$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: cEyzdYBVfguz9gnrV7tfEm6vyecIWWTzi6ma4tt04cE= Subject key identifier: 3B:81:85:6B:5C:07:09:01:B5:74:10:D4:96:CA:D7:04:D3:AE:57:D9 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 01A1DA94715EA859631A7D6C445EB51EF771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 1C2F Signing time: Sat 14 Nov 2026 15:02:03 +0000 Manifest this update: Sat 14 Nov 2026 15:02:03 +0000 Manifest next update: Sun 15 Nov 2026 15:02:03 +0000 Files and hashes: 1: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 2: 2GJBZKsIm3jc4Z15-3kXAAPem8A.roa (hash: jTvDg98QyTQnWxiM6YIXTY0rLTQHghhXeVF09n/3SKQ=) 3: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 4: 3RkoAAbl637xFHacZnP1dYbUl_Y.roa (hash: CFWB3BfKb8FIx/ctWEr3mFDr8pNbo6kHUjzRn85m4So=) 5: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 6: 79P1nblmX5Sl5oZdwI0Dj3MUbys.roa (hash: La6+lZpjnP/18h6j5GqiME+A/vxO0IF8qjUuVJayEN4=) 7: AuE2rwLS8SAwP0zsffvoZ2RJKhw.roa (hash: TM4O7+3WS0xFrNfC6juWwcHyA2+UIAU1iXbpY1CJY+s=) 8: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=) 9: BYI4akM6lhIw21VZknTh_NCIqSU.roa (hash: YdN03lqeu5vvLCQrhnxcW6iOxgWPrgZFciSU6zX3FMs=) 10: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 11: QL7_ykelTLhFLJAjvfuxzqWP2vk.roa (hash: 4QL9CwOY1xIzLU+QxTfnx6oHiWUSUqf0UtoKPhqw5LE=) 12: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=) 13: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 14: ciIgS1TjaGOTBbmOnGozAmnHfUc.roa (hash: ntXa2GYDAO0jxPMtQsYXddkZE8eGPrFUqY/SdPvPIvw=) 15: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 16: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: ddWocKTI462TODKCIFTdnudI2ucCbLpHDAoSDAE9whI=) 17: djpQa4Pc6HWbUNK4vryXWxFO1xk.roa (hash: prqSDX22gHIXlG9NNOy6QMJQTpmWoIgSXzckZwHOyVk=) 18: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=) 19: fDKgHJlsiS5uIiaM5lUdRLuQjTQ.roa (hash: vEp2ptdzeVxduX9m+vMz5pf87te8Ro1XCCaMK9okgo8=) 20: fPY6U_1618fK0NT9X8wGnZOYgN8.roa (hash: fCX4MpPK80jOGQxrsBevkbA6sqLzfKitTFXIWhDmcZw=) 21: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 22: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 23: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 24: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 25: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 26: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=) 27: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=) 28: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 29: vMqDF6gjcK8zFvw0OGFxUhR4aFs.roa (hash: O1UaeAxvBKxAX/Cona/josLLFEdiQCFsI/70gWWiGpg=) 30: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 31: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) 32: ywexjdSx58c_dnH_pe3prB5KbBc.roa (hash: CEx8v6bvzNC8gDYFXGH5Ep5ijCVlKNxtjBQGlyVSklQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 15:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:94:71:5e:a8:59:63:1a:7d:6c:44:5e:b5:1e:f7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Nov 14 15:02:03 2026 GMT Not After : Nov 15 15:02:03 2026 GMT Subject: CN=3b81856b5c070901b57410d496cad704d3ae57d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:08:2c:c7:1e:1a:87:90:b3:83:35:57:58: b0:97:99:96:2b:25:76:6f:aa:d7:12:29:99:11:cc: 7d:91:4a:48:e4:74:82:9e:28:7a:aa:06:75:cc:5d: 23:bc:81:0d:cb:74:99:93:75:d7:e9:c0:5b:6d:b2: 51:51:01:9e:97:db:a2:96:48:07:1b:e5:d9:f2:47: 3f:a0:a3:c8:b2:cc:e5:6c:12:ad:cd:5d:d1:47:5b: 84:80:40:9d:c4:8f:f1:00:4e:89:ef:e4:51:6d:23: 7f:6b:f6:80:2c:4a:76:9c:5b:2d:d2:3b:1e:76:e0: 32:8a:03:f0:2d:9b:82:d0:01:58:23:57:3c:1e:f1: 6e:aa:f6:75:4e:f7:c6:03:31:89:ad:d7:00:20:61: 91:96:36:fe:cb:6d:50:89:71:b0:7a:3c:a0:e3:b4: 04:d4:2e:a0:ca:00:f1:a6:b8:c5:96:c5:27:cf:1e: 8c:67:9d:33:29:ec:dc:64:13:64:7e:47:bf:45:98: e6:89:c3:26:1f:35:e3:8b:32:b4:66:6a:f7:c9:6d: 64:f0:1b:e2:82:1e:29:44:3d:c3:50:c6:ae:9c:63: 93:8b:4c:a8:e1:db:c9:67:46:98:24:db:fb:ba:0e: 17:5e:ce:82:fc:15:3a:63:33:fb:1e:ad:59:45:2a: 1f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:81:85:6B:5C:07:09:01:B5:74:10:D4:96:CA:D7:04:D3:AE:57:D9 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1c:28:2c:02:5e:c6:a6:3c:00:e8:be:e8:0f:6c:c7:30:35: 2f:26:91:2b:2d:85:39:c0:0b:74:85:d6:2e:87:9d:20:97:2e: b6:d6:d0:0e:4b:50:a3:f8:e3:4d:8f:d2:cb:31:9e:8d:e5:27: e4:16:89:f8:72:7b:52:b9:34:1b:b3:bc:b1:5c:e4:4c:bd:50: ee:68:5a:56:93:f5:6a:39:ea:c1:43:a1:2a:d6:76:f8:9e:4e: c6:6a:3e:54:60:23:09:25:df:c0:8c:3d:46:eb:da:48:b1:54: a2:5a:a2:87:83:b7:a6:b8:fb:9c:89:6d:4e:6e:4e:70:1c:0e: 82:0f:17:e7:30:1d:58:15:08:86:e0:e3:18:bb:a4:92:7f:6c: ab:46:38:a0:30:ec:0d:39:9b:a1:05:fc:01:43:37:0b:44:7b: da:e7:a2:cc:c8:e2:02:67:f3:83:96:ce:7d:db:1a:1a:5f:88: 2a:fb:6d:c8:7c:28:f4:90:e1:f2:fb:1d:c4:38:94:33:10:72: 9c:da:e5:c5:61:d5:f3:62:94:8b:48:74:b1:c8:ce:a1:6b:27: 20:38:3f:e3:18:cb:ff:10:30:5d:d9:94:7e:df:4a:51:50:8a: 70:01:ec:05:b1:69:94:73:77:26:35:79:08:45:6a:79:ff:18: 82:8c:ce:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHalHFeqFljGn1sRF61HvdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYxMTE0MTUwMjAzWhcNMjYxMTE1MTUwMjAzWjAzMTEwLwYDVQQD EygzYjgxODU2YjVjMDcwOTAxYjU3NDEwZDQ5NmNhZDcwNGQzYWU1N2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzgILMceGoeQs4M1V1iwl5mWKyV2 b6rXEimZEcx9kUpI5HSCnih6qgZ1zF0jvIENy3SZk3XX6cBbbbJRUQGel9uilkgH G+XZ8kc/oKPIsszlbBKtzV3RR1uEgECdxI/xAE6J7+RRbSN/a/aALEp2nFst0jse duAyigPwLZuC0AFYI1c8HvFuqvZ1TvfGAzGJrdcAIGGRljb+y21QiXGwejyg47QE 1C6gygDxprjFlsUnzx6MZ50zKezcZBNkfke/RZjmicMmHzXjizK0Zmr3yW1k8Bvi gh4pRD3DUMaunGOTi0yo4dvJZ0aYJNv7ug4XXs6C/BU6YzP7Hq1ZRSofVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuBhWtcBwkBtXQQ1JbK1wTTrlfZMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxwoLAJe xqY8AOi+6A9sxzA1LyaRKy2FOcALdIXWLoedIJcuttbQDktQo/jjTY/SyzGejeUn 5BaJ+HJ7Urk0G7O8sVzkTL1Q7mhaVpP1ajnqwUOhKtZ2+J5Oxmo+VGAjCSXfwIw9 RuvaSLFUolqih4O3prj7nIltTm5OcBwOgg8X5zAdWBUIhuDjGLukkn9sq0Y4oDDs DTmboQX8AUM3C0R72ueizMjiAmfzg5bOfdsaGl+IKvttyHwo9JDh8vsdxDiUMxBy nNrlxWHV82KUi0h0scjOoWsnIDg/4xjL/xAwXdmUft9KUVCKcAHsBbFplHN3JjV5 CEVqef8YgozOCw== -----END CERTIFICATE-----Generated at Sun Nov 15 00:23:10 2026 by rpki-client