$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft File: 3-4r9D8hqBxJLG5qn8bwdNLwohc.mft (raw, json) Hash identifier: 8vc3RyP/MAzktnf1RCYOoyrQkJ9BCcKuJzz1wkWgmmY= Subject key identifier: DE:61:74:48:CE:00:F8:FA:6F:C3:DE:64:65:55:FA:42:60:FC:50:EE Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17 Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217 Certificate serial: 01A16B36111A5D30CDE90E92B9199F551861 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft Manifest number: 1ACC Signing time: Sat 24 Oct 2026 00:01:07 +0000 Manifest this update: Sat 24 Oct 2026 00:01:07 +0000 Manifest next update: Sun 25 Oct 2026 00:01:07 +0000 Files and hashes: 1: 1fQajHTJp0S8KUunDd6YeyFtENM.roa (hash: mmAzmTwR/ELzJWO/mTGxkNnXnKiWntSSUF9kf4/Kzb4=) 2: 3-4r9D8hqBxJLG5qn8bwdNLwohc.crl (hash: hnVXYBdAhERS8+syL/vQ6vfVUlEDyZatLPhCvxOl8Ao=) 3: 6I-aggcE89s528aMt_8CuZqJ61A.roa (hash: 1l0d6AnGSzNrEZie8Z3fZ9Fg7c3oqYcQ4vM6hMLN2Xk=) 4: F4SS2nAtZGfBCcizniZNF8kbqKM.roa (hash: HKR9CN00lz/+opq5i3oKemga0jRQrkicKz4E2CgkRB4=) 5: OozFPShE_rUv8maj5s2holLOnSw.roa (hash: of1t6N552m6r7FO0Rv3cPatKyevbOunkRNR2iRx3MR8=) 6: QKTTHBUOIQK4LDlW3m8kPnrJJjE.roa (hash: z/2iCGTl8WNXCyn9RpBKeiKNxsPENY7FPqESDLjDvJc=) 7: kvP2mI40vax4nF6kVjBW7CPEusk.roa (hash: XQESmT9q2hkU8SLAW++EjKoLyZosWL6LnbGsHkaVg6M=) 8: p9NJ7GqekjcDTPnamXWgQzYg85Y.roa (hash: 20tPFohEGSZL/sC6LTxbot1gnSOjQBRIP72gV3wZFi4=) 9: sLfKVl1lQjJ7u_89zURwHmTq8TY.roa (hash: qcEWl+BofaZ9g5UX8MbafwS79+h+Y6qJogFE2VDDyZs=) 10: ts1pF9IuOtsG6MORS9TxN4ZUynY.roa (hash: qnP47gtGKaM8m6t6aMvd42h7A8nkD9mykwqjLsAUTYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 00:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:6b:36:11:1a:5d:30:cd:e9:0e:92:b9:19:9f:55:18:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217 Validity Not Before: Oct 24 00:01:07 2026 GMT Not After : Oct 25 00:01:07 2026 GMT Subject: CN=de617448ce00f8fa6fc3de646555fa4260fc50ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fc:48:de:f0:78:45:b4:f2:74:aa:bb:cb:d2: d2:5b:b6:f3:c3:b4:18:6d:34:0f:58:d4:80:1f:d1: 96:f3:6e:18:37:6b:0f:bf:65:d9:a3:ee:e1:93:01: da:e5:93:a8:1d:1f:2c:18:2e:d7:0a:98:15:1b:93: 8f:66:eb:95:17:24:f6:c0:b6:c0:10:83:09:99:43: 25:25:d8:85:d2:06:c1:45:c7:af:96:2b:e9:44:19: c0:78:55:ed:b0:da:15:ad:c4:81:b6:dc:13:44:36: 17:af:26:eb:39:7f:1f:e0:8c:c1:7b:8d:c5:84:4e: 64:2e:d0:de:7d:9a:f1:2e:b2:34:b9:69:9e:e0:4f: b9:05:3f:67:c7:60:20:89:42:27:cc:97:05:54:45: 8d:1b:cd:48:6d:39:25:83:2d:ee:41:5a:84:24:7d: 51:46:46:88:ca:fe:cd:6b:61:10:6c:78:e1:57:8b: df:62:40:25:fc:6f:33:c1:8b:42:5a:30:27:90:c2: b7:19:b9:84:81:31:3c:fd:8a:4d:2f:57:75:c1:c3: 95:11:1a:b1:8b:a5:3c:0a:86:76:c6:5c:40:af:45: 1f:da:00:37:af:e2:b6:fc:9a:16:fb:48:2d:c7:2f: 26:ac:b3:ea:90:30:ea:4f:3e:5a:88:c7:6f:b6:41: 49:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:61:74:48:CE:00:F8:FA:6F:C3:DE:64:65:55:FA:42:60:FC:50:EE X509v3 Authority Key Identifier: keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:dc:b6:b3:4f:3c:b9:ac:22:4c:eb:68:45:9a:ef:c2:d7:4a: b0:b9:00:5c:26:2f:35:ea:05:7a:c9:f8:bb:7c:ee:1a:59:1a: 4b:53:21:3d:49:fc:c8:f3:d8:cb:08:d9:21:29:81:4a:3d:0d: 3d:97:09:48:2b:fb:44:01:49:25:5f:1f:b9:6f:10:57:f5:82: 25:ec:24:9a:16:38:a7:a9:0b:40:e1:ea:9c:3c:09:01:33:91: c1:1b:7b:ea:56:43:b0:a4:9b:35:33:92:6d:ed:3d:1a:fe:4b: 15:d4:15:3c:5d:de:7a:78:5f:ac:18:d8:ae:a6:d2:88:23:88: 2d:42:bd:f1:79:0b:28:0f:fe:21:64:b1:26:c9:0e:a3:0d:2a: 17:9b:eb:d3:61:f0:95:cf:7f:e3:73:27:e5:8d:94:c8:da:9d: af:f3:59:ac:02:31:19:91:cd:6a:06:6d:2c:69:65:e5:98:e9: 04:8c:34:ff:ef:e8:63:06:06:3f:59:c4:d9:93:dd:b3:fd:4c: 30:6e:0a:63:d1:27:30:6a:7e:f1:7f:99:d1:fc:10:47:28:fb: 0f:58:47:90:5a:bb:ee:01:67:5c:ec:cf:71:77:1e:1d:56:1a: ef:a6:92:c4:49:b3:0e:0d:69:69:0f:4b:ce:6e:ab:51:5f:a9: 95:ff:39:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFrNhEaXTDN6Q6SuRmfVRhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZWUyYmY0M2YyMWE4MWM0OTJjNmU2YTlmYzZmMDc0ZDJm MGEyMTcwHhcNMjYxMDI0MDAwMTA3WhcNMjYxMDI1MDAwMTA3WjAzMTEwLwYDVQQD EyhkZTYxNzQ0OGNlMDBmOGZhNmZjM2RlNjQ2NTU1ZmE0MjYwZmM1MGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/xI3vB4RbTydKq7y9LSW7bzw7QY bTQPWNSAH9GW824YN2sPv2XZo+7hkwHa5ZOoHR8sGC7XCpgVG5OPZuuVFyT2wLbA EIMJmUMlJdiF0gbBRcevlivpRBnAeFXtsNoVrcSBttwTRDYXrybrOX8f4IzBe43F hE5kLtDefZrxLrI0uWme4E+5BT9nx2AgiUInzJcFVEWNG81IbTklgy3uQVqEJH1R RkaIyv7Na2EQbHjhV4vfYkAl/G8zwYtCWjAnkMK3GbmEgTE8/YpNL1d1wcOVERqx i6U8CoZ2xlxAr0Uf2gA3r+K2/JoW+0gtxy8mrLPqkDDqTz5aiMdvtkFJaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5hdEjOAPj6b8PeZGVV+kJg/FDuMB8GA1UdIwQY MBaAFN/uK/Q/IagcSSxuap/G8HTS8KIXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTIt MjhkNzhlYjlmMmRjLzEvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTItMjhkNzhlYjlmMmRj LzEvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARty2s088 uawiTOtoRZrvwtdKsLkAXCYvNeoFesn4u3zuGlkaS1MhPUn8yPPYywjZISmBSj0N PZcJSCv7RAFJJV8fuW8QV/WCJewkmhY4p6kLQOHqnDwJATORwRt76lZDsKSbNTOS be09Gv5LFdQVPF3eenhfrBjYrqbSiCOILUK98XkLKA/+IWSxJskOow0qF5vr02Hw lc9/43Mn5Y2UyNqdr/NZrAIxGZHNagZtLGll5ZjpBIw0/+/oYwYGP1nE2ZPds/1M MG4KY9EnMGp+8X+Z0fwQRyj7D1hHkFq77gFnXOzPcXceHVYa76aSxEmzDg1paQ9L zm6rUV+plf85EA== -----END CERTIFICATE-----Generated at Sat Oct 24 11:14:28 2026 by rpki-client