$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: j/Z1mDINQmpEsuh/oe23C/YAJaNlB1Or3zfeK/K1kVU= Subject key identifier: 94:43:3C:29:36:C0:A8:31:22:59:C9:69:03:C4:93:7D:BD:A7:E9:B2 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 01A175F028A93972FD58BAE25E5F05C508D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 051D Signing time: Mon 26 Oct 2026 02:00:35 +0000 Manifest this update: Mon 26 Oct 2026 02:00:35 +0000 Manifest next update: Tue 27 Oct 2026 02:00:35 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: teIdBlghPcZ2ZBZUbn2hG5279PVbRJ9thDpTTxbCSLM=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: 6JiMFaxCSZWHlWRw_c0MiJfjbgg.roa (hash: DpTH43Y5uaEsG5bOlwMcZuc/M6XoM1VbvdsQvk86pvc=) 5: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 6: Jnms41a00HHsZAaDUqDwXgA8zzI.roa (hash: RwShvg5rD/0/YSUaAR1xNnjMIINk+nGJ29Ri+9mwEx4=) 7: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 8: Wy86CL2f4xLjz0vPQHZzN8a8unY.roa (hash: cXavtY5dvsiYw1vJsFA6Wzgu2etlowE0a/3vzxx5WuA=) 9: ZCawfFiEm8MWLQeXXIOT_dxU1U4.roa (hash: 4aycbuOygi1n+QX+zF05/A01dJNe+YAcN7Ic0dCYPTc=) 10: aAsJVr20IPmCcACQyDrc9l7eymA.roa (hash: jaEjSZ0pIoUcTdvD/xtgqNjoZeLCThwgJ5O00L9VLSM=) 11: buFP3YQ0XQZEaAumgm6mnH5J-yE.roa (hash: AaWeY9oJG2eNuVhrXCNjBk4XbOhPTbIi+u4Z+27Es7I=) 12: fdaQXC9YTHiY6cwpC_WH5RqTESo.roa (hash: C4XzlLxg0BNyMddYVg3sfthfeguEVR84TPotbdJtqGg=) 13: gDGMFnBJLD30qto-o_gnRyl9xIo.roa (hash: IYpXszgMmGmDCIE7wSyYNrq3lEstGhkc0XA0OwHmr9A=) 14: mFm9Gf0w53IE401lpYuGN0qjsd8.roa (hash: +9BykQZFflh/Tr/zOhjdGxo/obU7z/9ygNUuG9hMXrY=) 15: uRLU0blxeKfoO_QFBHCsyFA8e_o.roa (hash: 1MZVy9oqPihq/rDsPHr6D9iqI/1EWI5c2M5lyukdpPo=) 16: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) 17: xxc5xAyMxoRB0JYyqslJ3UmSDU0.roa (hash: 5NnOEcjd27P4vZWaJoKJUxgy0CmbiwJxaZCUGTIypGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:75:f0:28:a9:39:72:fd:58:ba:e2:5e:5f:05:c5:08:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Oct 26 02:00:35 2026 GMT Not After : Oct 27 02:00:35 2026 GMT Subject: CN=94433c2936c0a8312259c96903c4937dbda7e9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:a5:4c:04:80:fc:65:77:15:5f:18:d7:f0: 34:86:1b:f1:4e:12:09:e7:28:07:7b:bf:18:92:2b: 46:92:86:e7:cc:c9:38:08:64:a3:25:a1:89:35:be: b2:ef:fc:6d:0d:bb:5c:e4:c2:55:d4:1b:b3:9d:4b: 5c:59:e3:ad:98:d1:68:22:46:03:3a:3b:60:29:3c: be:80:7a:b9:99:97:74:27:58:14:60:5a:53:81:a7: 6f:64:71:f6:6f:fe:80:74:09:f4:55:c4:ce:04:2e: 2c:45:a8:2b:0b:81:19:13:da:97:ac:68:6e:da:31: e5:93:c8:ee:61:ee:cc:02:d4:c9:f4:41:36:3d:e9: c0:d3:18:83:25:66:62:8c:c7:eb:f1:4c:31:26:94: ee:c4:4e:af:80:c8:a1:eb:90:3c:72:8d:2d:d9:fa: 7e:dc:ab:a5:4e:27:7d:71:c5:08:ee:38:70:93:41: 3d:86:03:dd:e8:48:d5:5a:bb:78:9b:64:7c:87:c5: df:7f:f6:fe:0c:a4:59:9b:47:d2:23:5e:3a:b4:a8: 94:d3:7c:af:9e:ef:2c:96:62:c6:93:83:13:af:ce: 32:d0:d2:0b:42:c6:d3:0b:11:60:14:98:b8:44:0b: 57:73:1e:2d:a5:8b:e7:15:60:2a:e6:ea:5a:33:e1: db:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:43:3C:29:36:C0:A8:31:22:59:C9:69:03:C4:93:7D:BD:A7:E9:B2 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:80:42:f4:7e:15:b3:04:06:1a:dd:e9:18:e8:10:f3:49:e8: 53:32:72:37:df:b9:07:62:8f:a8:ab:9f:17:68:e2:5f:06:82: 91:84:87:6f:34:9f:37:7c:b7:cc:73:d6:00:65:6d:41:be:1c: ce:19:20:97:11:c3:85:c7:79:7f:ce:e6:d0:39:2a:6f:00:c1: 43:8a:49:0d:94:78:4c:1d:48:8d:ac:0e:c9:0b:ac:9b:17:67: a2:c1:65:c5:d0:3c:fa:6a:d3:16:7b:45:22:4b:b5:65:7e:63: a3:62:76:bc:31:c3:22:34:08:a0:74:06:f7:f7:5a:71:21:05: 65:48:ab:9f:7d:00:52:e2:f1:25:22:8e:85:1d:19:2e:43:b1: 54:e2:01:10:7e:66:e9:dc:19:cd:79:47:25:60:20:f3:b2:d4: 87:af:c0:bb:50:c8:3d:fd:f0:84:f4:06:7a:67:4b:2b:c3:ea: ed:b5:c5:46:29:46:9c:19:22:a5:85:88:2c:be:1b:84:08:08: 53:3a:33:a0:5f:73:0e:fb:9f:5f:43:67:1b:70:c3:51:83:b4: 3f:c9:db:ca:f1:de:48:26:7f:69:c7:10:ab:65:60:0f:5a:51: 39:49:ef:7f:1d:99:81:e6:f3:79:f7:47:5d:31:6d:6a:fc:09: a6:e6:d4:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF18CipOXL9WLriXl8FxQjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYxMDI2MDIwMDM1WhcNMjYxMDI3MDIwMDM1WjAzMTEwLwYDVQQD Eyg5NDQzM2MyOTM2YzBhODMxMjI1OWM5NjkwM2M0OTM3ZGJkYTdlOWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1KlTASA/GV3FV8Y1/A0hhvxThIJ 5ygHe78YkitGkobnzMk4CGSjJaGJNb6y7/xtDbtc5MJV1BuznUtcWeOtmNFoIkYD OjtgKTy+gHq5mZd0J1gUYFpTgadvZHH2b/6AdAn0VcTOBC4sRagrC4EZE9qXrGhu 2jHlk8juYe7MAtTJ9EE2PenA0xiDJWZijMfr8UwxJpTuxE6vgMih65A8co0t2fp+ 3KulTid9ccUI7jhwk0E9hgPd6EjVWrt4m2R8h8Xff/b+DKRZm0fSI146tKiU03yv nu8slmLGk4MTr84y0NILQsbTCxFgFJi4RAtXcx4tpYvnFWAq5upaM+HbSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRDPCk2wKgxIlnJaQPEk329p+myMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoBC9H4V swQGGt3pGOgQ80noUzJyN9+5B2KPqKufF2jiXwaCkYSHbzSfN3y3zHPWAGVtQb4c zhkglxHDhcd5f87m0DkqbwDBQ4pJDZR4TB1IjawOyQusmxdnosFlxdA8+mrTFntF Iku1ZX5jo2J2vDHDIjQIoHQG9/dacSEFZUirn30AUuLxJSKOhR0ZLkOxVOIBEH5m 6dwZzXlHJWAg87LUh6/Au1DIPf3whPQGemdLK8Pq7bXFRilGnBkipYWILL4bhAgI UzozoF9zDvufX0NnG3DDUYO0P8nbyvHeSCZ/accQq2VgD1pROUnvfx2ZgebzefdH XTFtavwJpubUXw== -----END CERTIFICATE-----Generated at Mon Oct 26 14:20:56 2026 by rpki-client