$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: NLGSruwl2bKuI4J5UsOWoNWpiNzYBOtB9HKG9IxcqNA= Subject key identifier: B5:7B:5B:CE:AB:9B:21:83:39:8E:3E:D2:3B:76:98:3A:A9:5B:66:5E Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 01A0BE7954C70EFAB61FB401C2D4B9698F73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 1B93 Signing time: Sun 20 Sep 2026 11:00:17 +0000 Manifest this update: Sun 20 Sep 2026 11:00:17 +0000 Manifest next update: Mon 21 Sep 2026 11:00:17 +0000 Files and hashes: 1: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 2: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 3: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 4: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=) 5: 79P1nblmX5Sl5oZdwI0Dj3MUbys.roa (hash: La6+lZpjnP/18h6j5GqiME+A/vxO0IF8qjUuVJayEN4=) 6: Au6ztzaYOL8tiA06L7XgEOvNL7w.roa (hash: 2gixSAvahjHMVkdyFo4/SHHkZ2SyI5tRyn1jTT+SjAw=) 7: AuE2rwLS8SAwP0zsffvoZ2RJKhw.roa (hash: TM4O7+3WS0xFrNfC6juWwcHyA2+UIAU1iXbpY1CJY+s=) 8: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=) 9: BYI4akM6lhIw21VZknTh_NCIqSU.roa (hash: YdN03lqeu5vvLCQrhnxcW6iOxgWPrgZFciSU6zX3FMs=) 10: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=) 11: CuwON2MJZtvZI4g-9no7hDi-jTM.roa (hash: t4dkHT6G4U30/rLqAkRNH5wHWvEqi8n3uM1IPVPedwg=) 12: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 13: QL7_ykelTLhFLJAjvfuxzqWP2vk.roa (hash: 4QL9CwOY1xIzLU+QxTfnx6oHiWUSUqf0UtoKPhqw5LE=) 14: T0aT3QkWaPX97qryFtMvnLWmpJ0.roa (hash: hVVcWwS0KmrThtmWJzxkk3nULKlXJIyRvJXdRXp5mwI=) 15: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=) 16: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 17: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=) 18: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 19: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: r7vffxSNbVXSxC5RRpcM7mEQqFsjtkwj9sg3WpTlVlQ=) 20: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=) 21: eokEEq-S5CPQmd6YaFyH4Z24OwA.roa (hash: R8Qe8iCPUTrHbdOSjB/zrG33zAMeqDS1F76tnDg1l1c=) 22: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 23: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 24: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 25: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 26: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 27: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 28: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=) 29: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=) 30: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 31: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 32: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) 33: x3aRmrUhs5_8xZ5L3wpeDYYh_b8.roa (hash: wuIq1b4apguXeKgoc0CUTn2f/ioGzCh0PWVLUinBaDw=) 34: ywexjdSx58c_dnH_pe3prB5KbBc.roa (hash: CEx8v6bvzNC8gDYFXGH5Ep5ijCVlKNxtjBQGlyVSklQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 11:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:79:54:c7:0e:fa:b6:1f:b4:01:c2:d4:b9:69:8f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Sep 20 11:00:17 2026 GMT Not After : Sep 21 11:00:17 2026 GMT Subject: CN=b57b5bceab9b2183398e3ed23b76983aa95b665e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a9:83:2d:2b:58:35:4d:f7:cc:56:08:3d:d1: 40:82:78:3d:27:ef:57:f2:c8:5b:50:c7:2b:84:41: 00:92:d7:d9:41:d9:81:19:a1:b9:6e:62:c5:59:cd: af:69:c7:47:67:04:30:2c:f0:d8:1e:d4:63:41:cc: d2:43:89:e8:d7:be:26:14:be:54:f6:d8:7b:e6:e2: ac:cf:ee:0f:62:61:6a:54:08:35:bd:66:97:53:f1: 7a:06:6e:09:d2:c7:58:bf:50:c5:29:cf:77:98:cf: a7:e6:c8:13:d1:66:3a:29:34:2e:0c:ec:7f:01:ed: b4:ce:15:2b:7b:bb:a2:d4:5e:a6:c7:b3:59:22:4c: 03:32:54:93:5c:d1:ef:4c:dd:a5:bf:9d:58:f6:c3: 2c:a9:42:10:78:97:c3:3e:2b:53:34:01:99:06:13: b5:d6:52:75:f9:c2:cc:1f:93:97:f6:70:d0:68:11: 60:75:e9:f2:77:d0:dc:17:ba:e6:cd:7e:d9:7c:4f: e2:ea:9d:c7:d1:e4:74:b3:b0:90:79:09:31:6f:cb: 47:78:58:cd:51:54:53:6f:ac:72:35:fb:cb:3b:cf: a4:ec:26:58:1d:d8:7a:1f:db:0c:29:77:1e:04:c8: db:08:54:cb:6e:b9:fe:a9:d8:fe:dd:de:16:14:f4: 58:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7B:5B:CE:AB:9B:21:83:39:8E:3E:D2:3B:76:98:3A:A9:5B:66:5E X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:68:ce:ca:d4:84:82:43:9d:b8:8f:92:54:35:30:f2:56:09: b6:c3:d4:2f:fe:e4:03:b9:d8:a4:3d:e6:8e:bc:15:0c:19:0f: e8:35:c4:1d:74:2a:be:7a:2a:6a:96:95:0b:39:c2:ec:68:ce: be:d9:b3:6a:50:1b:80:06:e2:a6:8a:92:ce:f7:99:99:11:58: 48:f2:cf:b1:fb:5a:ad:9e:ed:f4:b5:ad:53:cd:e1:a6:cc:f1: aa:88:7a:b0:53:0c:71:a3:ef:c8:7f:97:f5:61:cb:a7:59:6e: 1e:a4:57:73:54:72:6e:4d:e8:ff:ff:85:5f:98:42:8e:db:41: d5:ad:b9:78:15:52:47:5e:dc:52:f6:ad:bc:61:8c:ca:7a:3c: 0b:1c:2a:23:bb:49:6c:97:1c:bc:15:54:42:74:71:09:ea:dc: 81:17:19:b4:72:4e:3d:f7:6c:2c:aa:ac:4f:0f:76:06:5d:30: 4d:3f:44:fb:ae:ed:ef:8b:5f:5c:e0:69:aa:14:f5:33:3d:38: 9e:21:2b:4c:f8:6b:5c:59:63:65:e9:5c:2c:18:59:9b:ac:8b: f1:7b:fe:77:b8:e2:c8:1e:ad:7c:8f:2e:b4:03:e6:ed:0d:f9: a9:b1:6a:11:a7:cf:e9:16:a5:1f:03:55:e8:92:d4:2c:6d:0e: eb:f4:53:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+eVTHDvq2H7QBwtS5aY9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwOTIwMTEwMDE3WhcNMjYwOTIxMTEwMDE3WjAzMTEwLwYDVQQD EyhiNTdiNWJjZWFiOWIyMTgzMzk4ZTNlZDIzYjc2OTgzYWE5NWI2NjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76mDLStYNU33zFYIPdFAgng9J+9X 8shbUMcrhEEAktfZQdmBGaG5bmLFWc2vacdHZwQwLPDYHtRjQczSQ4no174mFL5U 9th75uKsz+4PYmFqVAg1vWaXU/F6Bm4J0sdYv1DFKc93mM+n5sgT0WY6KTQuDOx/ Ae20zhUre7ui1F6mx7NZIkwDMlSTXNHvTN2lv51Y9sMsqUIQeJfDPitTNAGZBhO1 1lJ1+cLMH5OX9nDQaBFgdenyd9DcF7rmzX7ZfE/i6p3H0eR0s7CQeQkxb8tHeFjN UVRTb6xyNfvLO8+k7CZYHdh6H9sMKXceBMjbCFTLbrn+qdj+3d4WFPRYdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLV7W86rmyGDOY4+0jt2mDqpW2ZeMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWjOytSE gkOduI+SVDUw8lYJtsPUL/7kA7nYpD3mjrwVDBkP6DXEHXQqvnoqapaVCznC7GjO vtmzalAbgAbipoqSzveZmRFYSPLPsftarZ7t9LWtU83hpszxqoh6sFMMcaPvyH+X 9WHLp1luHqRXc1Rybk3o//+FX5hCjttB1a25eBVSR17cUvatvGGMyno8CxwqI7tJ bJccvBVUQnRxCercgRcZtHJOPfdsLKqsTw92Bl0wTT9E+67t74tfXOBpqhT1Mz04 niErTPhrXFljZelcLBhZm6yL8Xv+d7jiyB6tfI8utAPm7Q35qbFqEafP6RalHwNV 6JLULG0O6/RT2A== -----END CERTIFICATE-----Generated at Sun Sep 20 22:35:13 2026 by rpki-client