$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft File: gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json) Hash identifier: ixqrLlbtckPUT6l3QaQffjjrJ3KtrSBQsbKRc2/xJBI= Subject key identifier: 7C:1F:D9:4F:46:79:60:9C:53:E4:FE:FA:70:70:1A:6E:7B:A4:FA:FA Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 019EB7335CE9408B74D883B466396DAFDFB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft Manifest number: 18BB Signing time: Thu 11 Jun 2026 15:00:57 +0000 Manifest this update: Thu 11 Jun 2026 15:00:57 +0000 Manifest next update: Fri 12 Jun 2026 15:00:57 +0000 Files and hashes: 1: 6Qgdh3WcW0KDG9I-xMVNXaKtYSc.roa (hash: n217wGPfHiNRTtY8nnF+yR0z3LLQ6JHk8tpE1xzv/GY=) 2: 9DOAu8axwGa0FsfS7ExMHAQ6nvo.roa (hash: ObCOCbyuoWr7L7d8fgGC8bt1I+db3t0fWPHAO97QZUk=) 3: Fu8KZHLDLt0PcTCFQ_1SdjKZ0uk.roa (hash: ZRYOD/e/KtPDQ1uvXRpnm6kp6bHpp7HGPUjvUzSoMsM=) 4: OXy61CYYS7m5af-dtIAY69Kwlqk.roa (hash: Z/MYY+qV7ae/nwNR1QInvXNX5dmXpalhAS3p9geOfjQ=) 5: VDK5rygMjyMJ5JHBL2WeMUvvQHw.roa (hash: HQ1V1J6+aXUqpfVBB8t9zNFEnzgS4StmEMgPyMgGXOM=) 6: XBEJ733ai7-gmnDdQh8pwux3l5s.roa (hash: Q0EvpOJnp7oR8ap1Xu0coNs93jICexWOPJZwwEl/yME=) 7: YCvvCpYmm06YfynuB8DZGPha7UI.roa (hash: x1btegkqRS0K+nzozPDPSPQmrg4H61HdadirIeIaPZg=) 8: YFx7AMGBmNvIEEF0rkpFhBQPEA0.roa (hash: BrjcqRRz5NSmt9i/9E/oQ4g12kumuE1CB1/Rk3lBLvM=) 9: YvH3BOpwaL-CGyOfGIvXFZ_rq90.roa (hash: jljW3Okw0fRDRddg9+W7KezyWEWJwTZtBw7+0pm4p8c=) 10: dM9zh5E81r9UWVSK8u7mzgQlyvU.roa (hash: aq1TqgSAbBjOuDN0o6DtvSCaK7Bm/i/PBbH93DWX1FE=) 11: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: dhdGaY1EjYEeZ/WOIzjKwZyzEB4G5C+l6vej2ffej3w=) 12: wYQUPYTD0bYQdwZYQkAgn3uAbHw.roa (hash: DPOkDtJzUAKeVM1PYYwP4Xv66zWe8nDRva28kFk1TDQ=) 13: z2VeS6Cr-FUTndI9erFU_xgXeQc.roa (hash: VfSkmN7U5VY7VVnLMw0WuSWj2FuFIlacIGmckDk9o2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:33:5c:e9:40:8b:74:d8:83:b4:66:39:6d:af:df:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Jun 11 15:00:57 2026 GMT Not After : Jun 12 15:00:57 2026 GMT Subject: CN=7c1fd94f4679609c53e4fefa70701a6e7ba4fafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:0e:b0:07:12:f0:9a:a9:a6:14:73:ea:f3: 0c:e3:8a:5e:9b:65:3b:a2:ab:6f:26:15:52:21:5c: db:61:6a:5e:1e:dc:e8:f0:5d:ff:b0:d4:19:21:da: ef:ad:b7:74:c0:c8:c8:7d:3d:18:b3:af:50:a3:c0: f2:5d:1b:c7:9a:9d:19:05:ee:0d:06:44:18:20:c8: 74:8f:d3:d9:82:31:5e:71:10:1e:6d:d7:fd:0e:56: 79:77:5f:ed:44:94:a3:5f:3a:91:ce:66:bb:a4:d3: 7f:47:e4:0f:d6:a5:1e:49:ff:8b:e2:cb:4a:c5:f7: 0b:48:42:d1:10:46:40:ad:eb:94:70:40:ca:89:01: 04:9b:70:31:06:be:11:c4:d6:5f:b3:36:01:f9:c2: f0:34:0e:6a:ca:2d:88:83:6c:3f:8a:36:b3:67:f6: aa:a1:5a:b3:2c:f2:4f:11:26:7f:63:2c:7b:bf:d9: 54:5f:28:4b:5a:19:10:be:d6:7c:ce:fc:d5:d6:6f: 9c:00:bb:25:fb:66:58:3d:0d:d1:5e:c8:3f:2a:a4: d6:79:19:0f:7c:0e:60:b8:20:aa:ed:19:19:dc:cf: 0d:97:ef:3d:ff:61:70:d8:e3:69:9d:ff:71:44:16: 84:5d:d9:3e:a6:98:eb:f6:76:d0:3b:c6:4c:7e:33: c3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1F:D9:4F:46:79:60:9C:53:E4:FE:FA:70:70:1A:6E:7B:A4:FA:FA X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:00:ae:13:24:18:97:95:2c:aa:43:4b:49:8e:cb:b1:c0:88: e4:52:db:72:2b:71:ba:71:40:e1:27:6c:f1:e5:68:07:4f:0e: f3:a2:bb:dc:77:5d:2d:90:60:03:95:81:e3:3e:5e:74:26:1f: 3a:3d:4f:90:af:f4:28:5c:d6:60:37:8d:1d:74:73:86:f0:4b: 68:b0:74:f1:de:a7:d4:1f:a3:e3:3e:d1:b6:bf:a7:fb:e4:00: a1:87:e6:81:7a:00:ba:64:c4:06:fa:84:d6:8c:3b:b4:66:d8: 1c:d6:36:a6:7e:31:80:15:5e:96:a5:87:a7:c9:87:09:7a:b6: 0f:66:76:93:d9:fa:0a:b1:5f:66:b2:37:b6:5a:58:1f:c0:45: b3:de:2a:54:57:3e:40:d5:8b:de:67:dc:44:c9:9b:81:b5:89: 95:89:df:99:89:4d:a6:d8:39:fe:1b:13:4f:11:a6:a3:c7:e2: bc:93:08:ae:bd:92:e2:62:17:fe:1a:c1:73:cb:a8:aa:91:0a: a0:10:4f:63:bd:eb:ae:2b:e2:d3:e3:41:83:15:ae:74:a5:03: b7:f2:59:83:fb:f8:28:12:db:63:53:d1:f5:bd:54:71:52:28: 51:ca:d5:a7:ac:41:27:b4:51:3a:37:77:c7:4a:4e:3f:0d:68: a3:80:19:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ63M1zpQIt02IO0Zjltr9+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjYwNjExMTUwMDU3WhcNMjYwNjEyMTUwMDU3WjAzMTEwLwYDVQQD Eyg3YzFmZDk0ZjQ2Nzk2MDljNTNlNGZlZmE3MDcwMWE2ZTdiYTRmYWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/wOsAcS8JqpphRz6vMM44pem2U7 oqtvJhVSIVzbYWpeHtzo8F3/sNQZIdrvrbd0wMjIfT0Ys69Qo8DyXRvHmp0ZBe4N BkQYIMh0j9PZgjFecRAebdf9DlZ5d1/tRJSjXzqRzma7pNN/R+QP1qUeSf+L4stK xfcLSELREEZAreuUcEDKiQEEm3AxBr4RxNZfszYB+cLwNA5qyi2Ig2w/ijazZ/aq oVqzLPJPESZ/Yyx7v9lUXyhLWhkQvtZ8zvzV1m+cALsl+2ZYPQ3RXsg/KqTWeRkP fA5guCCq7RkZ3M8Nl+89/2Fw2ONpnf9xRBaEXdk+ppjr9nbQO8ZMfjPDoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwf2U9GeWCcU+T++nBwGm57pPr6MB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhACuEyQY l5UsqkNLSY7LscCI5FLbcitxunFA4Sds8eVoB08O86K73HddLZBgA5WB4z5edCYf Oj1PkK/0KFzWYDeNHXRzhvBLaLB08d6n1B+j4z7Rtr+n++QAoYfmgXoAumTEBvqE 1ow7tGbYHNY2pn4xgBVelqWHp8mHCXq2D2Z2k9n6CrFfZrI3tlpYH8BFs94qVFc+ QNWL3mfcRMmbgbWJlYnfmYlNptg5/hsTTxGmo8fivJMIrr2S4mIX/hrBc8uoqpEK oBBPY73rrivi0+NBgxWudKUDt/JZg/v4KBLbY1PR9b1UcVIoUcrVp6xBJ7RROjd3 x0pOPw1oo4AZWg== -----END CERTIFICATE-----Generated at Thu Jun 11 23:04:53 2026 by rpki-client