$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: COHuIgYBIyj8aM2VTqGqGJeOmIChwaWfYZV5jdYSLQI= Subject key identifier: 07:86:EC:80:E8:80:37:7E:A3:EB:62:06:48:A1:74:2A:67:60:D3:19 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 01A1DE02DFECBADFC8D5823AFD571C105C50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0F0E Signing time: Sun 15 Nov 2026 07:01:32 +0000 Manifest this update: Sun 15 Nov 2026 07:01:32 +0000 Manifest next update: Mon 16 Nov 2026 07:01:32 +0000 Files and hashes: 1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=) 2: 1-7viLuqqS3CUp2RFIJ2nqPSZuEc.roa (hash: BZWjMlDgBdJApY/YLRr5vKRG58aYIQtHrvULMlwuELg=) 3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=) 4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=) 5: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=) 6: 7g_MXx_Rtgkg3Q-Mu4Qj2luYEjs.roa (hash: F6w2vzqWEXihYnX1JmzleoPBPc+S+5A30ciLhetjKJ0=) 7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=) 8: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=) 9: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=) 10: CIRls3stTp9BOjHce35suioz25Y.crl (hash: ex3uoEcO+d7CitcQO7mPS9isYjehexucld61uq9fEOg=) 11: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=) 12: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=) 13: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=) 14: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=) 15: SlpFwksvKrdEBwHv2yle6bGpGdI.roa (hash: vog4P9WLQ25aT7PiGisFfZlyjcM3BghRoGQjtErQRUQ=) 16: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=) 17: dRzGNjF88MErNhrrQg2yz8rafv0.roa (hash: +FBAp00ZDN+iU5QU1eqzTHX3mavDuO3cm22qwXqFd98=) 18: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=) 19: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=) 20: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=) 21: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=) 22: s_RGMMWdcp_4YV1fgVVcfe0YwFE.roa (hash: lAuWMq1cGQyZ9D0atUq96A+o8jbNFO1Kvf9mZb1azHg=) 23: zDHq-9PDfSUm1Nn7iVGqTfXLWF4.roa (hash: nbSKBDlBBmSEcP/2gTYA3mgjXyjuGcNHtTSqgl0BiBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:02:df:ec:ba:df:c8:d5:82:3a:fd:57:1c:10:5c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Nov 15 07:01:32 2026 GMT Not After : Nov 16 07:01:32 2026 GMT Subject: CN=0786ec80e880377ea3eb620648a1742a6760d319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:ec:bd:23:d8:c0:1d:01:13:04:0c:1e:bb: d6:26:41:ee:8c:08:42:d8:f4:d4:54:7f:26:19:54: f0:53:00:42:87:ea:1d:a3:f0:90:10:ac:fb:d1:f3: 68:01:bb:4f:38:c3:31:c4:31:01:0e:96:4a:6d:4a: 87:9a:95:80:4f:28:0b:e7:d2:e1:00:48:79:f8:34: 04:c7:da:29:d0:3d:61:13:b5:36:73:a9:e9:1a:df: 3e:69:33:ee:e2:6b:fe:eb:53:a1:27:65:d3:1a:c2: 6f:1c:fb:d1:96:80:38:04:9b:1d:f5:7e:62:6c:39: a6:b8:58:62:ee:bd:1c:61:0f:63:f3:f5:b8:86:b2: 20:1a:78:ba:0b:f3:b2:64:e9:1d:97:68:d8:1d:27: 94:0f:95:84:5d:36:ce:b9:b1:e3:9c:6c:bf:b0:3c: e1:b2:80:93:e9:e1:3b:b0:79:31:85:e3:37:1a:f3: c1:9f:65:a4:c6:ff:28:4c:ff:68:07:c0:6d:d0:7d: 97:6d:5c:58:f6:04:96:bc:4a:e2:e8:9d:64:12:47: 7e:c8:57:1e:a1:bf:f4:8a:92:9d:c4:c9:39:e2:8d: e7:7e:ad:54:7b:55:eb:39:97:77:52:db:87:7e:50: b4:2d:a1:1a:fb:3d:27:1b:7d:95:9c:5c:a3:ae:5b: e1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:86:EC:80:E8:80:37:7E:A3:EB:62:06:48:A1:74:2A:67:60:D3:19 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:44:cc:0b:8b:77:e4:35:27:e0:1a:45:41:5f:cd:b7:8f:81: bf:d2:d2:74:06:38:68:39:3f:c0:c5:da:92:81:88:3f:69:53: f5:30:0f:9f:bc:7e:d6:ba:a1:37:01:80:ca:de:80:0f:13:33: 6b:5b:c1:cf:a0:fb:d0:16:69:95:10:0a:31:e7:91:dd:8a:77: 5b:f9:f1:d3:93:7d:e8:7f:ff:a6:13:77:8b:bc:fb:cc:98:9a: 3d:73:26:e7:c3:f8:4f:07:c4:8f:a2:42:99:6d:b8:cd:78:c3: b6:11:90:50:8e:43:3e:64:06:23:f7:d7:52:d0:64:f7:1e:ed: a4:81:24:d5:82:49:29:1b:dd:b9:6e:b5:d7:0e:5f:df:b4:60: 2d:f7:0a:90:b8:72:1e:7a:c2:d9:cd:81:89:5c:76:f8:08:d5: f0:29:89:21:95:b1:5e:ca:ad:4e:52:59:84:71:e9:92:a1:d3: 92:48:b8:17:fa:b6:59:0f:b1:0c:ed:11:60:35:82:cf:a6:d4: 48:f7:16:79:4c:cf:41:b2:18:3a:dd:d7:f7:18:16:74:8e:16: a8:d7:17:92:26:cf:39:ee:71:d9:79:b9:ca:7b:ec:cf:cf:2f: 33:c1:9b:ff:19:ea:61:fd:b0:c4:86:fb:3b:70:ac:b4:72:65: f3:95:55:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHeAt/sut/I1YI6/VccEFxQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYxMTE1MDcwMTMyWhcNMjYxMTE2MDcwMTMyWjAzMTEwLwYDVQQD EygwNzg2ZWM4MGU4ODAzNzdlYTNlYjYyMDY0OGExNzQyYTY3NjBkMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdjsvSPYwB0BEwQMHrvWJkHujAhC 2PTUVH8mGVTwUwBCh+odo/CQEKz70fNoAbtPOMMxxDEBDpZKbUqHmpWATygL59Lh AEh5+DQEx9op0D1hE7U2c6npGt8+aTPu4mv+61OhJ2XTGsJvHPvRloA4BJsd9X5i bDmmuFhi7r0cYQ9j8/W4hrIgGni6C/OyZOkdl2jYHSeUD5WEXTbOubHjnGy/sDzh soCT6eE7sHkxheM3GvPBn2Wkxv8oTP9oB8Bt0H2XbVxY9gSWvEri6J1kEkd+yFce ob/0ipKdxMk54o3nfq1Ue1XrOZd3UtuHflC0LaEa+z0nG32VnFyjrlvhaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeG7IDogDd+o+tiBkihdCpnYNMZMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkTMC4t3 5DUn4BpFQV/Nt4+Bv9LSdAY4aDk/wMXakoGIP2lT9TAPn7x+1rqhNwGAyt6ADxMz a1vBz6D70BZplRAKMeeR3Yp3W/nx05N96H//phN3i7z7zJiaPXMm58P4TwfEj6JC mW24zXjDthGQUI5DPmQGI/fXUtBk9x7tpIEk1YJJKRvduW611w5f37RgLfcKkLhy HnrC2c2BiVx2+AjV8CmJIZWxXsqtTlJZhHHpkqHTkki4F/q2WQ+xDO0RYDWCz6bU SPcWeUzPQbIYOt3X9xgWdI4WqNcXkibPOe5x2Xm5ynvsz88vM8Gb/xnqYf2wxIb7 O3CstHJl85VVZQ== -----END CERTIFICATE-----Generated at Sun Nov 15 13:05:40 2026 by rpki-client