$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: hIdmsPm+VfxEaAiv4qgYxrF4liH/EUy4qOv3RKGLEnI= Subject key identifier: D2:8D:1D:BF:CD:C6:C5:BD:2F:31:FF:EC:DA:FF:68:10:EF:86:84:0F Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 01A1AC70C8AA0CFA3D5847A87999ABED07AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 1C17 Signing time: Thu 05 Nov 2026 16:00:34 +0000 Manifest this update: Thu 05 Nov 2026 16:00:34 +0000 Manifest next update: Fri 06 Nov 2026 16:00:34 +0000 Files and hashes: 1: 0YUDAiE-yuhK94EMmLyzQMgIlF0.roa (hash: rsg5CjblS2OIdnbLSyR6XK4Mryfl50YgeWhG09XSsvk=) 2: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 3: 2GJBZKsIm3jc4Z15-3kXAAPem8A.roa (hash: jTvDg98QyTQnWxiM6YIXTY0rLTQHghhXeVF09n/3SKQ=) 4: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 5: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 6: 79P1nblmX5Sl5oZdwI0Dj3MUbys.roa (hash: La6+lZpjnP/18h6j5GqiME+A/vxO0IF8qjUuVJayEN4=) 7: AuE2rwLS8SAwP0zsffvoZ2RJKhw.roa (hash: TM4O7+3WS0xFrNfC6juWwcHyA2+UIAU1iXbpY1CJY+s=) 8: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=) 9: BYI4akM6lhIw21VZknTh_NCIqSU.roa (hash: YdN03lqeu5vvLCQrhnxcW6iOxgWPrgZFciSU6zX3FMs=) 10: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 11: QL7_ykelTLhFLJAjvfuxzqWP2vk.roa (hash: 4QL9CwOY1xIzLU+QxTfnx6oHiWUSUqf0UtoKPhqw5LE=) 12: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=) 13: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 14: ciIgS1TjaGOTBbmOnGozAmnHfUc.roa (hash: ntXa2GYDAO0jxPMtQsYXddkZE8eGPrFUqY/SdPvPIvw=) 15: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 16: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: hBU5Z+AlaeGBpFPChY/4ase7otp+3ftGh5SkVxb0MH4=) 17: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=) 18: fDKgHJlsiS5uIiaM5lUdRLuQjTQ.roa (hash: vEp2ptdzeVxduX9m+vMz5pf87te8Ro1XCCaMK9okgo8=) 19: fPY6U_1618fK0NT9X8wGnZOYgN8.roa (hash: fCX4MpPK80jOGQxrsBevkbA6sqLzfKitTFXIWhDmcZw=) 20: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 21: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 22: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 23: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 24: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 25: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 26: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=) 27: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=) 28: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 29: vMqDF6gjcK8zFvw0OGFxUhR4aFs.roa (hash: O1UaeAxvBKxAX/Cona/josLLFEdiQCFsI/70gWWiGpg=) 30: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 31: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) 32: ywexjdSx58c_dnH_pe3prB5KbBc.roa (hash: CEx8v6bvzNC8gDYFXGH5Ep5ijCVlKNxtjBQGlyVSklQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:ac:70:c8:aa:0c:fa:3d:58:47:a8:79:99:ab:ed:07:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Nov 5 16:00:34 2026 GMT Not After : Nov 6 16:00:34 2026 GMT Subject: CN=d28d1dbfcdc6c5bd2f31ffecdaff6810ef86840f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:dd:e3:a3:38:5c:f9:62:73:d9:b8:33:19: c0:e0:4a:5d:8e:d2:75:f7:51:3f:dc:95:9a:c3:55: 8f:30:1e:4f:f5:98:35:19:77:e6:60:ed:87:0b:5e: 07:aa:6f:9f:85:da:7a:ec:7b:d3:6a:7d:18:bb:67: f7:91:89:76:b6:1c:37:ef:f2:5a:e4:ee:2e:c0:88: 09:f2:7c:8b:a4:44:11:b9:88:6c:93:cc:a5:53:d5: d0:c7:bf:84:95:80:b3:a6:35:ed:d0:65:c4:e5:32: 04:37:32:6e:ee:78:62:ba:74:cc:69:e7:5e:5e:d1: 71:47:6c:c3:6e:ca:2f:da:a9:3a:d4:23:50:97:4d: 0c:80:18:07:cc:23:ba:45:c0:16:f4:ce:cd:31:7b: d1:b6:49:c5:9d:a3:c7:50:8f:2f:17:2f:5c:8d:33: 9a:cd:f1:78:2c:b3:b5:79:68:22:e2:80:88:18:7e: 8d:61:98:a0:44:70:97:26:9f:d7:8c:97:db:e6:ca: 4f:1d:ca:3a:93:80:18:37:d2:49:84:40:55:34:25: e5:f1:7e:e6:e8:3c:83:6f:d3:e7:d0:c4:51:98:30: 22:55:3e:55:57:3d:5b:ac:47:ea:e8:c8:34:39:69: e7:54:c6:18:28:60:c1:57:eb:fd:e6:93:20:8e:64: 57:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8D:1D:BF:CD:C6:C5:BD:2F:31:FF:EC:DA:FF:68:10:EF:86:84:0F X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0c:a4:69:2e:cb:b5:fd:45:03:c9:38:d9:3e:59:e0:ef:a7: 9d:60:54:d6:44:aa:7f:e9:db:41:05:a6:09:9b:a5:6c:81:de: 4e:69:0d:f3:cd:79:82:80:a1:2c:b1:32:f6:c5:c7:51:e4:a9: fe:04:d8:a4:d0:b7:48:da:32:e7:31:b3:5b:f2:06:3c:3b:33: 12:30:8e:a3:4c:c8:a5:35:54:c3:20:1e:cd:bb:da:3d:b3:bc: d1:4c:4f:0c:0d:cc:bb:75:38:6d:62:03:bd:cc:3c:9e:8f:6d: e0:3e:46:29:72:b2:86:00:08:8b:d8:71:14:94:b3:8c:07:63: 0d:db:38:88:88:71:88:80:b7:8e:da:c4:b1:21:61:6e:61:c1: e8:88:00:5c:3c:c7:c5:a9:3a:53:70:a3:34:84:1c:7c:b6:e1: 4e:79:b4:f3:a0:86:cc:5c:d1:e9:32:28:6e:3a:61:79:97:21: 3d:80:13:7e:59:4f:ee:6c:c4:f5:05:d8:5e:12:c0:b0:8d:83: 5e:fe:f1:56:b2:a2:80:d4:8d:b1:22:7a:61:c2:6f:b8:62:d4: fd:57:85:84:e6:45:a3:35:ca:24:76:b6:c5:1a:03:31:dd:36: 8e:51:28:f8:4f:7c:94:94:30:6d:06:23:09:a2:4a:57:7e:79: 74:42:a0:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGscMiqDPo9WEeoeZmr7QeuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYxMTA1MTYwMDM0WhcNMjYxMTA2MTYwMDM0WjAzMTEwLwYDVQQD EyhkMjhkMWRiZmNkYzZjNWJkMmYzMWZmZWNkYWZmNjgxMGVmODY4NDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNnd46M4XPlic9m4MxnA4EpdjtJ1 91E/3JWaw1WPMB5P9Zg1GXfmYO2HC14Hqm+fhdp67HvTan0Yu2f3kYl2thw37/Ja 5O4uwIgJ8nyLpEQRuYhsk8ylU9XQx7+ElYCzpjXt0GXE5TIENzJu7nhiunTMaede XtFxR2zDbsov2qk61CNQl00MgBgHzCO6RcAW9M7NMXvRtknFnaPHUI8vFy9cjTOa zfF4LLO1eWgi4oCIGH6NYZigRHCXJp/XjJfb5spPHco6k4AYN9JJhEBVNCXl8X7m 6DyDb9Pn0MRRmDAiVT5VVz1brEfq6Mg0OWnnVMYYKGDBV+v95pMgjmRXNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKNHb/NxsW9LzH/7Nr/aBDvhoQPMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwykaS7L tf1FA8k42T5Z4O+nnWBU1kSqf+nbQQWmCZulbIHeTmkN8815goChLLEy9sXHUeSp /gTYpNC3SNoy5zGzW/IGPDszEjCOo0zIpTVUwyAezbvaPbO80UxPDA3Mu3U4bWID vcw8no9t4D5GKXKyhgAIi9hxFJSzjAdjDds4iIhxiIC3jtrEsSFhbmHB6IgAXDzH xak6U3CjNIQcfLbhTnm086CGzFzR6TIobjpheZchPYATfllP7mzE9QXYXhLAsI2D Xv7xVrKigNSNsSJ6YcJvuGLU/VeFhOZFozXKJHa2xRoDMd02jlEo+E98lJQwbQYj CaJKV355dEKg+g== -----END CERTIFICATE-----Generated at Thu Nov 5 19:00:36 2026 by rpki-client