$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: HLhIZW2yRUPwWR6+UX5HJRXQLe3+g2VooW8PGl87DUY= Subject key identifier: 69:60:53:ED:12:0E:BB:8E:B6:F2:D2:30:77:F6:E0:0B:B6:89:AF:06 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019D9A3EC9FF0ECF4148E2B79100A9E5E4A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 19E0 Signing time: Fri 17 Apr 2026 07:01:39 +0000 Manifest this update: Fri 17 Apr 2026 07:01:39 +0000 Manifest next update: Sat 18 Apr 2026 07:01:39 +0000 Files and hashes: 1: 0EJd6KM5OKs4ZeWtakfKi4LfHMQ.roa (hash: lq/+jqUsuGMmo0V5eC2lYaf4+vkz0NSEYMEZoOw+h8M=) 2: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 3: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 4: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 5: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=) 6: Au6ztzaYOL8tiA06L7XgEOvNL7w.roa (hash: 2gixSAvahjHMVkdyFo4/SHHkZ2SyI5tRyn1jTT+SjAw=) 7: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=) 8: BSJwseKs8IstwvoydvzKDO4yjpk.roa (hash: 6WIA++2azmJG3DLJYorfCdBV6cXv3FDFWjwIcVYK2xA=) 9: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=) 10: Fmg3wL_o3aopIsEQbXgCHXFam4E.roa (hash: OY+cWfR5jYsnEPm1uZa4VUsODu3TKMDkMdv4TNeG75Q=) 11: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 12: Rr2zhV2BMuYwAMQjOZC17bpA4NM.roa (hash: EMKdr17+gur82xEd8d0NLRU71QAL7ROjLErF0ye4dUQ=) 13: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=) 14: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 15: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=) 16: a3awGspUbD83lR3SbJMhhWhWXUU.roa (hash: 4wacv1ZaHYO9NbaUGd81FOMwUiV7hBGJzXqLo1BRDrY=) 17: bAQWAvcm3T6rfyaf7ljIBvlFtAM.roa (hash: 2DAvyPmgh36vWxZnNmX769qlQ+GKNipPDNKBhtCFjHA=) 18: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 19: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: 77PVd61ZCwoxhD18l136wliK2nqgyA/hbJD/Fw7gIwI=) 20: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=) 21: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 22: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 23: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 24: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 25: jp5nTIoItTHIHDPX2kZzUPRHlto.roa (hash: HE9yyxrPG49EMZWs9Brm5CRMxvDO542oZ8FihK7J/do=) 26: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 27: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 28: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=) 29: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=) 30: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 31: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 32: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:3e:c9:ff:0e:cf:41:48:e2:b7:91:00:a9:e5:e4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Apr 17 07:01:39 2026 GMT Not After : Apr 18 07:01:39 2026 GMT Subject: CN=696053ed120ebb8eb6f2d23077f6e00bb689af06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:75:86:96:dd:b0:5e:f1:0c:a5:18:0f:4c: 48:79:da:86:9d:82:52:73:3e:e3:67:e4:92:19:31: 41:a1:3c:38:88:3c:cb:dd:8e:99:2c:bd:db:4b:ab: d1:0c:2d:a5:90:b5:4f:89:1e:d8:5a:ef:61:b4:10: 85:94:59:aa:6f:ce:c3:fb:4f:88:d0:22:2b:07:f7: 9c:cc:26:2c:bf:0d:56:41:d8:2a:8f:da:b3:bb:7c: cc:2f:90:b4:ff:34:54:e0:ec:27:de:f1:6b:ce:11: df:82:fe:53:c2:9a:7c:f3:a7:2a:90:c1:7e:ad:76: 4f:ff:5c:0e:24:83:fe:c9:ff:6d:ab:a1:cf:3b:af: b2:72:cf:1a:78:87:e5:bf:37:0b:43:02:62:93:7b: 82:63:5b:ca:22:ff:0b:5d:0a:45:8e:5f:c8:5e:b6: f0:64:a1:2f:08:1d:c7:0a:20:1a:e7:c7:9b:05:80: f8:b5:67:24:ba:86:ce:3e:b0:11:fd:7c:99:11:48: f7:7c:db:d4:ae:7f:88:15:0d:f9:88:7c:7f:b4:de: c6:98:2c:da:a8:71:8a:fe:15:5d:83:59:e0:c1:67: 6b:57:28:d3:ab:54:09:5a:3e:02:dc:2f:ca:0a:74: 46:60:1a:79:f5:79:f8:c4:57:6d:9c:83:37:1d:2c: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:60:53:ED:12:0E:BB:8E:B6:F2:D2:30:77:F6:E0:0B:B6:89:AF:06 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:33:4e:c0:bc:08:0d:6f:fb:2e:09:db:33:27:24:5d:44:ab: 79:d6:c9:ae:6a:9b:bf:bc:25:b4:53:51:ef:eb:4e:48:93:5c: 50:08:ed:59:11:92:6b:b0:5c:f4:99:9d:ab:d3:35:d3:8b:86: 6c:bb:ca:1e:f6:55:dd:6d:84:f5:ad:5f:79:b3:0d:8e:a0:ae: ca:3c:d3:ba:fe:ab:cf:83:90:cf:34:39:40:0a:76:f2:0a:22: b2:b7:c1:95:eb:46:d4:18:00:24:8a:8d:98:bb:f8:56:5d:83: 4b:0d:1c:b6:62:96:5b:27:f6:2d:00:71:93:10:cb:01:70:5b: 24:d2:84:ec:85:6a:66:ea:5d:58:d6:7e:0d:de:41:79:04:f6: 37:d8:7f:8c:64:ce:7f:fc:5d:1f:02:c3:f8:e1:95:eb:33:5e: 8f:62:41:d4:fb:61:d5:59:ac:32:da:d9:9a:e7:cd:ed:51:f6: ea:71:90:89:e0:c5:c3:50:2e:a4:fb:0c:94:0e:0d:c3:6d:da: 81:aa:29:df:15:4f:c0:7d:42:bf:35:e4:1a:e3:79:ee:ee:16: 58:a8:66:cd:3b:a9:83:78:8a:2f:c4:0d:8c:0e:75:26:85:b2: ca:4c:36:c3:7c:1a:75:ce:87:11:89:a2:7e:39:7a:25:0c:28: d5:e6:76:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aPsn/Ds9BSOK3kQCp5eShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwNDE3MDcwMTM5WhcNMjYwNDE4MDcwMTM5WjAzMTEwLwYDVQQD Eyg2OTYwNTNlZDEyMGViYjhlYjZmMmQyMzA3N2Y2ZTAwYmI2ODlhZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnd1hpbdsF7xDKUYD0xIedqGnYJS cz7jZ+SSGTFBoTw4iDzL3Y6ZLL3bS6vRDC2lkLVPiR7YWu9htBCFlFmqb87D+0+I 0CIrB/eczCYsvw1WQdgqj9qzu3zML5C0/zRU4Own3vFrzhHfgv5Twpp886cqkMF+ rXZP/1wOJIP+yf9tq6HPO6+ycs8aeIflvzcLQwJik3uCY1vKIv8LXQpFjl/IXrbw ZKEvCB3HCiAa58ebBYD4tWckuobOPrAR/XyZEUj3fNvUrn+IFQ35iHx/tN7GmCza qHGK/hVdg1ngwWdrVyjTq1QJWj4C3C/KCnRGYBp59Xn4xFdtnIM3HSyrvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlgU+0SDruOtvLSMHf24Au2ia8GMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTNOwLwI DW/7LgnbMyckXUSredbJrmqbv7wltFNR7+tOSJNcUAjtWRGSa7Bc9Jmdq9M104uG bLvKHvZV3W2E9a1febMNjqCuyjzTuv6rz4OQzzQ5QAp28goisrfBletG1BgAJIqN mLv4Vl2DSw0ctmKWWyf2LQBxkxDLAXBbJNKE7IVqZupdWNZ+Dd5BeQT2N9h/jGTO f/xdHwLD+OGV6zNej2JB1Pth1VmsMtrZmufN7VH26nGQieDFw1AupPsMlA4Nw23a gaop3xVPwH1CvzXkGuN57u4WWKhmzTupg3iKL8QNjA51JoWyykw2w3wadc6HEYmi fjl6JQwo1eZ26Q== -----END CERTIFICATE-----Generated at Fri Apr 17 11:52:57 2026 by rpki-client