$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft File: gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json) Hash identifier: u7jkoIAFXPUp1zLmhebBjtTb2Ilt1Qa2nLjIOrc5kvk= Subject key identifier: DA:96:A8:10:80:ED:FD:51:50:3A:60:2C:A4:6F:01:90:A7:90:6E:18 Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 019CD9563712236B59A75227D8E4B7CE6AAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft Manifest number: 17C2 Signing time: Tue 10 Mar 2026 20:00:31 +0000 Manifest this update: Tue 10 Mar 2026 20:00:31 +0000 Manifest next update: Wed 11 Mar 2026 20:00:31 +0000 Files and hashes: 1: 6Qgdh3WcW0KDG9I-xMVNXaKtYSc.roa (hash: n217wGPfHiNRTtY8nnF+yR0z3LLQ6JHk8tpE1xzv/GY=) 2: 9DOAu8axwGa0FsfS7ExMHAQ6nvo.roa (hash: ObCOCbyuoWr7L7d8fgGC8bt1I+db3t0fWPHAO97QZUk=) 3: Fu8KZHLDLt0PcTCFQ_1SdjKZ0uk.roa (hash: ZRYOD/e/KtPDQ1uvXRpnm6kp6bHpp7HGPUjvUzSoMsM=) 4: UyEyoxYffVHMgek2KWRxc9EkWzI.roa (hash: b9ia7zBPnauhiAFfLtEGaadCmnS7C4S6xG4WG0fb70o=) 5: VDK5rygMjyMJ5JHBL2WeMUvvQHw.roa (hash: HQ1V1J6+aXUqpfVBB8t9zNFEnzgS4StmEMgPyMgGXOM=) 6: XBEJ733ai7-gmnDdQh8pwux3l5s.roa (hash: Q0EvpOJnp7oR8ap1Xu0coNs93jICexWOPJZwwEl/yME=) 7: YFx7AMGBmNvIEEF0rkpFhBQPEA0.roa (hash: BrjcqRRz5NSmt9i/9E/oQ4g12kumuE1CB1/Rk3lBLvM=) 8: agNWFJ6lYT9cYM9QENETvOLZPI0.roa (hash: F2addx2SByXtigLyYiMUDmpNtycaXyju8G/xXyoPRII=) 9: dM9zh5E81r9UWVSK8u7mzgQlyvU.roa (hash: aq1TqgSAbBjOuDN0o6DtvSCaK7Bm/i/PBbH93DWX1FE=) 10: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: Aph8ODi7bW7kBOm9+pNIXmMnX1wLXGy9P187dohcZhM=) 11: wYQUPYTD0bYQdwZYQkAgn3uAbHw.roa (hash: DPOkDtJzUAKeVM1PYYwP4Xv66zWe8nDRva28kFk1TDQ=) 12: z2VeS6Cr-FUTndI9erFU_xgXeQc.roa (hash: VfSkmN7U5VY7VVnLMw0WuSWj2FuFIlacIGmckDk9o2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Mar 2026 15:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:d9:56:37:12:23:6b:59:a7:52:27:d8:e4:b7:ce:6a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Mar 10 20:00:31 2026 GMT Not After : Mar 11 20:00:31 2026 GMT Subject: CN=da96a81080edfd51503a602ca46f0190a7906e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:56:05:64:8a:be:fe:c5:97:53:bf:2c:c0:5a: 30:e3:43:8d:64:94:fb:02:0a:36:49:e5:9b:6f:3d: 05:ed:96:2a:3c:28:e5:6b:a7:49:d1:3d:df:9b:3f: 2c:40:47:d1:f5:a6:5d:23:c6:fd:72:cc:6a:7a:ca: 44:09:34:46:84:a5:37:fb:45:98:82:ec:d6:34:59: c0:65:40:30:c8:d8:36:62:e0:26:1a:4e:95:a2:31: fb:2e:e4:c3:18:0d:63:76:2b:7e:9e:bc:1e:34:86: e0:29:b8:1b:2e:65:e3:64:ef:b6:8f:cc:52:10:58: d5:f1:3d:8d:3d:69:b8:c9:75:fb:d8:90:01:ee:b6: 43:22:0d:f1:19:13:cb:8e:23:77:dc:9e:17:e2:37: a1:59:ce:46:d5:6a:d0:ae:de:ba:be:9a:41:f6:6f: d5:cc:c0:2a:4d:b3:c8:79:e6:7d:aa:51:5b:c4:8a: 35:9b:7a:72:20:65:6e:da:34:48:3a:7d:fc:e1:97: bc:30:55:48:1c:1a:47:ef:1d:9c:d4:7f:7a:e1:12: e2:b1:98:04:50:74:30:94:e1:44:e8:05:93:b4:97: 8b:7f:86:76:59:c3:f4:2d:60:d2:e8:e7:54:0e:c4: 39:96:02:01:d4:18:3a:ba:e8:8d:da:7e:66:bb:80: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:96:A8:10:80:ED:FD:51:50:3A:60:2C:A4:6F:01:90:A7:90:6E:18 X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b8:48:28:8d:7a:e3:d5:66:dc:a8:a7:44:6a:3a:24:b6:4a: 96:9d:83:25:4f:0e:7c:57:15:f9:aa:18:3d:ad:09:84:9c:40: 30:55:1c:eb:28:4b:a3:bb:bf:c6:bb:cf:ec:ab:9f:d9:51:c3: 5e:e8:22:f9:5d:d2:92:46:63:eb:95:b1:eb:e9:cb:a1:b0:47: 7b:47:56:af:57:4b:fe:32:c7:52:3e:6b:6a:60:51:8a:07:b5: ce:6e:cb:58:a1:6b:d7:8c:cd:bd:e9:f3:fe:ff:63:7a:ff:b9: 3e:47:30:e8:5f:24:90:4c:25:a8:e8:35:43:cf:f0:a2:af:b6: d0:6f:54:d4:87:54:9a:3c:b8:12:b8:e9:80:b5:01:7f:88:3b: 65:8d:99:61:fd:b1:55:3f:37:29:27:86:b8:a4:01:ad:57:0d: af:21:18:a8:15:f7:a5:ec:7f:e9:8e:81:fe:03:68:e0:b2:e3: d3:3c:ca:dc:ce:a2:4a:e9:96:e7:4f:c9:3d:0c:d1:b5:6d:80: b7:df:39:2f:20:c8:70:35:dc:0c:44:a0:fb:ba:fd:95:7e:14: f1:78:44:c7:e5:93:4f:60:67:67:bc:a4:4f:66:24:e8:58:5f: d3:a0:5c:a1:a1:49:99:a0:d1:6a:d9:d6:23:eb:d0:9d:85:e7: d7:c7:61:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzZVjcSI2tZp1In2OS3zmqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjYwMzEwMjAwMDMxWhcNMjYwMzExMjAwMDMxWjAzMTEwLwYDVQQD EyhkYTk2YTgxMDgwZWRmZDUxNTAzYTYwMmNhNDZmMDE5MGE3OTA2ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lYFZIq+/sWXU78swFow40ONZJT7 Ago2SeWbbz0F7ZYqPCjla6dJ0T3fmz8sQEfR9aZdI8b9csxqespECTRGhKU3+0WY guzWNFnAZUAwyNg2YuAmGk6VojH7LuTDGA1jdit+nrweNIbgKbgbLmXjZO+2j8xS EFjV8T2NPWm4yXX72JAB7rZDIg3xGRPLjiN33J4X4jehWc5G1WrQrt66vppB9m/V zMAqTbPIeeZ9qlFbxIo1m3pyIGVu2jRIOn384Ze8MFVIHBpH7x2c1H964RLisZgE UHQwlOFE6AWTtJeLf4Z2WcP0LWDS6OdUDsQ5lgIB1Bg6uuiN2n5mu4DLkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqWqBCA7f1RUDpgLKRvAZCnkG4YMB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrhIKI16 49Vm3KinRGo6JLZKlp2DJU8OfFcV+aoYPa0JhJxAMFUc6yhLo7u/xrvP7Kuf2VHD Xugi+V3SkkZj65Wx6+nLobBHe0dWr1dL/jLHUj5ramBRige1zm7LWKFr14zNvenz /v9jev+5Pkcw6F8kkEwlqOg1Q8/woq+20G9U1IdUmjy4ErjpgLUBf4g7ZY2ZYf2x VT83KSeGuKQBrVcNryEYqBX3pex/6Y6B/gNo4LLj0zzK3M6iSumW50/JPQzRtW2A t985LyDIcDXcDESg+7r9lX4U8XhEx+WTT2BnZ7ykT2Yk6Fhf06BcoaFJmaDRatnW I+vQnYXn18dhvg== -----END CERTIFICATE-----Generated at Wed Mar 11 00:43:33 2026 by rpki-client