$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: 0SRA7lORTwht+fH5hhwKpymreFUumRWmoOEeBVRB2S0= Subject key identifier: 65:29:D4:69:76:7F:22:85:2E:90:F2:24:66:FF:1B:84:75:14:32:3C Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019D9AAC1B9027A9D4E2618BD2F71E016DE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0CB6 Signing time: Fri 17 Apr 2026 09:01:03 +0000 Manifest this update: Fri 17 Apr 2026 09:01:03 +0000 Manifest next update: Sat 18 Apr 2026 09:01:03 +0000 Files and hashes: 1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=) 2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=) 3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=) 4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=) 5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=) 6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=) 7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=) 8: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=) 9: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=) 10: BLvck3jtH0yiq7mj0oSIpxGzim0.roa (hash: rNoyDTYrAexTBbf0FBqXytC/SgHvT/1Wqrx2FO97F4M=) 11: CIRls3stTp9BOjHce35suioz25Y.crl (hash: AQjQ//vuHPiOA2+pUv1Kq12oJGUv7sZdasRQJX4FwDg=) 12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=) 13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=) 14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=) 15: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=) 16: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=) 17: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=) 18: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=) 19: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=) 20: d7vhMptggQFYv4qlk9QDH-CnrvE.roa (hash: 5WfqwGw+8t3Ft4vuWjlX8VLSDMoVxLzDo6LwKTusUiA=) 21: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=) 22: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=) 23: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=) 24: hqaui3y0dJBb-G_swK9JTqsP15I.roa (hash: IYmlHOKbbIfZroL4w4V7fPkYaUorBcPfFwoIP2cIOs8=) 25: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=) 26: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=) 27: kjrIZIW45KaOyNR8g_TQidHhKxQ.roa (hash: azT5mOJbUfFEST0Ir7ouylIomcyXSpCUxWYnorkrsXI=) 28: ksfyX1A66qksMi7yY2YUuYkItDI.roa (hash: Ka6tT0UzQN7PNatMEnkGYWsSHnAlF+3+njRwkEMDhP0=) 29: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=) 30: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=) 31: oaaK-SykNHj4NMtAlojIzptkrl8.roa (hash: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0=) 32: pGtQQai-dxwqAqhELvcpGWvnJZQ.roa (hash: bWty7Pjo+KwFzlM1rDtQDVkiqqU12gvaV9LDUSEaGgU=) 33: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:ac:1b:90:27:a9:d4:e2:61:8b:d2:f7:1e:01:6d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Apr 17 09:01:03 2026 GMT Not After : Apr 18 09:01:03 2026 GMT Subject: CN=6529d469767f22852e90f22466ff1b847514323c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1e:be:38:c0:9b:e9:14:f6:c2:ef:11:34:70: 4e:e6:97:d6:cd:7f:85:eb:c0:9e:31:d6:fc:6c:f5: fb:1e:9d:a1:56:90:76:5b:d0:04:db:01:a6:30:f9: e0:22:9d:b0:d8:b9:43:01:d7:34:46:c2:14:4d:72: c5:7c:bc:11:3f:76:ad:d5:38:8a:07:5c:d2:7e:76: 61:9a:88:5f:33:da:ed:3e:4f:84:00:d1:7b:b9:46: 9a:11:d4:b1:05:d4:06:dd:50:da:a5:e5:6a:15:69: b9:c5:9a:8e:00:ab:df:37:ac:88:9a:82:f7:38:00: 42:bf:db:96:3b:7e:0a:88:fb:24:df:96:a0:d7:d0: b4:cc:b9:e5:b2:34:f3:40:53:63:de:1a:49:85:10: ef:34:4f:f9:88:20:98:49:92:e8:2d:14:e8:3c:43: f0:d2:01:17:fe:c9:1e:67:2c:4f:48:83:65:52:a6: c1:6d:c5:7d:3a:9f:5b:9f:00:47:fb:9b:57:10:4c: fa:c2:e4:c9:b0:45:10:84:82:36:11:ca:f9:18:0c: c4:ef:48:1b:51:7f:b9:8d:c2:92:4d:04:87:03:58: c5:2d:d6:3a:67:d7:1d:e7:37:90:e7:21:3f:bb:01: 6e:d8:4f:5d:0a:65:35:7f:00:4b:72:0c:39:40:51: 90:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:29:D4:69:76:7F:22:85:2E:90:F2:24:66:FF:1B:84:75:14:32:3C X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:47:d4:71:96:89:f9:23:09:4c:d1:8e:a9:91:a3:30:c9:e7: 1d:bb:90:5f:b2:8c:52:39:bb:7b:bb:f6:8f:5b:e3:80:13:5d: 48:e0:86:32:30:d5:c4:f3:2a:a6:5c:f8:b9:96:6a:47:a6:db: b3:85:72:a7:46:31:a8:52:97:66:f6:43:5c:46:c2:82:38:1b: e9:e6:b3:c2:9e:07:cd:28:23:8f:10:52:c3:77:d8:19:97:b4: 6e:7a:e9:74:ca:9c:b9:9e:36:13:50:be:93:fe:b5:61:13:97: c5:6f:ec:e9:a2:73:b6:f3:f9:62:48:22:7b:74:22:2a:09:fd: c7:bc:3a:a8:3f:4c:e0:b4:0a:62:95:cd:2b:1f:9c:c6:2f:62: 81:b3:a4:b9:8a:eb:e8:00:be:cc:b7:2a:74:90:96:eb:85:62: d6:bd:a0:2a:7c:20:51:cb:ae:59:cc:c9:1c:69:13:a6:d7:0a: 61:a2:1a:71:b0:d1:4d:a7:15:4d:80:81:fb:a8:91:60:09:52: 9e:e9:ba:f7:b2:03:46:53:5a:78:9c:b8:f0:95:19:6c:ec:20: 3a:67:f1:0f:d6:8f:36:6f:02:e8:b0:fd:da:d9:3c:03:95:d7: d9:67:25:93:ec:b6:11:78:1c:8f:85:31:df:38:3c:3e:ad:61: be:8b:80:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2arBuQJ6nU4mGL0vceAW3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwNDE3MDkwMTAzWhcNMjYwNDE4MDkwMTAzWjAzMTEwLwYDVQQD Eyg2NTI5ZDQ2OTc2N2YyMjg1MmU5MGYyMjQ2NmZmMWI4NDc1MTQzMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh6+OMCb6RT2wu8RNHBO5pfWzX+F 68CeMdb8bPX7Hp2hVpB2W9AE2wGmMPngIp2w2LlDAdc0RsIUTXLFfLwRP3at1TiK B1zSfnZhmohfM9rtPk+EANF7uUaaEdSxBdQG3VDapeVqFWm5xZqOAKvfN6yImoL3 OABCv9uWO34KiPsk35ag19C0zLnlsjTzQFNj3hpJhRDvNE/5iCCYSZLoLRToPEPw 0gEX/skeZyxPSINlUqbBbcV9Op9bnwBH+5tXEEz6wuTJsEUQhII2Ecr5GAzE70gb UX+5jcKSTQSHA1jFLdY6Z9cd5zeQ5yE/uwFu2E9dCmU1fwBLcgw5QFGQkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUp1Gl2fyKFLpDyJGb/G4R1FDI8MB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEfUcZaJ +SMJTNGOqZGjMMnnHbuQX7KMUjm7e7v2j1vjgBNdSOCGMjDVxPMqplz4uZZqR6bb s4Vyp0YxqFKXZvZDXEbCgjgb6eazwp4HzSgjjxBSw3fYGZe0bnrpdMqcuZ42E1C+ k/61YROXxW/s6aJztvP5Ykgie3QiKgn9x7w6qD9M4LQKYpXNKx+cxi9igbOkuYrr 6AC+zLcqdJCW64Vi1r2gKnwgUcuuWczJHGkTptcKYaIacbDRTacVTYCB+6iRYAlS num697IDRlNaeJy48JUZbOwgOmfxD9aPNm8C6LD92tk8A5XX2Wclk+y2EXgcj4Ux 3zg8Pq1hvouAQg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:35:51 2026 by rpki-client