$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: t/yeXw6wdQ6ucs8LJZb5a5D3qNdvRVZCzj1S8Wmz6bM= Subject key identifier: 0D:90:FC:CA:96:D6:8F:52:6A:D2:6B:6D:D1:44:75:5A:60:C1:02:32 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019D9B87AF917118CCE1D96DA1FE7F88E08F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 030F Signing time: Fri 17 Apr 2026 13:00:53 +0000 Manifest this update: Fri 17 Apr 2026 13:00:53 +0000 Manifest next update: Sat 18 Apr 2026 13:00:53 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: CxunPcR75D88QaQuX3lrHujM6ypyiuFvgY5buAK1o9w=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 5: O0NaR63qYEYkKBX6khhH3sfwhso.roa (hash: lovVJhahsHXLyNDHuxIILDmOwnsX5JTEWJRzVms+kRw=) 6: O203bP1wCT1tFTJWpeV4GwvRr-E.roa (hash: M8T4zxdIfcPsrQz2e4NE8yV9cJaheu4EatHoWhBRGz0=) 7: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 8: buFP3YQ0XQZEaAumgm6mnH5J-yE.roa (hash: AaWeY9oJG2eNuVhrXCNjBk4XbOhPTbIi+u4Z+27Es7I=) 9: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 10: ohXUok_zW7NMmajjFQxMHMt_T0Y.roa (hash: BmIJzfQHz5sgq48QzLBSe6fOOMb8+aHYQoGWrM4uQdc=) 11: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 12: uY6qE3uPY16ibxaK5uttAmG_Ct8.roa (hash: 0BwndtPhU5oYJMt397TjhZ61kQve6RLk8MlqzfejSfk=) 13: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) 14: xiLzKMbsP2hR2dinGnnh2ffYdNg.roa (hash: UNKk8UicZLwGLHFDEuUZ+yTryGyRHEhcFM6P+iXQVAg=) 15: xxc5xAyMxoRB0JYyqslJ3UmSDU0.roa (hash: 5NnOEcjd27P4vZWaJoKJUxgy0CmbiwJxaZCUGTIypGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:87:af:91:71:18:cc:e1:d9:6d:a1:fe:7f:88:e0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Apr 17 13:00:53 2026 GMT Not After : Apr 18 13:00:53 2026 GMT Subject: CN=0d90fcca96d68f526ad26b6dd144755a60c10232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8a:19:41:75:cf:30:cf:28:f3:70:77:49:7a: 80:53:28:53:82:fe:a7:92:04:19:9e:53:d3:07:4e: a0:50:d5:ce:e3:ae:91:b4:13:56:15:95:d5:37:ef: 8f:fe:c7:62:75:f4:b7:00:52:32:4f:5d:41:15:ad: 16:3c:e9:9e:f7:34:cc:38:4d:7f:82:44:1f:cd:2b: fc:78:74:74:4e:0c:ea:78:b2:7a:e4:a6:a5:b9:a4: 06:b5:21:fb:e3:dd:b5:93:f2:8b:31:65:a1:51:06: dd:d5:07:c3:20:d1:d2:70:f0:a1:3d:2c:03:f5:87: c0:84:3a:06:14:e8:bd:b6:dc:0e:d6:32:27:38:ce: fd:8b:d7:a1:2e:02:00:a1:2f:df:aa:dd:c8:a5:ad: b3:c9:95:94:47:ec:79:f2:c5:d3:4e:34:93:6f:14: fa:cb:70:83:58:9b:d9:fa:c4:08:21:66:0c:e4:5c: 49:3d:98:ac:13:0a:9a:0a:6a:fa:07:af:3f:b2:18: be:4c:27:57:89:83:40:d2:c4:b8:39:26:37:c0:14: 02:4d:56:a2:10:ea:29:b3:7b:40:d0:8b:a1:f1:18: e1:16:be:72:78:f0:95:ea:ef:19:fd:42:fb:4a:43: 2e:bd:9b:4d:ff:32:87:a7:9f:4b:77:35:fa:58:7d: 62:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:90:FC:CA:96:D6:8F:52:6A:D2:6B:6D:D1:44:75:5A:60:C1:02:32 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:51:1d:c7:1b:1f:cb:e1:f3:6c:43:b8:42:b6:2d:40:a8:65: 8b:e9:66:bc:37:56:1c:a2:12:92:9e:60:b9:13:04:ef:dd:ea: de:e9:d5:82:5f:08:37:10:a5:74:98:a9:29:eb:23:45:7a:e8: 68:96:a2:07:53:07:bf:ac:fb:77:61:d8:e7:f1:63:52:2e:11: 2e:98:f4:cd:6c:28:2f:b0:57:fa:4d:7f:29:7f:0a:44:9d:15: 3c:d8:f2:12:b3:47:fc:00:ed:5c:1f:fa:20:fc:1f:cc:34:95: 86:b9:bf:85:af:03:1e:89:51:ad:34:36:71:94:54:ea:66:4b: 34:f5:1f:f1:18:f9:99:41:e0:ff:bf:e7:aa:f6:dd:d0:3a:cd: 36:f8:ac:0d:ea:3b:fc:61:73:37:61:01:b9:a6:79:0c:49:b7: de:99:fc:ca:d1:a6:c8:e0:90:b9:78:06:86:a3:54:94:8c:2d: 18:d9:18:73:ca:4f:3d:f2:ff:b7:c7:34:a3:9d:fc:fd:ef:21: 04:ee:3a:2e:d9:6a:51:b8:be:b1:e8:57:0b:bd:25:a8:a8:1f: 44:2f:62:81:e2:9e:62:58:37:77:a6:55:dc:7f:80:48:e3:64: d9:e5:b4:84:55:c9:49:87:24:60:b0:d0:db:9f:dc:83:23:81: f1:07:22:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bh6+RcRjM4dltof5/iOCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwNDE3MTMwMDUzWhcNMjYwNDE4MTMwMDUzWjAzMTEwLwYDVQQD EygwZDkwZmNjYTk2ZDY4ZjUyNmFkMjZiNmRkMTQ0NzU1YTYwYzEwMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkooZQXXPMM8o83B3SXqAUyhTgv6n kgQZnlPTB06gUNXO466RtBNWFZXVN++P/sdidfS3AFIyT11BFa0WPOme9zTMOE1/ gkQfzSv8eHR0TgzqeLJ65KaluaQGtSH74921k/KLMWWhUQbd1QfDINHScPChPSwD 9YfAhDoGFOi9ttwO1jInOM79i9ehLgIAoS/fqt3Ipa2zyZWUR+x58sXTTjSTbxT6 y3CDWJvZ+sQIIWYM5FxJPZisEwqaCmr6B68/shi+TCdXiYNA0sS4OSY3wBQCTVai EOops3tA0Iuh8RjhFr5yePCV6u8Z/UL7SkMuvZtN/zKHp59LdzX6WH1iIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2Q/MqW1o9SatJrbdFEdVpgwQIyMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy1Edxxsf y+HzbEO4QrYtQKhli+lmvDdWHKISkp5guRME793q3unVgl8INxCldJipKesjRXro aJaiB1MHv6z7d2HY5/FjUi4RLpj0zWwoL7BX+k1/KX8KRJ0VPNjyErNH/ADtXB/6 IPwfzDSVhrm/ha8DHolRrTQ2cZRU6mZLNPUf8Rj5mUHg/7/nqvbd0DrNNvisDeo7 /GFzN2EBuaZ5DEm33pn8ytGmyOCQuXgGhqNUlIwtGNkYc8pPPfL/t8c0o538/e8h BO46LtlqUbi+sehXC70lqKgfRC9igeKeYlg3d6ZV3H+ASONk2eW0hFXJSYckYLDQ 25/cgyOB8Qciqw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:46:57 2026 by rpki-client