$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json) Hash identifier: +3mIQbGsdgubStayfghB7RNSNniPTFTMMx7KZIcEH+4= Subject key identifier: 3A:DC:3C:D8:AB:CB:5E:85:78:0C:41:68:2D:41:79:F2:BD:F2:AB:CC Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5 Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5 Certificate serial: 019D3940C56062FE65B6837C32B40EF4B6DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft Manifest number: 0EBD Signing time: Sun 29 Mar 2026 11:00:39 +0000 Manifest this update: Sun 29 Mar 2026 11:00:39 +0000 Manifest next update: Mon 30 Mar 2026 11:00:39 +0000 Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: vpdSxH7N3Q0RyPPiEZ/ONRXTN6wPUX65v/+vGfl+5nU=) 2: H5QErsI5RrGZOHFY6_FrSzEPwsg.roa (hash: BTdVxM8rbJfdiUp2j6fzsOE0ajTe0wntltZ6HVxnZpM=) 3: R0pEkuvaVLGxnylHvK6koPi4Qtk.asa (hash: yVimJbcLLcabqOeuTEnFLIbJZ1qdF0H9oXoiq2g92yI=) 4: TKRUQhbuG6vK-9YhYrYM4Xtl7Rk.roa (hash: DmxeQKQyfsvJvWQ6namIeD8pDbFVK71C7OVUciGGrUY=) 5: UtbWjP8TosULXxgOwSpGBsXAj1E.asa (hash: e7BKC4GZaIVKdGVBnnQIPsiQuksngCu2TeIqsWJLAi4=) 6: b7KDZwK5R28lE5M6tD1UYAgLTs0.roa (hash: chq9h/QyXrEES2o8hWXwMO8b44fg7JP3nOh0+1DILZ0=) 7: iTAqvs2G1UdUfx5Fmn2Z7H7-Wuo.roa (hash: L18Wb/sBRdrTPyOX3b7ZSqqO81GWE2YfQWPbOKytco8=) 8: n8wKAbeQwoniSlzobzWQkZPFQ90.roa (hash: gAASzqy3Nb3k3RF3IE7AiqoPFAF8THLrgzOMP+9Awr8=) 9: rxo-kMSJfYbIjml0McyLHchnJKw.roa (hash: 6yBdVD63LgbBLLvhVAYIbiNVvZCYYH7FdQZFXoIkCTo=) 10: x0-6NtH4vUkjT1y3qIl47BzSOGw.roa (hash: PnA5gMRP8NULFbWunx+4LpVvQH7waVlGce2Q/pkpzYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:40:c5:60:62:fe:65:b6:83:7c:32:b4:0e:f4:b6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5 Validity Not Before: Mar 29 11:00:39 2026 GMT Not After : Mar 30 11:00:39 2026 GMT Subject: CN=3adc3cd8abcb5e85780c41682d4179f2bdf2abcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:50:e6:85:4a:3a:64:17:fd:62:dc:66:ec:40: d6:6e:03:33:26:20:d3:29:a8:9e:8b:6e:3b:fb:6e: c7:86:08:14:28:23:3e:01:dd:ee:02:e5:b6:82:6b: 55:32:78:b0:7c:4f:37:41:33:a2:a0:ff:87:41:76: 89:3c:21:d6:81:a7:4a:c3:1d:42:6b:e0:89:e1:d4: b6:d8:e5:da:4d:69:cb:c0:ca:55:1e:7d:33:18:44: 91:4d:74:55:c9:ae:9c:e7:e8:0c:1e:33:38:35:40: a5:5c:68:b9:f9:81:34:18:b0:0e:63:aa:f2:97:5e: cc:70:fa:51:0f:b9:fb:66:5c:78:9f:ec:3d:56:61: f4:c7:51:b6:7b:29:e3:ef:78:4e:94:c0:63:ac:c9: ee:49:61:60:7d:0c:89:6e:ea:fc:b7:de:a2:e3:84: ec:32:1e:04:74:b8:09:ff:56:07:82:54:ba:f0:b1: af:72:e8:46:c3:77:9c:98:26:7a:99:10:58:c0:02: 9b:7d:56:fb:d9:40:9e:69:4d:ee:fb:c5:83:49:9c: 01:c7:32:90:1f:fc:0a:51:a9:65:96:31:40:0e:6f: 5c:0e:b7:48:c9:1c:32:0f:08:7f:56:21:44:7a:e0: 13:3d:7b:25:00:4b:95:80:65:52:67:1c:85:e6:3c: 85:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DC:3C:D8:AB:CB:5E:85:78:0C:41:68:2D:41:79:F2:BD:F2:AB:CC X509v3 Authority Key Identifier: keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:75:8e:ce:7f:c6:b0:56:f9:6e:10:40:b6:43:43:32:af:8e: b1:e8:05:b2:e2:25:ad:a7:94:51:ae:09:c3:ee:0e:74:9b:a8: 52:38:fe:48:d8:b2:dd:1b:47:00:ea:83:0e:78:4f:17:cf:ee: 4c:c2:60:eb:0f:11:8c:d5:d3:1c:ca:44:a4:f1:50:7f:34:e8: 0d:b8:fd:73:39:7e:72:9f:68:7a:8f:e0:87:6f:98:5a:df:f8: 9d:0f:b2:82:99:62:96:a1:47:4a:14:3f:85:12:76:38:89:eb: af:a0:93:a7:89:91:75:19:3d:ce:cf:d5:47:7c:94:29:5b:1e: 01:85:bc:70:e3:8b:ca:cc:1c:be:f6:c1:f4:63:d3:42:9c:00: 09:e2:6f:68:b4:4f:c1:dc:ea:77:b7:8c:20:e4:7e:2d:61:12: 05:cc:f6:25:43:51:d2:eb:3a:1a:c1:ba:5e:77:68:6c:8c:a0: 76:ae:f2:0c:19:a6:e1:eb:9f:1e:e1:62:d2:e1:05:57:d1:1c: 10:f0:4d:34:1c:88:f2:13:ad:f4:b7:c0:e1:24:1c:c4:1a:fd: 1d:29:7d:c0:ac:89:50:4c:52:cc:3f:fa:0d:69:86:ad:1a:b3: 01:5d:a6:5a:2b:b2:70:0d:1a:f0:a7:d0:6d:01:bc:9a:49:fe: e8:af:7a:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05QMVgYv5ltoN8MrQO9LbcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2 NGZhYTUwHhcNMjYwMzI5MTEwMDM5WhcNMjYwMzMwMTEwMDM5WjAzMTEwLwYDVQQD EygzYWRjM2NkOGFiY2I1ZTg1NzgwYzQxNjgyZDQxNzlmMmJkZjJhYmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVDmhUo6ZBf9Ytxm7EDWbgMzJiDT Kaiei247+27HhggUKCM+Ad3uAuW2gmtVMniwfE83QTOioP+HQXaJPCHWgadKwx1C a+CJ4dS22OXaTWnLwMpVHn0zGESRTXRVya6c5+gMHjM4NUClXGi5+YE0GLAOY6ry l17McPpRD7n7Zlx4n+w9VmH0x1G2eynj73hOlMBjrMnuSWFgfQyJbur8t96i44Ts Mh4EdLgJ/1YHglS68LGvcuhGw3ecmCZ6mRBYwAKbfVb72UCeaU3u+8WDSZwBxzKQ H/wKUallljFADm9cDrdIyRwyDwh/ViFEeuATPXslAEuVgGVSZxyF5jyFxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrcPNiry16FeAxBaC1BefK98qvMMB8GA1UdIwQY MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3 LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnWOzn/G sFb5bhBAtkNDMq+OsegFsuIlraeUUa4Jw+4OdJuoUjj+SNiy3RtHAOqDDnhPF8/u TMJg6w8RjNXTHMpEpPFQfzToDbj9czl+cp9oeo/gh2+YWt/4nQ+ygplilqFHShQ/ hRJ2OInrr6CTp4mRdRk9zs/VR3yUKVseAYW8cOOLyswcvvbB9GPTQpwACeJvaLRP wdzqd7eMIOR+LWESBcz2JUNR0us6GsG6XndobIygdq7yDBmm4eufHuFi0uEFV9Ec EPBNNByI8hOt9LfA4SQcxBr9HSl9wKyJUExSzD/6DWmGrRqzAV2mWiuycA0a8KfQ bQG8mkn+6K96XQ== -----END CERTIFICATE-----Generated at Sun Mar 29 12:45:33 2026 by rpki-client