$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json) Hash identifier: iv/UdXR1obf6+C2xI0c5Os3Gy8CjvfXOmUOnDuhruqs= Subject key identifier: 71:7D:10:B8:38:86:65:DD:36:83:54:27:F6:E4:A3:B2:14:A5:1E:D3 Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5 Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5 Certificate serial: 019CA869C371E3B671B2274EEB733D4DEA17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft Manifest number: 0E72 Signing time: Sun 01 Mar 2026 08:00:29 +0000 Manifest this update: Sun 01 Mar 2026 08:00:29 +0000 Manifest next update: Mon 02 Mar 2026 08:00:29 +0000 Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: tITpzLU2V0lMrKAwtVf9bH7G1gR2gikO2krflMSQSd0=) 2: H5QErsI5RrGZOHFY6_FrSzEPwsg.roa (hash: BTdVxM8rbJfdiUp2j6fzsOE0ajTe0wntltZ6HVxnZpM=) 3: R0pEkuvaVLGxnylHvK6koPi4Qtk.asa (hash: yVimJbcLLcabqOeuTEnFLIbJZ1qdF0H9oXoiq2g92yI=) 4: TKRUQhbuG6vK-9YhYrYM4Xtl7Rk.roa (hash: DmxeQKQyfsvJvWQ6namIeD8pDbFVK71C7OVUciGGrUY=) 5: UtbWjP8TosULXxgOwSpGBsXAj1E.asa (hash: e7BKC4GZaIVKdGVBnnQIPsiQuksngCu2TeIqsWJLAi4=) 6: b7KDZwK5R28lE5M6tD1UYAgLTs0.roa (hash: chq9h/QyXrEES2o8hWXwMO8b44fg7JP3nOh0+1DILZ0=) 7: iTAqvs2G1UdUfx5Fmn2Z7H7-Wuo.roa (hash: L18Wb/sBRdrTPyOX3b7ZSqqO81GWE2YfQWPbOKytco8=) 8: n8wKAbeQwoniSlzobzWQkZPFQ90.roa (hash: gAASzqy3Nb3k3RF3IE7AiqoPFAF8THLrgzOMP+9Awr8=) 9: rxo-kMSJfYbIjml0McyLHchnJKw.roa (hash: 6yBdVD63LgbBLLvhVAYIbiNVvZCYYH7FdQZFXoIkCTo=) 10: x0-6NtH4vUkjT1y3qIl47BzSOGw.roa (hash: PnA5gMRP8NULFbWunx+4LpVvQH7waVlGce2Q/pkpzYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a8:69:c3:71:e3:b6:71:b2:27:4e:eb:73:3d:4d:ea:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5 Validity Not Before: Mar 1 08:00:29 2026 GMT Not After : Mar 2 08:00:29 2026 GMT Subject: CN=717d10b8388665dd36835427f6e4a3b214a51ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:16:8b:ef:d9:c9:dd:bd:e1:96:dc:11:7c: a0:07:6e:7a:44:ec:34:fe:25:26:04:40:9d:6c:50: a9:0a:d4:1c:76:81:6b:b6:12:7c:82:65:76:48:73: e7:8c:5f:4d:15:85:6c:80:1f:bf:c9:58:25:f9:50: cf:62:f2:91:a1:88:4e:92:53:ba:d9:97:6d:49:ed: 91:d7:e1:90:4f:2e:7a:38:c4:fc:b5:43:8f:ae:dc: f4:7b:e2:4f:9c:13:90:c0:a6:b9:1d:0b:ef:5a:96: c1:c6:00:28:e8:08:3a:53:87:ec:cb:98:f6:53:22: 5f:bd:86:74:38:ff:5a:8a:2a:bc:bc:c7:2b:7a:b6: ee:d3:92:72:e7:d2:2f:1d:62:e3:9c:90:4b:29:47: 63:9c:0c:67:79:35:7f:f4:d3:e6:c5:b0:96:b2:fb: ff:0e:59:03:32:95:ff:4c:09:5b:d4:a2:8e:68:f4: 6a:7d:5f:fc:a0:5f:49:e3:0e:8c:8a:67:18:71:4c: 09:c8:ac:fe:2c:29:e9:69:86:bb:50:c4:69:b1:d6: 4f:09:65:18:93:12:00:2a:13:64:84:46:c5:98:a2: 83:51:c4:8c:11:23:5a:dd:ea:d0:46:fc:03:90:22: 72:b9:50:1a:7f:60:33:fb:ea:e7:1f:ff:c8:e5:04: ba:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7D:10:B8:38:86:65:DD:36:83:54:27:F6:E4:A3:B2:14:A5:1E:D3 X509v3 Authority Key Identifier: keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:e0:81:aa:e0:54:49:51:9b:86:9a:e2:dd:69:40:27:bc:c8: ed:24:fb:03:79:dd:ba:07:16:d2:f5:6b:fe:fc:dc:9d:93:f2: de:43:a2:ce:c1:84:1f:2e:47:89:8a:b9:7b:4a:c6:41:bc:a5: e3:b7:e9:2c:c2:1b:62:8f:a1:bc:a0:36:ae:2f:a3:77:40:34: 26:e5:17:f0:32:be:2c:fd:cd:2f:23:69:6c:55:60:af:34:0f: cb:dc:f3:8c:0f:7d:5c:85:7e:2b:ae:bd:ba:37:17:96:fb:e0: a7:65:13:94:87:55:62:2b:95:3f:0f:99:93:5c:84:e8:aa:2a: 50:80:18:ca:ef:a2:bd:4b:5d:6d:98:e1:6e:5b:8e:0f:00:c5: 2d:7d:3a:f5:45:45:d3:57:8d:47:07:bb:32:42:a0:bc:0e:ca: 05:a4:28:92:9f:26:19:f5:a7:61:29:d3:31:e5:b4:8e:13:08: 27:04:f5:97:ce:b0:2d:6f:75:db:cc:2f:4b:df:d5:2f:53:d9: 91:80:c9:65:1b:8b:23:36:b1:26:16:0a:b4:e3:cf:06:ce:63: 49:f6:7d:84:9f:05:f8:7f:71:75:43:6f:bf:b1:de:71:e1:60: a5:08:3e:23:d1:c6:c2:69:42:8c:cb:00:0e:76:11:b0:80:5a: 1b:0d:35:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyoacNx47ZxsidO63M9TeoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2 NGZhYTUwHhcNMjYwMzAxMDgwMDI5WhcNMjYwMzAyMDgwMDI5WjAzMTEwLwYDVQQD Eyg3MTdkMTBiODM4ODY2NWRkMzY4MzU0MjdmNmU0YTNiMjE0YTUxZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/8Wi+/Zyd294ZbcEXygB256ROw0 /iUmBECdbFCpCtQcdoFrthJ8gmV2SHPnjF9NFYVsgB+/yVgl+VDPYvKRoYhOklO6 2ZdtSe2R1+GQTy56OMT8tUOPrtz0e+JPnBOQwKa5HQvvWpbBxgAo6Ag6U4fsy5j2 UyJfvYZ0OP9aiiq8vMcrerbu05Jy59IvHWLjnJBLKUdjnAxneTV/9NPmxbCWsvv/ DlkDMpX/TAlb1KKOaPRqfV/8oF9J4w6MimcYcUwJyKz+LCnpaYa7UMRpsdZPCWUY kxIAKhNkhEbFmKKDUcSMESNa3erQRvwDkCJyuVAaf2Az++rnH//I5QS67wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHF9ELg4hmXdNoNUJ/bko7IUpR7TMB8GA1UdIwQY MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3 LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuCBquBU SVGbhpri3WlAJ7zI7ST7A3ndugcW0vVr/vzcnZPy3kOizsGEHy5HiYq5e0rGQbyl 47fpLMIbYo+hvKA2ri+jd0A0JuUX8DK+LP3NLyNpbFVgrzQPy9zzjA99XIV+K669 ujcXlvvgp2UTlIdVYiuVPw+Zk1yE6KoqUIAYyu+ivUtdbZjhbluODwDFLX069UVF 01eNRwe7MkKgvA7KBaQokp8mGfWnYSnTMeW0jhMIJwT1l86wLW9128wvS9/VL1PZ kYDJZRuLIzaxJhYKtOPPBs5jSfZ9hJ8F+H9xdUNvv7HeceFgpQg+I9HGwmlCjMsA DnYRsIBaGw015w== -----END CERTIFICATE-----Generated at Sun Mar 1 16:30:47 2026 by rpki-client