$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json) Hash identifier: DGuepo7UUU6Qc9E5U4ORf+x8J9paQORzkwA7bIq98es= Subject key identifier: E3:68:DB:79:59:E5:A8:17:D2:93:B8:06:00:19:4F:9C:49:47:DB:5B Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 01A0C7EB5D36A579BDAD15B60B602ED1A21D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft Manifest number: 112D Signing time: Tue 22 Sep 2026 07:01:25 +0000 Manifest this update: Tue 22 Sep 2026 07:01:25 +0000 Manifest next update: Wed 23 Sep 2026 07:01:25 +0000 Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: 8CS3Uj0kFSb8LfyVT4N0hMRELuiOfuJDX89MPoSZ2og=) 2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=) 3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=) 4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=) 5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=) 6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=) 7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=) 8: Tvp9UTzcuphuhBetxzC7xnAANpk.roa (hash: XsVJrEsr9FE3t/s8zv/e1FiT9DrBI71L2xkk3P4iSPo=) 9: VqSk2F-cMltec__vt5GWmoZRbOs.asa (hash: DSTYqZUEAVPlYiwOcT/Aj9JtlDMu/1/7b3uouJr7QEg=) 10: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=) 11: kZL9IaKbIXWtSeLhiixRuouVuZw.roa (hash: +8djmGYeV8gJTDYzSfSw3gkTCCP8XO1MSarDOtJj7zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c7:eb:5d:36:a5:79:bd:ad:15:b6:0b:60:2e:d1:a2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Sep 22 07:01:25 2026 GMT Not After : Sep 23 07:01:25 2026 GMT Subject: CN=e368db7959e5a817d293b80600194f9c4947db5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:f1:29:58:1b:dc:e4:56:0d:c3:a7:88:07: e3:50:df:c8:26:83:82:51:96:c2:47:af:02:67:71: 0c:29:83:66:a2:17:f4:8f:25:dc:fb:fc:93:e4:97: a4:72:a5:d0:86:4d:7e:07:c1:d5:81:35:89:28:58: 40:86:ba:14:de:5b:f8:46:73:ec:71:1c:02:3d:60: ae:cf:77:73:48:8c:6e:4c:34:e7:ac:ce:b9:e0:72: 72:fd:0a:18:90:d1:be:a2:16:9e:9e:72:9c:aa:4c: fa:f7:b4:cf:b4:bd:ca:32:3e:0a:05:81:6d:1a:dd: b6:64:47:6c:a9:d5:a1:75:9c:79:dd:7c:70:2c:5b: b4:b7:81:36:fa:96:91:6e:54:27:20:fa:9f:06:51: 69:df:6d:d9:ee:cb:92:6a:cc:a1:4b:99:2e:a4:0e: 5b:5b:ff:b6:f2:6c:8f:5d:00:7e:b2:43:49:d6:e8: ff:a4:ba:6a:3b:8c:71:66:73:14:4b:f4:8f:9e:6c: dd:37:5f:74:a0:76:a7:36:52:26:ce:8d:4b:36:a0: 97:51:de:4e:6d:1c:af:fc:f6:47:b3:5f:40:d7:04: 9c:98:51:64:c3:7f:cf:20:f5:eb:f8:c9:a2:62:52: 5b:fa:d8:b7:33:c1:8c:b4:d1:00:33:01:fb:53:b5: a0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:68:DB:79:59:E5:A8:17:D2:93:B8:06:00:19:4F:9C:49:47:DB:5B X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6e:88:09:78:2b:db:d4:cb:26:ac:f9:08:ee:24:2d:da:43: 83:78:1e:67:6a:8b:e8:5d:e7:db:00:cb:f1:3d:bc:da:b0:70: e1:31:e2:ec:da:03:59:f7:cc:23:5d:b7:91:e6:25:2b:ae:c1: b5:54:3b:77:3d:a2:e7:ae:d2:01:ef:3d:a2:fe:55:09:7a:74: 03:2d:7b:e4:6b:b6:c4:8b:43:1d:5b:44:12:1c:e1:08:d0:55: 83:e5:34:5e:60:4f:8a:91:c8:37:48:b2:d1:15:3f:69:33:f9: 71:50:3f:2f:68:58:34:7e:e3:68:89:1d:58:47:2a:43:fe:2f: 33:a9:3a:70:95:e5:ca:b0:5e:50:a6:a1:7e:39:87:a3:e2:e9: dc:08:31:b5:ef:53:f3:67:c2:0c:75:1e:5d:9a:76:0b:9a:8b: 6a:92:66:e0:67:40:33:0c:29:50:60:b6:77:ca:9a:e1:4d:00: 13:40:58:10:35:44:48:a9:c6:db:0b:46:57:f7:6d:a0:9a:3d: 98:0a:2d:ab:a0:a7:0c:d0:2c:e5:57:8b:8f:ad:b0:e9:38:a4: 10:d6:34:e6:c0:82:15:0b:07:d5:65:3d:9e:f6:07:11:7d:13: 04:f9:36:62:24:9a:83:d1:cd:c9:21:78:6a:b3:6d:a0:a1:60: ee:b0:57:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDH6102pXm9rRW2C2Au0aIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjYwOTIyMDcwMTI1WhcNMjYwOTIzMDcwMTI1WjAzMTEwLwYDVQQD EyhlMzY4ZGI3OTU5ZTVhODE3ZDI5M2I4MDYwMDE5NGY5YzQ5NDdkYjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4LxKVgb3ORWDcOniAfjUN/IJoOC UZbCR68CZ3EMKYNmohf0jyXc+/yT5JekcqXQhk1+B8HVgTWJKFhAhroU3lv4RnPs cRwCPWCuz3dzSIxuTDTnrM654HJy/QoYkNG+ohaennKcqkz697TPtL3KMj4KBYFt Gt22ZEdsqdWhdZx53XxwLFu0t4E2+paRblQnIPqfBlFp323Z7suSasyhS5kupA5b W/+28myPXQB+skNJ1uj/pLpqO4xxZnMUS/SPnmzdN190oHanNlImzo1LNqCXUd5O bRyv/PZHs19A1wScmFFkw3/PIPXr+MmiYlJb+ti3M8GMtNEAMwH7U7Wg0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONo23lZ5agX0pO4BgAZT5xJR9tbMB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC26ICXgr 29TLJqz5CO4kLdpDg3geZ2qL6F3n2wDL8T282rBw4THi7NoDWffMI123keYlK67B tVQ7dz2i567SAe89ov5VCXp0Ay175Gu2xItDHVtEEhzhCNBVg+U0XmBPipHIN0iy 0RU/aTP5cVA/L2hYNH7jaIkdWEcqQ/4vM6k6cJXlyrBeUKahfjmHo+Lp3Agxte9T 82fCDHUeXZp2C5qLapJm4GdAMwwpUGC2d8qa4U0AE0BYEDVESKnG2wtGV/dtoJo9 mAotq6CnDNAs5VeLj62w6TikENY05sCCFQsH1WU9nvYHEX0TBPk2YiSag9HNySF4 arNtoKFg7rBX5w== -----END CERTIFICATE-----Generated at Tue Sep 22 18:04:13 2026 by rpki-client