$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: sltKdmzcXtHTs/7ymwIBSK6SKSA1YO+NPUHf7oIt4gw= Subject key identifier: BB:43:C4:CD:AA:23:5E:F5:E2:EC:C3:EA:4E:2B:DE:45:F3:7D:20:77 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019F82D4E2254A7D6090863B942485DB6983 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: 03D9 Signing time: Tue 21 Jul 2026 04:00:17 +0000 Manifest this update: Tue 21 Jul 2026 04:00:17 +0000 Manifest next update: Wed 22 Jul 2026 04:00:17 +0000 Files and hashes: 1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=) 2: ESPHPr7LBdioiAtN7vAzIbAY8uI.roa (hash: w6HAvIWt/kQOFfQE6ClUTC58ao3Rat6v87kD8koKUa0=) 3: FKDB1nLn_ZS_a9rdy0c5mxFNjAw.roa (hash: 2sgSFU9TG23xIm09t4WNIN0wcgWuOUk3p2yOrCzVZt8=) 4: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: rnTBsA+mQfUIc0LBM3cPf/wwnEHo+wZfdvnfjcNZmvU=) 5: Jqd9n-XZPEdiLUATrAO0UNi7xjA.roa (hash: 9cuNi2UUB3uoW2G4GMhdugeWXWqlYW8/ZVXdji7vqm8=) 6: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=) 7: Ky8s4Lu3M8j3F784s3VxKx1e75k.roa (hash: 9Gc23uMOAcwKEfyzeLAFLWHetYWPfkRMND3EMrVpfX0=) 8: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=) 9: M2QX6dAVS5wwzzWZwpLXly9elxA.roa (hash: bvmp7xgEGFSuKnfY+ZgLpQZkSldpNhB9a4dh8SjeeL4=) 10: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=) 11: YQKMXVm06N8zD3NDnbfHYsCtcuU.roa (hash: 4zO+32jaiCVPHg0DG0Z719jsGnydWv+/YMvSSq/GIt4=) 12: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=) 13: ZQnid9-fJgdD8QY7UXq6Q7rH7pw.roa (hash: XJUBajf9XyDNGQ8tEXvR1yvb6Zo2tLtl5//HhRaFZmw=) 14: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=) 15: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=) 16: mT-K5wz7DGgkYoPiR_2XSlQ0B6I.roa (hash: 73E2cGSZQ8+svLr+/xrcMfyFaxZmakWAGtNSf4DhDgw=) 17: nXcVZv-BU5nC4jNra5f09x54HeM.roa (hash: iqu36oMqP46CX2CYzFsUJwzZuRu/tE4uzTsQ189IQ3U=) 18: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=) 19: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 04:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:82:d4:e2:25:4a:7d:60:90:86:3b:94:24:85:db:69:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Jul 21 04:00:17 2026 GMT Not After : Jul 22 04:00:17 2026 GMT Subject: CN=bb43c4cdaa235ef5e2ecc3ea4e2bde45f37d2077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:82:51:b9:0f:13:ea:7c:d0:f0:3d:20:00:ca: 65:93:bd:f6:b1:bc:40:25:7e:c0:b1:fb:ec:73:50: 3e:dd:93:be:59:47:85:ed:7a:6f:c3:bc:04:b1:ac: bd:df:ff:8b:ba:1e:73:83:f1:11:e7:bc:e5:d0:7e: 44:12:07:7c:9e:a0:00:bf:de:34:31:90:45:6e:2e: 56:36:c0:d3:85:fe:35:8a:39:2f:03:eb:de:8b:64: 96:16:b9:1f:b1:a0:be:58:19:8c:fb:bd:25:d0:5e: 1d:8b:23:51:5f:0a:99:de:c2:4a:4f:6f:83:0c:1e: cf:7c:d8:86:d3:d0:2d:25:6c:a3:21:ed:8f:71:93: 55:af:f6:a5:20:82:a3:70:ca:f7:57:cc:d0:eb:cb: 15:d5:cc:ab:2d:da:c9:97:ed:58:a1:de:ce:ef:98: 15:07:b8:48:ab:c6:29:8f:2e:e8:03:a6:5e:e1:ff: b2:48:29:8a:d5:4f:18:ec:e8:16:47:91:b2:dc:87: 61:cd:60:58:55:78:6f:b9:c1:89:00:58:80:f2:c8: d6:63:ea:04:3e:69:ce:33:7a:76:44:e8:7b:5a:70: 79:58:a3:39:aa:20:b4:3e:0a:f9:b2:05:ac:72:68: 6a:f5:e9:27:27:92:31:3e:68:40:56:d7:3f:2f:aa: e9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:43:C4:CD:AA:23:5E:F5:E2:EC:C3:EA:4E:2B:DE:45:F3:7D:20:77 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ef:72:dd:27:11:54:14:d8:e7:06:aa:07:9c:a0:d9:62:01: 6d:35:7b:a3:7d:72:8b:2a:71:6d:53:09:d8:92:82:2c:48:61: 42:41:84:70:75:10:96:08:b3:8c:64:a8:1c:e1:0b:a8:a5:4b: f5:83:9a:d1:97:a3:0f:b0:d0:95:c2:c8:ec:b0:90:3b:43:74: 12:16:77:a5:c2:de:70:bd:a2:d5:17:15:3a:ad:fe:00:0e:be: f5:b2:49:2b:2d:5c:3c:c5:8b:34:48:b9:78:1e:8a:11:58:ea: a9:90:51:fc:22:db:b0:01:52:62:c4:22:49:de:8e:55:0d:1d: d7:c7:78:d6:53:c1:61:a2:18:14:d7:8d:80:05:79:92:2a:e6: 51:d7:b4:28:c8:73:f5:fa:32:11:1c:79:78:6c:56:2f:51:0a: b6:75:36:62:bc:48:3c:c1:81:eb:f3:bd:9b:bb:14:33:a0:1a: 47:31:f5:b1:d1:30:78:01:9e:0a:60:44:7e:d1:23:14:c3:60: 2d:74:0f:08:b6:02:46:e9:9e:d8:2c:43:a4:df:b4:bf:08:c7: c2:b8:7e:87:91:79:52:22:3b:cc:c4:f5:97:19:a5:9b:46:0c: 75:b3:3b:30:24:7f:08:b2:18:bd:99:73:4a:50:f4:fa:22:b9: c1:39:c3:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+C1OIlSn1gkIY7lCSF22mDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwNzIxMDQwMDE3WhcNMjYwNzIyMDQwMDE3WjAzMTEwLwYDVQQD EyhiYjQzYzRjZGFhMjM1ZWY1ZTJlY2MzZWE0ZTJiZGU0NWYzN2QyMDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYJRuQ8T6nzQ8D0gAMplk732sbxA JX7Asfvsc1A+3ZO+WUeF7Xpvw7wEsay93/+Luh5zg/ER57zl0H5EEgd8nqAAv940 MZBFbi5WNsDThf41ijkvA+vei2SWFrkfsaC+WBmM+70l0F4diyNRXwqZ3sJKT2+D DB7PfNiG09AtJWyjIe2PcZNVr/alIIKjcMr3V8zQ68sV1cyrLdrJl+1Yod7O75gV B7hIq8Ypjy7oA6Ze4f+ySCmK1U8Y7OgWR5Gy3IdhzWBYVXhvucGJAFiA8sjWY+oE PmnOM3p2ROh7WnB5WKM5qiC0Pgr5sgWscmhq9eknJ5IxPmhAVtc/L6rpkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtDxM2qI1714uzD6k4r3kXzfSB3MB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABO9y3ScR VBTY5waqB5yg2WIBbTV7o31yiypxbVMJ2JKCLEhhQkGEcHUQlgizjGSoHOELqKVL 9YOa0ZejD7DQlcLI7LCQO0N0EhZ3pcLecL2i1RcVOq3+AA6+9bJJKy1cPMWLNEi5 eB6KEVjqqZBR/CLbsAFSYsQiSd6OVQ0d18d41lPBYaIYFNeNgAV5kirmUde0KMhz 9foyERx5eGxWL1EKtnU2YrxIPMGB6/O9m7sUM6AaRzH1sdEweAGeCmBEftEjFMNg LXQPCLYCRume2CxDpN+0vwjHwrh+h5F5UiI7zMT1lxmlm0YMdbM7MCR/CLIYvZlz SlD0+iK5wTnD3w== -----END CERTIFICATE-----Generated at Tue Jul 21 10:07:12 2026 by rpki-client