$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: enNEoOVZ1F+tDb7sMJIS/szBmAhEAO2zPWno2iXZj+4= Subject key identifier: 3F:6C:45:D9:4F:27:48:0D:B7:56:D1:1D:A8:C8:76:8E:B2:EA:9F:4F Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019EBE7FB38B1DCDA5D7E93D189E73DD0A73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 10EC Signing time: Sat 13 Jun 2026 01:01:40 +0000 Manifest this update: Sat 13 Jun 2026 01:01:40 +0000 Manifest next update: Sun 14 Jun 2026 01:01:40 +0000 Files and hashes: 1: 29Fc1Lg9g2T7-8fsTeaoBPl-NPc.roa (hash: jlm0xWa4/qtyOFq07c45Ep2Kb2oU5AJsA2LrnBsR7WQ=) 2: 4aCYY0RGaMja-Pk9etkR8koJ5JU.roa (hash: p1rgNiymQ5hiACbuTSCO2Aa2mJXgovikostXrp6lnp8=) 3: 4fA4aGdtqTA9TqlTwECf-vE_96w.roa (hash: hECSJPtMUEDPkTJIfnux+BM/fONbP6FDLt7anI4npac=) 4: 8Hr1uTYn9-iLvJsHdtsL5Jf3hZg.roa (hash: ALf2f0JzISd3UyPZWmsk9XvraX01Mwn8kdYoc4TunL8=) 5: 9CWv34Hlk5BtQHCWFV9HfDCjRIE.roa (hash: iB3mJNj1XXlzZYcQ3iIXPGhJD3LLE726f/hGPrAHgbg=) 6: EHvhUtm3XjNEqU6ZDmXvCKGGejs.roa (hash: Sjm6qP30PiAHSYJSRSYmoChy9Wtgx8uMzWn3IwTy6Rg=) 7: J__1HHACshyPBDOUFdqrFfiSJ_s.asa (hash: P4+NQewmqawZRA1cbeRpbU6AVi0HkrkZVkGActNtwQ4=) 8: ONgaf1iMnFOfIRhNrGmRIIZ_rmk.roa (hash: TjNfJMQYSuKqoCV9qNgV6a4kCfaytG3h/G25HJDktLo=) 9: TUnjPhJqb6nHWdMSJm2IQNPN7R4.roa (hash: yclmIClXa122Jcmp1p7RvivtWXCLIncvPj+GO52o/+Q=) 10: WOAffnwybG4qj9V7edyDhpSbDkQ.roa (hash: ycSdSma33JvpNylbgkwuYkr1DaAfpIkfLpSIfBA6Am8=) 11: X1bpbfnEeWysnkVlNQYpli_JB9U.roa (hash: z2gfYvH3Y3eC1HsP9BRSds53oOJzBhG8NMfygnzQq2s=) 12: Zaa1ETdAWKfFJ07i5VWdeKJq1Y8.roa (hash: HTBLtFAfHFVHfxP1ldP56H7tmRP+j3VLoPGVIHLY2sI=) 13: ZryCLfhsn2tbfNcOOBqTDrmtBr4.roa (hash: s6nWvNWtX9EXW2C5iu+kYBDobKWsqyYEDZBG1jZg8kw=) 14: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: PjmFD5WQwGrwODRoRbYyHAiU5SD2YobsCDhNR+LLISs=) 15: gxo_Krn-tQ_Z3uSlx4SQJvS2R_Y.roa (hash: v4kU1V7WuMllKhANWEP+pXEZ9tPT1PxzJDS6a6AIcxI=) 16: ryfEVRKZnK1jVhVaw9sfrzHqLCM.roa (hash: r6enxmx5xQGmlOEDSFrMxun8mtTQGChD+RDV9jYpnaQ=) 17: xakVfcHMl_3waxWLag9wjIyIEyY.roa (hash: 8zAufra/LX45mNIP6WBoxyrn6rEShlzjSf5RR8HSpQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:7f:b3:8b:1d:cd:a5:d7:e9:3d:18:9e:73:dd:0a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Jun 13 01:01:40 2026 GMT Not After : Jun 14 01:01:40 2026 GMT Subject: CN=3f6c45d94f27480db756d11da8c8768eb2ea9f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3c:5a:5a:6a:15:63:c0:96:cd:77:bc:9d:66: 95:92:1f:01:62:24:77:f7:fc:03:54:dc:1c:81:82: 2c:e5:56:55:aa:60:e1:32:a5:8c:91:ff:82:75:bc: a4:8f:37:8d:0f:9a:bf:b5:fa:b5:59:99:fb:be:2e: 3d:db:f3:46:00:41:d0:4a:38:f8:99:61:ea:44:d9: 4d:0b:e5:70:2a:db:0a:41:ba:a5:10:1e:af:f2:ee: 1b:91:ab:f6:2b:1f:9a:2b:60:35:4c:fa:5b:e1:6e: 50:d6:42:32:c0:00:61:fa:22:6d:19:81:11:02:9d: 86:2d:6a:de:e5:f7:7d:8f:65:b9:2c:16:85:69:06: 51:67:57:c4:1f:57:50:9b:2d:a5:81:5d:b5:1c:fb: cc:78:a7:76:0c:35:8a:18:22:7a:f5:e6:ee:f7:48: 5d:9c:9b:d4:19:c8:62:6c:75:89:0e:1e:53:29:0a: fe:6e:7b:c7:3a:d1:94:7a:e1:f3:8a:a2:17:dc:07: 3b:34:56:fe:fe:b9:08:40:e7:8e:45:aa:46:da:71: 7a:68:3a:fa:74:e6:de:86:c3:c7:a2:62:04:60:28: 49:1c:29:ae:7f:91:5f:40:d3:26:1a:fd:ca:4b:e0: f6:5f:e5:41:c2:e4:76:e1:91:3a:0b:7c:08:98:60: e8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6C:45:D9:4F:27:48:0D:B7:56:D1:1D:A8:C8:76:8E:B2:EA:9F:4F X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:4e:80:d8:22:dc:76:ea:3a:20:8e:4a:24:80:59:2f:c6:96: ee:93:c9:4e:a0:5a:ae:09:6d:05:11:ff:a9:50:ac:c7:65:e9: aa:53:05:b1:17:c0:29:07:4e:8d:10:ad:af:ae:4c:7d:a5:71: da:cc:bb:f1:7c:72:f6:7a:b6:6d:82:72:48:e2:e5:60:61:9d: ab:e6:dc:68:d1:11:fd:b1:5c:94:1c:0e:ab:08:5e:ea:84:d0: 18:eb:9b:36:a5:28:c1:4f:df:23:8b:f6:b4:06:58:8f:61:cc: 33:ce:e9:bc:6c:df:b1:ba:1a:c1:3b:f9:3b:28:46:29:84:c0: 57:66:4e:71:fe:a9:28:7f:d4:85:31:e9:9f:0e:da:2b:a5:1b: 61:a2:bb:3e:43:1f:1b:9e:3b:8b:6c:6e:8d:dd:f9:67:04:bb: 64:cf:aa:49:9a:cd:85:dd:c0:22:36:7f:5f:4d:f5:ca:01:c4: 92:0e:ef:c8:70:7d:a0:5a:99:4b:2f:bc:ba:67:20:58:03:58: ec:02:31:0d:af:99:e9:dd:43:75:3d:fd:d4:60:61:74:d3:24: 76:4d:f7:a7:4e:cb:87:13:ed:ff:59:50:93:15:94:85:e8:92: a9:ae:87:2c:90:fb:f5:a1:a5:e3:52:f6:4e:8b:1c:31:8d:fb: 66:20:1d:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+f7OLHc2l1+k9GJ5z3QpzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYwNjEzMDEwMTQwWhcNMjYwNjE0MDEwMTQwWjAzMTEwLwYDVQQD EygzZjZjNDVkOTRmMjc0ODBkYjc1NmQxMWRhOGM4NzY4ZWIyZWE5ZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zxaWmoVY8CWzXe8nWaVkh8BYiR3 9/wDVNwcgYIs5VZVqmDhMqWMkf+CdbykjzeND5q/tfq1WZn7vi492/NGAEHQSjj4 mWHqRNlNC+VwKtsKQbqlEB6v8u4bkav2Kx+aK2A1TPpb4W5Q1kIywABh+iJtGYER Ap2GLWre5fd9j2W5LBaFaQZRZ1fEH1dQmy2lgV21HPvMeKd2DDWKGCJ69ebu90hd nJvUGchibHWJDh5TKQr+bnvHOtGUeuHziqIX3Ac7NFb+/rkIQOeORapG2nF6aDr6 dObehsPHomIEYChJHCmuf5FfQNMmGv3KS+D2X+VBwuR24ZE6C3wImGDoUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9sRdlPJ0gNt1bRHajIdo6y6p9PMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaE6A2CLc duo6II5KJIBZL8aW7pPJTqBargltBRH/qVCsx2XpqlMFsRfAKQdOjRCtr65MfaVx 2sy78Xxy9nq2bYJySOLlYGGdq+bcaNER/bFclBwOqwhe6oTQGOubNqUowU/fI4v2 tAZYj2HMM87pvGzfsboawTv5OyhGKYTAV2ZOcf6pKH/UhTHpnw7aK6UbYaK7PkMf G547i2xujd35ZwS7ZM+qSZrNhd3AIjZ/X031ygHEkg7vyHB9oFqZSy+8umcgWANY 7AIxDa+Z6d1DdT391GBhdNMkdk33p07LhxPt/1lQkxWUheiSqa6HLJD79aGl41L2 ToscMY37ZiAd/w== -----END CERTIFICATE-----Generated at Sat Jun 13 07:02:58 2026 by rpki-client