$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: kwL6Z58qSZfuSpXgzpB0cErUbwwdGqZNFNTWK+FGwXo= Subject key identifier: 8A:D1:EB:20:01:15:2B:BE:F3:5F:8F:BA:E3:74:DC:E4:6B:71:56:9C Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019D981869C7D11874C560F9633C993CEE61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 18E8 Signing time: Thu 16 Apr 2026 21:00:29 +0000 Manifest this update: Thu 16 Apr 2026 21:00:29 +0000 Manifest next update: Fri 17 Apr 2026 21:00:29 +0000 Files and hashes: 1: 14H-LNkPVbf1P9syu0gSDZX0QuA.roa (hash: 0sR139VBAEgTBXJuZQLHKc7RqftEBg36UvCit9+wB4Y=) 2: 6n_hkZcF-cF30EEk5-jd2IN_wO8.roa (hash: DcZmoLZGm/trptAiaEUhPRAyxAeOKtODy6lVi50yIeA=) 3: 7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa (hash: f3W/aXX2oWLOcz8n9AblRDokKEiMNGrTfCRmoGI/Lgg=) 4: 8cJlsHm0dVDV2ACL1UhTAh_wZXg.roa (hash: LnF2FnCPrAFRzWaaVfy6M3SOCgPNybkqYgz2G8nzbvw=) 5: A_Limg3OLYd13ZlGUJbwD_dgooY.roa (hash: AheclwiuL8WgcNGkcsG2buEkjItkhZhagDjGjEY7ta8=) 6: GHgp5Vp47VKlbxndRXtEhJDYn_U.roa (hash: syIEb7iHu5Ey2FBT8ljIgEWQRJ42h5jOyIS+gGfr5AI=) 7: OXmdplbNmQib2l2reBSTrU4L_PA.roa (hash: vuEIsii+dFtqe9HP/V9IK24UtjZr6nf8P7Rlt1fMhoA=) 8: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: bCbKcVqWEQSW1Hvy57vb3TU2m9KLd/qkGP/+YtKBdHg=) 9: VYo918jh-i7rJwHE82ZPQwc45P0.roa (hash: upWdBHigy6D1tAgLScglqnlFKHDlTGPxQKZWr5SD6eo=) 10: Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa (hash: SmaXCWbuVQWDYA1WmhxKxyYko6Urx/bhXRz1ez20W+M=) 11: Y6ImGVFmS5obOGtb7VS-5RES8ds.roa (hash: 5dw889Z3clPV/mha7vYDDn4q7WZv7n9gkeTOdly28Rw=) 12: _2Ua11sWzPO5DBlFQv8tb1tAVlA.roa (hash: LUsDXZFiK9FtK6EnFC70rYFOjc6L5qWymh1S/jDGElE=) 13: nINyubjIu33geaoAM2ygk8-OXIM.roa (hash: teOxeh4o4zZnuTWriyDSWtH89vqt0w3l5G0p6/GrNok=) 14: pJUNLwWtEptjt5DB91VfVf1ogI0.roa (hash: oSeqIzwGYJ8PJBctq0lGeA6kcX9bfJwo5235nbRUPRA=) 15: rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa (hash: 4LNpkWN8dEzxfyUg6mtreEZRcnf507vtfHeANuOXjg8=) 16: sowEHuyCg98-_nRKaQkJf-fVgEs.roa (hash: oeX4pQ1F7WFsfTOBD0YtMDT1xhl2JArmAYEp1mUoROI=) 17: u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa (hash: SMkvUlI2T5oc05LZlQuumKtLHa+vf18Pqccm9PimLVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:18:69:c7:d1:18:74:c5:60:f9:63:3c:99:3c:ee:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Apr 16 21:00:29 2026 GMT Not After : Apr 17 21:00:29 2026 GMT Subject: CN=8ad1eb2001152bbef35f8fbae374dce46b71569c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:a3:14:0a:aa:f0:79:82:c8:03:b1:d5:38: 9d:b7:24:2d:3b:70:22:7d:0d:a9:b9:48:b5:a6:79: c7:d9:a7:52:85:fa:8e:4f:ea:5b:21:07:3f:f3:07: b3:0e:89:81:c4:10:2c:c1:39:99:b6:92:1e:86:c1: 01:19:28:55:66:89:65:f6:29:50:7b:c5:f8:7c:63: f1:ad:b2:29:fd:14:7b:17:1d:37:9c:bc:bb:72:a5: b8:3b:fc:50:0c:f8:6a:fd:76:18:d6:ab:cb:a6:88: 67:75:05:cd:33:b2:6b:40:db:ab:c4:ef:ed:22:c6: a0:72:d9:fe:f2:b9:2e:e3:3c:50:95:49:6b:37:b3: ff:12:4e:5f:61:64:1d:e1:19:df:f5:ca:96:80:e1: 5f:bb:4f:72:15:4a:b9:bf:df:9c:5d:ed:94:a3:1d: 3c:45:2c:8b:b1:a2:9f:31:bd:00:48:dd:98:28:bf: ac:3d:b6:0e:c3:70:1e:0f:7d:0b:41:22:b2:3d:c8: 5c:be:c5:ef:87:47:10:32:ce:32:d7:f5:30:de:8d: 49:56:04:1f:cc:c8:86:96:7f:85:fe:7c:69:d2:c8: 46:32:4c:13:7f:6b:63:6b:a9:45:8b:36:79:d4:ce: 22:a0:ec:3a:b2:3c:85:7b:4f:b5:0b:d7:4c:17:4d: 32:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D1:EB:20:01:15:2B:BE:F3:5F:8F:BA:E3:74:DC:E4:6B:71:56:9C X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:84:13:ae:3f:c3:10:06:56:eb:45:76:37:86:e5:a1:dc:46: 95:77:56:8b:52:35:72:83:3b:af:19:2b:10:96:fd:61:3f:d9: 44:49:7a:f7:e6:e6:96:43:87:3e:fa:db:e2:ea:80:93:10:19: e0:60:99:85:f5:eb:a3:ea:84:5e:cd:20:89:68:71:37:5e:25: 51:37:1e:f2:3a:1a:85:25:27:1d:8d:21:2a:74:64:30:3e:03: ae:62:fc:f7:0b:32:89:a4:55:07:c0:f6:87:8b:ed:52:bb:12: e3:90:3f:05:cf:a8:15:8c:ba:c8:dd:aa:a3:d9:ec:85:8b:ab: 96:51:f6:39:c4:29:6c:58:23:fa:c6:f2:61:37:04:6b:53:2b: 6b:9c:8f:91:0d:d1:c2:2d:4f:f6:3f:3b:7f:e0:83:4a:f2:a0: eb:7b:af:03:60:5e:3a:00:a9:44:46:81:b2:81:be:43:62:f9: b9:dc:fc:f8:a7:eb:e6:56:53:b0:63:e6:82:ac:3a:3b:20:08: 0d:65:02:fc:0a:be:36:c0:80:a7:cc:93:62:d9:6f:50:49:b6: be:7d:51:e6:db:d4:c4:b2:bd:7e:48:ef:f8:2a:89:75:e8:f1: db:88:ab:e4:2f:f5:1d:fd:fc:9d:22:1e:84:0a:38:02:0a:dd: 76:df:50:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YGGnH0Rh0xWD5YzyZPO5hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwNDE2MjEwMDI5WhcNMjYwNDE3MjEwMDI5WjAzMTEwLwYDVQQD Eyg4YWQxZWIyMDAxMTUyYmJlZjM1ZjhmYmFlMzc0ZGNlNDZiNzE1NjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9ejFAqq8HmCyAOx1TidtyQtO3Ai fQ2puUi1pnnH2adShfqOT+pbIQc/8wezDomBxBAswTmZtpIehsEBGShVZoll9ilQ e8X4fGPxrbIp/RR7Fx03nLy7cqW4O/xQDPhq/XYY1qvLpohndQXNM7JrQNurxO/t Isagctn+8rku4zxQlUlrN7P/Ek5fYWQd4Rnf9cqWgOFfu09yFUq5v9+cXe2Uox08 RSyLsaKfMb0ASN2YKL+sPbYOw3AeD30LQSKyPchcvsXvh0cQMs4y1/Uw3o1JVgQf zMiGln+F/nxp0shGMkwTf2tja6lFizZ51M4ioOw6sjyFe0+1C9dMF00ynwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrR6yABFSu+81+PuuN03ORrcVacMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYQTrj/D EAZW60V2N4blodxGlXdWi1I1coM7rxkrEJb9YT/ZREl69+bmlkOHPvrb4uqAkxAZ 4GCZhfXro+qEXs0giWhxN14lUTce8joahSUnHY0hKnRkMD4DrmL89wsyiaRVB8D2 h4vtUrsS45A/Bc+oFYy6yN2qo9nshYurllH2OcQpbFgj+sbyYTcEa1Mra5yPkQ3R wi1P9j87f+CDSvKg63uvA2BeOgCpREaBsoG+Q2L5udz8+Kfr5lZTsGPmgqw6OyAI DWUC/Aq+NsCAp8yTYtlvUEm2vn1R5tvUxLK9fkjv+CqJdejx24ir5C/1Hf38nSIe hAo4Agrddt9Qdg== -----END CERTIFICATE-----Generated at Fri Apr 17 05:26:59 2026 by rpki-client