$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json) Hash identifier: 3jiDkQmoRaM4D/KL3IEPrSBxhwEA72C0HjpyE8sJfLY= Subject key identifier: E8:CC:36:44:4D:A5:1D:79:1C:1A:AA:06:14:DB:6F:6E:76:5B:74:00 Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 019DDD317A3D2DB33E9D8ACA3B1989716979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft Manifest number: 0FAA Signing time: Thu 30 Apr 2026 07:01:40 +0000 Manifest this update: Thu 30 Apr 2026 07:01:40 +0000 Manifest next update: Fri 01 May 2026 07:01:40 +0000 Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: sh1/Mt2M311ZJfcDuh4F1kn4vuxznZ+hPOF7oC/I+S8=) 2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=) 3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=) 4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=) 5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=) 6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=) 7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=) 8: VqSk2F-cMltec__vt5GWmoZRbOs.asa (hash: DSTYqZUEAVPlYiwOcT/Aj9JtlDMu/1/7b3uouJr7QEg=) 9: c07bIsHBnYan2_awwduVtTU7DUI.roa (hash: mqMh/xKPr8DCyDidpLkePZTFgnIP6RdmLVjUadJSWGE=) 10: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=) 11: p6q7nnD_OPKDsS9U1c5yxJhC8WA.roa (hash: MuqlFHVz3Fg/JUr8nrRSdQXx7Lahqnmq31R7HkprFTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:dd:31:7a:3d:2d:b3:3e:9d:8a:ca:3b:19:89:71:69:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Apr 30 07:01:40 2026 GMT Not After : May 1 07:01:40 2026 GMT Subject: CN=e8cc36444da51d791c1aaa0614db6f6e765b7400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:22:a0:ee:5b:6d:58:b3:5c:fe:0d:85:d5: 95:09:69:83:8a:ef:01:b6:6e:5e:6a:ff:e1:6c:d6: 6b:4d:84:58:a8:e5:b7:e8:a7:2b:58:06:e1:40:9b: 79:3c:16:ac:49:f9:07:27:af:35:27:cc:d1:00:bc: cd:3e:a5:ee:5a:3a:7f:ed:f4:60:5f:f8:9f:51:9d: 94:df:11:61:5a:9a:79:48:62:88:75:13:8b:19:28: bb:9a:d3:67:be:a6:cf:95:b0:2e:59:42:83:6e:f2: 91:10:12:86:5c:da:85:bf:8b:68:3c:fd:07:17:c5: b5:7d:7d:13:e4:91:32:80:b7:4b:66:f9:52:51:8d: 70:95:9b:92:3a:12:3a:38:83:fe:9d:51:95:e5:01: 22:3d:bb:57:71:2e:61:8b:ca:26:14:fc:d0:ff:a1: 6f:8b:ed:99:91:91:9e:90:d0:b4:04:99:9f:ac:2a: 37:dc:65:2d:93:3e:dc:26:e9:a8:07:fc:c4:71:11: 50:0c:bf:aa:8c:2b:3b:67:60:c7:f2:4d:93:96:c6: 79:ae:e7:c3:c9:64:53:d6:bc:07:bb:3c:4b:75:bb: 28:8d:11:a0:be:74:dc:0a:de:8d:23:66:e2:77:62: f5:a1:c1:60:79:77:74:c3:50:22:3e:dc:dc:12:25: 24:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CC:36:44:4D:A5:1D:79:1C:1A:AA:06:14:DB:6F:6E:76:5B:74:00 X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d2:aa:0c:fa:e7:2d:9d:6a:f8:87:c9:ea:b1:90:56:64:61: 9b:50:43:92:13:cd:e5:8a:84:5d:8b:da:fb:47:f8:0a:88:b4: b2:02:4b:e0:60:5b:bd:43:c8:21:b7:23:22:c7:a1:4e:01:49: 0c:a5:c5:e7:c0:f2:e1:b8:aa:08:12:fb:f4:7b:57:28:ec:da: 88:ba:14:4c:b1:f3:86:d7:7f:86:8c:19:0d:01:4f:5b:2a:c1: 77:23:13:16:40:3a:54:39:f4:d8:11:1f:08:77:8b:e7:11:e3: e4:ad:8c:b5:33:b7:03:e3:b2:02:39:65:1d:5c:ee:33:9a:ab: 85:e8:cd:96:f4:3c:08:c7:0d:8e:85:ac:ae:16:44:b4:01:75: e7:c4:53:98:5a:5c:8a:f2:fa:3d:e2:20:27:aa:f9:cb:2f:af: 28:c7:0d:3f:9a:9f:7d:b3:a5:44:66:b6:f6:e4:e6:4e:35:7a: b3:7c:6f:b4:a9:7c:53:f7:e8:42:bf:c7:81:ed:8e:6b:ea:62: 9a:7d:a5:d0:dd:72:12:80:7b:c4:b1:6e:d8:7b:5d:4c:a0:35: 34:3f:96:cc:37:ea:27:eb:5b:d4:6a:d7:eb:c7:63:02:f1:69: f4:cc:60:c0:17:98:9d:35:e7:1a:0a:2d:c5:f4:55:dc:15:e9: 9b:37:0d:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3dMXo9LbM+nYrKOxmJcWl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjYwNDMwMDcwMTQwWhcNMjYwNTAxMDcwMTQwWjAzMTEwLwYDVQQD EyhlOGNjMzY0NDRkYTUxZDc5MWMxYWFhMDYxNGRiNmY2ZTc2NWI3NDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7UioO5bbVizXP4NhdWVCWmDiu8B tm5eav/hbNZrTYRYqOW36KcrWAbhQJt5PBasSfkHJ681J8zRALzNPqXuWjp/7fRg X/ifUZ2U3xFhWpp5SGKIdROLGSi7mtNnvqbPlbAuWUKDbvKREBKGXNqFv4toPP0H F8W1fX0T5JEygLdLZvlSUY1wlZuSOhI6OIP+nVGV5QEiPbtXcS5hi8omFPzQ/6Fv i+2ZkZGekNC0BJmfrCo33GUtkz7cJumoB/zEcRFQDL+qjCs7Z2DH8k2TlsZ5rufD yWRT1rwHuzxLdbsojRGgvnTcCt6NI2bid2L1ocFgeXd0w1AiPtzcEiUkjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjMNkRNpR15HBqqBhTbb252W3QAMB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9KqDPrn LZ1q+IfJ6rGQVmRhm1BDkhPN5YqEXYva+0f4Coi0sgJL4GBbvUPIIbcjIsehTgFJ DKXF58Dy4biqCBL79HtXKOzaiLoUTLHzhtd/howZDQFPWyrBdyMTFkA6VDn02BEf CHeL5xHj5K2MtTO3A+OyAjllHVzuM5qrhejNlvQ8CMcNjoWsrhZEtAF158RTmFpc ivL6PeIgJ6r5yy+vKMcNP5qffbOlRGa29uTmTjV6s3xvtKl8U/foQr/Hge2Oa+pi mn2l0N1yEoB7xLFu2HtdTKA1ND+WzDfqJ+tb1GrX68djAvFp9MxgwBeYnTXnGgot xfRV3BXpmzcNNA== -----END CERTIFICATE-----Generated at Thu Apr 30 12:45:20 2026 by rpki-client