$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: Vdq25OizXMPGEO4NpBWLHeQbwJ7Z4LtGwEWBzC/9dXw= Subject key identifier: 02:2B:57:E9:C0:AC:C9:23:E0:CD:C2:74:CD:0E:23:5B:E8:04:F0:72 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019EBFC91C53291AB291DD8FDDC52AA02919 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 03AA Signing time: Sat 13 Jun 2026 07:01:28 +0000 Manifest this update: Sat 13 Jun 2026 07:01:28 +0000 Manifest next update: Sun 14 Jun 2026 07:01:28 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: VJykBtEFkGGlR+MuD5SyYDvzSLC4jxESUHnUWYn/kk0=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 5: O0NaR63qYEYkKBX6khhH3sfwhso.roa (hash: lovVJhahsHXLyNDHuxIILDmOwnsX5JTEWJRzVms+kRw=) 6: O203bP1wCT1tFTJWpeV4GwvRr-E.roa (hash: M8T4zxdIfcPsrQz2e4NE8yV9cJaheu4EatHoWhBRGz0=) 7: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 8: Wy86CL2f4xLjz0vPQHZzN8a8unY.roa (hash: cXavtY5dvsiYw1vJsFA6Wzgu2etlowE0a/3vzxx5WuA=) 9: buFP3YQ0XQZEaAumgm6mnH5J-yE.roa (hash: AaWeY9oJG2eNuVhrXCNjBk4XbOhPTbIi+u4Z+27Es7I=) 10: gDGMFnBJLD30qto-o_gnRyl9xIo.roa (hash: IYpXszgMmGmDCIE7wSyYNrq3lEstGhkc0XA0OwHmr9A=) 11: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 12: ohXUok_zW7NMmajjFQxMHMt_T0Y.roa (hash: BmIJzfQHz5sgq48QzLBSe6fOOMb8+aHYQoGWrM4uQdc=) 13: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 14: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) 15: xiLzKMbsP2hR2dinGnnh2ffYdNg.roa (hash: UNKk8UicZLwGLHFDEuUZ+yTryGyRHEhcFM6P+iXQVAg=) 16: xxc5xAyMxoRB0JYyqslJ3UmSDU0.roa (hash: 5NnOEcjd27P4vZWaJoKJUxgy0CmbiwJxaZCUGTIypGs=) 17: zO5zaPfAU_WOrCSlNRCPHYyExaQ.roa (hash: 3A28xy/zcM7UqXUvvI8yJ+JLhZsOGWIKL5lp3c/NVyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:c9:1c:53:29:1a:b2:91:dd:8f:dd:c5:2a:a0:29:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Jun 13 07:01:28 2026 GMT Not After : Jun 14 07:01:28 2026 GMT Subject: CN=022b57e9c0acc923e0cdc274cd0e235be804f072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7a:6c:52:65:1b:54:8e:03:77:18:d4:de:a4: 5a:03:21:e4:94:dd:0c:0c:22:81:2f:d9:d3:77:fe: eb:e5:bd:4b:b8:f5:63:ad:ff:79:3e:ff:7d:2c:1d: ba:7c:07:87:71:5b:16:7e:15:30:04:3a:ce:c5:5c: 31:ee:6c:81:3b:19:ce:d8:61:dc:40:cb:79:3d:d6: b4:f4:4a:74:ab:a0:de:26:df:cd:21:eb:96:03:68: 78:5b:6f:a0:13:c1:e5:3d:16:d1:1a:ca:19:04:5f: 0d:63:8c:d3:60:8e:2d:84:e0:70:33:49:c1:1c:eb: 37:81:e7:91:b8:19:eb:1b:37:93:fc:5c:4f:76:d0: e3:87:c2:8d:29:d3:c0:a7:9c:55:4b:b6:d2:c9:da: 30:ce:02:fa:42:bd:52:6c:a5:bf:f1:73:c5:8b:48: 6b:3f:75:66:ec:47:7a:f1:e3:46:9d:2b:9d:d2:38: 79:e8:68:23:76:3e:09:f6:7a:63:b9:f5:c1:fa:d4: 19:d9:b6:a9:71:8d:5b:f5:55:58:4c:16:59:b9:af: 1e:34:bd:82:0e:c6:02:7f:94:dd:1d:11:a2:a1:8f: 96:c2:89:31:28:df:ad:fe:c4:d2:f1:9b:0b:c0:18: e5:7b:95:56:8b:36:c2:28:05:16:6c:45:45:ca:90: c8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2B:57:E9:C0:AC:C9:23:E0:CD:C2:74:CD:0E:23:5B:E8:04:F0:72 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:a3:91:10:40:71:87:dd:61:64:bc:6c:b2:0c:40:0d:7f:7f: 5c:2e:be:21:67:5d:ad:b6:ca:94:7b:56:47:80:43:e8:31:68: 60:98:a0:4b:c3:8f:55:74:28:d8:70:af:67:c2:28:2e:c8:ec: 5e:87:98:97:08:1a:36:80:26:e0:15:fd:4c:af:5d:8a:4c:58: 8c:57:5d:d0:4e:e3:27:8b:c0:85:f0:f2:96:d7:26:59:54:98: f3:62:fd:e8:86:0d:7f:5a:a7:25:8c:78:ba:88:88:67:f8:e3: bd:89:c1:fe:0c:36:60:64:92:11:c3:8d:1d:36:82:50:29:d9: 8f:2d:bb:f6:1e:1e:b5:fe:34:0d:83:88:18:db:76:cc:b1:d9: 88:da:ba:99:57:a9:f6:84:1a:6d:86:47:61:70:8d:f9:36:9b: 5c:63:e6:cb:1a:3b:8d:62:ec:8c:d2:37:c3:03:28:8f:9a:c4: 71:14:39:53:ef:fc:38:25:33:23:74:bf:1c:7f:da:da:88:ff: 68:87:c6:5d:75:39:7d:5e:89:89:1d:f7:6f:cd:97:a3:52:ab: bc:4a:ad:26:3b:d3:b1:df:c2:a8:9c:db:ea:48:68:c9:60:63: 31:a5:7e:86:d4:d2:3e:9b:bd:2b:23:87:91:99:b9:c5:eb:27: c7:52:74:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/yRxTKRqykd2P3cUqoCkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwNjEzMDcwMTI4WhcNMjYwNjE0MDcwMTI4WjAzMTEwLwYDVQQD EygwMjJiNTdlOWMwYWNjOTIzZTBjZGMyNzRjZDBlMjM1YmU4MDRmMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHpsUmUbVI4DdxjU3qRaAyHklN0M DCKBL9nTd/7r5b1LuPVjrf95Pv99LB26fAeHcVsWfhUwBDrOxVwx7myBOxnO2GHc QMt5Pda09Ep0q6DeJt/NIeuWA2h4W2+gE8HlPRbRGsoZBF8NY4zTYI4thOBwM0nB HOs3geeRuBnrGzeT/FxPdtDjh8KNKdPAp5xVS7bSydowzgL6Qr1SbKW/8XPFi0hr P3Vm7Ed68eNGnSud0jh56Ggjdj4J9npjufXB+tQZ2bapcY1b9VVYTBZZua8eNL2C DsYCf5TdHRGioY+WwokxKN+t/sTS8ZsLwBjle5VWizbCKAUWbEVFypDIpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIrV+nArMkj4M3CdM0OI1voBPByMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6OREEBx h91hZLxssgxADX9/XC6+IWddrbbKlHtWR4BD6DFoYJigS8OPVXQo2HCvZ8IoLsjs XoeYlwgaNoAm4BX9TK9dikxYjFdd0E7jJ4vAhfDyltcmWVSY82L96IYNf1qnJYx4 uoiIZ/jjvYnB/gw2YGSSEcONHTaCUCnZjy279h4etf40DYOIGNt2zLHZiNq6mVep 9oQabYZHYXCN+TabXGPmyxo7jWLsjNI3wwMoj5rEcRQ5U+/8OCUzI3S/HH/a2oj/ aIfGXXU5fV6JiR33b82Xo1KrvEqtJjvTsd/CqJzb6khoyWBjMaV+htTSPpu9KyOH kZm5xesnx1J0fw== -----END CERTIFICATE-----Generated at Sat Jun 13 13:17:17 2026 by rpki-client