$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json) Hash identifier: cO0Zn/QLMWLzDkHXFI38KRXINkl7U6t09FdeABHUj2k= Subject key identifier: E6:09:4F:1B:E8:2C:C2:78:50:85:4A:93:E1:BE:FF:D2:C8:D6:4F:81 Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019CABA25975DC4096DBAF4690CF7AEFF20E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft Manifest number: 0292 Signing time: Sun 01 Mar 2026 23:01:09 +0000 Manifest this update: Sun 01 Mar 2026 23:01:09 +0000 Manifest next update: Mon 02 Mar 2026 23:01:09 +0000 Files and hashes: 1: 1-UKHSAM5AevZEqWUhu5rend0iyQ.roa (hash: KXPe+NqDhBkXJxLOH97HX7eFcl1M35NsSA1uK/QdVrw=) 2: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: BIz0svw+ShNdZ5Bpl3nrAch6JbCEUi3fn9ARbqqtPBY=) 3: 3rsNiSm4h6h63qh7B8ED48uaQlc.roa (hash: yYfgt1kV+FWZv90Dib1vq9TVed6eneYgrJ90eriExjQ=) 4: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (hash: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU=) 5: O0NaR63qYEYkKBX6khhH3sfwhso.roa (hash: lovVJhahsHXLyNDHuxIILDmOwnsX5JTEWJRzVms+kRw=) 6: O203bP1wCT1tFTJWpeV4GwvRr-E.roa (hash: M8T4zxdIfcPsrQz2e4NE8yV9cJaheu4EatHoWhBRGz0=) 7: RiLDuU_kvmZ8OKQ9x7hejqcE6qI.roa (hash: USx0SgmKwiDJhkVRndcN4zQj/PpvK1G+3xElWcC4XXc=) 8: Tm68QJ2snSiuZawcjur25m8_gQQ.roa (hash: DaUiCgZt3YWuCz48bPSV79DF4D1Dc2incnzoilZzt30=) 9: izBEqB-PNNJgRoLyWPChI_yKYok.roa (hash: Zf4HQBOePyu6y1PfOzURUaEjEzCAcUCk3e7WbSfxvsE=) 10: ohXUok_zW7NMmajjFQxMHMt_T0Y.roa (hash: BmIJzfQHz5sgq48QzLBSe6fOOMb8+aHYQoGWrM4uQdc=) 11: pUAqme6XSvZfzRgsUds8SWVOE2Y.roa (hash: B46qt9kekZhK18U4JHiapP9iYrbTfuByoxcutvXpH3A=) 12: vSC49Dl4-4OfoXPunObiuHUP7mM.roa (hash: ZLPRzVbmcoQGDyqSoTmtWi9VeEl3MyOFwHLu9O6F+ZA=) 13: xiLzKMbsP2hR2dinGnnh2ffYdNg.roa (hash: UNKk8UicZLwGLHFDEuUZ+yTryGyRHEhcFM6P+iXQVAg=) 14: xxc5xAyMxoRB0JYyqslJ3UmSDU0.roa (hash: 5NnOEcjd27P4vZWaJoKJUxgy0CmbiwJxaZCUGTIypGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:a2:59:75:dc:40:96:db:af:46:90:cf:7a:ef:f2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Mar 1 23:01:09 2026 GMT Not After : Mar 2 23:01:09 2026 GMT Subject: CN=e6094f1be82cc27850854a93e1beffd2c8d64f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:af:c3:72:11:87:bf:0a:57:ba:a2:2f:91:6c: 98:25:38:6c:5a:d2:b0:57:c4:0e:68:fa:08:c6:d5: ef:1a:df:19:ad:01:af:38:02:be:a2:ff:7c:13:7f: 35:ee:15:60:f5:88:be:20:e4:84:e5:67:e2:ae:53: f1:0b:9f:a9:47:65:d2:ae:a7:5f:1a:7f:b9:21:ba: e2:ac:d2:a1:00:04:4a:79:c8:5c:4f:5b:e6:c9:c0: 89:40:53:89:30:19:06:f7:e9:98:59:37:8c:8b:63: 2f:52:a3:f6:81:74:71:8f:3a:c1:d6:8a:9b:9c:c9: f0:6d:5d:1b:c4:eb:b6:da:c5:1b:bb:43:7a:18:b2: 20:f3:01:83:bb:cf:09:89:9b:2c:6b:7e:83:98:96: ee:0d:87:ba:c6:c8:70:5e:c7:7a:cb:cc:38:2c:3d: 80:37:61:10:82:b8:43:8c:c9:a4:a8:d0:e4:b0:e4: 9c:9e:63:48:0b:bb:64:46:40:2c:4b:54:d4:a2:35: 64:b4:56:e8:15:99:2a:e6:81:7f:e0:29:9d:bd:23: 54:bd:a1:7c:85:dc:3f:aa:28:74:4b:52:0e:fb:4a: 0e:93:5d:2c:56:19:57:52:38:43:b0:77:98:c9:d4: f1:c3:96:64:57:27:01:e2:b3:94:33:ff:c8:71:5c: b6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:09:4F:1B:E8:2C:C2:78:50:85:4A:93:E1:BE:FF:D2:C8:D6:4F:81 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:71:bb:9e:ea:43:1b:ab:5e:9f:a2:0b:e3:8c:c4:b0:02:05: 3f:de:55:c6:de:23:d7:11:8f:d1:1d:0c:e0:26:3a:76:e0:62: 46:02:36:13:00:c8:bb:ff:dd:ed:9c:74:e4:7a:ce:94:d0:ae: c1:c0:18:6c:e1:cc:a8:39:bc:54:04:50:a9:21:b4:92:e7:9d: 11:aa:e2:f6:26:07:0e:a7:51:f3:83:ad:94:db:85:ab:c5:fb: 85:f0:91:b9:23:7b:57:fd:db:cc:9e:50:aa:63:45:88:9d:7b: af:9a:92:8a:6f:dd:af:6e:74:25:99:fa:a2:f5:0a:36:15:5e: 0b:4e:f7:86:4d:d4:f2:f9:c7:f8:f4:71:3c:7b:a3:ae:78:34: bd:68:2e:3d:fd:f7:c2:35:59:7d:e5:4a:71:ed:35:0b:22:9c: 04:5d:db:12:53:0b:e5:a3:8e:0e:8f:83:15:93:af:e5:67:63: f7:bc:59:4f:46:5b:27:2a:54:00:6b:d0:d5:96:3d:32:16:4b: cc:11:b0:f3:a2:eb:53:5d:3c:40:8c:68:93:41:4d:45:92:70: 8d:f9:e7:02:6b:52:6a:cf:f3:f2:c9:eb:e3:b0:31:c5:7d:00: c9:bb:65:f8:b3:50:d8:81:f0:45:f2:51:d1:d9:8f:5e:67:03: 61:7c:d2:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyroll13ECW269GkM967/IOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwMzAxMjMwMTA5WhcNMjYwMzAyMjMwMTA5WjAzMTEwLwYDVQQD EyhlNjA5NGYxYmU4MmNjMjc4NTA4NTRhOTNlMWJlZmZkMmM4ZDY0ZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK/DchGHvwpXuqIvkWyYJThsWtKw V8QOaPoIxtXvGt8ZrQGvOAK+ov98E3817hVg9Yi+IOSE5WfirlPxC5+pR2XSrqdf Gn+5IbrirNKhAARKechcT1vmycCJQFOJMBkG9+mYWTeMi2MvUqP2gXRxjzrB1oqb nMnwbV0bxOu22sUbu0N6GLIg8wGDu88JiZssa36DmJbuDYe6xshwXsd6y8w4LD2A N2EQgrhDjMmkqNDksOScnmNIC7tkRkAsS1TUojVktFboFZkq5oF/4CmdvSNUvaF8 hdw/qih0S1IO+0oOk10sVhlXUjhDsHeYydTxw5ZkVycB4rOUM//IcVy2nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYJTxvoLMJ4UIVKk+G+/9LI1k+BMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3G7nupD G6ten6IL44zEsAIFP95Vxt4j1xGP0R0M4CY6duBiRgI2EwDIu//d7Zx05HrOlNCu wcAYbOHMqDm8VARQqSG0kuedEari9iYHDqdR84OtlNuFq8X7hfCRuSN7V/3bzJ5Q qmNFiJ17r5qSim/dr250JZn6ovUKNhVeC073hk3U8vnH+PRxPHujrng0vWguPf33 wjVZfeVKce01CyKcBF3bElML5aOODo+DFZOv5Wdj97xZT0ZbJypUAGvQ1ZY9MhZL zBGw86LrU108QIxok0FNRZJwjfnnAmtSas/z8snr47AxxX0Aybtl+LNQ2IHwRfJR 0dmPXmcDYXzSdw== -----END CERTIFICATE-----Generated at Mon Mar 2 03:58:51 2026 by rpki-client