$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: rmaifFY/Smg1k+jBX3BABUhkzEcUh+rNDK+99JlD4F0= Subject key identifier: E3:30:98:25:9A:7E:33:F2:0C:55:16:EC:8A:F2:D9:EC:6A:AC:04:5C Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019CA9EB882F4D4E1B171569695467768398 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 195D Signing time: Sun 01 Mar 2026 15:01:51 +0000 Manifest this update: Sun 01 Mar 2026 15:01:51 +0000 Manifest next update: Mon 02 Mar 2026 15:01:51 +0000 Files and hashes: 1: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 2: 1-fnKnftkxo9cmAsQkPsG-I4ca0I.roa (hash: UbSvch0TgdBBUmSrH2mJ9dZgvzb+FMllfQIcUu2Fc2k=) 3: 1rd6tjUGFwBUGvZMK1_ySaJ2hzI.roa (hash: QHkpYhpXjOcWjkew6ZIuhefy1Q8/VWsRdSkOyvp4lH4=) 4: 1ueapHgSZeRmBOGFLmKR6_H2zUw.roa (hash: q0+HV1DIsnFoYoW/8YTV0Ggen1o+4d2qQ6LxI87aP9I=) 5: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 6: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 7: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=) 8: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=) 9: Fmg3wL_o3aopIsEQbXgCHXFam4E.roa (hash: OY+cWfR5jYsnEPm1uZa4VUsODu3TKMDkMdv4TNeG75Q=) 10: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 11: OyeMYVp5OvrkmRrNy1af0fPKfIs.roa (hash: 47ed5gKnSBsJcBinRPWYBPdrDfTOHB8tg9qJU58BIJY=) 12: RN5nALXjZNUbgUzwgE6w7hssQDY.roa (hash: kiv3lC7KIYE2csnUvMxs+SFHsoHIxTYXU7zIuFIVszc=) 13: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 14: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=) 15: a3awGspUbD83lR3SbJMhhWhWXUU.roa (hash: 4wacv1ZaHYO9NbaUGd81FOMwUiV7hBGJzXqLo1BRDrY=) 16: cn7-hcrRNirVMn7fuVChkd5gOH0.roa (hash: Jkp/J73ypJANp3uQ/SWVaEZfnou2Lr+GzdzjCKUvGzg=) 17: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 18: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: +uiI6n00V3+krPbKXAScq0uoZqDxUXqhsV+QeJbURdU=) 19: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 20: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 21: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 22: iyLqhBW7vWXE-D-a6Hy1btMt5hk.roa (hash: sRqgDDL9E/1sF3HT7gpIT6xxsbUIjda7rWB3PenCul4=) 23: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 24: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 25: ntwoakNBLWCi_eDmdQW8Ye93wMA.roa (hash: uI+s9dLYxlNIfKiVhukcn52PpzMFIuk5gWhfSg5erME=) 26: oqSpojL2gvSR2QcLL4KFm0V4HWY.roa (hash: FGRxNjHOyElpFwbAYx4V+mGIafQFaKt4LA9c4xccdQM=) 27: qhahxJ4ekUegtdPupvRl0hdJVdQ.roa (hash: BvwZQto8PkxkN1W4xLx00uQHLy83/08b+xF1cw9+RFA=) 28: s9crL-h4A3fkSwdexuXqPbkXvCA.roa (hash: CRLXsrde8vjqG70/Av7AifgLW8Uoo74tzTc6Om20qok=) 29: sueGPW73iPK3jAFIhZ70fMm7ebQ.roa (hash: hT+HoDAV5/Ai2d2TRsX3aoj4KDVhZldFajlj07hwRkI=) 30: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 31: v4cq6Hnva2aD7nUaDvqW4eZ7jBg.roa (hash: NboZnNkBkhmU0ZjWN+JKF9jhgAaCEPLSrq5UOM/05Vs=) 32: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:eb:88:2f:4d:4e:1b:17:15:69:69:54:67:76:83:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Mar 1 15:01:51 2026 GMT Not After : Mar 2 15:01:51 2026 GMT Subject: CN=e33098259a7e33f20c5516ec8af2d9ec6aac045c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:9e:c3:ad:eb:25:89:c1:38:a6:5c:9a:5b: c8:f7:94:2b:a0:af:f6:ea:4d:5f:3e:61:72:8a:9a: 78:ae:2f:5e:42:b1:fe:f1:97:1d:36:37:c5:d1:7b: 75:5b:28:bf:de:93:e6:dc:1f:a3:c2:fa:77:6a:d1: 29:09:8a:40:6f:cc:71:71:b7:af:c7:88:66:97:ff: 12:47:69:9f:20:b3:2b:3e:65:43:56:92:28:5a:a4: 47:0b:4a:6f:ef:95:3e:ce:e4:67:49:a0:c2:73:1e: 49:e1:da:5a:9e:c3:95:12:2e:40:83:85:b1:f6:69: 31:8a:0f:53:49:bc:e8:71:ef:6e:de:0b:8e:62:f5: a2:aa:af:77:7d:00:66:95:50:24:c1:de:e4:2f:f7: 52:ca:eb:95:cd:41:7e:3b:4c:b8:9b:d0:13:98:01: df:4d:40:44:3b:5d:f9:70:b3:ba:16:0f:37:de:f5: 0d:8e:3c:66:3c:25:e8:f6:f1:8d:6b:16:eb:0b:e8: 11:2e:ed:3f:0c:d5:75:32:73:6b:f7:8e:62:56:5c: 3b:e3:4e:c4:52:f3:c9:8b:c3:07:05:5f:f2:db:08: 23:43:59:e0:a6:1d:c5:7d:2b:e3:5c:ce:39:10:c5: 77:2d:53:20:5e:6c:d7:2d:30:f3:c1:9c:c6:2e:44: 4b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:30:98:25:9A:7E:33:F2:0C:55:16:EC:8A:F2:D9:EC:6A:AC:04:5C X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:fb:76:3f:7b:d5:1f:01:5f:a2:59:cd:31:fd:9b:b1:de:57: 2c:42:1b:26:78:ae:81:fd:06:7d:80:21:46:ee:e6:38:69:fc: b2:7a:5d:4d:9a:06:41:e2:ad:a5:46:78:e9:6b:46:cd:a8:e5: 35:89:0d:ff:49:e7:d7:2e:1f:02:db:d3:6e:b4:b2:af:4a:33: be:4b:0b:ab:d8:f3:5c:03:66:8a:76:58:66:08:be:79:3b:5e: 6f:9c:01:be:71:c0:c7:f2:a3:bf:64:08:8b:b6:df:fb:3f:10: ed:49:d0:1e:a2:99:45:5d:35:a7:10:de:9b:7c:43:7e:33:b8: 82:91:52:3a:db:c3:4e:2e:29:01:d2:bb:b0:9b:bb:e4:45:42: f8:38:f7:4a:1a:6a:f4:a7:59:4f:a8:2f:9f:9e:4d:a0:41:61: 8d:54:24:c8:9b:1c:98:90:b5:0b:c1:8a:01:fd:52:81:8e:49: a2:2a:50:15:e3:c4:af:eb:3a:e0:b7:70:43:2e:af:31:c7:25: d6:03:0f:1d:df:74:28:17:92:bf:af:9c:6f:3a:28:ee:4c:09: 00:89:e2:5f:4b:b9:5e:af:8f:02:36:01:dd:7e:d3:01:fb:8e: 63:35:28:c9:8e:15:56:52:71:cf:a7:94:40:e0:35:48:46:79: 90:aa:9f:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyp64gvTU4bFxVpaVRndoOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMzAxMTUwMTUxWhcNMjYwMzAyMTUwMTUxWjAzMTEwLwYDVQQD EyhlMzMwOTgyNTlhN2UzM2YyMGM1NTE2ZWM4YWYyZDllYzZhYWMwNDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNyew63rJYnBOKZcmlvI95QroK/2 6k1fPmFyipp4ri9eQrH+8ZcdNjfF0Xt1Wyi/3pPm3B+jwvp3atEpCYpAb8xxcbev x4hml/8SR2mfILMrPmVDVpIoWqRHC0pv75U+zuRnSaDCcx5J4dpansOVEi5Ag4Wx 9mkxig9TSbzoce9u3guOYvWiqq93fQBmlVAkwd7kL/dSyuuVzUF+O0y4m9ATmAHf TUBEO135cLO6Fg833vUNjjxmPCXo9vGNaxbrC+gRLu0/DNV1MnNr945iVlw7407E UvPJi8MHBV/y2wgjQ1ngph3FfSvjXM45EMV3LVMgXmzXLTDzwZzGLkRLVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMwmCWafjPyDFUW7Iry2exqrARcMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvt2P3vV HwFfolnNMf2bsd5XLEIbJniugf0GfYAhRu7mOGn8snpdTZoGQeKtpUZ46WtGzajl NYkN/0nn1y4fAtvTbrSyr0ozvksLq9jzXANminZYZgi+eTteb5wBvnHAx/Kjv2QI i7bf+z8Q7UnQHqKZRV01pxDem3xDfjO4gpFSOtvDTi4pAdK7sJu75EVC+Dj3Shpq 9KdZT6gvn55NoEFhjVQkyJscmJC1C8GKAf1SgY5JoipQFePEr+s64LdwQy6vMccl 1gMPHd90KBeSv6+cbzoo7kwJAIniX0u5Xq+PAjYB3X7TAfuOYzUoyY4VVlJxz6eU QOA1SEZ5kKqf0w== -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:54 2026 by rpki-client