$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: G6ltCGKfF57UNsl35a7cbr+QMeElwH5jzdw8VZ5VnCk= Subject key identifier: 25:29:55:87:FD:DD:05:85:6A:E7:B1:1E:67:23:F5:06:CB:24:22:CE Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 01A0C1B154E06E86A997BDD31D2A0EB627EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 04BA Signing time: Mon 21 Sep 2026 02:00:19 +0000 Manifest this update: Mon 21 Sep 2026 02:00:19 +0000 Manifest next update: Tue 22 Sep 2026 02:00:19 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: y4r1HWUfpUPnUpKbCxGpHDihVU2ZcEdEdBQTCrJblCA=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: 6JiMFaxCSZWHlWRw_c0MiJfjbgg.roa (hash: DpTH43Y5uaEsG5bOlwMcZuc/M6XoM1VbvdsQvk86pvc=) 5: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 6: Jnms41a00HHsZAaDUqDwXgA8zzI.roa (hash: RwShvg5rD/0/YSUaAR1xNnjMIINk+nGJ29Ri+9mwEx4=) 7: O0NaR63qYEYkKBX6khhH3sfwhso.roa (hash: lovVJhahsHXLyNDHuxIILDmOwnsX5JTEWJRzVms+kRw=) 8: PfVIpf3243WlCJ9AO0yLbQ2vGPY.roa (hash: fixeB4WnU7AtqSg73SbkUGJ+qRDw66pRPKdzTxkrzIU=) 9: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 10: Wy86CL2f4xLjz0vPQHZzN8a8unY.roa (hash: cXavtY5dvsiYw1vJsFA6Wzgu2etlowE0a/3vzxx5WuA=) 11: ZCawfFiEm8MWLQeXXIOT_dxU1U4.roa (hash: 4aycbuOygi1n+QX+zF05/A01dJNe+YAcN7Ic0dCYPTc=) 12: buFP3YQ0XQZEaAumgm6mnH5J-yE.roa (hash: AaWeY9oJG2eNuVhrXCNjBk4XbOhPTbIi+u4Z+27Es7I=) 13: gDGMFnBJLD30qto-o_gnRyl9xIo.roa (hash: IYpXszgMmGmDCIE7wSyYNrq3lEstGhkc0XA0OwHmr9A=) 14: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 15: mRRVOowOjRXJf-IU2ijf4UY9FbU.roa (hash: vI/jjC9GVOLKY66ayPKNMBj8qyuMxVqslWBZiRL9D0A=) 16: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 17: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) 18: xxc5xAyMxoRB0JYyqslJ3UmSDU0.roa (hash: 5NnOEcjd27P4vZWaJoKJUxgy0CmbiwJxaZCUGTIypGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c1:b1:54:e0:6e:86:a9:97:bd:d3:1d:2a:0e:b6:27:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Sep 21 02:00:19 2026 GMT Not After : Sep 22 02:00:19 2026 GMT Subject: CN=25295587fddd05856ae7b11e6723f506cb2422ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:01:e1:0d:f0:b5:40:5d:00:69:49:d9:ca:a9: 7b:f6:96:07:5d:3b:8d:62:5b:56:66:a5:1e:5c:c7: 7a:51:e2:f3:7a:e7:22:d3:64:bf:96:02:1a:f9:43: 9a:98:f9:60:22:36:2a:f3:9a:16:ce:85:6a:5e:9c: c8:d1:4b:9a:2a:5c:6f:fb:06:64:51:87:66:e3:73: 59:03:11:a4:b0:94:30:92:72:9c:26:d2:93:6f:29: c5:8e:4b:79:6a:0d:0d:6f:94:6b:ac:80:53:2d:fe: cf:78:c3:be:c0:8c:57:c5:f1:18:a2:c8:dd:b0:2d: 84:46:11:3d:fd:a5:33:59:90:54:f3:ff:bf:2b:5d: a0:d3:01:a6:1a:73:43:39:5c:a3:92:f9:e4:51:24: 4d:d0:9c:05:d0:f1:0a:35:69:04:c1:8a:e6:ff:32: 20:d5:77:9f:4f:e0:1c:e6:f0:8e:44:b1:b5:03:73: b6:c4:67:a9:98:c1:cf:3b:3e:d1:70:4d:b1:1b:06: 2c:a5:e6:2d:0a:f8:09:6b:0f:b7:7f:87:5f:61:12: b9:47:0a:6d:9a:2b:c4:b8:cd:c2:83:ad:ab:1c:53: eb:07:82:2c:18:28:5d:1a:a7:db:cc:87:14:9a:ec: 1b:f9:6e:20:1c:4f:23:bc:54:22:f1:a1:c5:7e:d0: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:29:55:87:FD:DD:05:85:6A:E7:B1:1E:67:23:F5:06:CB:24:22:CE X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:cc:ec:ee:f9:d8:da:bb:a9:17:25:a2:47:9b:6f:33:2c:76: 02:18:84:90:7b:06:f2:6e:b7:10:ec:0c:e4:09:6f:2b:18:c8: 76:b6:e3:a0:b2:19:4c:df:8b:05:f5:bb:02:f8:5c:b4:3c:78: 0c:e4:3f:d5:48:a5:3e:75:9e:6f:54:a0:c5:69:ff:9b:d0:4f: 9a:e1:08:c7:2a:01:9f:f5:9c:8c:50:2c:b0:86:9d:ec:bf:97: 57:ca:65:ed:c4:97:e4:48:43:02:e0:ed:fd:8b:26:de:d1:36: 16:b1:81:0b:43:51:e4:91:ac:7d:e0:2f:07:82:fc:7c:1f:8d: 0f:29:8c:07:74:6c:a4:ce:d3:0d:fc:f5:8a:ef:3a:3d:c5:69: 56:9e:9c:d8:3b:1f:3e:32:de:c7:72:c8:4d:f0:42:37:47:5d: 69:92:d3:fa:aa:36:26:8b:cf:97:dc:20:fa:d5:75:f3:c4:e4: 2f:69:d6:b4:84:9b:b7:94:31:e4:ac:f4:27:91:f5:92:23:ca: eb:a7:66:40:38:b5:28:f4:e6:27:a5:e5:71:1b:44:0b:27:a8: dc:b6:16:e7:7e:9d:a3:3e:1c:bd:f2:43:61:e5:f3:31:ac:05: c4:63:4b:c4:f3:ae:b3:fb:c2:54:ed:0a:6a:a1:f1:19:97:38: 5a:fb:b4:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDBsVTgboapl73THSoOtifsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwOTIxMDIwMDE5WhcNMjYwOTIyMDIwMDE5WjAzMTEwLwYDVQQD EygyNTI5NTU4N2ZkZGQwNTg1NmFlN2IxMWU2NzIzZjUwNmNiMjQyMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngHhDfC1QF0AaUnZyql79pYHXTuN YltWZqUeXMd6UeLzeuci02S/lgIa+UOamPlgIjYq85oWzoVqXpzI0UuaKlxv+wZk UYdm43NZAxGksJQwknKcJtKTbynFjkt5ag0Nb5RrrIBTLf7PeMO+wIxXxfEYosjd sC2ERhE9/aUzWZBU8/+/K12g0wGmGnNDOVyjkvnkUSRN0JwF0PEKNWkEwYrm/zIg 1XefT+Ac5vCORLG1A3O2xGepmMHPOz7RcE2xGwYspeYtCvgJaw+3f4dfYRK5Rwpt mivEuM3Cg62rHFPrB4IsGChdGqfbzIcUmuwb+W4gHE8jvFQi8aHFftCnVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUpVYf93QWFauexHmcj9QbLJCLOMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMzs7vnY 2rupFyWiR5tvMyx2AhiEkHsG8m63EOwM5AlvKxjIdrbjoLIZTN+LBfW7AvhctDx4 DOQ/1UilPnWeb1SgxWn/m9BPmuEIxyoBn/WcjFAssIad7L+XV8pl7cSX5EhDAuDt /Ysm3tE2FrGBC0NR5JGsfeAvB4L8fB+NDymMB3RspM7TDfz1iu86PcVpVp6c2Dsf PjLex3LITfBCN0ddaZLT+qo2JovPl9wg+tV188TkL2nWtISbt5Qx5Kz0J5H1kiPK 66dmQDi1KPTmJ6XlcRtECyeo3LYW536doz4cvfJDYeXzMawFxGNLxPOus/vCVO0K aqHxGZc4Wvu02Q== -----END CERTIFICATE-----Generated at Mon Sep 21 10:11:26 2026 by rpki-client