$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: hoCG8Fa9fjTCk1vAKuAAX/ddqghJj/bxH0miXvPhACQ= Subject key identifier: 68:C9:C7:A2:50:93:B4:EB:C7:66:4D:E1:E9:08:18:D4:DD:B2:7F:6B Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019CABD99F2488AACCA20E0B846A75251C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 186D Signing time: Mon 02 Mar 2026 00:01:31 +0000 Manifest this update: Mon 02 Mar 2026 00:01:31 +0000 Manifest next update: Tue 03 Mar 2026 00:01:31 +0000 Files and hashes: 1: 14H-LNkPVbf1P9syu0gSDZX0QuA.roa (hash: 0sR139VBAEgTBXJuZQLHKc7RqftEBg36UvCit9+wB4Y=) 2: 4wMBnZXnbOtnzlZreBESG0005OE.roa (hash: skZKvqXWnRPa4nI3ThB/TrYjGRKVnazsk4dzqKlcPUw=) 3: 7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa (hash: f3W/aXX2oWLOcz8n9AblRDokKEiMNGrTfCRmoGI/Lgg=) 4: 8cJlsHm0dVDV2ACL1UhTAh_wZXg.roa (hash: LnF2FnCPrAFRzWaaVfy6M3SOCgPNybkqYgz2G8nzbvw=) 5: A_Limg3OLYd13ZlGUJbwD_dgooY.roa (hash: AheclwiuL8WgcNGkcsG2buEkjItkhZhagDjGjEY7ta8=) 6: GHgp5Vp47VKlbxndRXtEhJDYn_U.roa (hash: syIEb7iHu5Ey2FBT8ljIgEWQRJ42h5jOyIS+gGfr5AI=) 7: OXmdplbNmQib2l2reBSTrU4L_PA.roa (hash: vuEIsii+dFtqe9HP/V9IK24UtjZr6nf8P7Rlt1fMhoA=) 8: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: crgrS3UXcmVsf1PhpngnuZQFAvX7EaUHuz2zaYX3O7Q=) 9: VYo918jh-i7rJwHE82ZPQwc45P0.roa (hash: upWdBHigy6D1tAgLScglqnlFKHDlTGPxQKZWr5SD6eo=) 10: Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa (hash: SmaXCWbuVQWDYA1WmhxKxyYko6Urx/bhXRz1ez20W+M=) 11: Y6ImGVFmS5obOGtb7VS-5RES8ds.roa (hash: 5dw889Z3clPV/mha7vYDDn4q7WZv7n9gkeTOdly28Rw=) 12: _2Ua11sWzPO5DBlFQv8tb1tAVlA.roa (hash: LUsDXZFiK9FtK6EnFC70rYFOjc6L5qWymh1S/jDGElE=) 13: nINyubjIu33geaoAM2ygk8-OXIM.roa (hash: teOxeh4o4zZnuTWriyDSWtH89vqt0w3l5G0p6/GrNok=) 14: pJUNLwWtEptjt5DB91VfVf1ogI0.roa (hash: oSeqIzwGYJ8PJBctq0lGeA6kcX9bfJwo5235nbRUPRA=) 15: rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa (hash: 4LNpkWN8dEzxfyUg6mtreEZRcnf507vtfHeANuOXjg8=) 16: sowEHuyCg98-_nRKaQkJf-fVgEs.roa (hash: oeX4pQ1F7WFsfTOBD0YtMDT1xhl2JArmAYEp1mUoROI=) 17: u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa (hash: SMkvUlI2T5oc05LZlQuumKtLHa+vf18Pqccm9PimLVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:d9:9f:24:88:aa:cc:a2:0e:0b:84:6a:75:25:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Mar 2 00:01:31 2026 GMT Not After : Mar 3 00:01:31 2026 GMT Subject: CN=68c9c7a25093b4ebc7664de1e90818d4ddb27f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:34:2b:f2:e5:bf:31:9c:38:f0:62:49:1c: 44:8d:1e:c1:68:2d:84:7c:34:bc:2f:f8:30:19:8e: e1:7b:29:8e:0d:e8:6a:67:e5:08:59:49:78:9d:35: eb:62:f8:d4:66:73:4b:70:d0:b6:c5:df:ac:47:e5: b6:24:e9:1b:3e:61:68:3c:54:15:95:8c:a2:ea:b8: 23:b2:24:29:09:1a:4e:e9:ab:35:a2:e4:0c:8d:90: e4:af:66:26:94:1c:ba:eb:32:55:be:68:99:36:76: 43:0f:a4:5c:d8:50:b8:23:b6:7b:e3:95:b4:7c:f7: dd:ee:a7:bb:a7:98:31:13:25:b6:40:6a:38:fa:45: 7c:bf:33:55:59:e1:ae:32:2a:4b:38:c4:60:89:36: b1:4c:76:29:08:34:3a:b7:fe:25:00:cd:73:11:c6: d9:43:32:92:9d:26:7d:96:cf:a1:78:44:74:b9:4d: 10:dd:20:44:4a:be:47:77:fe:54:16:52:d1:33:12: 22:63:b0:4d:24:75:36:35:82:9f:ed:c2:a4:40:ba: 38:85:d8:64:0a:9a:77:af:23:fc:41:73:4d:64:44: fe:7b:67:7b:28:91:9d:01:91:98:83:d0:b2:e9:74: c2:ad:a7:23:c3:f9:36:be:dd:bd:16:ef:07:17:30: a0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C9:C7:A2:50:93:B4:EB:C7:66:4D:E1:E9:08:18:D4:DD:B2:7F:6B X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:eb:f7:50:06:62:a0:00:4a:d0:b9:70:0b:e3:65:d4:9c:f2: d4:ea:3e:be:59:c2:d1:f3:9f:01:3d:71:bb:e1:af:16:d0:16: b5:97:44:c6:62:b1:6f:5d:64:8d:a6:ee:72:5a:ce:a4:31:ec: 9b:c0:1b:9b:fe:38:92:19:a2:f2:4f:16:3f:77:07:17:e7:9e: 6b:21:4c:c8:f6:ef:0b:0e:21:0e:0b:9b:dc:a2:d2:a2:2b:e3: 5c:70:06:45:03:31:b6:e8:29:2f:0c:c0:54:57:1f:f3:14:71: fe:49:8b:3a:0b:04:cf:04:dd:bc:10:63:07:0b:0c:c7:b8:34: 98:83:64:5b:b4:c7:0c:a8:76:ad:12:bb:aa:3b:47:02:9b:8f: 35:1e:82:ba:c5:f3:c8:13:4e:b4:c7:2e:54:48:08:c3:a8:21: 73:d2:11:30:e9:b5:c6:11:00:a3:aa:01:2e:93:49:46:f4:c3: 2a:4d:a3:3d:01:6d:ac:8a:43:2f:1d:2a:f3:5e:07:29:d2:ab: 55:08:a4:23:91:10:0a:e7:c2:a6:3e:53:46:1b:fa:b1:6a:02: 23:9c:41:18:3b:0a:7a:91:a7:7b:bd:45:9b:cf:eb:c2:5d:58: c4:c5:01:c0:fe:e8:fc:d5:3f:a6:71:12:40:c3:e3:3d:17:59: b2:15:e6:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyr2Z8kiKrMog4LhGp1JRxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjYwMzAyMDAwMTMxWhcNMjYwMzAzMDAwMTMxWjAzMTEwLwYDVQQD Eyg2OGM5YzdhMjUwOTNiNGViYzc2NjRkZTFlOTA4MThkNGRkYjI3ZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBU0K/LlvzGcOPBiSRxEjR7BaC2E fDS8L/gwGY7heymODehqZ+UIWUl4nTXrYvjUZnNLcNC2xd+sR+W2JOkbPmFoPFQV lYyi6rgjsiQpCRpO6as1ouQMjZDkr2YmlBy66zJVvmiZNnZDD6Rc2FC4I7Z745W0 fPfd7qe7p5gxEyW2QGo4+kV8vzNVWeGuMipLOMRgiTaxTHYpCDQ6t/4lAM1zEcbZ QzKSnSZ9ls+heER0uU0Q3SBESr5Hd/5UFlLRMxIiY7BNJHU2NYKf7cKkQLo4hdhk Cpp3ryP8QXNNZET+e2d7KJGdAZGYg9Cy6XTCracjw/k2vt29Fu8HFzCgwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjJx6JQk7Trx2ZN4ekIGNTdsn9rMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOv3UAZi oABK0LlwC+Nl1Jzy1Oo+vlnC0fOfAT1xu+GvFtAWtZdExmKxb11kjabuclrOpDHs m8Abm/44khmi8k8WP3cHF+eeayFMyPbvCw4hDgub3KLSoivjXHAGRQMxtugpLwzA VFcf8xRx/kmLOgsEzwTdvBBjBwsMx7g0mINkW7THDKh2rRK7qjtHApuPNR6CusXz yBNOtMcuVEgIw6ghc9IRMOm1xhEAo6oBLpNJRvTDKk2jPQFtrIpDLx0q814HKdKr VQikI5EQCufCpj5TRhv6sWoCI5xBGDsKepGne71Fm8/rwl1YxMUBwP7o/NU/pnES QMPjPRdZshXmDg== -----END CERTIFICATE-----Generated at Mon Mar 2 07:11:45 2026 by rpki-client