$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft File: r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json) Hash identifier: WfZ1TWASGFtUnZ1LA4EcpKQ8+ZVcbmNt6l/71NEFzQU= Subject key identifier: D8:2B:23:AA:2B:36:CD:06:6B:F2:80:43:D7:4E:C7:A1:11:DA:0D:4D Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8 Certificate serial: 019DCF070CF60A7096AD55A1DBDBCE41D8C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft Manifest number: 15D9 Signing time: Mon 27 Apr 2026 13:00:38 +0000 Manifest this update: Mon 27 Apr 2026 13:00:38 +0000 Manifest next update: Tue 28 Apr 2026 13:00:38 +0000 Files and hashes: 1: 3Adh7KtHVqwqgZmtyDo8Ej6pQKM.roa (hash: wUQuxvOgY7UYkYHJtGk8LL5BCyN5FZHPBwwIxJwHIq4=) 2: 5utcJHsfBrjTs_UOTB5AJlV11DM.roa (hash: p9JiIAKdi3ntcnSsoekfJmDvvRvUwFnZwfz4Ft5kAjc=) 3: 9QLofWBXVC7R3PGVThvNOVE9b90.roa (hash: 8q2PTehDaT3hGi/AO3gfkCERrwpDuk8iVLdkhe1JooQ=) 4: InOi1f3veo98pW4OGTBEIEXKEZE.roa (hash: Xjh3PenXVS46SZGt58mV2dcaP4QPqA5YhhKDh/W7EIA=) 5: J41thO8T8h3ECLAtFbEa63FQ07k.roa (hash: 7SAVb1xYsKsQiyuIDRpxE3uEw5S/EAv/z+BlKDTZqQY=) 6: ceEv1t749F4uxJkZjXzVLrcY0W4.roa (hash: CPEu9mzzQjkaDfnSXyi14ADFRqiihJHheO6fccq1E38=) 7: leUezOsMyq96-d8mJ8nIjjD7JvA.roa (hash: g5CFKJHlpq/pgKR++1ZaNjuNwVvKoATKegh0uW1A5JI=) 8: ohU1cnvjNfxWuepVkjRa06OJfuU.roa (hash: 30e5bsuiYaaP9kH7j7NGuQ8fKIB7hM+APPzNsaPzyUo=) 9: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: xeHu06eu1DpTPxHeCqDWNtbcf2lxPDLGoDpodAO6+9o=) 10: uoFFO71WiREgY844RuKE1yCVJAI.roa (hash: qctNyKkUd5I2cpGY+ypr0Dn6bPJwy7oeCGkLPyDoqRs=) 11: xwd7sohdrx5YU3LTJIWIxQ7gJnc.roa (hash: 0vwAzftKk4tcR77oFqQ7h1CZN6cHODVRJzedfJTmcvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cf:07:0c:f6:0a:70:96:ad:55:a1:db:db:ce:41:d8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8 Validity Not Before: Apr 27 13:00:38 2026 GMT Not After : Apr 28 13:00:38 2026 GMT Subject: CN=d82b23aa2b36cd066bf28043d74ec7a111da0d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a3:a3:42:1c:f6:35:ba:e5:96:72:c7:fb:57: 9b:37:88:4b:f6:f8:59:9b:c9:bb:dc:26:31:8b:34: cf:33:9b:4c:ac:ea:f3:41:0b:1c:83:21:13:bc:04: 54:3f:46:45:8a:63:db:a8:5f:2d:90:6b:a5:c2:cf: e3:7a:e4:21:2b:8d:12:0d:81:db:5f:0c:6a:3d:db: f0:a8:3c:30:7f:ed:98:09:e9:a2:40:25:7c:7d:1d: 0d:5a:4c:44:36:4b:ae:d2:bc:c8:ef:8c:10:f2:44: 2e:ce:c6:e4:73:83:bf:0d:c1:1e:d7:3b:68:ba:47: af:70:46:44:82:ec:bf:91:6d:c9:5b:0d:fa:08:fc: f6:25:69:f0:fc:22:8a:66:ce:65:1f:cc:22:1e:83: ab:91:5d:94:7f:62:cb:06:27:6d:40:88:67:52:99: 38:2a:4b:95:40:3f:03:44:aa:81:98:43:e6:48:ca: 5e:2f:5f:51:a9:21:00:c2:f7:11:d9:98:f8:48:b0: bc:49:6d:6a:ca:c5:c4:67:07:51:6f:27:e9:6f:46: 41:79:68:c7:5c:d4:4d:4a:a5:e5:29:f1:49:07:a4: e1:f1:90:a1:09:bf:42:83:66:c2:60:e0:29:60:d1: 1b:7f:16:ae:e4:2c:13:53:67:dd:e0:0d:b5:58:df: 46:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2B:23:AA:2B:36:CD:06:6B:F2:80:43:D7:4E:C7:A1:11:DA:0D:4D X509v3 Authority Key Identifier: keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:53:4e:fe:68:44:97:ba:da:ee:07:da:76:fe:67:15:01:d7: bf:fb:3e:e3:f8:34:32:0d:a4:9e:df:ed:73:4b:7c:44:94:42: bf:c6:2f:6e:52:29:0e:b0:4b:a4:3f:ad:30:38:fe:7a:31:ec: 4c:e2:21:5a:25:de:75:3e:8b:5c:a8:ac:81:18:5e:cc:b6:16: 30:e7:23:e9:d6:19:5d:9c:6f:ab:08:d6:83:ab:5a:7f:e3:4a: b7:f2:93:5a:c5:3b:48:10:04:16:60:0b:9f:97:34:81:d4:57: 51:1b:77:3b:ef:ba:5d:e6:5a:03:61:fa:e6:bc:c7:9b:1d:68: 3f:42:64:a1:e3:75:92:31:c3:cc:d6:98:7b:bb:4e:57:38:af: fd:9e:4f:ef:ce:b7:bb:34:23:1e:f1:78:8b:32:4e:60:55:ca: 33:2f:d8:0e:23:3e:ea:ec:eb:5b:ff:da:e1:a1:e5:d4:78:ad: cd:e9:4b:6e:cd:84:55:a6:2e:fc:c3:58:7c:e5:27:b5:0e:8a: f5:dc:c9:05:65:00:91:54:e5:60:b7:e5:09:52:ad:70:74:9b: c8:90:de:ba:ba:cf:bb:8a:a7:aa:36:aa:1f:69:e2:a5:95:ea: 21:77:16:99:27:fe:6a:76:0c:59:bf:47:9f:5d:5f:66:29:67: 86:21:1c:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3PBwz2CnCWrVWh29vOQdjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk ZmQ5YTgwHhcNMjYwNDI3MTMwMDM4WhcNMjYwNDI4MTMwMDM4WjAzMTEwLwYDVQQD EyhkODJiMjNhYTJiMzZjZDA2NmJmMjgwNDNkNzRlYzdhMTExZGEwZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqOjQhz2NbrllnLH+1ebN4hL9vhZ m8m73CYxizTPM5tMrOrzQQscgyETvARUP0ZFimPbqF8tkGulws/jeuQhK40SDYHb XwxqPdvwqDwwf+2YCemiQCV8fR0NWkxENkuu0rzI74wQ8kQuzsbkc4O/DcEe1zto ukevcEZEguy/kW3JWw36CPz2JWnw/CKKZs5lH8wiHoOrkV2Uf2LLBidtQIhnUpk4 KkuVQD8DRKqBmEPmSMpeL19RqSEAwvcR2Zj4SLC8SW1qysXEZwdRbyfpb0ZBeWjH XNRNSqXlKfFJB6Th8ZChCb9Cg2bCYOApYNEbfxau5CwTU2fd4A21WN9GvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgrI6orNs0Ga/KAQ9dOx6ER2g1NMB8GA1UdIwQY MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt MThkMWE0MDZhYWVkLzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklNO/mhE l7ra7gfadv5nFQHXv/s+4/g0Mg2knt/tc0t8RJRCv8YvblIpDrBLpD+tMDj+ejHs TOIhWiXedT6LXKisgRhezLYWMOcj6dYZXZxvqwjWg6taf+NKt/KTWsU7SBAEFmAL n5c0gdRXURt3O++6XeZaA2H65rzHmx1oP0JkoeN1kjHDzNaYe7tOVziv/Z5P7863 uzQjHvF4izJOYFXKMy/YDiM+6uzrW//a4aHl1HitzelLbs2EVaYu/MNYfOUntQ6K 9dzJBWUAkVTlYLflCVKtcHSbyJDeurrPu4qnqjaqH2nipZXqIXcWmSf+anYMWb9H n11fZilnhiEcyQ== -----END CERTIFICATE-----Generated at Mon Apr 27 23:33:20 2026 by rpki-client