$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: MUbMHeHEjJrruDdMuP7tYJXhTdazIWFOqMb77iY0yBs= Subject key identifier: 92:13:4D:7C:C5:61:27:BE:48:9C:90:8C:E8:C9:9F:46:5A:49:53:5A Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 01A0C256A6FCD3D86EC734031A3AD36630C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 1B95 Signing time: Mon 21 Sep 2026 05:00:53 +0000 Manifest this update: Mon 21 Sep 2026 05:00:53 +0000 Manifest next update: Tue 22 Sep 2026 05:00:53 +0000 Files and hashes: 1: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 2: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 3: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 4: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=) 5: 79P1nblmX5Sl5oZdwI0Dj3MUbys.roa (hash: La6+lZpjnP/18h6j5GqiME+A/vxO0IF8qjUuVJayEN4=) 6: Au6ztzaYOL8tiA06L7XgEOvNL7w.roa (hash: 2gixSAvahjHMVkdyFo4/SHHkZ2SyI5tRyn1jTT+SjAw=) 7: AuE2rwLS8SAwP0zsffvoZ2RJKhw.roa (hash: TM4O7+3WS0xFrNfC6juWwcHyA2+UIAU1iXbpY1CJY+s=) 8: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=) 9: BYI4akM6lhIw21VZknTh_NCIqSU.roa (hash: YdN03lqeu5vvLCQrhnxcW6iOxgWPrgZFciSU6zX3FMs=) 10: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=) 11: CuwON2MJZtvZI4g-9no7hDi-jTM.roa (hash: t4dkHT6G4U30/rLqAkRNH5wHWvEqi8n3uM1IPVPedwg=) 12: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 13: QL7_ykelTLhFLJAjvfuxzqWP2vk.roa (hash: 4QL9CwOY1xIzLU+QxTfnx6oHiWUSUqf0UtoKPhqw5LE=) 14: T0aT3QkWaPX97qryFtMvnLWmpJ0.roa (hash: hVVcWwS0KmrThtmWJzxkk3nULKlXJIyRvJXdRXp5mwI=) 15: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=) 16: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 17: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=) 18: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 19: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: oEM5Zu+H0l22dAu1BrLA84SPoI5TlyZGMGHZDBgpg1s=) 20: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=) 21: eokEEq-S5CPQmd6YaFyH4Z24OwA.roa (hash: R8Qe8iCPUTrHbdOSjB/zrG33zAMeqDS1F76tnDg1l1c=) 22: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 23: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 24: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 25: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 26: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 27: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 28: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=) 29: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=) 30: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 31: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 32: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) 33: x3aRmrUhs5_8xZ5L3wpeDYYh_b8.roa (hash: wuIq1b4apguXeKgoc0CUTn2f/ioGzCh0PWVLUinBaDw=) 34: ywexjdSx58c_dnH_pe3prB5KbBc.roa (hash: CEx8v6bvzNC8gDYFXGH5Ep5ijCVlKNxtjBQGlyVSklQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:56:a6:fc:d3:d8:6e:c7:34:03:1a:3a:d3:66:30:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Sep 21 05:00:53 2026 GMT Not After : Sep 22 05:00:53 2026 GMT Subject: CN=92134d7cc56127be489c908ce8c99f465a49535a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bd:8a:6e:b9:d2:9c:37:66:ba:e0:01:07:5b: ef:9c:fe:77:63:82:ff:76:16:fd:da:18:cf:aa:55: 4e:c9:5c:93:13:9d:f9:3c:c8:3c:82:e7:23:86:93: e2:14:b4:db:50:9d:87:5a:27:eb:c2:c2:70:5f:f7: d0:2d:7d:f2:a3:6a:cc:1b:b0:e7:e4:df:88:a5:20: f4:1b:59:bb:4f:94:88:72:68:01:46:d5:8c:4e:e3: 57:1a:09:19:ed:9f:75:01:08:6e:d5:5a:b7:ec:4f: 70:5d:d1:01:2f:9d:d5:64:9b:48:45:f4:6a:87:17: 3e:03:77:5a:67:78:bf:45:90:a2:25:bc:7d:36:99: d9:15:14:2d:92:ec:fb:4c:43:59:86:e7:54:92:1a: 1d:87:8e:a9:c2:9c:9d:79:88:de:fb:f3:75:6c:a7: 42:de:3d:13:37:aa:09:63:84:ac:9e:02:ef:6e:72: a4:6d:26:fb:00:74:14:b8:19:a9:c0:51:79:f6:f2: 6e:23:44:db:c8:06:b1:c5:d1:fd:2c:25:cf:08:f5: 4e:7f:75:1e:b5:f2:0e:18:b6:a4:c5:f6:b5:a4:ba: 6f:34:62:8c:7f:7d:ee:c5:3e:d8:86:4f:42:c8:7e: 48:3f:cc:05:60:d7:0a:8c:93:55:fc:a6:ef:28:1d: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:13:4D:7C:C5:61:27:BE:48:9C:90:8C:E8:C9:9F:46:5A:49:53:5A X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:50:a8:24:3f:57:eb:51:89:11:31:40:c3:07:e7:d5:23:ff: 5a:f7:89:6a:9b:c4:46:7b:1b:49:9d:b4:63:be:27:1c:5d:a6: f5:9e:01:51:20:3f:d9:b2:c4:f7:c5:f2:92:5a:dc:62:62:d4: 41:be:f7:27:64:ec:7a:8c:b0:f2:49:95:98:dc:bc:ec:b4:fc: f0:bf:ab:79:00:29:ad:e5:8a:ea:4f:59:bd:a0:c3:57:c0:c5: 15:83:df:88:39:59:9c:01:5a:c2:de:af:fe:07:d4:ba:ae:9f: 64:3b:ca:c3:0d:a7:5a:78:8b:0a:2e:d1:cd:11:3f:cb:b9:3c: 11:ad:da:39:af:ca:ea:dc:f5:64:fc:23:95:f2:3f:e5:c9:7e: 1c:4a:83:cd:66:2f:f2:b6:1c:56:5a:43:b0:8c:80:c1:7c:2c: 8f:93:63:21:5b:32:b9:27:83:5a:ec:12:b6:fa:33:42:d7:eb: 33:44:17:59:f7:16:2a:34:0b:47:a6:7d:1e:da:2e:9c:07:50: e5:c0:ba:7a:4b:34:f4:dd:57:ce:a8:8c:34:3d:08:8a:d7:5f: fe:5d:45:cd:92:8c:d7:f0:11:03:23:27:71:81:c1:95:d0:3e: d4:77:72:37:e1:08:8c:60:4a:16:91:4f:55:a6:e5:9c:eb:eb: 95:41:38:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCVqb809huxzQDGjrTZjDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwOTIxMDUwMDUzWhcNMjYwOTIyMDUwMDUzWjAzMTEwLwYDVQQD Eyg5MjEzNGQ3Y2M1NjEyN2JlNDg5YzkwOGNlOGM5OWY0NjVhNDk1MzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr2KbrnSnDdmuuABB1vvnP53Y4L/ dhb92hjPqlVOyVyTE535PMg8gucjhpPiFLTbUJ2HWifrwsJwX/fQLX3yo2rMG7Dn 5N+IpSD0G1m7T5SIcmgBRtWMTuNXGgkZ7Z91AQhu1Vq37E9wXdEBL53VZJtIRfRq hxc+A3daZ3i/RZCiJbx9NpnZFRQtkuz7TENZhudUkhodh46pwpydeYje+/N1bKdC 3j0TN6oJY4SsngLvbnKkbSb7AHQUuBmpwFF59vJuI0TbyAaxxdH9LCXPCPVOf3Ue tfIOGLakxfa1pLpvNGKMf33uxT7Yhk9CyH5IP8wFYNcKjJNV/KbvKB0jjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJITTXzFYSe+SJyQjOjJn0ZaSVNaMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFCoJD9X 61GJETFAwwfn1SP/WveJapvERnsbSZ20Y74nHF2m9Z4BUSA/2bLE98XyklrcYmLU Qb73J2Tseoyw8kmVmNy87LT88L+reQApreWK6k9ZvaDDV8DFFYPfiDlZnAFawt6v /gfUuq6fZDvKww2nWniLCi7RzRE/y7k8Ea3aOa/K6tz1ZPwjlfI/5cl+HEqDzWYv 8rYcVlpDsIyAwXwsj5NjIVsyuSeDWuwStvozQtfrM0QXWfcWKjQLR6Z9HtounAdQ 5cC6eks09N1XzqiMND0Iitdf/l1FzZKM1/ARAyMncYHBldA+1HdyN+EIjGBKFpFP VablnOvrlUE4Ww== -----END CERTIFICATE-----Generated at Mon Sep 21 13:22:42 2026 by rpki-client