$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: 3naxVhqQzhmqNCCByGmfjTrREIl9UanTw0AuWpmVp7k= Subject key identifier: E6:68:B7:DA:CD:00:86:E3:29:BE:AD:A0:8B:B3:14:3B:63:44:2B:88 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019CAB6B1DFA5AA5C8319A0243F9A608826B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 0671 Signing time: Sun 01 Mar 2026 22:00:49 +0000 Manifest this update: Sun 01 Mar 2026 22:00:49 +0000 Manifest next update: Mon 02 Mar 2026 22:00:49 +0000 Files and hashes: 1: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: lzLCk82XLKCKaupqUQAxmu+0VHXiEbtiF4bdW/JR2Jg=) 2: 3MMGuyxk5BA1h4yKFwGuekYBWpE.roa (hash: qDDPw4rjqe8Of6FqTmZ8vNfrRu70pioyOFhkznkxbn0=) 3: 7PMwWghG1f2GH2kcgJJT1T19mKA.roa (hash: iSWM8zD4dnBfc8rm3hdCfD29wpDU7MXGImntX+CzTys=) 4: CUZDkD-NcFvyMKKqxpqKTImWldI.roa (hash: BjgaQINh/o8BqluKWpCRQpHRBGijPayFIzTWLEZZ+ZQ=) 5: Dhrq3603FXAC1wqjo20wzUmr4F8.roa (hash: 93F+LmWkBd0KITwFzxwwnm7wh1Nm582E0rUj/2gWiKA=) 6: DlLXddAis5e2NiYpDlPFgCC2fqQ.roa (hash: wChHj1a1SOAqKO2XbDKNiJzmDLWZ4VK+PUQtszQXCaA=) 7: aoX3qgSrCGpVmGI2-sNdQlbBEmo.roa (hash: fUASGNwLnomXxmckWPpEyeY/fBQ9vTiFVyQieAo28z4=) 8: cojKfvUL96n8v0NW6xv7i34QuKg.roa (hash: lYPKoP4F96eul1kxPLkPqkS5F4CgrEIREjfk+V+jg3o=) 9: f-9ciEqv18Kub9fxi8gMgTEDiN8.roa (hash: ys7Se75WP1iZvGd8oeyIka2FlXVNvmTKA8g4Bz+pUFE=) 10: pPL6_ILH_OSb0uend9BsYY1M5zM.roa (hash: uPRcSj9Qet/R5RDAAlJ1xCgadEw0HnsrDGUuZztgzUc=) 11: qse_CjeAhZ5mrJaaeqQbXdzwq6c.roa (hash: DcaCDcXxQuFqUhYc0T6gyos8/cyyoYS+q0uMnwfEmhU=) 12: qvL5cNpCo_XaFCNykh7Gx2HPj7A.roa (hash: Je87v5hgNV1x62aPiR7j/Cjy7ey6GNmVdBbyWoayWLE=) 13: rtaxspuDF4uli6my-kG3x-CfzyM.roa (hash: Mbr6HPYPHlUpdc2sSsGgV2VBSnLTCf311AToZ6BeZWw=) 14: sRTNLbJ3g2jrnoN7xO2uBbfWguU.roa (hash: 97xAwvGhhXW1GC5fGvIVMkcoGK7MfJbMcwrs0H6Prc8=) 15: sSEuPuJKSwvGPl8OYtUAbNgjLFs.roa (hash: t6MnFRdD+DMOOopxl5hauoDky6UirAHK0zqLM5bjQWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:6b:1d:fa:5a:a5:c8:31:9a:02:43:f9:a6:08:82:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Mar 1 22:00:49 2026 GMT Not After : Mar 2 22:00:49 2026 GMT Subject: CN=e668b7dacd0086e329beada08bb3143b63442b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:7d:14:fd:73:a0:02:d3:5d:76:bd:46:10: a1:f5:67:1d:c8:4f:14:7c:1e:a5:a2:38:4b:d1:4f: b6:93:49:7d:09:8c:37:11:c5:8e:f4:7b:fb:d4:7c: 92:0f:32:1f:87:59:86:c9:72:76:cb:51:bb:e7:8b: a6:02:05:87:05:73:70:f7:52:de:3b:c6:00:4e:23: 46:05:ab:9d:2a:75:6b:e1:45:b5:fe:e3:6a:29:87: e5:84:be:11:73:e3:5a:b5:fe:04:42:42:40:43:0d: 2d:83:c8:9e:1e:08:66:75:5a:11:2f:fa:c8:00:98: d6:57:93:30:55:c1:1c:8d:e9:c8:1d:08:e0:49:01: 86:4a:94:89:4d:26:34:bb:a4:13:08:35:de:b9:bd: 40:53:23:2e:9c:2d:a9:81:8d:79:44:2a:8c:cf:f5: 8a:e1:e0:3d:0b:ca:2f:04:ca:a3:96:63:0f:39:77: 56:f9:bb:aa:30:54:be:8a:eb:ea:71:1f:a3:fa:ab: 1a:15:97:22:a9:d9:4e:27:90:3d:95:34:2f:6d:33: 64:c9:35:a3:f9:50:da:fb:3f:5b:8d:ce:ab:1a:23: 9d:93:90:78:1c:61:1b:ac:6d:ad:80:be:0a:45:aa: 65:17:01:86:cd:6c:a6:ff:5d:45:94:36:dd:99:d7: e7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:68:B7:DA:CD:00:86:E3:29:BE:AD:A0:8B:B3:14:3B:63:44:2B:88 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3d:17:cf:7d:43:ee:33:24:91:b4:b4:86:99:f1:60:48:8e: 39:4c:51:d6:3d:e4:0e:34:e5:fc:8f:f4:a5:79:15:e9:87:2a: 30:02:ee:a9:cf:41:59:0a:88:42:ea:bc:34:6b:cf:af:e2:d1: 43:35:0a:a4:32:e2:13:30:57:c9:52:49:b1:63:68:22:9d:34: 1d:8c:43:76:a5:86:11:62:6b:ac:e3:16:e9:a4:d8:fe:fa:22: ad:30:6d:b1:3e:39:9d:d7:c8:45:33:e1:28:ee:ae:80:6a:66: 00:26:b1:bf:46:f9:04:55:49:f1:b5:1d:fd:0e:77:98:ba:50: 09:fd:8b:54:b9:28:8f:17:e5:eb:b6:d6:8d:f5:c9:67:b8:33: ec:d7:ae:a4:29:48:db:57:61:0a:5f:06:d7:2c:f6:da:8b:47: 72:d4:44:78:e5:51:4d:5a:d7:3b:1c:9b:e7:6d:4c:1b:7c:cb: b7:cc:65:51:fa:5f:cb:04:e6:29:00:b6:cd:0c:db:bc:29:cd: 26:f4:05:09:68:0a:6c:59:0c:bf:9d:0c:c1:fe:94:d0:07:18: d7:48:d0:95:1a:13:f3:ee:27:8f:80:62:e1:a0:da:06:07:f0: 2b:f5:3c:14:3d:f7:e6:ee:83:7c:62:7e:15:d2:02:3f:e1:3b: b7:29:83:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrax36WqXIMZoCQ/mmCIJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwMzAxMjIwMDQ5WhcNMjYwMzAyMjIwMDQ5WjAzMTEwLwYDVQQD EyhlNjY4YjdkYWNkMDA4NmUzMjliZWFkYTA4YmIzMTQzYjYzNDQyYjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtl9FP1zoALTXXa9RhCh9WcdyE8U fB6lojhL0U+2k0l9CYw3EcWO9Hv71HySDzIfh1mGyXJ2y1G754umAgWHBXNw91Le O8YATiNGBaudKnVr4UW1/uNqKYflhL4Rc+Natf4EQkJAQw0tg8ieHghmdVoRL/rI AJjWV5MwVcEcjenIHQjgSQGGSpSJTSY0u6QTCDXeub1AUyMunC2pgY15RCqMz/WK 4eA9C8ovBMqjlmMPOXdW+buqMFS+iuvqcR+j+qsaFZciqdlOJ5A9lTQvbTNkyTWj +VDa+z9bjc6rGiOdk5B4HGEbrG2tgL4KRaplFwGGzWym/11FlDbdmdfnmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZot9rNAIbjKb6toIuzFDtjRCuIMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAED0Xz31D 7jMkkbS0hpnxYEiOOUxR1j3kDjTl/I/0pXkV6YcqMALuqc9BWQqIQuq8NGvPr+LR QzUKpDLiEzBXyVJJsWNoIp00HYxDdqWGEWJrrOMW6aTY/voirTBtsT45ndfIRTPh KO6ugGpmACaxv0b5BFVJ8bUd/Q53mLpQCf2LVLkojxfl67bWjfXJZ7gz7NeupClI 21dhCl8G1yz22otHctREeOVRTVrXOxyb521MG3zLt8xlUfpfywTmKQC2zQzbvCnN JvQFCWgKbFkMv50Mwf6U0AcY10jQlRoT8+4nj4Bi4aDaBgfwK/U8FD335u6DfGJ+ FdICP+E7tymDIA== -----END CERTIFICATE-----Generated at Mon Mar 2 04:06:27 2026 by rpki-client