$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft File: 3-4r9D8hqBxJLG5qn8bwdNLwohc.mft (raw, json) Hash identifier: HeowG9EQduExtj+JjVoA3pxp487JAQSpojxppL+d34w= Subject key identifier: F3:AF:C0:B8:E6:F9:62:BE:8D:79:A2:4B:21:32:59:66:4D:BF:B5:FA Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17 Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217 Certificate serial: 01A1618E4DE3CCAA76DA23CDCC6638E3AE96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft Manifest number: 1AC7 Signing time: Thu 22 Oct 2026 03:01:18 +0000 Manifest this update: Thu 22 Oct 2026 03:01:18 +0000 Manifest next update: Fri 23 Oct 2026 03:01:18 +0000 Files and hashes: 1: 1fQajHTJp0S8KUunDd6YeyFtENM.roa (hash: mmAzmTwR/ELzJWO/mTGxkNnXnKiWntSSUF9kf4/Kzb4=) 2: 3-4r9D8hqBxJLG5qn8bwdNLwohc.crl (hash: V7bbDBkKCZ9RrFyy0A/hueiIckdH66fVWyiP4p5wjhY=) 3: 6I-aggcE89s528aMt_8CuZqJ61A.roa (hash: 1l0d6AnGSzNrEZie8Z3fZ9Fg7c3oqYcQ4vM6hMLN2Xk=) 4: F4SS2nAtZGfBCcizniZNF8kbqKM.roa (hash: HKR9CN00lz/+opq5i3oKemga0jRQrkicKz4E2CgkRB4=) 5: OozFPShE_rUv8maj5s2holLOnSw.roa (hash: of1t6N552m6r7FO0Rv3cPatKyevbOunkRNR2iRx3MR8=) 6: QKTTHBUOIQK4LDlW3m8kPnrJJjE.roa (hash: z/2iCGTl8WNXCyn9RpBKeiKNxsPENY7FPqESDLjDvJc=) 7: kvP2mI40vax4nF6kVjBW7CPEusk.roa (hash: XQESmT9q2hkU8SLAW++EjKoLyZosWL6LnbGsHkaVg6M=) 8: p9NJ7GqekjcDTPnamXWgQzYg85Y.roa (hash: 20tPFohEGSZL/sC6LTxbot1gnSOjQBRIP72gV3wZFi4=) 9: sLfKVl1lQjJ7u_89zURwHmTq8TY.roa (hash: qcEWl+BofaZ9g5UX8MbafwS79+h+Y6qJogFE2VDDyZs=) 10: ts1pF9IuOtsG6MORS9TxN4ZUynY.roa (hash: qnP47gtGKaM8m6t6aMvd42h7A8nkD9mykwqjLsAUTYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:61:8e:4d:e3:cc:aa:76:da:23:cd:cc:66:38:e3:ae:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217 Validity Not Before: Oct 22 03:01:18 2026 GMT Not After : Oct 23 03:01:18 2026 GMT Subject: CN=f3afc0b8e6f962be8d79a24b213259664dbfb5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:3e:0e:a2:88:13:f7:11:a4:3c:8e:f4:42: 90:13:ba:f3:7b:55:df:59:3b:fa:bf:c6:f5:b6:b5: 36:51:c7:ea:ff:0d:04:52:b3:3c:bd:92:2a:0d:7a: 14:37:f2:72:f4:6a:2a:07:75:44:c2:03:b4:7b:0b: 49:ca:1c:88:48:23:ad:5e:bd:06:8d:39:f3:53:95: 03:df:c7:87:26:ec:7a:65:d9:b3:f6:95:69:6d:78: b5:b6:3e:5a:2e:bb:5a:34:23:98:eb:73:d9:5b:ef: 0f:dd:dc:e8:53:f1:5d:3f:23:a5:bd:8e:72:80:d7: 04:9b:24:ce:37:13:2b:8b:46:74:c5:27:fb:51:bf: b5:d2:41:e2:6e:fd:48:fc:c7:b2:dd:5b:ee:ca:87: b1:68:d2:d3:1d:14:28:1e:c6:f7:f0:fc:59:91:4e: c0:80:86:d1:53:6e:fb:33:71:d2:3b:b2:f2:32:de: 67:ca:02:9d:cf:53:e1:eb:e7:06:f0:ec:22:67:f2: 4b:81:74:ff:80:a4:59:6e:67:11:0a:de:b2:07:8e: 62:db:fd:a0:a6:60:0d:41:5f:f9:8c:b0:e9:0b:bf: 88:6f:bf:22:af:4c:31:0a:a3:a9:d3:28:d8:d6:6f: 1b:22:e1:2b:46:1d:8c:ed:60:94:52:e4:0f:56:ad: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AF:C0:B8:E6:F9:62:BE:8D:79:A2:4B:21:32:59:66:4D:BF:B5:FA X509v3 Authority Key Identifier: keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b0:f9:f1:4a:dc:92:04:96:bc:ae:10:70:32:3c:ae:74:36: 83:43:2b:98:8d:a3:0b:dd:a7:dc:59:8c:91:b0:a4:4a:d6:58: 6b:0c:57:60:0e:4e:2c:a5:4f:53:9f:b8:d6:27:23:e7:c8:52: b7:12:9e:1a:71:97:8f:0e:5d:ad:be:53:8e:dd:26:ef:86:4a: 75:9a:d6:a1:52:8d:9b:60:ad:43:05:ce:eb:c8:80:5f:b4:d6: ed:70:7c:c2:a5:83:10:18:6e:11:f9:bb:79:c8:9b:8e:69:0a: 26:ad:20:4e:dc:dc:9a:3b:6a:7a:d6:2c:7c:66:10:25:31:ca: 2a:3c:b1:34:0f:3a:74:f0:5f:e8:ac:48:64:35:16:16:8e:b6: 1e:fb:a4:d4:e9:63:fc:e4:96:fd:b1:53:63:07:af:a5:96:32: b2:c8:81:9a:f9:88:f9:b5:ce:20:74:1f:67:84:ee:67:66:5c: 24:24:2e:57:8b:ad:ef:da:a1:ba:f7:d7:c2:23:26:44:2c:d2: 89:56:ef:eb:08:25:a7:f6:4c:25:00:b0:46:93:95:31:fa:12: 01:c9:00:06:5f:e4:f9:5e:67:3e:ae:52:a6:6c:8f:e4:04:ae: c5:59:1e:40:84:c5:a1:1a:24:01:26:c0:72:c7:d7:cb:d0:d1: 79:b6:c4:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFhjk3jzKp22iPNzGY4466WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZWUyYmY0M2YyMWE4MWM0OTJjNmU2YTlmYzZmMDc0ZDJm MGEyMTcwHhcNMjYxMDIyMDMwMTE4WhcNMjYxMDIzMDMwMTE4WjAzMTEwLwYDVQQD EyhmM2FmYzBiOGU2Zjk2MmJlOGQ3OWEyNGIyMTMyNTk2NjRkYmZiNWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkw+DqKIE/cRpDyO9EKQE7rze1Xf WTv6v8b1trU2Ucfq/w0EUrM8vZIqDXoUN/Jy9GoqB3VEwgO0ewtJyhyISCOtXr0G jTnzU5UD38eHJux6Zdmz9pVpbXi1tj5aLrtaNCOY63PZW+8P3dzoU/FdPyOlvY5y gNcEmyTONxMri0Z0xSf7Ub+10kHibv1I/Mey3VvuyoexaNLTHRQoHsb38PxZkU7A gIbRU277M3HSO7LyMt5nygKdz1Ph6+cG8OwiZ/JLgXT/gKRZbmcRCt6yB45i2/2g pmANQV/5jLDpC7+Ib78ir0wxCqOp0yjY1m8bIuErRh2M7WCUUuQPVq0AdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOvwLjm+WK+jXmiSyEyWWZNv7X6MB8GA1UdIwQY MBaAFN/uK/Q/IagcSSxuap/G8HTS8KIXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTIt MjhkNzhlYjlmMmRjLzEvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTItMjhkNzhlYjlmMmRj LzEvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArD58Urc kgSWvK4QcDI8rnQ2g0MrmI2jC92n3FmMkbCkStZYawxXYA5OLKVPU5+41icj58hS txKeGnGXjw5drb5Tjt0m74ZKdZrWoVKNm2CtQwXO68iAX7TW7XB8wqWDEBhuEfm7 ecibjmkKJq0gTtzcmjtqetYsfGYQJTHKKjyxNA86dPBf6KxIZDUWFo62Hvuk1Olj /OSW/bFTYwevpZYyssiBmvmI+bXOIHQfZ4TuZ2ZcJCQuV4ut79qhuvfXwiMmRCzS iVbv6wglp/ZMJQCwRpOVMfoSAckABl/k+V5nPq5SpmyP5ASuxVkeQITFoRokASbA csfXy9DRebbEXA== -----END CERTIFICATE-----Generated at Thu Oct 22 10:20:12 2026 by rpki-client