$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: qbhKf0/mmHOe8D3w+OCSzJlpEPMKZCaq1HSW5/V/rPo= Subject key identifier: 65:B6:8F:CD:96:D3:C5:50:14:1C:E6:00:CB:A6:29:84:E5:97:59:DE Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019DA48B6E900CCF0C2787DE7F0A1926A78B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 06F2 Signing time: Sun 19 Apr 2026 07:01:34 +0000 Manifest this update: Sun 19 Apr 2026 07:01:34 +0000 Manifest next update: Mon 20 Apr 2026 07:01:34 +0000 Files and hashes: 1: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: HP2CRgPfR9YmhShYaXhAguk3CKsXsJZpqqGqV+RkSBs=) 2: 3MMGuyxk5BA1h4yKFwGuekYBWpE.roa (hash: qDDPw4rjqe8Of6FqTmZ8vNfrRu70pioyOFhkznkxbn0=) 3: 7PMwWghG1f2GH2kcgJJT1T19mKA.roa (hash: iSWM8zD4dnBfc8rm3hdCfD29wpDU7MXGImntX+CzTys=) 4: CUZDkD-NcFvyMKKqxpqKTImWldI.roa (hash: BjgaQINh/o8BqluKWpCRQpHRBGijPayFIzTWLEZZ+ZQ=) 5: Dhrq3603FXAC1wqjo20wzUmr4F8.roa (hash: 93F+LmWkBd0KITwFzxwwnm7wh1Nm582E0rUj/2gWiKA=) 6: DlLXddAis5e2NiYpDlPFgCC2fqQ.roa (hash: wChHj1a1SOAqKO2XbDKNiJzmDLWZ4VK+PUQtszQXCaA=) 7: aoX3qgSrCGpVmGI2-sNdQlbBEmo.roa (hash: fUASGNwLnomXxmckWPpEyeY/fBQ9vTiFVyQieAo28z4=) 8: cojKfvUL96n8v0NW6xv7i34QuKg.roa (hash: lYPKoP4F96eul1kxPLkPqkS5F4CgrEIREjfk+V+jg3o=) 9: f-9ciEqv18Kub9fxi8gMgTEDiN8.roa (hash: ys7Se75WP1iZvGd8oeyIka2FlXVNvmTKA8g4Bz+pUFE=) 10: pPL6_ILH_OSb0uend9BsYY1M5zM.roa (hash: uPRcSj9Qet/R5RDAAlJ1xCgadEw0HnsrDGUuZztgzUc=) 11: qse_CjeAhZ5mrJaaeqQbXdzwq6c.roa (hash: DcaCDcXxQuFqUhYc0T6gyos8/cyyoYS+q0uMnwfEmhU=) 12: qvL5cNpCo_XaFCNykh7Gx2HPj7A.roa (hash: Je87v5hgNV1x62aPiR7j/Cjy7ey6GNmVdBbyWoayWLE=) 13: rtaxspuDF4uli6my-kG3x-CfzyM.roa (hash: Mbr6HPYPHlUpdc2sSsGgV2VBSnLTCf311AToZ6BeZWw=) 14: sRTNLbJ3g2jrnoN7xO2uBbfWguU.roa (hash: 97xAwvGhhXW1GC5fGvIVMkcoGK7MfJbMcwrs0H6Prc8=) 15: sSEuPuJKSwvGPl8OYtUAbNgjLFs.roa (hash: t6MnFRdD+DMOOopxl5hauoDky6UirAHK0zqLM5bjQWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a4:8b:6e:90:0c:cf:0c:27:87:de:7f:0a:19:26:a7:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Apr 19 07:01:34 2026 GMT Not After : Apr 20 07:01:34 2026 GMT Subject: CN=65b68fcd96d3c550141ce600cba62984e59759de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:d1:f0:2d:c9:f7:66:9f:ad:20:61:5f:a3: 0c:58:c5:44:b6:22:ca:ed:c5:08:cb:95:96:8f:ef: 58:0f:32:c6:a4:2f:57:85:ae:9e:78:ac:32:58:1e: b7:cb:f2:1c:d4:34:9b:56:57:97:28:35:b4:0a:aa: 40:45:46:47:e8:31:7d:26:7d:80:1e:51:cc:06:dd: 8f:1f:e5:a9:21:28:72:6c:32:bd:d9:1d:3f:22:fc: f8:17:8a:22:28:05:06:77:f6:4d:49:84:09:da:2b: 5f:0c:c8:1a:fe:73:8f:56:2c:1a:66:bb:27:fb:78: 15:d8:47:bf:66:6a:d2:89:99:87:50:9f:84:71:fa: 4f:da:7c:fc:e6:e1:55:f9:00:d7:ab:2a:08:b3:b8: 93:a3:1f:53:5a:31:21:35:f6:03:b2:93:c9:03:8a: 2e:ff:82:a7:10:e9:16:a2:db:05:b4:db:bc:4c:ca: 80:b2:75:1f:47:8d:14:fd:6d:a1:62:02:02:23:e0: b7:e4:19:b9:58:55:08:ba:b0:22:4d:a0:d5:f8:f2: e4:ef:87:de:3f:b7:d0:10:39:0f:03:e2:d9:59:b9: 6b:37:21:9e:67:ee:3c:15:df:55:41:dd:c4:67:62: e2:49:83:88:92:df:a0:db:23:0a:a0:0e:40:af:95: 21:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B6:8F:CD:96:D3:C5:50:14:1C:E6:00:CB:A6:29:84:E5:97:59:DE X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:24:08:b3:9d:a6:c7:d1:33:5c:e5:62:39:3e:3b:bb:05:86: 7b:dd:0a:b6:ed:0b:60:a5:0a:42:56:72:10:4a:87:e9:d1:06: 3d:f0:9a:e1:e3:8b:a4:67:3c:c8:a4:16:c0:e8:b0:51:f4:c6: 0d:a6:75:4a:11:9b:1c:9f:a1:5a:83:ed:19:a0:6c:76:68:82: 30:58:d3:43:17:5c:bb:a3:f0:f1:ea:45:c4:d7:68:28:5e:3b: 99:16:4c:89:d8:45:39:ae:bf:42:4b:16:6a:40:e7:10:fe:74: 4f:ab:e3:43:bc:88:79:b5:8f:b1:7f:a7:ab:3b:22:7c:45:7a: 82:3d:54:4f:4e:41:d9:bf:3b:95:7f:c0:ab:6e:8b:ec:6d:f4: 46:fc:b7:71:04:86:80:52:ed:f4:f4:20:1d:4c:70:a0:9b:28: 00:81:09:89:5c:d4:20:d9:39:df:1c:ca:eb:54:11:42:89:fb: 2a:a5:f5:46:32:ac:dc:4c:44:f3:f8:5e:94:04:13:7b:d5:40: 29:7d:d0:d7:e8:cb:27:a7:a1:d6:6f:a4:8b:8f:e6:e8:cb:72: 0f:3d:20:ab:83:a5:f1:3a:5c:75:a3:76:f7:7b:bd:3e:ff:f3: f0:44:2e:65:a3:d3:fa:45:47:6f:d4:db:f4:df:d3:02:5b:ec: 0b:aa:d3:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ki26QDM8MJ4fefwoZJqeLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwNDE5MDcwMTM0WhcNMjYwNDIwMDcwMTM0WjAzMTEwLwYDVQQD Eyg2NWI2OGZjZDk2ZDNjNTUwMTQxY2U2MDBjYmE2Mjk4NGU1OTc1OWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteXR8C3J92afrSBhX6MMWMVEtiLK 7cUIy5WWj+9YDzLGpC9Xha6eeKwyWB63y/Ic1DSbVleXKDW0CqpARUZH6DF9Jn2A HlHMBt2PH+WpIShybDK92R0/Ivz4F4oiKAUGd/ZNSYQJ2itfDMga/nOPViwaZrsn +3gV2Ee/ZmrSiZmHUJ+EcfpP2nz85uFV+QDXqyoIs7iTox9TWjEhNfYDspPJA4ou /4KnEOkWotsFtNu8TMqAsnUfR40U/W2hYgICI+C35Bm5WFUIurAiTaDV+PLk74fe P7fQEDkPA+LZWblrNyGeZ+48Fd9VQd3EZ2LiSYOIkt+g2yMKoA5Ar5UhkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGW2j82W08VQFBzmAMumKYTll1neMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniQIs52m x9EzXOViOT47uwWGe90Ktu0LYKUKQlZyEEqH6dEGPfCa4eOLpGc8yKQWwOiwUfTG DaZ1ShGbHJ+hWoPtGaBsdmiCMFjTQxdcu6Pw8epFxNdoKF47mRZMidhFOa6/QksW akDnEP50T6vjQ7yIebWPsX+nqzsifEV6gj1UT05B2b87lX/Aq26L7G30Rvy3cQSG gFLt9PQgHUxwoJsoAIEJiVzUINk53xzK61QRQon7KqX1RjKs3ExE8/helAQTe9VA KX3Q1+jLJ6eh1m+ki4/m6MtyDz0gq4Ol8TpcdaN293u9Pv/z8EQuZaPT+kVHb9Tb 9N/TAlvsC6rT4w== -----END CERTIFICATE-----Generated at Sun Apr 19 11:37:43 2026 by rpki-client