$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json) Hash identifier: ZFduRWmfPzD9OZGBS70YwuxBWawn00KttOugRb680l8= Subject key identifier: 8E:CA:4C:78:C1:7C:8C:00:3E:F5:BB:F4:84:26:35:82:89:5E:D9:89 Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Certificate serial: 019D9850A638573EDF4DF7CCEA2A2B4D7908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft Manifest number: 0F86 Signing time: Thu 16 Apr 2026 22:01:55 +0000 Manifest this update: Thu 16 Apr 2026 22:01:55 +0000 Manifest next update: Fri 17 Apr 2026 22:01:55 +0000 Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: Wu553HjJ213qGh58FYIAx62I9Bkl7sZzw4UuAPa0jXU=) 2: 48gsZW50uLUlR46Ix3iYOx-Oil4.roa (hash: +bihXv/kdSh2a1W6VuWuSak9s9bbT1dvAV94HrBufKM=) 3: 7qlkFJrqlJHjJMafd1z2Ovx1xMg.roa (hash: /c/xy57bwbSPlEYy8aSToJUMaj9SVT1GxDFV+ZgmcDw=) 4: IBrDKx3-hL2m6eK_AnO4AvBHD7U.roa (hash: pmaFE96hLCvpJgnKb9xAQ3FBHDszY3+MnDTKdmd2aBc=) 5: J_MD5SMm_jnNcFzVAMqw1B15u58.roa (hash: FIwpk+45oiJmLelvUMKgCrOAF5Q6jpI+BLL5TNzUe60=) 6: KF_n2gzTBU6uDy1SMMT5K8iX9bA.roa (hash: NLc5HhxgKVru6o+xJI4sk97DQHit528jxpHdpZSMptc=) 7: PINsz1ecwdVhJzpxv6fsByeh4kA.roa (hash: ANLsT4S8VzVYj7/i5GCBTF2gWzdZH5BQdzxufPePg5s=) 8: c07bIsHBnYan2_awwduVtTU7DUI.roa (hash: mqMh/xKPr8DCyDidpLkePZTFgnIP6RdmLVjUadJSWGE=) 9: fCh5cSZ1ojcXI4Uub3fOR46Ltrs.roa (hash: kJ7GyNYmLyOwu5BhWIvecFe90tFPLUPeOlUI+nps5x8=) 10: p6q7nnD_OPKDsS9U1c5yxJhC8WA.roa (hash: MuqlFHVz3Fg/JUr8nrRSdQXx7Lahqnmq31R7HkprFTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:50:a6:38:57:3e:df:4d:f7:cc:ea:2a:2b:4d:79:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Validity Not Before: Apr 16 22:01:55 2026 GMT Not After : Apr 17 22:01:55 2026 GMT Subject: CN=8eca4c78c17c8c003ef5bbf484263582895ed989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:cd:6f:ba:d3:86:10:2d:ef:d8:89:6f:5e: 0a:e8:f6:8e:ce:3e:96:12:a9:5b:77:4f:ba:c9:d9: 58:75:2c:bc:d7:e5:16:e7:be:4e:01:3d:aa:af:5c: 8e:84:4a:67:f6:08:8f:ae:ca:42:65:51:56:ce:4a: e2:fd:15:57:a9:0d:9c:92:84:3c:94:8d:98:53:88: 69:7d:21:10:13:0e:ad:aa:34:97:bb:28:76:64:2e: 99:f4:b8:34:58:d2:36:8c:39:c1:07:e1:38:c9:f0: bb:32:8c:4d:b8:5e:15:cb:1c:7e:9b:3f:b6:38:70: cf:8d:46:ae:69:20:f2:a7:9e:db:08:c9:c3:ed:49: 2a:e7:dd:37:94:b1:e2:d9:e4:30:bb:d7:59:ca:e0: a8:0d:6c:d9:a3:0f:89:15:26:a6:a1:34:0d:1d:22: 21:b2:fb:77:7c:65:2d:d3:91:70:3e:eb:5f:2b:82: 03:1f:8f:ef:6e:7f:cd:c2:17:2b:7d:2e:e8:99:9e: 03:58:d0:64:42:dd:c9:9d:14:1b:4d:b8:96:64:7e: 47:c7:08:c3:21:4c:39:84:13:3b:7e:a5:e0:06:a4: 2c:4a:54:f1:1b:f3:e8:c7:0d:f0:43:61:bd:d6:83: d7:65:4e:ba:11:fa:b2:fc:12:c9:72:c9:44:3b:d8: d0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CA:4C:78:C1:7C:8C:00:3E:F5:BB:F4:84:26:35:82:89:5E:D9:89 X509v3 Authority Key Identifier: keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:bf:3a:1b:7a:15:d1:02:c4:aa:28:d6:6f:d0:bf:6a:26:25: 3e:01:ce:6d:5a:62:07:b6:0d:f4:ad:b7:f2:9c:4a:43:9b:78: 52:66:17:8b:b2:7b:c8:e5:7b:ee:05:6b:ef:c3:06:c1:60:98: 47:5d:00:11:23:f9:0a:ef:d9:90:64:4d:86:83:2b:b7:98:9b: 56:47:df:8a:13:69:ef:73:38:6c:14:7d:b4:85:30:11:d8:20: 2b:98:c8:d3:7b:62:ce:02:bb:a4:ca:c5:d0:0d:0d:06:de:4b: cd:11:3f:f2:4e:af:c3:57:42:f7:1a:24:95:4b:94:e6:1c:59: d7:c0:8d:be:cb:94:c3:7b:f8:36:5a:5c:20:45:a3:f2:7b:56: b8:fc:24:c0:f1:98:1f:fb:53:2c:5a:d1:9f:b5:eb:37:76:e7: 21:a4:13:48:58:64:db:11:e3:8c:28:0e:2f:9e:9c:ba:47:35: c7:47:69:bc:b8:b9:d8:89:bb:62:36:de:a8:8d:15:cf:94:53: b0:72:bb:95:70:a9:5b:ac:a4:83:ec:4a:40:5d:b2:31:17:6d: 37:1b:e0:70:a9:bb:79:2a:bb:48:b2:81:0e:29:d6:a2:62:cd: ff:8c:df:80:78:83:23:3c:23:9e:98:86:43:07:c8:29:20:bb: 72:3a:0b:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YUKY4Vz7fTffM6iorTXkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4 YjVjMDUwHhcNMjYwNDE2MjIwMTU1WhcNMjYwNDE3MjIwMTU1WjAzMTEwLwYDVQQD Eyg4ZWNhNGM3OGMxN2M4YzAwM2VmNWJiZjQ4NDI2MzU4Mjg5NWVkOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6zNb7rThhAt79iJb14K6PaOzj6W Eqlbd0+6ydlYdSy81+UW575OAT2qr1yOhEpn9giPrspCZVFWzkri/RVXqQ2ckoQ8 lI2YU4hpfSEQEw6tqjSXuyh2ZC6Z9Lg0WNI2jDnBB+E4yfC7MoxNuF4Vyxx+mz+2 OHDPjUauaSDyp57bCMnD7Ukq5903lLHi2eQwu9dZyuCoDWzZow+JFSamoTQNHSIh svt3fGUt05FwPutfK4IDH4/vbn/NwhcrfS7omZ4DWNBkQt3JnRQbTbiWZH5HxwjD IUw5hBM7fqXgBqQsSlTxG/Poxw3wQ2G91oPXZU66Efqy/BLJcslEO9jQoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7KTHjBfIwAPvW79IQmNYKJXtmJMB8GA1UdIwQY MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt MjFhNzAwYzcxMTlmLzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ786G3oV 0QLEqijWb9C/aiYlPgHObVpiB7YN9K238pxKQ5t4UmYXi7J7yOV77gVr78MGwWCY R10AESP5Cu/ZkGRNhoMrt5ibVkffihNp73M4bBR9tIUwEdggK5jI03tizgK7pMrF 0A0NBt5LzRE/8k6vw1dC9xoklUuU5hxZ18CNvsuUw3v4NlpcIEWj8ntWuPwkwPGY H/tTLFrRn7XrN3bnIaQTSFhk2xHjjCgOL56cukc1x0dpvLi52Im7YjbeqI0Vz5RT sHK7lXCpW6ykg+xKQF2yMRdtNxvgcKm7eSq7SLKBDinWomLN/4zfgHiDIzwjnpiG QwfIKSC7cjoLBg== -----END CERTIFICATE-----Generated at Fri Apr 17 07:22:55 2026 by rpki-client