$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft File: gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json) Hash identifier: 8jT3VJsiMfIfvmlHDJo3HnIp28NY5gyYnRG0d/mwsV8= Subject key identifier: F9:F4:73:31:2C:80:00:DF:B9:62:3E:3C:84:7E:04:E2:2F:95:22:C3 Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 019DCE2BE8A7BA14C0E892784130E1486590 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft Manifest number: 1842 Signing time: Mon 27 Apr 2026 09:01:17 +0000 Manifest this update: Mon 27 Apr 2026 09:01:17 +0000 Manifest next update: Tue 28 Apr 2026 09:01:17 +0000 Files and hashes: 1: 6Qgdh3WcW0KDG9I-xMVNXaKtYSc.roa (hash: n217wGPfHiNRTtY8nnF+yR0z3LLQ6JHk8tpE1xzv/GY=) 2: 9DOAu8axwGa0FsfS7ExMHAQ6nvo.roa (hash: ObCOCbyuoWr7L7d8fgGC8bt1I+db3t0fWPHAO97QZUk=) 3: Fu8KZHLDLt0PcTCFQ_1SdjKZ0uk.roa (hash: ZRYOD/e/KtPDQ1uvXRpnm6kp6bHpp7HGPUjvUzSoMsM=) 4: OXy61CYYS7m5af-dtIAY69Kwlqk.roa (hash: Z/MYY+qV7ae/nwNR1QInvXNX5dmXpalhAS3p9geOfjQ=) 5: UyEyoxYffVHMgek2KWRxc9EkWzI.roa (hash: b9ia7zBPnauhiAFfLtEGaadCmnS7C4S6xG4WG0fb70o=) 6: VDK5rygMjyMJ5JHBL2WeMUvvQHw.roa (hash: HQ1V1J6+aXUqpfVBB8t9zNFEnzgS4StmEMgPyMgGXOM=) 7: XBEJ733ai7-gmnDdQh8pwux3l5s.roa (hash: Q0EvpOJnp7oR8ap1Xu0coNs93jICexWOPJZwwEl/yME=) 8: YFx7AMGBmNvIEEF0rkpFhBQPEA0.roa (hash: BrjcqRRz5NSmt9i/9E/oQ4g12kumuE1CB1/Rk3lBLvM=) 9: dM9zh5E81r9UWVSK8u7mzgQlyvU.roa (hash: aq1TqgSAbBjOuDN0o6DtvSCaK7Bm/i/PBbH93DWX1FE=) 10: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: 0vwk9iplhDSwT2zSwYG6pvcOlC1HbQW7KN/TSn6UgsY=) 11: wYQUPYTD0bYQdwZYQkAgn3uAbHw.roa (hash: DPOkDtJzUAKeVM1PYYwP4Xv66zWe8nDRva28kFk1TDQ=) 12: z2VeS6Cr-FUTndI9erFU_xgXeQc.roa (hash: VfSkmN7U5VY7VVnLMw0WuSWj2FuFIlacIGmckDk9o2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:2b:e8:a7:ba:14:c0:e8:92:78:41:30:e1:48:65:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Apr 27 09:01:17 2026 GMT Not After : Apr 28 09:01:17 2026 GMT Subject: CN=f9f473312c8000dfb9623e3c847e04e22f9522c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:60:58:fe:3d:70:02:1a:e2:0c:70:ba:27:3f: 3e:70:7e:cd:4f:fc:0f:3f:4d:10:c1:35:1d:7d:4a: eb:e2:25:80:8a:f7:a4:a7:d3:9a:f6:82:aa:90:55: c1:f6:9c:2c:10:04:ed:4a:7d:7a:bb:e1:05:ac:73: 89:9b:63:c6:a6:b6:e9:63:a2:72:36:02:49:ff:71: 14:13:88:4f:24:7c:5c:2d:05:99:62:cf:ce:71:cd: 18:1a:86:f0:a3:f7:2e:31:0c:39:a2:62:63:a4:38: 13:7c:46:00:a5:c0:12:91:6d:e0:77:14:75:bd:73: 6b:43:93:05:4b:05:18:2a:dc:3d:3a:14:b3:a9:d3: 1b:02:50:18:eb:50:58:e1:de:6b:ec:bf:51:cd:45: 14:6f:30:d3:6b:c5:84:39:f1:a1:d4:ab:d4:45:d1: 14:92:37:dc:e8:e4:01:17:91:53:3b:13:cb:62:71: ee:15:9b:74:8e:15:81:a7:76:5e:d3:f0:a6:9c:20: 3e:5b:5b:fb:c2:f1:40:19:c0:61:62:bd:ce:b1:37: f6:7d:0e:5b:bd:0e:92:74:67:00:ae:da:05:fc:77: 20:25:bd:46:fb:60:e8:e1:45:a0:97:5e:3d:3a:23: 13:31:43:2c:a5:72:9e:18:cc:70:c5:25:0e:9f:d2: f6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F4:73:31:2C:80:00:DF:B9:62:3E:3C:84:7E:04:E2:2F:95:22:C3 X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:6d:46:bb:cb:7c:b1:b3:90:c7:48:5f:b0:de:e8:3b:d8:5b: 10:57:f4:80:13:15:34:ed:b8:da:59:c8:91:07:90:48:dc:41: dc:b3:50:a8:95:65:aa:ea:71:a4:a4:11:02:f4:4c:0d:d7:b6: a0:41:4b:cc:3d:78:83:40:4c:97:0e:6a:15:70:60:dc:b7:61: 59:89:ec:46:05:93:5f:ea:cb:6f:59:b9:90:5c:3c:10:a2:25: 4a:52:d6:f9:72:b5:3e:24:4a:3e:c7:65:01:95:c8:63:ce:a9: b7:09:a3:a3:72:b4:75:12:a2:91:0b:6f:7f:de:2b:f0:60:78: 42:6c:0a:bd:12:43:66:5b:9e:3a:4c:aa:9f:9a:7f:c8:9a:aa: 5c:6d:2c:a9:13:58:53:7e:ab:4a:80:29:08:10:ea:b1:ce:1d: 35:5b:81:2c:bf:6c:98:ea:67:c1:b6:fb:f9:f0:d9:5a:4b:22: 4b:a9:3d:94:f0:17:2d:8a:fe:74:3d:9d:bb:f2:ae:d0:ba:eb: 9e:4a:71:c9:eb:22:74:10:41:29:4a:1b:7c:8f:3a:fb:27:65: 5c:2f:d9:26:e1:4e:7c:0b:71:e4:37:89:95:ea:56:09:17:c1: 7e:59:5a:11:3c:59:c9:ed:ef:eb:27:67:d5:76:d0:c6:03:24: ec:6e:cb:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OK+inuhTA6JJ4QTDhSGWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjYwNDI3MDkwMTE3WhcNMjYwNDI4MDkwMTE3WjAzMTEwLwYDVQQD EyhmOWY0NzMzMTJjODAwMGRmYjk2MjNlM2M4NDdlMDRlMjJmOTUyMmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2BY/j1wAhriDHC6Jz8+cH7NT/wP P00QwTUdfUrr4iWAivekp9Oa9oKqkFXB9pwsEATtSn16u+EFrHOJm2PGprbpY6Jy NgJJ/3EUE4hPJHxcLQWZYs/Occ0YGobwo/cuMQw5omJjpDgTfEYApcASkW3gdxR1 vXNrQ5MFSwUYKtw9OhSzqdMbAlAY61BY4d5r7L9RzUUUbzDTa8WEOfGh1KvURdEU kjfc6OQBF5FTOxPLYnHuFZt0jhWBp3Ze0/CmnCA+W1v7wvFAGcBhYr3OsTf2fQ5b vQ6SdGcArtoF/HcgJb1G+2Do4UWgl149OiMTMUMspXKeGMxwxSUOn9L2rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPn0czEsgADfuWI+PIR+BOIvlSLDMB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUm1Gu8t8 sbOQx0hfsN7oO9hbEFf0gBMVNO242lnIkQeQSNxB3LNQqJVlqupxpKQRAvRMDde2 oEFLzD14g0BMlw5qFXBg3LdhWYnsRgWTX+rLb1m5kFw8EKIlSlLW+XK1PiRKPsdl AZXIY86ptwmjo3K0dRKikQtvf94r8GB4QmwKvRJDZlueOkyqn5p/yJqqXG0sqRNY U36rSoApCBDqsc4dNVuBLL9smOpnwbb7+fDZWksiS6k9lPAXLYr+dD2du/Ku0Lrr nkpxyesidBBBKUobfI86+ydlXC/ZJuFOfAtx5DeJlepWCRfBfllaETxZye3v6ydn 1XbQxgMk7G7LbQ== -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:34 2026 by rpki-client