$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: AmJm4jQco3atwFbFY9D9r3no7/LxFTKY6dFvSXTaoRA= Subject key identifier: F6:65:08:6D:51:72:B1:0D:CA:CC:84:92:2D:14:B0:1A:72:DF:E5:72 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019CBDDF9678EA618E41FCBD899DF9B3BF7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 1449 Signing time: Thu 05 Mar 2026 12:01:12 +0000 Manifest this update: Thu 05 Mar 2026 12:01:12 +0000 Manifest next update: Fri 06 Mar 2026 12:01:12 +0000 Files and hashes: 1: 3BxH_bEdWRum2rhs_55rh-xY-JE.roa (hash: L7QbNE/A+wkbmeuga30Pjc/Z4164/JddJVT41mQnxHE=) 2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: rlPKYr8E23xg+4EXO64KeKoIz6cdBWwZCYHyjcj4AKw=) 3: 7ejZ3K5XJXw42cK_JDpws_LBqPY.roa (hash: Y1PAS81Ngu/ibCqA+GXn0uait9upSnAxeVEYWJyyRbo=) 4: 9-ZkpJLZAxXzbNNccpqxr1yI3TQ.roa (hash: JAqKnj2bS/riQd9C2Ai/D19XD9DVFg+M8BKlm0uu5lQ=) 5: Ki5lgptZeKqxkVY1rSUS3fFpdNo.roa (hash: wCDh26IbseWW9odw6/4vFdpDTBtddnVSe0afNNR63xE=) 6: Mvc6dRwMPV0p3nS-xgeT1pSks3s.roa (hash: tEWtg/ml85Q9O/bjcJjCkBkPWgRPJZDdFKAGmtBJpW8=) 7: XcFzjI2uuV84oN4qh53dtgVk0G4.roa (hash: vDuNqlBbw47k7/TAAtk4TmMaBj19DDFnRfvi0NtLZ1E=) 8: XjB8pSYFTRWu3aeuPZfoCPdtSU8.roa (hash: clM1FhXerIaxDZVMbA4484QAmARB0GCCeaDtZ15BS4A=) 9: _CwOTtU3okI82pLwtmx5rCYmqBw.roa (hash: mdVcgR96055cvSGaX98e3jUXv5Q46o7z7n7mSva9LM8=) 10: eWht4CqsRozCLydJERnRuTN-Adw.roa (hash: rBx2jxtcduhOc94/W12cQD59jQKweQjaDhzj2mHD0e8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Mar 2026 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:bd:df:96:78:ea:61:8e:41:fc:bd:89:9d:f9:b3:bf:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Mar 5 12:01:12 2026 GMT Not After : Mar 6 12:01:12 2026 GMT Subject: CN=f665086d5172b10dcacc84922d14b01a72dfe572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:eb:f7:c3:54:31:61:13:a6:30:6d:de:a2:2d: f0:b8:80:a8:a0:03:af:b5:96:da:73:e7:94:cd:d9: 9d:b7:8e:b0:b4:e4:b6:d9:a0:21:87:89:ea:d4:de: 7c:f3:4d:da:66:bb:cc:ff:d3:57:56:65:14:ae:07: 99:cf:83:9b:8c:74:e3:58:64:a4:3b:7b:47:ec:96: c6:8b:91:fa:e8:d5:fb:bf:b0:dc:ef:f3:34:ce:30: 53:93:d3:85:40:17:ba:f1:6e:8b:21:88:a5:bf:6f: 26:09:9c:4f:45:3e:86:b6:85:98:81:c9:cc:59:03: 85:79:93:60:05:47:f3:7e:3c:06:5a:36:86:41:30: 3c:48:88:83:e7:e4:64:56:b0:c7:4f:88:28:b8:7e: 44:09:32:20:2e:61:60:ed:b9:7c:ee:74:85:90:c4: f4:88:73:31:33:4a:a9:b0:17:40:46:42:14:f4:7a: ef:d7:d8:2b:57:60:e9:4c:a4:d9:35:8d:9e:ec:40: bc:df:48:70:89:50:34:b2:ca:d6:b5:63:09:56:5f: ab:a3:ea:8b:79:2e:a4:48:b6:79:e0:3a:db:7c:0f: 5d:69:07:84:4a:39:d0:2b:2d:36:40:ca:ed:7b:6b: 5a:4b:96:0e:a0:6a:80:2c:f0:d1:f3:ff:47:66:2c: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:65:08:6D:51:72:B1:0D:CA:CC:84:92:2D:14:B0:1A:72:DF:E5:72 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:89:a5:c6:c1:5f:3e:a5:5b:13:3c:b6:31:60:14:c6:b9:8d: ed:12:ec:0b:ec:dd:cf:6f:a8:6b:7d:a5:c7:06:43:8b:63:e5: 8d:30:42:a1:46:c0:88:d4:cc:14:85:2d:60:4a:fc:46:51:55: c0:0f:8e:28:63:de:06:6b:ea:c3:d5:54:0f:df:a9:87:c9:5d: 61:b1:b9:13:28:f5:9c:9b:e8:97:0e:9f:9f:34:46:dc:de:76: cb:46:1f:e4:0b:72:a5:6c:e9:36:18:ff:4c:7e:36:fd:f5:4a: b9:36:89:98:4d:d2:66:e7:cf:11:e8:f8:fd:20:54:f3:07:16: 4c:e5:38:63:4a:88:d0:6b:8a:1c:24:8b:b1:2d:69:a2:1b:34: 74:72:14:6b:37:3b:aa:38:66:1d:f4:9d:e8:30:55:97:93:a3: fc:f1:00:9d:be:52:7e:dc:55:76:f7:ae:50:45:97:ec:61:e9: 32:f6:c4:f4:0a:89:0a:88:b0:58:04:3d:13:f4:09:23:bf:0d: d9:0e:0d:12:3a:83:0c:45:81:48:2a:dc:55:c3:17:fd:36:33: 80:f9:cd:cb:86:5a:f8:ab:38:87:ae:9e:b3:f3:78:7b:c5:63: 50:ed:49:b2:5d:29:55:0a:49:34:cc:e9:17:0b:14:1b:ed:25: 10:e9:5f:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZy935Z46mGOQfy9iZ35s798MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjYwMzA1MTIwMTEyWhcNMjYwMzA2MTIwMTEyWjAzMTEwLwYDVQQD EyhmNjY1MDg2ZDUxNzJiMTBkY2FjYzg0OTIyZDE0YjAxYTcyZGZlNTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuv3w1QxYROmMG3eoi3wuICooAOv tZbac+eUzdmdt46wtOS22aAhh4nq1N58803aZrvM/9NXVmUUrgeZz4ObjHTjWGSk O3tH7JbGi5H66NX7v7Dc7/M0zjBTk9OFQBe68W6LIYilv28mCZxPRT6GtoWYgcnM WQOFeZNgBUfzfjwGWjaGQTA8SIiD5+RkVrDHT4gouH5ECTIgLmFg7bl87nSFkMT0 iHMxM0qpsBdARkIU9Hrv19grV2DpTKTZNY2e7EC830hwiVA0ssrWtWMJVl+ro+qL eS6kSLZ54DrbfA9daQeESjnQKy02QMrte2taS5YOoGqALPDR8/9HZizwLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZlCG1RcrENysyEki0UsBpy3+VyMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZImlxsFf PqVbEzy2MWAUxrmN7RLsC+zdz2+oa32lxwZDi2PljTBCoUbAiNTMFIUtYEr8RlFV wA+OKGPeBmvqw9VUD9+ph8ldYbG5Eyj1nJvolw6fnzRG3N52y0Yf5AtypWzpNhj/ TH42/fVKuTaJmE3SZufPEej4/SBU8wcWTOU4Y0qI0GuKHCSLsS1pohs0dHIUazc7 qjhmHfSd6DBVl5Oj/PEAnb5SftxVdveuUEWX7GHpMvbE9AqJCoiwWAQ9E/QJI78N 2Q4NEjqDDEWBSCrcVcMX/TYzgPnNy4Za+Ks4h66es/N4e8VjUO1Jsl0pVQpJNMzp FwsUG+0lEOlfUg== -----END CERTIFICATE-----Generated at Thu Mar 5 22:04:32 2026 by rpki-client