$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: +mlX8L9LrcO4DfxfcWSFYX0VfoL9mtTXxx0eML4RaJ4= Subject key identifier: 45:18:2B:4F:B4:99:F8:3D:3B:65:8E:04:30:91:90:BB:2F:D5:63:5F Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019D3866550D7E052B19F2FD98EC438C0AA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 06BA Signing time: Sun 29 Mar 2026 07:02:03 +0000 Manifest this update: Sun 29 Mar 2026 07:02:03 +0000 Manifest next update: Mon 30 Mar 2026 07:02:03 +0000 Files and hashes: 1: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: v3Y1NURBwaat7VP0SZ7HmKh8nlfbpnWh8EyGPCm/yY0=) 2: 3MMGuyxk5BA1h4yKFwGuekYBWpE.roa (hash: qDDPw4rjqe8Of6FqTmZ8vNfrRu70pioyOFhkznkxbn0=) 3: 7PMwWghG1f2GH2kcgJJT1T19mKA.roa (hash: iSWM8zD4dnBfc8rm3hdCfD29wpDU7MXGImntX+CzTys=) 4: CUZDkD-NcFvyMKKqxpqKTImWldI.roa (hash: BjgaQINh/o8BqluKWpCRQpHRBGijPayFIzTWLEZZ+ZQ=) 5: Dhrq3603FXAC1wqjo20wzUmr4F8.roa (hash: 93F+LmWkBd0KITwFzxwwnm7wh1Nm582E0rUj/2gWiKA=) 6: DlLXddAis5e2NiYpDlPFgCC2fqQ.roa (hash: wChHj1a1SOAqKO2XbDKNiJzmDLWZ4VK+PUQtszQXCaA=) 7: aoX3qgSrCGpVmGI2-sNdQlbBEmo.roa (hash: fUASGNwLnomXxmckWPpEyeY/fBQ9vTiFVyQieAo28z4=) 8: cojKfvUL96n8v0NW6xv7i34QuKg.roa (hash: lYPKoP4F96eul1kxPLkPqkS5F4CgrEIREjfk+V+jg3o=) 9: f-9ciEqv18Kub9fxi8gMgTEDiN8.roa (hash: ys7Se75WP1iZvGd8oeyIka2FlXVNvmTKA8g4Bz+pUFE=) 10: pPL6_ILH_OSb0uend9BsYY1M5zM.roa (hash: uPRcSj9Qet/R5RDAAlJ1xCgadEw0HnsrDGUuZztgzUc=) 11: qse_CjeAhZ5mrJaaeqQbXdzwq6c.roa (hash: DcaCDcXxQuFqUhYc0T6gyos8/cyyoYS+q0uMnwfEmhU=) 12: qvL5cNpCo_XaFCNykh7Gx2HPj7A.roa (hash: Je87v5hgNV1x62aPiR7j/Cjy7ey6GNmVdBbyWoayWLE=) 13: rtaxspuDF4uli6my-kG3x-CfzyM.roa (hash: Mbr6HPYPHlUpdc2sSsGgV2VBSnLTCf311AToZ6BeZWw=) 14: sRTNLbJ3g2jrnoN7xO2uBbfWguU.roa (hash: 97xAwvGhhXW1GC5fGvIVMkcoGK7MfJbMcwrs0H6Prc8=) 15: sSEuPuJKSwvGPl8OYtUAbNgjLFs.roa (hash: t6MnFRdD+DMOOopxl5hauoDky6UirAHK0zqLM5bjQWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:66:55:0d:7e:05:2b:19:f2:fd:98:ec:43:8c:0a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Mar 29 07:02:03 2026 GMT Not After : Mar 30 07:02:03 2026 GMT Subject: CN=45182b4fb499f83d3b658e04309190bb2fd5635f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:cc:21:79:e4:04:5c:92:ff:86:7e:2a:e0: 3e:70:53:a7:2c:48:cd:50:b8:c9:78:b4:ba:e8:d1: 04:0f:6f:b3:5f:07:6f:d0:04:b2:f0:2d:49:0a:82: d9:56:0f:94:77:cf:e1:78:1f:01:01:8c:a6:cc:2f: 25:8c:e6:7d:16:cd:9e:c6:ee:07:a7:c9:b5:06:52: 21:a6:f9:25:c1:b0:da:ca:9e:7a:e4:ba:8f:fc:47: b2:6d:c8:0f:ee:9b:38:95:df:73:f9:fb:4e:f8:d8: b4:3d:d0:f3:04:e0:c0:59:7c:10:46:70:3c:64:b5: 05:8d:1c:b2:62:7e:1d:b7:f9:98:45:c5:f3:46:f8: 7f:e0:1e:ba:ef:15:9d:e2:63:48:25:24:cf:0c:4a: 9d:79:fb:7a:fb:cd:b2:1a:f6:27:ee:16:d9:a1:06: 28:33:32:45:92:5b:64:73:07:2c:98:3c:2d:a6:d1: 59:28:9d:48:58:b9:0f:e8:ab:2b:75:b8:14:54:54: e8:99:05:f3:26:60:f6:b3:87:73:86:32:1b:2c:3d: 2a:4a:45:49:11:08:ff:63:5e:ca:2f:48:db:f6:63: f3:52:7c:0e:58:33:4a:f0:97:6c:64:a5:af:18:8c: b8:08:1f:39:b0:a1:0f:d4:74:24:ca:25:e2:c6:25: 5c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:18:2B:4F:B4:99:F8:3D:3B:65:8E:04:30:91:90:BB:2F:D5:63:5F X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d9:8b:7f:5e:98:06:21:01:c6:7f:89:f2:9b:81:e9:d3:f4: 5b:f2:48:5d:d3:ad:53:c3:2a:3e:20:03:d2:7a:2a:77:53:fe: d3:0c:22:74:69:3a:e7:c5:67:ea:d1:28:99:83:4d:db:05:df: 6a:22:00:a6:58:f9:a1:18:39:af:d0:37:de:8d:58:b4:d6:37: 92:6c:ce:17:31:cb:39:13:b4:a5:5a:2d:70:d5:04:6b:9b:31: 75:c8:b7:e8:8f:e9:fc:26:15:c1:07:48:af:ce:56:c2:f2:11: 11:15:e6:48:47:70:61:21:42:4e:3e:52:8d:65:1c:b1:99:14: 9b:c1:3a:10:9f:7b:a4:86:2c:66:5e:5c:79:76:2c:dd:71:c0: a0:e1:74:7e:1e:53:7a:ce:3b:96:5e:c1:d0:e4:e2:4a:00:86: 28:38:82:18:00:b1:ba:61:a5:e6:da:a0:47:8b:5d:a1:8c:95: ff:61:3f:e2:71:d6:ec:34:20:60:9c:65:3c:ca:92:3b:8c:8b: d8:8a:bb:16:82:f6:7f:99:cd:4d:55:76:26:c6:9a:20:19:6c: 7f:d8:cd:4a:34:e4:4e:9f:b4:ec:fe:57:a1:35:c8:dc:b4:70: 5e:e0:35:a2:b3:0a:43:b0:4b:2b:fd:43:f1:b9:0d:b0:22:8c: ea:5e:5a:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ04ZlUNfgUrGfL9mOxDjAqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwMzI5MDcwMjAzWhcNMjYwMzMwMDcwMjAzWjAzMTEwLwYDVQQD Eyg0NTE4MmI0ZmI0OTlmODNkM2I2NThlMDQzMDkxOTBiYjJmZDU2MzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmTMIXnkBFyS/4Z+KuA+cFOnLEjN ULjJeLS66NEED2+zXwdv0ASy8C1JCoLZVg+Ud8/heB8BAYymzC8ljOZ9Fs2exu4H p8m1BlIhpvklwbDayp565LqP/EeybcgP7ps4ld9z+ftO+Ni0PdDzBODAWXwQRnA8 ZLUFjRyyYn4dt/mYRcXzRvh/4B667xWd4mNIJSTPDEqdeft6+82yGvYn7hbZoQYo MzJFkltkcwcsmDwtptFZKJ1IWLkP6KsrdbgUVFTomQXzJmD2s4dzhjIbLD0qSkVJ EQj/Y17KL0jb9mPzUnwOWDNK8JdsZKWvGIy4CB85sKEP1HQkyiXixiVc3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUYK0+0mfg9O2WOBDCRkLsv1WNfMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9mLf16Y BiEBxn+J8puB6dP0W/JIXdOtU8MqPiAD0noqd1P+0wwidGk658Vn6tEomYNN2wXf aiIAplj5oRg5r9A33o1YtNY3kmzOFzHLORO0pVotcNUEa5sxdci36I/p/CYVwQdI r85WwvIRERXmSEdwYSFCTj5SjWUcsZkUm8E6EJ97pIYsZl5ceXYs3XHAoOF0fh5T es47ll7B0OTiSgCGKDiCGACxumGl5tqgR4tdoYyV/2E/4nHW7DQgYJxlPMqSO4yL 2Iq7FoL2f5nNTVV2JsaaIBlsf9jNSjTkTp+07P5XoTXI3LRwXuA1orMKQ7BLK/1D 8bkNsCKM6l5aig== -----END CERTIFICATE-----Generated at Sun Mar 29 11:26:52 2026 by rpki-client