$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json) Hash identifier: BurwY9QMjBPJZpStdUTjsFhxEhbXVJ7ZJfqX6ex+Jrk= Subject key identifier: A9:B0:DA:8A:6C:F6:E8:E7:34:5A:BD:5F:33:53:71:FA:35:91:74:E4 Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5 Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5 Certificate serial: 019D99D02F8B1B76610D95E2994685F0292B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft Manifest number: 0EF0 Signing time: Fri 17 Apr 2026 05:00:50 +0000 Manifest this update: Fri 17 Apr 2026 05:00:50 +0000 Manifest next update: Sat 18 Apr 2026 05:00:50 +0000 Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: 7niM7lLe/9D1/AtT20IUmrzVIxk3RMiJnv0jSn+1fnY=) 2: FvI2CfBEqCGxOU9VxVGUHdHpoa4.asa (hash: ap5sRIAkxp5GHqQokYSc9SeMBeiP5/U/kzY0Z/xAVTA=) 3: H5QErsI5RrGZOHFY6_FrSzEPwsg.roa (hash: BTdVxM8rbJfdiUp2j6fzsOE0ajTe0wntltZ6HVxnZpM=) 4: TKRUQhbuG6vK-9YhYrYM4Xtl7Rk.roa (hash: DmxeQKQyfsvJvWQ6namIeD8pDbFVK71C7OVUciGGrUY=) 5: UtbWjP8TosULXxgOwSpGBsXAj1E.asa (hash: e7BKC4GZaIVKdGVBnnQIPsiQuksngCu2TeIqsWJLAi4=) 6: b7KDZwK5R28lE5M6tD1UYAgLTs0.roa (hash: chq9h/QyXrEES2o8hWXwMO8b44fg7JP3nOh0+1DILZ0=) 7: iTAqvs2G1UdUfx5Fmn2Z7H7-Wuo.roa (hash: L18Wb/sBRdrTPyOX3b7ZSqqO81GWE2YfQWPbOKytco8=) 8: n8wKAbeQwoniSlzobzWQkZPFQ90.roa (hash: gAASzqy3Nb3k3RF3IE7AiqoPFAF8THLrgzOMP+9Awr8=) 9: rxo-kMSJfYbIjml0McyLHchnJKw.roa (hash: 6yBdVD63LgbBLLvhVAYIbiNVvZCYYH7FdQZFXoIkCTo=) 10: x0-6NtH4vUkjT1y3qIl47BzSOGw.roa (hash: PnA5gMRP8NULFbWunx+4LpVvQH7waVlGce2Q/pkpzYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:d0:2f:8b:1b:76:61:0d:95:e2:99:46:85:f0:29:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5 Validity Not Before: Apr 17 05:00:50 2026 GMT Not After : Apr 18 05:00:50 2026 GMT Subject: CN=a9b0da8a6cf6e8e7345abd5f335371fa359174e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:63:b2:21:46:2d:16:1c:64:78:a3:d7:85: 35:a8:b5:b4:95:3b:19:9e:dc:c1:af:ff:0a:57:f2: 63:8c:96:9b:21:4f:d4:58:02:cc:8f:b0:03:11:b2: 2e:25:c2:2f:ff:af:18:6c:2b:26:d5:72:4e:c4:c0: 3b:ec:5c:de:7f:03:fc:68:08:07:e8:e5:35:5a:f5: 7b:a9:6c:3b:11:4d:c3:39:f3:8f:b4:4e:aa:06:9c: c0:0d:d7:52:66:34:f2:d4:8e:48:b8:8e:af:b6:4f: 41:eb:fb:b1:fb:0b:54:64:1c:63:c9:14:a4:d4:6f: 11:68:15:8f:40:7b:74:e9:91:c6:0d:33:b8:32:b3: 3a:a3:42:7c:bd:b9:c3:37:f4:b4:6b:da:bc:bd:a0: 10:9e:02:25:7b:cd:aa:1d:37:88:e9:a4:3e:5f:8a: 8a:0a:09:4e:83:66:65:16:24:43:d0:c0:f3:26:9b: b8:f5:7b:9a:6d:65:65:52:60:43:40:41:7f:75:8c: 9f:7a:b4:71:92:09:da:bf:f6:0d:af:97:11:6b:d3: 35:9b:8e:0c:d4:b3:67:8d:4f:af:fc:ad:2c:3f:71: cd:b7:16:2f:72:af:a8:ce:61:30:b9:5f:83:10:e0: a2:34:bf:26:36:b2:01:96:ea:9d:af:6c:91:6c:b1: d2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B0:DA:8A:6C:F6:E8:E7:34:5A:BD:5F:33:53:71:FA:35:91:74:E4 X509v3 Authority Key Identifier: keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a8:ab:54:b8:90:30:69:28:86:0b:a2:83:bb:e8:c8:9a:1b: 0a:d0:75:2c:55:63:5a:0b:3d:54:9e:5b:7d:1c:89:ae:05:32: 36:4f:2b:e8:72:87:17:f0:49:f7:90:aa:9e:2d:51:ee:5a:8e: 06:a5:a9:e4:a2:da:b9:83:55:09:63:0e:31:04:25:08:4a:e8: c6:64:e0:37:f9:70:c3:93:3a:e3:ea:2c:7e:75:b9:e3:8d:c5: 31:b4:4b:21:76:73:41:b1:9b:42:b6:63:a5:d4:33:0a:92:38: 50:7e:d5:26:b0:9f:1f:f5:84:bc:0c:dd:59:82:35:3d:f5:b1: 9e:d0:39:81:d0:53:e5:e2:ff:fa:77:6f:eb:f5:82:bb:61:5b: c0:17:08:76:96:2e:4c:86:59:77:0d:55:38:67:c5:64:cc:1f: 93:50:e1:c1:35:99:d6:7c:40:73:66:88:d7:04:f7:b2:e0:73: 48:dd:d4:db:70:44:e4:a4:6d:26:01:62:ce:92:f3:27:cc:b1: 18:c1:37:7c:b7:17:5d:9d:99:d4:ce:31:98:eb:2a:87:15:30: da:48:8b:73:e0:05:ae:1f:eb:70:89:36:36:eb:8a:28:ee:1d: 99:dc:0a:90:59:bb:9d:6b:e0:d3:6f:37:6b:4d:a3:c7:1e:57: 12:5e:5c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Z0C+LG3ZhDZXimUaF8CkrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2 NGZhYTUwHhcNMjYwNDE3MDUwMDUwWhcNMjYwNDE4MDUwMDUwWjAzMTEwLwYDVQQD EyhhOWIwZGE4YTZjZjZlOGU3MzQ1YWJkNWYzMzUzNzFmYTM1OTE3NGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVxjsiFGLRYcZHij14U1qLW0lTsZ ntzBr/8KV/JjjJabIU/UWALMj7ADEbIuJcIv/68YbCsm1XJOxMA77FzefwP8aAgH 6OU1WvV7qWw7EU3DOfOPtE6qBpzADddSZjTy1I5IuI6vtk9B6/ux+wtUZBxjyRSk 1G8RaBWPQHt06ZHGDTO4MrM6o0J8vbnDN/S0a9q8vaAQngIle82qHTeI6aQ+X4qK CglOg2ZlFiRD0MDzJpu49XuabWVlUmBDQEF/dYyferRxkgnav/YNr5cRa9M1m44M 1LNnjU+v/K0sP3HNtxYvcq+ozmEwuV+DEOCiNL8mNrIBluqdr2yRbLHSSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmw2ops9ujnNFq9XzNTcfo1kXTkMB8GA1UdIwQY MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3 LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6irVLiQ MGkohguig7voyJobCtB1LFVjWgs9VJ5bfRyJrgUyNk8r6HKHF/BJ95Cqni1R7lqO BqWp5KLauYNVCWMOMQQlCEroxmTgN/lww5M64+osfnW5443FMbRLIXZzQbGbQrZj pdQzCpI4UH7VJrCfH/WEvAzdWYI1PfWxntA5gdBT5eL/+ndv6/WCu2FbwBcIdpYu TIZZdw1VOGfFZMwfk1DhwTWZ1nxAc2aI1wT3suBzSN3U23BE5KRtJgFizpLzJ8yx GME3fLcXXZ2Z1M4xmOsqhxUw2kiLc+AFrh/rcIk2NuuKKO4dmdwKkFm7nWvg0283 a02jxx5XEl5cpA== -----END CERTIFICATE-----Generated at Fri Apr 17 11:29:01 2026 by rpki-client