$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: JfinR/cZj4oIsnX5yUXSi+m6UVFt2DYiz9B6GWqkf5o= Subject key identifier: 5B:A5:00:A7:24:E6:D3:E8:F7:8C:4F:2B:BA:ED:B7:15:28:89:26:76 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019F9E8433AEF384D9EF5DBDD09F77D5C5AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 0420 Signing time: Sun 26 Jul 2026 13:01:31 +0000 Manifest this update: Sun 26 Jul 2026 13:01:31 +0000 Manifest next update: Mon 27 Jul 2026 13:01:31 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: u3QPZ3KloGm00tBKCEfAJ4RbmusM3uJi5F9l8tXr6Ek=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: 6JiMFaxCSZWHlWRw_c0MiJfjbgg.roa (hash: DpTH43Y5uaEsG5bOlwMcZuc/M6XoM1VbvdsQvk86pvc=) 5: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 6: O0NaR63qYEYkKBX6khhH3sfwhso.roa (hash: lovVJhahsHXLyNDHuxIILDmOwnsX5JTEWJRzVms+kRw=) 7: O203bP1wCT1tFTJWpeV4GwvRr-E.roa (hash: M8T4zxdIfcPsrQz2e4NE8yV9cJaheu4EatHoWhBRGz0=) 8: PfVIpf3243WlCJ9AO0yLbQ2vGPY.roa (hash: fixeB4WnU7AtqSg73SbkUGJ+qRDw66pRPKdzTxkrzIU=) 9: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 10: Wy86CL2f4xLjz0vPQHZzN8a8unY.roa (hash: cXavtY5dvsiYw1vJsFA6Wzgu2etlowE0a/3vzxx5WuA=) 11: buFP3YQ0XQZEaAumgm6mnH5J-yE.roa (hash: AaWeY9oJG2eNuVhrXCNjBk4XbOhPTbIi+u4Z+27Es7I=) 12: gDGMFnBJLD30qto-o_gnRyl9xIo.roa (hash: IYpXszgMmGmDCIE7wSyYNrq3lEstGhkc0XA0OwHmr9A=) 13: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 14: juRzxVJwarhIfSklgOiQQRJcr-Q.roa (hash: MRCpSk5iY23hustIzHxvVTRKj+fIV+g79/vD2SakhjU=) 15: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 16: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) 17: xxc5xAyMxoRB0JYyqslJ3UmSDU0.roa (hash: 5NnOEcjd27P4vZWaJoKJUxgy0CmbiwJxaZCUGTIypGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9e:84:33:ae:f3:84:d9:ef:5d:bd:d0:9f:77:d5:c5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Jul 26 13:01:31 2026 GMT Not After : Jul 27 13:01:31 2026 GMT Subject: CN=5ba500a724e6d3e8f78c4f2bbaedb71528892676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b7:a2:19:97:49:46:97:c2:10:be:a2:fc:2a: b7:40:da:6f:c8:00:0a:a7:f5:3e:a2:b8:67:c2:0f: d2:d9:c4:f1:ea:90:d8:c7:cb:64:0f:52:44:8a:88: bb:7e:17:26:92:9a:b2:05:b4:ac:7c:f4:bb:ac:16: 00:7d:56:c5:80:01:4a:69:34:ea:18:3a:41:99:e1: db:0a:db:91:99:5e:51:24:e8:26:05:73:56:11:c2: 9e:d4:33:2e:e2:20:32:2b:45:5d:10:3a:17:dd:cd: 4d:84:bb:f8:e0:b8:3c:52:e5:e2:0e:69:52:65:4f: 36:f9:a4:ac:d8:83:be:d3:75:df:b4:aa:c1:20:c3: 9a:95:a2:e1:52:b2:f4:56:ac:86:9b:3b:09:a9:44: 0e:75:07:b3:b5:93:68:e4:b5:eb:76:33:8d:13:ed: 35:64:56:c2:17:5f:65:c3:dc:6f:71:a6:5a:ab:a3: ea:d5:ea:cb:da:5f:9b:76:27:a4:9f:e1:7e:60:83: ea:de:61:11:ab:63:a8:2f:45:da:57:5d:64:8d:82: 6a:f0:61:f0:d4:c4:c9:9a:03:a1:fc:2a:f4:07:ac: af:2c:d3:1d:58:6e:a5:73:c4:d8:0f:f6:cb:53:f5: 1e:82:bd:d1:4a:e3:99:ec:55:16:e5:29:9b:99:de: e6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A5:00:A7:24:E6:D3:E8:F7:8C:4F:2B:BA:ED:B7:15:28:89:26:76 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b5:1c:40:c8:8d:bb:b8:c0:96:94:da:9f:65:4d:5d:dc:0d: a6:a1:14:29:91:fa:b9:df:b0:52:b8:cd:a9:16:39:9e:ca:2d: cc:39:d4:68:c6:8f:8f:19:85:90:b1:5a:63:33:ff:b5:05:91: ca:e5:4f:1a:e1:b2:da:b1:9a:a6:22:7d:a7:85:45:9b:a1:35: 2b:4e:4a:47:d0:9f:12:2a:df:6b:d1:cc:f4:db:77:10:bc:41: ad:8e:1e:62:ef:5d:83:9d:68:ae:02:70:e8:6c:c3:31:fe:a2: a5:7a:53:cb:39:15:70:c7:9b:fe:27:87:68:80:36:19:00:53: 5c:40:67:0c:e0:6f:fa:c6:77:1b:cc:f3:bf:99:45:f4:e0:b7: fb:9c:2d:b8:f5:29:7d:d5:04:ff:91:cf:16:9b:4a:24:6a:63: 5e:5b:dc:32:8d:91:92:24:95:66:25:d0:74:9d:8c:f2:25:05: 3f:a3:a7:a8:a5:46:05:95:b0:b1:44:1f:6b:dd:a2:ba:4f:35: b7:f0:71:04:31:d3:0c:66:e6:0c:fa:b5:92:ce:87:6d:61:d5: 69:1e:30:fb:e4:05:de:5e:e1:39:04:aa:0f:db:6d:b8:e8:20: 4a:b2:66:b0:1e:36:97:c0:e7:e4:b7:f3:18:dc:b4:42:4a:fa: ea:95:aa:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+ehDOu84TZ71290J931cWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwNzI2MTMwMTMxWhcNMjYwNzI3MTMwMTMxWjAzMTEwLwYDVQQD Eyg1YmE1MDBhNzI0ZTZkM2U4Zjc4YzRmMmJiYWVkYjcxNTI4ODkyNjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLeiGZdJRpfCEL6i/Cq3QNpvyAAK p/U+orhnwg/S2cTx6pDYx8tkD1JEioi7fhcmkpqyBbSsfPS7rBYAfVbFgAFKaTTq GDpBmeHbCtuRmV5RJOgmBXNWEcKe1DMu4iAyK0VdEDoX3c1NhLv44Lg8UuXiDmlS ZU82+aSs2IO+03XftKrBIMOalaLhUrL0VqyGmzsJqUQOdQeztZNo5LXrdjONE+01 ZFbCF19lw9xvcaZaq6Pq1erL2l+bdiekn+F+YIPq3mERq2OoL0XaV11kjYJq8GHw 1MTJmgOh/Cr0B6yvLNMdWG6lc8TYD/bLU/Uegr3RSuOZ7FUW5Smbmd7mVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFulAKck5tPo94xPK7rttxUoiSZ2MB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7UcQMiN u7jAlpTan2VNXdwNpqEUKZH6ud+wUrjNqRY5nsotzDnUaMaPjxmFkLFaYzP/tQWR yuVPGuGy2rGapiJ9p4VFm6E1K05KR9CfEirfa9HM9Nt3ELxBrY4eYu9dg51orgJw 6GzDMf6ipXpTyzkVcMeb/ieHaIA2GQBTXEBnDOBv+sZ3G8zzv5lF9OC3+5wtuPUp fdUE/5HPFptKJGpjXlvcMo2RkiSVZiXQdJ2M8iUFP6OnqKVGBZWwsUQfa92iuk81 t/BxBDHTDGbmDPq1ks6HbWHVaR4w++QF3l7hOQSqD9ttuOggSrJmsB42l8Dn5Lfz GNy0Qkr66pWqrQ== -----END CERTIFICATE-----Generated at Sun Jul 26 20:20:01 2026 by rpki-client