mH3dAtmJFaNibTsnX9gxGkJVI53a9GWsd/cXmtk/KQ3CcgoW70CSK0 hjqvn07m6jQvPSPUgnD0qOtuGF2P7PPTNJ1YpGxq9jztmR9iHKzgcM6w16k6j1/5 mYatQ8RqnnVphcK4QpL97GCHmUwYEn/RvzUezBG+cR7/FK+6cT9Un01YWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGDLfyOdTsgxXSNb+yHAsjXce62MB8GA1UdIwQY MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt MThkMWE0MDZhYWVkLzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAidOzWd zawG9uWXt6L5q9SHOWX8fUvOVryhiszj3pRe0mNGNlbgbbN9hlD3O2EKFepEqKJq Yti7vt4FT0ThDgQAQwRU4BWcwgUKZPgHfMBHyKmT+ybndNFDk2sAkewSon6zpxD+ WMVdg70yqEiGaZAyGfd7u+fZHTM5D5vD7fE5H382lUG/Fmeod8LrEjV1mt0QRFPq RLp4l0AHN2wfGiG+UxgUcQfdpGc+6jOEpCrh+f/du4cDMUyjblonZnST3GVNgwNY sX0eaep3lzxgTbCE7VTkEgl9yqJ5sUk4QdrPhKZ9FnCD9EndRoDHFoSBlPS4vdKt 0b7ON3N+IoyhCQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:02 2026 by rpki-client