$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json) Hash identifier: CTgWnJuHLS6rhS00GA/uS41vvdTkHii09BV9B5miLaY= Subject key identifier: E5:EA:0F:BE:55:0C:1E:AA:9E:4D:28:61:24:0E:7E:1F:A7:55:7E:3B Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 019EEAEA1F7DD119A3BC5D97CB2A34F37923 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft Manifest number: 1036 Signing time: Sun 21 Jun 2026 16:01:12 +0000 Manifest this update: Sun 21 Jun 2026 16:01:12 +0000 Manifest next update: Mon 22 Jun 2026 16:01:12 +0000 Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: h5+d2NbGtxVAW9g4nxHNX3BnOltFY3Ub6ct/I7A4cuQ=) 2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=) 3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=) 4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=) 5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=) 6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=) 7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=) 8: Tvp9UTzcuphuhBetxzC7xnAANpk.roa (hash: XsVJrEsr9FE3t/s8zv/e1FiT9DrBI71L2xkk3P4iSPo=) 9: VqSk2F-cMltec__vt5GWmoZRbOs.asa (hash: DSTYqZUEAVPlYiwOcT/Aj9JtlDMu/1/7b3uouJr7QEg=) 10: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=) 11: kZL9IaKbIXWtSeLhiixRuouVuZw.roa (hash: +8djmGYeV8gJTDYzSfSw3gkTCCP8XO1MSarDOtJj7zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Jun 2026 16:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:ea:ea:1f:7d:d1:19:a3:bc:5d:97:cb:2a:34:f3:79:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Jun 21 16:01:12 2026 GMT Not After : Jun 22 16:01:12 2026 GMT Subject: CN=e5ea0fbe550c1eaa9e4d2861240e7e1fa7557e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c6:17:1c:33:ca:6e:f2:6e:8b:ad:cf:57:54: 0f:9e:98:b9:f3:08:c1:9c:35:ac:d0:ad:8b:76:c3: bc:8c:a4:1f:b9:25:c9:4b:3b:ec:1c:8d:40:b0:91: 16:c5:d8:b3:df:c9:dd:73:aa:3e:88:f0:55:b6:93: c6:26:d0:68:8f:59:57:70:8c:80:2e:6e:c1:26:83: 00:ce:a9:1c:ea:da:98:df:38:37:3c:e8:84:19:85: ba:32:ba:76:3c:ee:a0:f4:49:a7:af:d8:13:0d:23: e0:14:31:81:6c:07:32:b1:c6:42:51:1a:42:36:d2: 98:0f:71:70:43:9d:f4:da:ce:de:52:8e:14:97:67: 53:81:fb:11:4b:d4:09:48:83:37:b5:47:c3:1f:03: 50:a4:83:0d:5f:11:71:b9:82:ff:fc:6d:53:b7:ca: 77:46:87:6a:1d:00:58:3a:b9:75:1c:a4:e1:76:56: 5b:49:a7:86:f1:58:dc:04:42:1a:20:cd:62:f4:d0: 02:51:58:a8:82:7c:81:63:60:69:bd:35:4b:8f:9a: e3:14:02:ad:e9:65:a2:db:e4:a2:7f:43:38:cb:64: 12:40:74:24:88:67:9f:e9:3d:cd:e3:66:ca:4d:58: 6d:45:d0:63:24:d3:f6:2f:75:28:ce:b9:65:ae:1c: 12:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EA:0F:BE:55:0C:1E:AA:9E:4D:28:61:24:0E:7E:1F:A7:55:7E:3B X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2d:2f:1e:f5:d5:f0:75:31:1b:db:07:63:a0:23:df:de:cc: ca:61:2d:43:99:2b:cc:8b:e2:d7:23:66:c1:13:d8:22:db:8d: 32:3a:4e:85:5f:62:94:54:22:e5:6f:14:b9:c3:5b:26:03:10: 42:13:84:82:7d:ea:7f:47:68:47:81:11:59:b5:81:5a:7a:56: 54:b1:77:63:c3:23:d0:44:13:e8:e0:24:92:43:58:84:2e:e4: 9d:ea:f4:82:f9:a4:40:33:a3:f4:9b:ce:5c:ff:3f:0d:1e:71: ee:4d:ca:69:8f:42:ff:2c:86:52:06:37:0a:32:fb:c0:30:3f: a6:18:8e:08:32:bb:02:50:67:d1:a4:45:c5:8f:c7:0f:cf:e2: c5:63:ac:d8:32:e6:87:83:1c:36:40:4e:1f:9a:03:41:7c:a4: df:33:39:de:df:68:79:df:d5:dd:dc:ff:99:8f:6c:81:16:02: bf:88:cb:e3:76:b7:fd:31:31:74:83:15:98:3a:ac:46:7a:f5: 0b:12:45:8b:67:fb:e7:2b:97:4c:61:55:73:4e:a5:dd:fe:7e: f1:9f:83:33:94:ba:bb:d3:4c:99:3c:f0:cd:bf:f0:08:90:c1: 2a:da:52:13:48:f3:3a:67:13:97:cc:a8:68:d4:7d:e9:ed:0e: 39:dd:e0:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7q6h990RmjvF2Xyyo083kjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjYwNjIxMTYwMTEyWhcNMjYwNjIyMTYwMTEyWjAzMTEwLwYDVQQD EyhlNWVhMGZiZTU1MGMxZWFhOWU0ZDI4NjEyNDBlN2UxZmE3NTU3ZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8YXHDPKbvJui63PV1QPnpi58wjB nDWs0K2LdsO8jKQfuSXJSzvsHI1AsJEWxdiz38ndc6o+iPBVtpPGJtBoj1lXcIyA Lm7BJoMAzqkc6tqY3zg3POiEGYW6Mrp2PO6g9Emnr9gTDSPgFDGBbAcyscZCURpC NtKYD3FwQ5302s7eUo4Ul2dTgfsRS9QJSIM3tUfDHwNQpIMNXxFxuYL//G1Tt8p3 RodqHQBYOrl1HKThdlZbSaeG8VjcBEIaIM1i9NACUViognyBY2BpvTVLj5rjFAKt 6WWi2+Sif0M4y2QSQHQkiGef6T3N42bKTVhtRdBjJNP2L3UozrllrhwSuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXqD75VDB6qnk0oYSQOfh+nVX47MB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFS0vHvXV 8HUxG9sHY6Aj397MymEtQ5krzIvi1yNmwRPYItuNMjpOhV9ilFQi5W8UucNbJgMQ QhOEgn3qf0doR4ERWbWBWnpWVLF3Y8Mj0EQT6OAkkkNYhC7kner0gvmkQDOj9JvO XP8/DR5x7k3KaY9C/yyGUgY3CjL7wDA/phiOCDK7AlBn0aRFxY/HD8/ixWOs2DLm h4McNkBOH5oDQXyk3zM53t9oed/V3dz/mY9sgRYCv4jL43a3/TExdIMVmDqsRnr1 CxJFi2f75yuXTGFVc06l3f5+8Z+DM5S6u9NMmTzwzb/wCJDBKtpSE0jzOmcTl8yo aNR96e0OOd3gsw== -----END CERTIFICATE-----Generated at Sun Jun 21 23:37:32 2026 by rpki-client