$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: H9Np7hppOhnX0amT5Mglx5agwtP2JMrDwbiV8anBTMg= Subject key identifier: E2:C2:D5:06:DD:BE:FE:8C:22:56:5A:F1:9E:5A:DF:28:02:87:5A:1E Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019D375265BAF0DF1D20FC12350481647104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 18A0 Signing time: Sun 29 Mar 2026 02:00:39 +0000 Manifest this update: Sun 29 Mar 2026 02:00:39 +0000 Manifest next update: Mon 30 Mar 2026 02:00:39 +0000 Files and hashes: 1: 1GSwP0TJJ65wZd3Pvgc8v_kBblo.roa (hash: a1H7+zWC5aLIH4mpt/TNCBcUHA1NWPW383gUe+s7/0o=) 2: 7-5FXkLEwhC1Xxo7xjKu4F60EXI.roa (hash: ucTykSSMA4mgLZSWsX8h0H8ANki2lK6au/mQg7PDaVg=) 3: SZuulJfBXrOx7TVvq98RfpuWX20.roa (hash: JF3u4qfuygewpcEyq0MIU/fiok0/dp1CnGO7/QRkKCw=) 4: dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa (hash: 4Z63pDrERLa8AbCyht1J3U8XYsimBFftB4yxdfy6SeU=) 5: duJlSdUfuEBVAcmWXk5MpTvh7ig.roa (hash: GXDP1gVMBP52IUaX8G6mObb5IGesyXrYT/V3KEUXfjY=) 6: ea4uOAYmH3F8T77vuYMudZrhuRA.roa (hash: EEiZnb2JPsq/yqrG0Q7hp0FOlD5s4bXDR5+0nIVOWD4=) 7: ffyLyRVME5oJGVerDANtY5IMHo8.roa (hash: KCiQSpQfQbYAD6/iMj3Iuvok4R8kKREKJx6rRxehp2s=) 8: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: FzGBbdssZwMZRVoACP4DoMlRjODDuQKQHyxczQiulfA=) 9: nNl6NGyF3T8vJ8AAtIkn4-0X5T8.roa (hash: dpRxbGigIJULOJ37FZ/ZTlPFJRhup86+sQ8jgaZzcbo=) 10: tgKyxQJIrIZGZt0JdqobdwHEFBU.roa (hash: R6TZ097sd703JL66PHi/DAt6butDAQ5ZZOyHFsfEnNE=) 11: v48B8D2cx6Vfn0QWuxNAWmV0PcY.roa (hash: nZy5DmP+kA6doyrWI6VdmNLG6LOJw4xuX2hBgEO7v+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 02:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:37:52:65:ba:f0:df:1d:20:fc:12:35:04:81:64:71:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Mar 29 02:00:39 2026 GMT Not After : Mar 30 02:00:39 2026 GMT Subject: CN=e2c2d506ddbefe8c22565af19e5adf2802875a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:32:ed:09:4a:5f:24:63:be:fd:bd:9e:bd:8e: 04:dc:4f:8b:17:75:53:94:be:0f:2d:f3:75:dd:16: ad:80:9c:ad:d2:39:93:9e:63:97:69:bf:2f:bf:df: eb:13:d1:93:ba:a0:44:31:91:4b:d7:0f:f7:b4:97: 09:32:d2:d5:2a:6b:7d:f0:81:7a:97:7a:40:d7:e7: 54:3a:09:83:28:86:89:46:dc:1a:dd:4d:a7:cb:9f: 9c:f2:5f:a5:4c:7e:36:41:62:64:23:42:bf:ff:53: 89:db:02:96:3c:80:b7:ba:ed:3b:6a:b6:63:66:98: 60:db:cb:3a:1a:83:f9:03:06:80:36:6e:47:99:94: ae:ca:8f:be:d6:80:80:99:01:8e:46:20:e6:56:92: 1b:6d:c8:85:3b:aa:e6:db:b4:3c:2f:95:5b:44:35: ec:b2:f4:30:bf:5d:f5:e6:9a:62:cd:b1:d0:fe:9d: 17:59:a0:23:39:6d:4a:7a:e5:ca:08:f1:f6:5b:c1: a4:e5:31:7c:d3:33:56:cc:75:39:f4:76:b2:da:f3: 30:47:4c:e6:f6:04:05:cf:e9:7f:51:2a:bf:e6:65: a9:a5:6d:26:0e:3b:96:c3:2c:75:f5:0e:32:42:9a: 1b:e0:20:a9:52:28:df:ef:27:70:29:0b:6f:24:c5: 4f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C2:D5:06:DD:BE:FE:8C:22:56:5A:F1:9E:5A:DF:28:02:87:5A:1E X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:1a:1f:75:3e:a1:ca:e9:f4:df:df:5c:a1:bc:89:c5:20:a0: 0d:ca:8a:23:82:e2:ca:bd:6d:07:f8:b9:6f:fa:df:59:fe:5a: 1a:85:45:dc:4d:a2:f6:54:28:f2:fc:60:15:04:11:10:df:68: 65:f0:80:1e:53:01:15:bb:83:6b:9c:65:4b:44:bc:91:4c:8c: cf:ac:0a:4d:b0:df:62:91:a1:19:a5:13:74:de:1d:00:eb:db: b4:c7:9b:44:38:b3:c8:19:4a:bb:42:47:5d:1d:f1:c7:82:ed: 81:f1:7d:b6:d5:6a:34:e4:36:a3:e9:37:94:5a:37:62:1f:be: 4e:50:71:c1:e1:7b:21:25:c0:5b:36:77:c8:e3:a5:ea:29:0e: 8f:75:88:e0:4a:10:69:76:04:98:11:3b:1d:b7:63:5d:36:7a: ec:58:9d:61:99:57:ba:1d:e4:6e:8a:ea:db:d4:18:02:ff:86: 6d:3c:4a:ee:31:6c:b3:b7:72:0c:ae:86:dd:ad:7e:05:d5:75: 22:9f:9e:e1:4a:ac:ab:d8:ed:34:62:43:e2:d2:8d:e6:2a:09: 7b:a6:be:9a:c2:d6:b9:17:ca:4b:21:3c:0f:c4:8b:18:d4:5f: 3c:85:ce:1b:1e:8a:ca:30:37:6e:33:4b:8b:bf:e9:f5:ec:42: af:6f:b1:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ03UmW68N8dIPwSNQSBZHEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwMzI5MDIwMDM5WhcNMjYwMzMwMDIwMDM5WjAzMTEwLwYDVQQD EyhlMmMyZDUwNmRkYmVmZThjMjI1NjVhZjE5ZTVhZGYyODAyODc1YTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzLtCUpfJGO+/b2evY4E3E+LF3VT lL4PLfN13RatgJyt0jmTnmOXab8vv9/rE9GTuqBEMZFL1w/3tJcJMtLVKmt98IF6 l3pA1+dUOgmDKIaJRtwa3U2ny5+c8l+lTH42QWJkI0K//1OJ2wKWPIC3uu07arZj Zphg28s6GoP5AwaANm5HmZSuyo++1oCAmQGORiDmVpIbbciFO6rm27Q8L5VbRDXs svQwv1315ppizbHQ/p0XWaAjOW1KeuXKCPH2W8Gk5TF80zNWzHU59Hay2vMwR0zm 9gQFz+l/USq/5mWppW0mDjuWwyx19Q4yQpob4CCpUijf7ydwKQtvJMVPjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLC1Qbdvv6MIlZa8Z5a3ygCh1oeMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBofdT6h yun0399cobyJxSCgDcqKI4Liyr1tB/i5b/rfWf5aGoVF3E2i9lQo8vxgFQQREN9o ZfCAHlMBFbuDa5xlS0S8kUyMz6wKTbDfYpGhGaUTdN4dAOvbtMebRDizyBlKu0JH XR3xx4LtgfF9ttVqNOQ2o+k3lFo3Yh++TlBxweF7ISXAWzZ3yOOl6ikOj3WI4EoQ aXYEmBE7HbdjXTZ67FidYZlXuh3kborq29QYAv+GbTxK7jFss7dyDK6G3a1+BdV1 Ip+e4Uqsq9jtNGJD4tKN5ioJe6a+msLWuRfKSyE8D8SLGNRfPIXOGx6KyjA3bjNL i7/p9exCr2+xeQ== -----END CERTIFICATE-----Generated at Sun Mar 29 12:43:20 2026 by rpki-client