$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: 7t+zf6+j+h2ruLk+8//Zt2fnp6qQB47hQ784ON7NsAg= Subject key identifier: F1:AD:42:5B:AD:DE:EA:B2:23:DF:3C:E0:6C:A3:94:CC:28:D7:E0:C7 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019CA9B3AED983609386A2FEC74E1B7175C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 0291 Signing time: Sun 01 Mar 2026 14:00:51 +0000 Manifest this update: Sun 01 Mar 2026 14:00:51 +0000 Manifest next update: Mon 02 Mar 2026 14:00:51 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: a19CJQGSEbOB9wCOQNXMzTCvOvM7/PFUXsQUW6QKLG8=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 5: O0NaR63qYEYkKBX6khhH3sfwhso.roa (hash: lovVJhahsHXLyNDHuxIILDmOwnsX5JTEWJRzVms+kRw=) 6: O203bP1wCT1tFTJWpeV4GwvRr-E.roa (hash: M8T4zxdIfcPsrQz2e4NE8yV9cJaheu4EatHoWhBRGz0=) 7: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 8: Tm68QJ2snSiuZawcjur25m8_gQQ.roa (hash: DaUiCgZt3YWuCz48bPSV79DF4D1Dc2incnzoilZzt30=) 9: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 10: ohXUok_zW7NMmajjFQxMHMt_T0Y.roa (hash: BmIJzfQHz5sgq48QzLBSe6fOOMb8+aHYQoGWrM4uQdc=) 11: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 12: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) 13: xiLzKMbsP2hR2dinGnnh2ffYdNg.roa (hash: UNKk8UicZLwGLHFDEuUZ+yTryGyRHEhcFM6P+iXQVAg=) 14: xxc5xAyMxoRB0JYyqslJ3UmSDU0.roa (hash: 5NnOEcjd27P4vZWaJoKJUxgy0CmbiwJxaZCUGTIypGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:b3:ae:d9:83:60:93:86:a2:fe:c7:4e:1b:71:75:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Mar 1 14:00:51 2026 GMT Not After : Mar 2 14:00:51 2026 GMT Subject: CN=f1ad425baddeeab223df3ce06ca394cc28d7e0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:54:62:e4:86:87:b3:d6:e3:4c:0d:c5:ac:76: 1a:ca:69:d6:49:49:d9:b1:ca:f3:e9:00:73:8a:a8: c1:85:c7:8c:e5:03:e8:96:e8:20:a9:16:08:0a:46: f4:fa:08:68:ba:1f:a7:89:87:44:01:d4:0d:cf:ac: 97:23:b9:5d:22:71:be:b9:0f:eb:d8:31:9f:58:17: 88:ce:9e:3a:57:1b:94:5e:2b:cb:8f:86:b1:cc:56: aa:d8:b1:d2:2f:d3:55:c6:94:d3:6d:31:3d:1b:52: 4e:b6:1f:75:3b:6d:1c:a7:ea:d3:bd:21:fa:e6:8c: b9:4a:a8:75:d6:d9:17:fd:ed:34:ef:8c:55:a5:54: e5:00:76:c8:4b:84:bf:41:e1:2b:7c:b2:b2:f2:3f: 97:6d:b6:0d:26:d5:d7:96:a1:73:8a:55:e6:62:7c: 4c:8e:0b:b0:20:ea:35:f5:f2:24:80:33:37:15:06: 80:32:92:05:3f:8c:7b:25:c8:da:f7:47:33:19:9d: 90:92:7d:52:f4:11:1c:69:ad:87:f1:cb:45:10:02: 9a:7d:bb:82:52:a6:6d:1f:8a:9b:b4:82:6c:ea:a0: 1d:5b:56:71:77:9b:ca:1c:cd:83:93:77:f8:e7:ee: 9f:31:53:dd:24:b8:91:e5:16:c1:d3:89:dd:62:2d: 9e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AD:42:5B:AD:DE:EA:B2:23:DF:3C:E0:6C:A3:94:CC:28:D7:E0:C7 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:bf:d3:b3:93:6c:25:e6:43:a3:a7:83:74:72:1c:c1:9a:0b: 9f:ea:3d:fb:bd:39:4c:88:c2:5f:3b:56:52:16:62:0c:90:98: bc:2f:c0:78:f0:48:eb:16:88:61:0c:23:bd:c6:c5:f6:44:26: 80:bb:a2:7b:53:41:e2:00:29:a5:6a:70:0b:d0:6c:23:db:60: 59:d1:67:53:d9:21:4d:31:cc:9b:51:3d:1b:75:d2:58:4c:b7: c5:b3:f8:8f:63:a2:7e:a9:01:43:8c:91:1c:ed:db:c8:34:a8: cd:e3:ff:a7:6c:4e:14:c6:26:40:96:11:f2:23:d8:ce:0a:4a: 0a:73:e0:38:cd:64:be:86:cb:55:97:ac:9d:09:17:1e:81:59: 11:e5:be:95:e0:6b:dd:c6:16:5d:4c:bc:c4:78:7a:31:56:e9: 9d:3f:3b:70:3b:21:f2:7f:ee:a2:38:ef:6e:5b:83:6f:e6:a6: 5d:dc:28:a6:74:73:10:69:6f:90:71:12:eb:d6:1a:93:20:45: a0:84:0f:98:c8:c9:ce:94:85:2c:9f:1c:da:3f:1e:65:57:99: 95:64:ba:22:85:ae:3f:34:3f:fe:f0:c9:78:b3:05:df:39:fe: ab:5c:0e:dc:b9:13:c6:76:90:2f:98:14:e1:36:79:ec:5d:d4: 76:96:22:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyps67Zg2CThqL+x04bcXXCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwMzAxMTQwMDUxWhcNMjYwMzAyMTQwMDUxWjAzMTEwLwYDVQQD EyhmMWFkNDI1YmFkZGVlYWIyMjNkZjNjZTA2Y2EzOTRjYzI4ZDdlMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1Ri5IaHs9bjTA3FrHYaymnWSUnZ scrz6QBziqjBhceM5QPoluggqRYICkb0+ghouh+niYdEAdQNz6yXI7ldInG+uQ/r 2DGfWBeIzp46VxuUXivLj4axzFaq2LHSL9NVxpTTbTE9G1JOth91O20cp+rTvSH6 5oy5Sqh11tkX/e0074xVpVTlAHbIS4S/QeErfLKy8j+XbbYNJtXXlqFzilXmYnxM jguwIOo19fIkgDM3FQaAMpIFP4x7Jcja90czGZ2Qkn1S9BEcaa2H8ctFEAKafbuC UqZtH4qbtIJs6qAdW1Zxd5vKHM2Dk3f45+6fMVPdJLiR5RbB04ndYi2eLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGtQlut3uqyI9884GyjlMwo1+DHMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAib/Ts5Ns JeZDo6eDdHIcwZoLn+o9+705TIjCXztWUhZiDJCYvC/AePBI6xaIYQwjvcbF9kQm gLuie1NB4gAppWpwC9BsI9tgWdFnU9khTTHMm1E9G3XSWEy3xbP4j2OifqkBQ4yR HO3byDSozeP/p2xOFMYmQJYR8iPYzgpKCnPgOM1kvobLVZesnQkXHoFZEeW+leBr 3cYWXUy8xHh6MVbpnT87cDsh8n/uojjvbluDb+amXdwopnRzEGlvkHES69YakyBF oIQPmMjJzpSFLJ8c2j8eZVeZlWS6IoWuPzQ//vDJeLMF3zn+q1wO3LkTxnaQL5gU 4TZ57F3UdpYiwg== -----END CERTIFICATE-----Generated at Sun Mar 1 18:22:48 2026 by rpki-client