$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: UtaIJz3JXk5sTpeqtF0caABP5/m+dI7ktPjesGOn6HU= Subject key identifier: CC:42:A9:5D:2B:86:C6:28:C6:8E:75:50:C7:5C:ED:2E:EE:2E:47:5F Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019F8F112D4FFF6452DA46C9FD54C705665B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0DC6 Signing time: Thu 23 Jul 2026 13:01:35 +0000 Manifest this update: Thu 23 Jul 2026 13:01:35 +0000 Manifest next update: Fri 24 Jul 2026 13:01:35 +0000 Files and hashes: 1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=) 2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=) 3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=) 4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=) 5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=) 6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=) 7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=) 8: ALWlDjtkuCanlBUglBYrOhOEChU.roa (hash: K7wmpstsUMavHfxPhtRlXCbDpugDG9dlFqpbywewXHk=) 9: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=) 10: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=) 11: CIRls3stTp9BOjHce35suioz25Y.crl (hash: 8jA023VGC3M02iCrCBYINJn3kHxEhQzpLGVStg2d/XY=) 12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=) 13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=) 14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=) 15: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=) 16: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=) 17: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=) 18: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=) 19: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=) 20: _-IzSqMyAnYeGuXF9HT2vUtVRRk.roa (hash: vztXW7011fFUdIgTt2EUpqtENMCmXjShPNnZa1ANQRc=) 21: dRzGNjF88MErNhrrQg2yz8rafv0.roa (hash: +FBAp00ZDN+iU5QU1eqzTHX3mavDuO3cm22qwXqFd98=) 22: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=) 23: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=) 24: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=) 25: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=) 26: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=) 27: ksfyX1A66qksMi7yY2YUuYkItDI.roa (hash: Ka6tT0UzQN7PNatMEnkGYWsSHnAlF+3+njRwkEMDhP0=) 28: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=) 29: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=) 30: oaaK-SykNHj4NMtAlojIzptkrl8.roa (hash: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0=) 31: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 13:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:11:2d:4f:ff:64:52:da:46:c9:fd:54:c7:05:66:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Jul 23 13:01:35 2026 GMT Not After : Jul 24 13:01:35 2026 GMT Subject: CN=cc42a95d2b86c628c68e7550c75ced2eee2e475f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:69:13:da:4d:90:a5:af:c1:7c:a6:98:b1:5c: 46:18:0b:bd:18:94:44:29:6f:d5:01:13:f9:56:55: bf:42:d3:7e:c2:66:4d:42:ce:c4:cd:18:d1:c5:10: 2e:a4:e1:d4:25:a2:ae:1f:fa:c4:10:de:ec:00:50: ee:c9:ca:56:41:49:1b:f5:11:e3:d5:13:20:68:77: 8c:43:3e:2e:2e:f2:d6:07:1e:04:44:17:1b:cd:b6: 13:29:01:e7:8a:c4:be:31:ca:72:a6:94:e3:14:e6: f8:a4:ed:0a:13:81:a6:51:3b:bc:0e:9a:ff:39:32: 2b:18:1e:f6:b9:7b:ee:57:61:bc:f5:75:f7:c5:40: a9:3b:15:2e:4c:2d:9f:34:73:0e:82:d5:a4:3a:89: d7:5c:3d:34:f9:e9:31:0b:89:fe:08:e1:ee:57:e5: c0:0c:9c:86:f3:d2:be:f6:6e:13:cf:56:07:07:91: 60:8b:d0:ea:d1:54:ed:fd:5e:d7:65:b3:63:dd:ba: 4a:fd:fa:79:92:16:c9:1b:ce:55:6e:41:33:e8:a8: c4:8a:98:55:d5:63:9d:b1:77:87:99:e8:c4:92:53: e5:50:83:9a:06:2e:8b:eb:9f:05:6a:19:56:2c:c2: 0d:5b:b4:f3:43:cd:d8:58:67:01:ad:50:62:22:12: 2c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:42:A9:5D:2B:86:C6:28:C6:8E:75:50:C7:5C:ED:2E:EE:2E:47:5F X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:61:71:68:1e:05:f8:25:c6:4e:9a:85:76:5d:92:59:42:bd: c7:57:bc:45:f5:7f:4d:86:aa:e5:75:5d:5c:d8:14:81:f3:b2: 5e:2d:aa:fd:77:b6:5f:51:06:07:34:1b:a4:46:aa:0b:2f:b5: 24:42:a3:74:08:6f:f9:2e:55:c2:e0:92:4a:74:dc:25:dc:e1: c8:02:86:77:53:49:6b:f2:d9:43:04:63:47:da:70:a6:75:82: 01:80:49:85:62:30:c4:7b:75:de:91:16:e1:46:09:5b:ec:ce: 31:0c:82:0c:71:0e:ec:a5:ee:8a:11:bc:3d:d9:f7:f7:07:b6: 6b:e4:25:b0:b7:e7:35:b1:55:ee:10:16:e8:f5:c2:94:41:28: ac:1b:d1:c0:ad:d4:79:7a:a8:34:2c:68:4d:56:e5:0d:fb:10: 62:cb:0c:a5:a5:f7:06:08:6d:b7:85:49:9d:2a:cd:56:38:ad: e3:bf:9f:34:7c:aa:65:25:07:a9:59:8c:6e:8d:c2:26:08:51: 40:78:b3:0b:91:cb:de:cf:ec:1a:31:36:55:52:41:75:1c:33: c7:94:89:a3:31:c2:11:4f:52:3a:72:b4:39:a5:22:10:2f:37: e5:6f:47:97:49:97:1e:7e:1e:0d:8d:90:32:5a:f2:a2:ac:6c: 75:1f:72:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PES1P/2RS2kbJ/VTHBWZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwNzIzMTMwMTM1WhcNMjYwNzI0MTMwMTM1WjAzMTEwLwYDVQQD EyhjYzQyYTk1ZDJiODZjNjI4YzY4ZTc1NTBjNzVjZWQyZWVlMmU0NzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWkT2k2Qpa/BfKaYsVxGGAu9GJRE KW/VARP5VlW/QtN+wmZNQs7EzRjRxRAupOHUJaKuH/rEEN7sAFDuycpWQUkb9RHj 1RMgaHeMQz4uLvLWBx4ERBcbzbYTKQHnisS+McpyppTjFOb4pO0KE4GmUTu8Dpr/ OTIrGB72uXvuV2G89XX3xUCpOxUuTC2fNHMOgtWkOonXXD00+ekxC4n+COHuV+XA DJyG89K+9m4Tz1YHB5Fgi9Dq0VTt/V7XZbNj3bpK/fp5khbJG85VbkEz6KjEiphV 1WOdsXeHmejEklPlUIOaBi6L658FahlWLMINW7TzQ83YWGcBrVBiIhIsUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxCqV0rhsYoxo51UMdc7S7uLkdfMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmFxaB4F +CXGTpqFdl2SWUK9x1e8RfV/TYaq5XVdXNgUgfOyXi2q/Xe2X1EGBzQbpEaqCy+1 JEKjdAhv+S5VwuCSSnTcJdzhyAKGd1NJa/LZQwRjR9pwpnWCAYBJhWIwxHt13pEW 4UYJW+zOMQyCDHEO7KXuihG8Pdn39we2a+QlsLfnNbFV7hAW6PXClEEorBvRwK3U eXqoNCxoTVblDfsQYssMpaX3Bghtt4VJnSrNVjit47+fNHyqZSUHqVmMbo3CJghR QHizC5HL3s/sGjE2VVJBdRwzx5SJozHCEU9SOnK0OaUiEC835W9Hl0mXHn4eDY2Q MlryoqxsdR9ygw== -----END CERTIFICATE-----Generated at Thu Jul 23 20:26:51 2026 by rpki-client