$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: 8MsjqJDXokpgRbcEXn4hM2O/RLYo7FYcZI8y4my8sxs= Subject key identifier: 7F:D9:A7:5B:33:F6:95:E1:13:A7:22:97:9C:2D:6E:DC:AA:AF:BA:4E Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019CD61E6A788664D586974E7B3072E69C9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 02A8 Signing time: Tue 10 Mar 2026 05:00:43 +0000 Manifest this update: Tue 10 Mar 2026 05:00:43 +0000 Manifest next update: Wed 11 Mar 2026 05:00:43 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: 7j3a7fpwG9gjuNplnRRy36WCMzNpOJGOnrvMafdQ3Tw=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 5: O0NaR63qYEYkKBX6khhH3sfwhso.roa (hash: lovVJhahsHXLyNDHuxIILDmOwnsX5JTEWJRzVms+kRw=) 6: O203bP1wCT1tFTJWpeV4GwvRr-E.roa (hash: M8T4zxdIfcPsrQz2e4NE8yV9cJaheu4EatHoWhBRGz0=) 7: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 8: Tm68QJ2snSiuZawcjur25m8_gQQ.roa (hash: DaUiCgZt3YWuCz48bPSV79DF4D1Dc2incnzoilZzt30=) 9: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 10: ohXUok_zW7NMmajjFQxMHMt_T0Y.roa (hash: BmIJzfQHz5sgq48QzLBSe6fOOMb8+aHYQoGWrM4uQdc=) 11: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 12: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) 13: xiLzKMbsP2hR2dinGnnh2ffYdNg.roa (hash: UNKk8UicZLwGLHFDEuUZ+yTryGyRHEhcFM6P+iXQVAg=) 14: xxc5xAyMxoRB0JYyqslJ3UmSDU0.roa (hash: 5NnOEcjd27P4vZWaJoKJUxgy0CmbiwJxaZCUGTIypGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Mar 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:d6:1e:6a:78:86:64:d5:86:97:4e:7b:30:72:e6:9c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Mar 10 05:00:43 2026 GMT Not After : Mar 11 05:00:43 2026 GMT Subject: CN=7fd9a75b33f695e113a722979c2d6edcaaafba4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2d:91:f0:c4:29:00:c7:b3:6f:b6:19:22:4a: 7d:28:29:bd:8b:c8:c2:28:d5:7f:be:7d:86:85:b5: 29:03:4a:b3:6e:9e:07:7c:7e:37:34:2b:b5:59:77: c9:17:7a:96:29:6c:ca:2c:72:2d:98:58:a9:4e:bf: 40:74:4b:d4:1f:29:f0:9a:45:5b:c8:7c:26:68:27: bb:9e:ea:bc:e0:e9:c1:31:69:37:fd:ea:8b:46:60: b6:02:ab:be:13:a2:85:21:5d:b1:02:4d:8c:2b:c2: 9f:06:5d:69:64:e1:f8:83:bb:86:51:09:48:b4:4c: aa:ca:bd:a4:9b:6a:31:29:0c:2a:a8:2a:b5:e6:b0: 14:a8:0b:e8:59:54:8f:d0:54:b7:a9:70:5a:d4:ce: ab:aa:7f:ec:d7:38:28:cf:3d:51:42:fe:3d:67:43: 5a:e4:44:69:0d:15:13:d0:88:05:20:b8:e5:c0:12: 05:2f:c8:57:3f:d1:80:01:43:cb:cd:41:90:86:c8: 02:ad:ea:df:db:4f:97:a3:f4:f1:07:e0:53:25:10: e4:2d:f6:2e:c5:a2:e0:0b:10:92:79:33:6d:dd:53: da:ba:7d:07:3d:37:ba:20:f0:9b:d9:af:27:3e:a6: 09:21:8f:35:18:bb:f6:a7:db:73:77:f9:07:a8:3f: 7a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D9:A7:5B:33:F6:95:E1:13:A7:22:97:9C:2D:6E:DC:AA:AF:BA:4E X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:6d:7f:e6:76:4c:40:a4:e8:32:32:d0:24:c8:1f:2a:6d:50: 56:c1:c4:94:0a:05:61:37:c1:db:53:b1:62:05:72:dd:12:5e: 09:c9:91:75:ae:e0:4d:9e:ed:49:4e:99:46:8f:34:f6:d3:63: 19:95:f9:f5:c0:5b:1f:df:e8:ab:d8:1c:7b:ee:62:26:95:53: d4:ae:2c:ac:e5:84:27:aa:9b:80:b9:99:3c:7f:db:4b:4f:f1: 15:7a:53:7f:a2:37:86:ed:46:a8:72:f5:f5:3d:36:26:6c:d9: 41:c3:c9:07:a0:f8:c5:b1:2e:8a:fc:28:45:09:8c:df:25:0e: 09:82:35:7b:0f:86:0d:f1:e2:7f:01:98:78:47:09:87:07:20: 22:25:29:e8:5e:60:bd:5f:98:93:5e:a0:19:18:92:d5:96:fc: bb:a2:bc:a6:67:d6:0b:b3:19:0d:d0:75:f5:ac:23:ed:1a:79: 06:55:3c:6c:f1:46:5c:c8:81:c1:43:a4:a2:6c:20:4b:5f:61: 4f:71:62:5f:fe:81:4e:63:9f:96:db:23:6e:20:f4:1e:88:fd: 1d:09:3b:ee:6a:33:e8:d9:ed:45:61:45:c2:3e:f3:15:9e:0d: cd:ae:0d:2f:33:0d:9b:aa:85:a2:d9:6b:1b:a2:c0:a8:13:83: 22:72:03:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzWHmp4hmTVhpdOezBy5pyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwMzEwMDUwMDQzWhcNMjYwMzExMDUwMDQzWjAzMTEwLwYDVQQD Eyg3ZmQ5YTc1YjMzZjY5NWUxMTNhNzIyOTc5YzJkNmVkY2FhYWZiYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy2R8MQpAMezb7YZIkp9KCm9i8jC KNV/vn2GhbUpA0qzbp4HfH43NCu1WXfJF3qWKWzKLHItmFipTr9AdEvUHynwmkVb yHwmaCe7nuq84OnBMWk3/eqLRmC2Aqu+E6KFIV2xAk2MK8KfBl1pZOH4g7uGUQlI tEyqyr2km2oxKQwqqCq15rAUqAvoWVSP0FS3qXBa1M6rqn/s1zgozz1RQv49Z0Na 5ERpDRUT0IgFILjlwBIFL8hXP9GAAUPLzUGQhsgCrerf20+Xo/TxB+BTJRDkLfYu xaLgCxCSeTNt3VPaun0HPTe6IPCb2a8nPqYJIY81GLv2p9tzd/kHqD96QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/Zp1sz9pXhE6cil5wtbtyqr7pOMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVm1/5nZM QKToMjLQJMgfKm1QVsHElAoFYTfB21OxYgVy3RJeCcmRda7gTZ7tSU6ZRo809tNj GZX59cBbH9/oq9gce+5iJpVT1K4srOWEJ6qbgLmZPH/bS0/xFXpTf6I3hu1GqHL1 9T02JmzZQcPJB6D4xbEuivwoRQmM3yUOCYI1ew+GDfHifwGYeEcJhwcgIiUp6F5g vV+Yk16gGRiS1Zb8u6K8pmfWC7MZDdB19awj7Rp5BlU8bPFGXMiBwUOkomwgS19h T3FiX/6BTmOfltsjbiD0Hoj9HQk77moz6NntRWFFwj7zFZ4Nza4NLzMNm6qFotlr G6LAqBODInIDYA== -----END CERTIFICATE-----Generated at Tue Mar 10 13:04:02 2026 by rpki-client