$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: DpxQ/V8u4UvnLF9HC2bky83rCjsKYuANjfrlG6x6gy8= Subject key identifier: 05:82:22:A9:3C:F2:9E:13:2D:16:F8:8E:1F:74:0A:35:7B:A2:FD:3B Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019DC25EDA9808997D26713E7164DA9FBE95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 0324 Signing time: Sat 25 Apr 2026 02:01:29 +0000 Manifest this update: Sat 25 Apr 2026 02:01:29 +0000 Manifest next update: Sun 26 Apr 2026 02:01:29 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: Aj5srnVnDWbkdKVgKt+EzFe66r7XRXHgVh/FxTsHO7M=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 5: O0NaR63qYEYkKBX6khhH3sfwhso.roa (hash: lovVJhahsHXLyNDHuxIILDmOwnsX5JTEWJRzVms+kRw=) 6: O203bP1wCT1tFTJWpeV4GwvRr-E.roa (hash: M8T4zxdIfcPsrQz2e4NE8yV9cJaheu4EatHoWhBRGz0=) 7: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 8: Wy86CL2f4xLjz0vPQHZzN8a8unY.roa (hash: cXavtY5dvsiYw1vJsFA6Wzgu2etlowE0a/3vzxx5WuA=) 9: buFP3YQ0XQZEaAumgm6mnH5J-yE.roa (hash: AaWeY9oJG2eNuVhrXCNjBk4XbOhPTbIi+u4Z+27Es7I=) 10: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 11: ohXUok_zW7NMmajjFQxMHMt_T0Y.roa (hash: BmIJzfQHz5sgq48QzLBSe6fOOMb8+aHYQoGWrM4uQdc=) 12: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 13: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) 14: xiLzKMbsP2hR2dinGnnh2ffYdNg.roa (hash: UNKk8UicZLwGLHFDEuUZ+yTryGyRHEhcFM6P+iXQVAg=) 15: xxc5xAyMxoRB0JYyqslJ3UmSDU0.roa (hash: 5NnOEcjd27P4vZWaJoKJUxgy0CmbiwJxaZCUGTIypGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Apr 2026 01:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:c2:5e:da:98:08:99:7d:26:71:3e:71:64:da:9f:be:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Apr 25 02:01:29 2026 GMT Not After : Apr 26 02:01:29 2026 GMT Subject: CN=058222a93cf29e132d16f88e1f740a357ba2fd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:45:ec:66:f4:0d:26:1d:9e:3e:04:3e:f8:0f: f4:e0:05:93:e6:0e:3c:79:6a:52:60:cd:b2:44:79: 56:e6:58:ab:ea:4a:72:d7:f0:b4:6a:83:8d:f7:07: d1:35:44:46:62:4a:f9:05:0f:65:ea:af:b4:71:c0: 04:5c:4d:5e:7c:bd:38:03:98:cb:c1:04:34:2c:b6: 51:52:d4:4c:d7:23:a1:5f:e6:be:08:d5:30:71:7d: b7:c3:ba:05:2e:d1:b3:be:71:2f:aa:cc:49:ff:86: cc:e3:34:9e:a2:d6:44:66:16:00:6b:26:29:75:d5: 4f:02:03:c4:5f:de:ee:b5:8a:eb:75:b2:ca:d9:4e: 3a:ae:7a:4a:fd:a2:4e:8b:68:73:db:90:39:7e:d9: fe:5b:4b:4b:a7:2e:c7:d9:33:93:08:0e:01:f7:f0: 6e:9b:e2:5a:00:6b:02:2e:c0:bb:18:5d:c3:30:2d: 9a:a1:45:24:34:fe:18:3c:e8:66:a4:da:b1:de:03: 0b:dc:5a:99:e9:4a:8b:6b:57:58:46:2b:bb:c9:77: 9f:1e:36:5f:b1:84:f4:78:e1:5d:2e:5a:9d:e6:3b: d0:1d:0f:1c:d3:c8:da:9b:0a:1b:68:be:2d:b8:95: 5a:14:d6:5f:bb:40:95:8d:15:af:47:58:46:d0:4f: 9e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:82:22:A9:3C:F2:9E:13:2D:16:F8:8E:1F:74:0A:35:7B:A2:FD:3B X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:36:da:f6:46:34:26:a4:87:f7:ec:dd:d4:36:b3:24:ca:64: 37:4e:fb:66:5f:91:9b:d8:27:f4:e5:22:e3:bc:86:85:f5:04: 4f:1b:4e:b5:32:12:5d:f5:f1:b9:43:67:f9:c7:3f:c1:28:51: 9d:e8:4c:ca:8f:6b:25:6b:b2:40:d0:1a:6a:d2:93:9c:52:0d: 0f:18:30:e8:78:9b:6a:9f:fe:34:c8:c5:8c:76:1e:14:12:9b: 68:81:c7:6b:aa:81:2d:97:2a:c1:73:fb:0e:34:66:c5:e5:93: 5b:72:89:d1:9a:e9:f4:1a:71:d2:41:a4:0b:d5:ed:c4:27:c9: 79:3e:b1:1d:fc:a4:e6:99:f2:ec:7f:51:63:28:1a:02:da:20: ce:17:d2:73:8a:80:23:1c:f2:fd:21:bc:ae:81:03:cf:ae:db: 5d:13:0f:bc:ee:6b:d6:67:95:92:62:d9:e1:f2:9a:80:0a:3b: 4a:84:9f:26:fd:59:69:c9:ae:84:1e:16:7e:cb:fd:a7:45:1d: dd:76:a8:e9:7b:a0:23:3e:b3:bc:c2:98:e3:f6:3c:11:5c:fb: bc:c2:7b:ad:b7:b0:df:67:e3:98:ca:30:4b:ad:4f:68:38:a1: 85:b2:b5:0b:bd:12:ab:11:a1:83:47:7c:d3:5f:d8:5c:d5:17: d0:16:28:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3CXtqYCJl9JnE+cWTan76VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwNDI1MDIwMTI5WhcNMjYwNDI2MDIwMTI5WjAzMTEwLwYDVQQD EygwNTgyMjJhOTNjZjI5ZTEzMmQxNmY4OGUxZjc0MGEzNTdiYTJmZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUXsZvQNJh2ePgQ++A/04AWT5g48 eWpSYM2yRHlW5lir6kpy1/C0aoON9wfRNURGYkr5BQ9l6q+0ccAEXE1efL04A5jL wQQ0LLZRUtRM1yOhX+a+CNUwcX23w7oFLtGzvnEvqsxJ/4bM4zSeotZEZhYAayYp ddVPAgPEX97utYrrdbLK2U46rnpK/aJOi2hz25A5ftn+W0tLpy7H2TOTCA4B9/Bu m+JaAGsCLsC7GF3DMC2aoUUkNP4YPOhmpNqx3gML3FqZ6UqLa1dYRiu7yXefHjZf sYT0eOFdLlqd5jvQHQ8c08jamwobaL4tuJVaFNZfu0CVjRWvR1hG0E+erwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWCIqk88p4TLRb4jh90CjV7ov07MB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzba9kY0 JqSH9+zd1DazJMpkN077Zl+Rm9gn9OUi47yGhfUETxtOtTISXfXxuUNn+cc/wShR nehMyo9rJWuyQNAaatKTnFINDxgw6Hibap/+NMjFjHYeFBKbaIHHa6qBLZcqwXP7 DjRmxeWTW3KJ0Zrp9Bpx0kGkC9XtxCfJeT6xHfyk5pny7H9RYygaAtogzhfSc4qA Ixzy/SG8roEDz67bXRMPvO5r1meVkmLZ4fKagAo7SoSfJv1ZacmuhB4Wfsv9p0Ud 3Xao6XugIz6zvMKY4/Y8EVz7vMJ7rbew32fjmMowS61PaDihhbK1C70SqxGhg0d8 01/YXNUX0BYoVQ== -----END CERTIFICATE-----Generated at Sat Apr 25 05:29:32 2026 by rpki-client