$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: 6NObUv38bCCrmOowmX0wi2jXi2xqPdxU1hILahWRoJs= Subject key identifier: 19:C6:7F:38:2A:CE:75:35:E4:D4:C2:77:0F:86:77:20:BA:DE:AA:2B Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019CAA21E385F2829D5FC9BB123627FB4992 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 0FCA Signing time: Sun 01 Mar 2026 16:01:13 +0000 Manifest this update: Sun 01 Mar 2026 16:01:13 +0000 Manifest next update: Mon 02 Mar 2026 16:01:13 +0000 Files and hashes: 1: 068J9u-9DPhKz8VbAm8FpNPGPiY.roa (hash: +esb9M5j9IV22LJzyQWkhthxawZuVqPAoDThaS1QtUo=) 2: 4aCYY0RGaMja-Pk9etkR8koJ5JU.roa (hash: p1rgNiymQ5hiACbuTSCO2Aa2mJXgovikostXrp6lnp8=) 3: 8Hr1uTYn9-iLvJsHdtsL5Jf3hZg.roa (hash: ALf2f0JzISd3UyPZWmsk9XvraX01Mwn8kdYoc4TunL8=) 4: QIQmOYwmYDAmuGNr99m8HLlWChU.roa (hash: 2hFXRY7xApUSUGmkWAKEi1tCNtzyuPD0Q8qiUj/opMw=) 5: S0BwxWcqnvcnEM3DVc0X9YdrdPo.roa (hash: uwh+KVLjYLc/tsdsAb1OMYcg/EazB1FNjXbBEbvCAjY=) 6: TUnjPhJqb6nHWdMSJm2IQNPN7R4.roa (hash: yclmIClXa122Jcmp1p7RvivtWXCLIncvPj+GO52o/+Q=) 7: TWpdkEiEwPnnmy1gI4S2ecWAtfw.roa (hash: keC4DPfND+6pSZeqKWzc/4DTNiqlY2LM6I7p5oKMnSA=) 8: V1dXjVL5eg8gDJxHqKz0eodPkis.roa (hash: oAVjG8l8qEsvrM53r2r+TaJaOK1tsDjY980E/tUbOKw=) 9: WOAffnwybG4qj9V7edyDhpSbDkQ.roa (hash: ycSdSma33JvpNylbgkwuYkr1DaAfpIkfLpSIfBA6Am8=) 10: X1bpbfnEeWysnkVlNQYpli_JB9U.roa (hash: z2gfYvH3Y3eC1HsP9BRSds53oOJzBhG8NMfygnzQq2s=) 11: YRx8EHXTnk19suEZ5MdjZLvthD4.roa (hash: f1uu4Q6sKxpubMRge9Krsyj0AjM6jQFck1/ysuErkPE=) 12: Zaa1ETdAWKfFJ07i5VWdeKJq1Y8.roa (hash: HTBLtFAfHFVHfxP1ldP56H7tmRP+j3VLoPGVIHLY2sI=) 13: ZryCLfhsn2tbfNcOOBqTDrmtBr4.roa (hash: s6nWvNWtX9EXW2C5iu+kYBDobKWsqyYEDZBG1jZg8kw=) 14: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: SOk8ZN9WKQrrl6kQPXnLy0CAORAHBWom+U06lTsZIZ0=) 15: c8aFpg0oDJPJr8YxoPyUowCp72w.roa (hash: A4RFx1AiKZ9qAuLnKI/kLje5lq85vzOaUZpB4kC1WNQ=) 16: gxo_Krn-tQ_Z3uSlx4SQJvS2R_Y.roa (hash: v4kU1V7WuMllKhANWEP+pXEZ9tPT1PxzJDS6a6AIcxI=) 17: od_vNFdzyPTihlWXgx3lhAcGfYw.roa (hash: w0LnuSD3Z5yjYPNxEpqk8u/+1Ashm8kvNdbgDEz9Ixs=) 18: ryfEVRKZnK1jVhVaw9sfrzHqLCM.roa (hash: r6enxmx5xQGmlOEDSFrMxun8mtTQGChD+RDV9jYpnaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:21:e3:85:f2:82:9d:5f:c9:bb:12:36:27:fb:49:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Mar 1 16:01:13 2026 GMT Not After : Mar 2 16:01:13 2026 GMT Subject: CN=19c67f382ace7535e4d4c2770f867720badeaa2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7b:d9:ff:73:06:c6:e1:8b:2b:65:c9:9e:6d: d3:b7:98:ca:9c:31:d7:37:20:0c:4e:12:c4:c4:8c: 0e:a1:2d:54:48:43:cc:38:9e:b5:f1:2d:b1:70:9d: e9:7f:f2:dd:f2:99:a7:47:5e:bf:86:87:b7:9f:9c: 71:41:c6:78:9c:70:61:02:54:d1:3e:a0:ee:71:0e: 35:2a:54:87:6a:a3:5b:ee:0b:94:2a:62:51:02:00: 61:dc:ac:22:e4:08:a9:02:63:98:fa:77:33:28:15: 45:75:1f:84:f2:78:3a:7f:ef:62:9b:01:06:aa:07: 80:4f:8d:07:b7:10:24:45:82:bf:53:35:60:36:dc: 0a:61:8d:41:1a:ac:d5:45:df:9f:ae:a4:a8:86:3b: f3:e7:d5:09:1a:31:0c:a6:57:71:2b:0a:9a:d9:bf: 03:3c:1f:d9:46:1d:f8:b0:1b:c2:21:e6:50:0c:9a: 82:0a:fd:87:33:f2:26:42:c6:e5:09:90:3b:93:3d: b6:02:29:87:c1:2f:92:27:12:55:7a:32:e4:0c:31: e4:29:5f:e3:f0:38:e9:ef:3a:fe:cd:1e:9b:1f:d7: b7:d6:f7:2b:af:45:b5:b4:92:a7:76:06:da:a0:f8: 34:46:e6:cc:70:21:9c:79:93:fb:2f:c8:c6:4c:d7: b6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C6:7F:38:2A:CE:75:35:E4:D4:C2:77:0F:86:77:20:BA:DE:AA:2B X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:bd:74:3e:70:28:35:e8:1e:de:af:6b:72:e5:38:01:ca:f4: 49:20:2b:dc:46:e4:51:e5:37:8a:8e:93:36:6b:2f:b1:31:d4: c7:aa:80:45:d9:34:9c:81:b1:1a:19:30:b7:ad:45:3b:cb:d0: ce:d9:06:e0:a1:fa:e3:86:5d:4f:5f:3d:08:64:c2:30:9b:a4: df:f0:a8:2e:9b:84:7d:81:42:82:02:47:e3:52:c8:0c:19:88: 8c:d9:1b:f3:0f:ea:2d:63:03:67:88:b6:c2:a7:bd:42:ea:45: 17:ba:85:bd:dc:7d:ae:e8:7e:64:12:0c:85:9b:74:7e:8d:8b: 12:3a:25:0f:d9:ee:30:68:a7:8c:ff:12:c4:ef:73:4d:f3:1c: 55:75:27:7b:03:23:19:e9:b4:00:8f:4c:f4:c8:5d:06:f2:3f: 9a:06:bf:cf:15:12:11:50:e8:86:9c:b5:49:ff:1e:18:a5:d0: 1d:e1:e3:97:3b:43:aa:dd:cd:aa:fa:db:0e:47:4e:b1:a3:b8: f7:c4:5f:56:32:57:43:da:43:4d:76:46:dc:ae:97:b1:a1:f7: 8f:92:b4:2e:88:61:f7:ce:60:b6:48:a7:85:1a:a0:28:4f:ae: 1a:a9:d5:64:ad:0f:5f:e6:22:eb:11:0b:fd:aa:9b:08:0d:f9: 4f:af:1e:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqIeOF8oKdX8m7EjYn+0mSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYwMzAxMTYwMTEzWhcNMjYwMzAyMTYwMTEzWjAzMTEwLwYDVQQD EygxOWM2N2YzODJhY2U3NTM1ZTRkNGMyNzcwZjg2NzcyMGJhZGVhYTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XvZ/3MGxuGLK2XJnm3Tt5jKnDHX NyAMThLExIwOoS1USEPMOJ618S2xcJ3pf/Ld8pmnR16/hoe3n5xxQcZ4nHBhAlTR PqDucQ41KlSHaqNb7guUKmJRAgBh3Kwi5AipAmOY+nczKBVFdR+E8ng6f+9imwEG qgeAT40HtxAkRYK/UzVgNtwKYY1BGqzVRd+frqSohjvz59UJGjEMpldxKwqa2b8D PB/ZRh34sBvCIeZQDJqCCv2HM/ImQsblCZA7kz22AimHwS+SJxJVejLkDDHkKV/j 8Djp7zr+zR6bH9e31vcrr0W1tJKndgbaoPg0RubMcCGceZP7L8jGTNe2iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnGfzgqznU15NTCdw+GdyC63qorMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACL10PnAo Nege3q9rcuU4Acr0SSAr3EbkUeU3io6TNmsvsTHUx6qARdk0nIGxGhkwt61FO8vQ ztkG4KH644ZdT189CGTCMJuk3/CoLpuEfYFCggJH41LIDBmIjNkb8w/qLWMDZ4i2 wqe9QupFF7qFvdx9ruh+ZBIMhZt0fo2LEjolD9nuMGinjP8SxO9zTfMcVXUnewMj Gem0AI9M9MhdBvI/mga/zxUSEVDohpy1Sf8eGKXQHeHjlztDqt3NqvrbDkdOsaO4 98RfVjJXQ9pDTXZG3K6XsaH3j5K0Lohh985gtkinhRqgKE+uGqnVZK0PX+Yi6xEL /aqbCA35T68eOQ== -----END CERTIFICATE-----Generated at Sun Mar 1 18:12:14 2026 by rpki-client