$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: H5z8TMY48PbBo675gpHwhSokmLXY6dMdZwgTrLN6jdk= Subject key identifier: 40:43:4F:02:E8:EC:FD:13:6D:11:B1:68:F6:84:98:54:76:67:29:A2 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019CB994E57F601FF9C4F3656A28DD395430 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: 024B Signing time: Wed 04 Mar 2026 16:01:08 +0000 Manifest this update: Wed 04 Mar 2026 16:01:08 +0000 Manifest next update: Thu 05 Mar 2026 16:01:08 +0000 Files and hashes: 1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=) 2: 9ouTpRXko3YlvkaiRjw1itJUuUs.roa (hash: RGUF99UKxmAJ27xRbQTvqiTs8v0Bgu29SVLvzHCLnw8=) 3: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: 62KhsF++ZMxph4GEBKiWwrdNVnQObH0H4tek0DBChiI=) 4: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=) 5: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=) 6: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=) 7: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=) 8: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=) 9: dFj5GUqDYd98kL6xaY89BZmV-eM.roa (hash: EnCrHK5NIqJpxBDpMWNrNTC6CqIC7188rVdf1D5/tYM=) 10: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=) 11: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=) 12: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Mar 2026 14:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:b9:94:e5:7f:60:1f:f9:c4:f3:65:6a:28:dd:39:54:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Mar 4 16:01:08 2026 GMT Not After : Mar 5 16:01:08 2026 GMT Subject: CN=40434f02e8ecfd136d11b168f6849854766729a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:26:f8:bc:2a:13:04:9c:42:e8:e4:a5:96:a7: 72:8d:65:80:1c:04:13:61:6b:f9:1b:a1:e9:b2:11: 4c:5b:3b:67:0c:d7:44:ca:5d:ed:f6:b8:de:4e:c1: d7:1c:8d:e5:b8:6b:45:10:8c:86:44:fc:95:79:06: c2:d9:6b:ab:50:3a:e8:5a:bc:a9:05:00:75:88:53: 31:1c:28:8c:3f:9a:2d:00:bb:24:2e:6c:38:10:56: 30:8b:40:fe:25:e4:09:b7:11:dd:c3:0c:8b:20:f2: 85:dc:e7:5b:f2:54:d8:61:d7:e6:4d:6a:c8:aa:d9: 4d:75:2d:77:f7:13:c7:ea:59:8c:c0:e0:a2:56:c0: 0d:97:72:01:3f:58:bf:ea:83:c7:c5:71:95:17:15: 5c:29:d2:44:cb:32:6a:7f:18:0a:c4:73:ba:a6:e1: a3:04:05:a7:45:ac:c1:5a:1f:52:b9:fa:2c:d7:dd: 00:51:84:72:f9:9f:d0:e6:d0:b7:2a:ec:73:af:41: 0b:52:ed:c4:3d:d4:c9:79:30:08:e0:b5:82:43:3a: c0:b6:1d:54:87:0f:79:4c:a6:6c:3e:8b:c8:cc:b0: 45:3d:0e:4d:75:0e:ae:39:36:e7:10:ec:6c:95:2d: 9f:0e:f0:ce:5e:a2:40:af:a9:81:4e:4f:31:df:8c: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:43:4F:02:E8:EC:FD:13:6D:11:B1:68:F6:84:98:54:76:67:29:A2 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:19:8e:1e:43:46:93:ae:07:12:38:4a:74:30:ae:20:4b:53: 23:b9:38:d5:74:7e:8b:1f:7a:65:4e:e9:5f:07:44:6b:f1:b9: aa:1a:12:15:89:e2:26:15:cb:1c:e8:14:76:52:80:d4:c5:21: 62:e0:12:0f:ce:72:ed:4a:7c:59:07:02:a7:c4:3f:36:a9:2f: f4:23:81:83:fa:f5:34:a4:bb:8c:3c:ec:0b:3a:0b:de:b0:20: 19:a1:49:f0:9b:d1:e4:e1:7b:c8:0e:ff:32:86:10:d7:f9:e6: ee:5e:99:8c:9a:1d:75:a2:53:60:46:b0:fe:f6:50:d0:fb:83: 88:ab:e4:5c:b2:74:96:31:65:d0:48:f1:3e:c7:cb:63:b0:05: 5f:23:5c:ce:c0:d5:b0:8c:10:a8:5b:23:55:31:6c:56:7a:15: 6f:cc:29:ad:34:16:b7:b2:6f:aa:ce:6a:4d:f8:60:c7:40:6e: 88:3c:72:19:d3:88:a7:9a:22:8d:65:85:b5:53:d8:5e:7b:76: 9e:58:6e:73:2f:48:4f:d9:12:30:0e:61:bc:a9:d2:64:9c:af: 71:1e:90:91:0b:74:cf:15:e1:a7:af:c6:c5:da:d5:45:3e:2a: 6f:4e:3e:38:03:5b:69:0e:9a:7c:62:4e:48:3b:a5:be:d2:fe: e6:f5:7b:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZy5lOV/YB/5xPNlaijdOVQwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwMzA0MTYwMTA4WhcNMjYwMzA1MTYwMTA4WjAzMTEwLwYDVQQD Eyg0MDQzNGYwMmU4ZWNmZDEzNmQxMWIxNjhmNjg0OTg1NDc2NjcyOWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCb4vCoTBJxC6OSllqdyjWWAHAQT YWv5G6HpshFMWztnDNdEyl3t9rjeTsHXHI3luGtFEIyGRPyVeQbC2WurUDroWryp BQB1iFMxHCiMP5otALskLmw4EFYwi0D+JeQJtxHdwwyLIPKF3Odb8lTYYdfmTWrI qtlNdS139xPH6lmMwOCiVsANl3IBP1i/6oPHxXGVFxVcKdJEyzJqfxgKxHO6puGj BAWnRazBWh9Sufos190AUYRy+Z/Q5tC3Kuxzr0ELUu3EPdTJeTAI4LWCQzrAth1U hw95TKZsPovIzLBFPQ5NdQ6uOTbnEOxslS2fDvDOXqJAr6mBTk8x34zXPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBDTwLo7P0TbRGxaPaEmFR2ZymiMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxmOHkNG k64HEjhKdDCuIEtTI7k41XR+ix96ZU7pXwdEa/G5qhoSFYniJhXLHOgUdlKA1MUh YuASD85y7Up8WQcCp8Q/Nqkv9COBg/r1NKS7jDzsCzoL3rAgGaFJ8JvR5OF7yA7/ MoYQ1/nm7l6ZjJoddaJTYEaw/vZQ0PuDiKvkXLJ0ljFl0EjxPsfLY7AFXyNczsDV sIwQqFsjVTFsVnoVb8wprTQWt7Jvqs5qTfhgx0BuiDxyGdOIp5oijWWFtVPYXnt2 nlhucy9IT9kSMA5hvKnSZJyvcR6QkQt0zxXhp6/GxdrVRT4qb04+OANbaQ6afGJO SDulvtL+5vV7zw== -----END CERTIFICATE-----Generated at Wed Mar 4 20:54:06 2026 by rpki-client