$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: 9V5iZuYRv28RZglIly6B8g2KIDbh1P73jnEjHH9XG1E= Subject key identifier: 2E:26:C8:94:BA:EF:C4:F8:D3:47:0C:92:8C:07:B0:4E:A0:45:39:8F Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019FAA5062E11764F932615C1B8891F385FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 1AFA Signing time: Tue 28 Jul 2026 20:00:22 +0000 Manifest this update: Tue 28 Jul 2026 20:00:22 +0000 Manifest next update: Wed 29 Jul 2026 20:00:22 +0000 Files and hashes: 1: 0EJd6KM5OKs4ZeWtakfKi4LfHMQ.roa (hash: lq/+jqUsuGMmo0V5eC2lYaf4+vkz0NSEYMEZoOw+h8M=) 2: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 3: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 4: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 5: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=) 6: 79P1nblmX5Sl5oZdwI0Dj3MUbys.roa (hash: La6+lZpjnP/18h6j5GqiME+A/vxO0IF8qjUuVJayEN4=) 7: Au6ztzaYOL8tiA06L7XgEOvNL7w.roa (hash: 2gixSAvahjHMVkdyFo4/SHHkZ2SyI5tRyn1jTT+SjAw=) 8: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=) 9: BSJwseKs8IstwvoydvzKDO4yjpk.roa (hash: 6WIA++2azmJG3DLJYorfCdBV6cXv3FDFWjwIcVYK2xA=) 10: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=) 11: CuwON2MJZtvZI4g-9no7hDi-jTM.roa (hash: t4dkHT6G4U30/rLqAkRNH5wHWvEqi8n3uM1IPVPedwg=) 12: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 13: Rr2zhV2BMuYwAMQjOZC17bpA4NM.roa (hash: EMKdr17+gur82xEd8d0NLRU71QAL7ROjLErF0ye4dUQ=) 14: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=) 15: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 16: Xi1n82G6gX7UAY2_fbZogWirIn4.roa (hash: DgSYKj3HKBtQlWF7ILEGvT4SnZn/5ZATo7Dhfv1URjQ=) 17: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=) 18: a3awGspUbD83lR3SbJMhhWhWXUU.roa (hash: 4wacv1ZaHYO9NbaUGd81FOMwUiV7hBGJzXqLo1BRDrY=) 19: bAQWAvcm3T6rfyaf7ljIBvlFtAM.roa (hash: 2DAvyPmgh36vWxZnNmX769qlQ+GKNipPDNKBhtCFjHA=) 20: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 21: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: /3on6lhc6MhEojWD9HJSopeGbofuu1JLS2yw4bVqKcM=) 22: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=) 23: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 24: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 25: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 26: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 27: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 28: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 29: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=) 30: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=) 31: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 32: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 33: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:50:62:e1:17:64:f9:32:61:5c:1b:88:91:f3:85:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jul 28 20:00:22 2026 GMT Not After : Jul 29 20:00:22 2026 GMT Subject: CN=2e26c894baefc4f8d3470c928c07b04ea045398f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:62:36:29:d1:01:64:ff:55:54:d7:8a:da:27: 7d:d8:19:29:f4:77:63:78:82:4d:b6:96:ee:7d:82: 5a:d8:58:b7:21:3c:62:c0:76:be:36:b9:05:f5:8f: ae:ca:ca:f4:95:e2:19:a2:e0:ba:29:f1:9d:d3:3f: d6:88:f4:f7:ac:3a:03:f1:8a:5d:8b:7a:97:9a:ed: 6f:8c:46:50:66:af:d2:cf:37:a1:34:76:05:da:d6: aa:c1:c9:73:fe:b8:e9:eb:27:8b:4e:57:31:bc:4e: 7b:b2:97:da:0d:10:3c:b2:74:80:01:24:7a:5c:56: 7f:b6:28:79:77:6e:13:a4:48:cf:2d:1b:0f:15:00: 92:4a:9a:40:8a:6a:11:40:d1:96:9a:3e:dd:7a:77: d5:32:09:38:ab:c0:3e:08:00:db:49:4d:9c:48:34: 6e:41:dd:a8:ae:08:a5:7a:11:29:08:36:29:ba:a3: cc:a5:80:01:ef:80:35:b5:f8:98:2d:14:f1:1a:2d: 9d:f7:d1:01:c3:3c:c4:af:75:31:32:c9:3a:f6:0a: e6:ca:fc:10:5e:79:9b:d4:3a:28:af:8c:1b:2d:9a: cc:37:1d:4a:87:9a:99:9e:4e:ba:25:e9:32:b3:e0: 07:95:96:56:bb:df:34:ed:b2:07:48:2f:61:06:16: 0a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:26:C8:94:BA:EF:C4:F8:D3:47:0C:92:8C:07:B0:4E:A0:45:39:8F X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:61:c4:13:75:78:30:42:21:99:ea:2d:79:71:ff:ea:40:f9: e7:0c:72:22:ec:f0:1c:72:34:65:4d:33:68:26:37:37:1c:68: 14:5d:88:bf:54:bb:7d:12:dc:c5:54:64:d6:1d:48:40:fc:64: 4a:27:5c:70:da:76:e3:ac:d3:6b:b6:c1:ef:dd:33:0f:62:dc: e7:32:10:fa:05:b7:90:9c:b1:fb:fb:4e:91:1c:96:e0:31:b2: 9e:b9:26:a0:77:d3:2b:8d:24:01:f1:fe:df:2a:ea:ff:5e:de: a2:74:8c:39:96:6f:1f:1b:42:c3:ff:2c:9f:23:31:74:c2:9a: 4f:96:33:21:98:ea:51:8b:00:1d:87:16:51:68:05:b8:db:67: ae:69:63:8f:30:0a:1d:69:5a:b3:a7:7b:49:b2:f9:d7:fc:e9: 9d:33:c0:b7:b1:0b:bf:94:f1:3f:1c:ad:04:7a:51:c0:1c:c8: 45:ab:87:5d:1e:26:19:99:31:fd:b8:d5:e2:1b:9a:74:a4:12: d0:94:08:19:53:33:ef:dd:a7:1a:b0:86:39:92:5d:eb:26:08: 91:d3:e3:9a:a3:6b:53:4e:49:13:13:14:fe:61:7d:f4:86:38: 59:f7:9a:a1:be:af:c3:bc:dc:b2:26:48:9f:5b:7d:eb:41:6a: b1:b5:2e:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qUGLhF2T5MmFcG4iR84X6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwNzI4MjAwMDIyWhcNMjYwNzI5MjAwMDIyWjAzMTEwLwYDVQQD EygyZTI2Yzg5NGJhZWZjNGY4ZDM0NzBjOTI4YzA3YjA0ZWEwNDUzOThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWI2KdEBZP9VVNeK2id92Bkp9Hdj eIJNtpbufYJa2Fi3ITxiwHa+NrkF9Y+uysr0leIZouC6KfGd0z/WiPT3rDoD8Ypd i3qXmu1vjEZQZq/SzzehNHYF2taqwclz/rjp6yeLTlcxvE57spfaDRA8snSAASR6 XFZ/tih5d24TpEjPLRsPFQCSSppAimoRQNGWmj7denfVMgk4q8A+CADbSU2cSDRu Qd2orgilehEpCDYpuqPMpYAB74A1tfiYLRTxGi2d99EBwzzEr3UxMsk69grmyvwQ Xnmb1Door4wbLZrMNx1Kh5qZnk66Jekys+AHlZZWu9807bIHSC9hBhYKnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4myJS678T400cMkowHsE6gRTmPMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWHEE3V4 MEIhmeoteXH/6kD55wxyIuzwHHI0ZU0zaCY3NxxoFF2Iv1S7fRLcxVRk1h1IQPxk SidccNp246zTa7bB790zD2Lc5zIQ+gW3kJyx+/tOkRyW4DGynrkmoHfTK40kAfH+ 3yrq/17eonSMOZZvHxtCw/8snyMxdMKaT5YzIZjqUYsAHYcWUWgFuNtnrmljjzAK HWlas6d7SbL51/zpnTPAt7ELv5TxPxytBHpRwBzIRauHXR4mGZkx/bjV4huadKQS 0JQIGVMz792nGrCGOZJd6yYIkdPjmqNrU05JExMU/mF99IY4Wfeaob6vw7zcsiZI n1t960FqsbUuLg== -----END CERTIFICATE-----Generated at Tue Jul 28 22:49:48 2026 by rpki-client