$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: M8UwyCcOXERmwxzHB0XhQpZwa3nb7X5Y/RQLeInLq7U= Subject key identifier: 24:77:EF:3F:32:B0:61:01:6C:1F:FC:F1:EA:88:3C:09:8A:0B:75:9B Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 01A0D760F21064033C3BD636239E800B3F1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 1BA1 Signing time: Fri 25 Sep 2026 07:04:09 +0000 Manifest this update: Fri 25 Sep 2026 07:04:09 +0000 Manifest next update: Sat 26 Sep 2026 07:04:09 +0000 Files and hashes: 1: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 2: 2GJBZKsIm3jc4Z15-3kXAAPem8A.roa (hash: jTvDg98QyTQnWxiM6YIXTY0rLTQHghhXeVF09n/3SKQ=) 3: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 4: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 5: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=) 6: 79P1nblmX5Sl5oZdwI0Dj3MUbys.roa (hash: La6+lZpjnP/18h6j5GqiME+A/vxO0IF8qjUuVJayEN4=) 7: AuE2rwLS8SAwP0zsffvoZ2RJKhw.roa (hash: TM4O7+3WS0xFrNfC6juWwcHyA2+UIAU1iXbpY1CJY+s=) 8: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=) 9: BYI4akM6lhIw21VZknTh_NCIqSU.roa (hash: YdN03lqeu5vvLCQrhnxcW6iOxgWPrgZFciSU6zX3FMs=) 10: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=) 11: CsOg-GOeny_9vkusUYp1sR9tYxQ.roa (hash: B5Fqa/tyTUjbKfD/q6XVxdgxBuLp0JqWs12q7fuh4Dg=) 12: CuwON2MJZtvZI4g-9no7hDi-jTM.roa (hash: t4dkHT6G4U30/rLqAkRNH5wHWvEqi8n3uM1IPVPedwg=) 13: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 14: QL7_ykelTLhFLJAjvfuxzqWP2vk.roa (hash: 4QL9CwOY1xIzLU+QxTfnx6oHiWUSUqf0UtoKPhqw5LE=) 15: T0aT3QkWaPX97qryFtMvnLWmpJ0.roa (hash: hVVcWwS0KmrThtmWJzxkk3nULKlXJIyRvJXdRXp5mwI=) 16: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=) 17: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 18: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=) 19: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 20: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: vGGxxMfWWiy7SV5qXSaAXr4DIkpB+yyC094T8YpgkmQ=) 21: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=) 22: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 23: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 24: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 25: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 26: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 27: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 28: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=) 29: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=) 30: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 31: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 32: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) 33: ywexjdSx58c_dnH_pe3prB5KbBc.roa (hash: CEx8v6bvzNC8gDYFXGH5Ep5ijCVlKNxtjBQGlyVSklQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 07:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d7:60:f2:10:64:03:3c:3b:d6:36:23:9e:80:0b:3f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Sep 25 07:04:09 2026 GMT Not After : Sep 26 07:04:09 2026 GMT Subject: CN=2477ef3f32b061016c1ffcf1ea883c098a0b759b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:88:fb:94:81:5c:6f:3b:36:1d:5e:3c:e2:e3: 5e:6d:88:eb:46:62:d3:b4:80:fa:6c:c5:16:b5:d4: 9f:b1:0b:b7:25:a0:45:20:3e:51:6a:83:ee:62:76: c5:03:92:12:f3:a7:9d:eb:a9:db:9e:7f:5a:8f:fa: a6:e0:ce:92:36:7e:e4:6e:6e:fc:da:cc:16:13:73: f4:42:47:f1:92:c8:9b:63:c2:90:de:6f:48:41:2d: 87:c2:05:7c:b9:62:56:31:44:59:f5:fa:80:ba:ff: b9:e1:c2:9b:ee:fe:0a:4c:fe:30:e3:67:4f:4f:52: e4:27:63:50:8b:3b:9b:fd:b5:cf:81:17:7e:4b:f3: 9b:a8:9a:18:33:0a:2c:4c:20:0d:be:e9:68:f9:d6: 18:7a:fd:ce:3a:44:f4:72:3d:12:e6:7d:cc:c7:d0: 3b:93:95:dc:16:f4:f1:36:98:ec:04:ed:46:7a:0c: 72:09:5b:01:ae:a7:bd:30:e1:b8:07:77:fd:0a:05: eb:14:5a:18:e8:de:6a:a8:69:c6:1d:ef:9e:39:cb: 60:9c:0f:6b:36:66:bf:69:a2:2c:f4:20:d1:1b:b8: 32:31:59:2c:fe:3d:9f:28:9d:91:3b:21:72:b8:0d: d9:8e:9d:03:93:ff:1e:f4:bd:b4:67:bb:8e:0e:c0: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:77:EF:3F:32:B0:61:01:6C:1F:FC:F1:EA:88:3C:09:8A:0B:75:9B X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5f:4d:e5:f3:a5:0f:18:e9:9e:24:9b:31:8f:98:44:ab:96: 1c:ef:13:83:cf:14:cf:0e:2f:f4:a8:f1:08:b7:30:ba:fc:70: 26:f0:23:9f:c8:ec:fa:0a:bb:15:a7:e0:bb:f2:ef:ad:51:6d: 4f:ab:0b:aa:9c:be:06:2b:c1:05:44:bb:ef:99:d8:f5:cc:b3: 03:e0:1f:8a:64:37:4a:4c:1d:39:76:8b:ce:9e:4c:41:6a:7d: e0:57:8b:a4:ec:ae:93:e4:3c:d3:a8:9d:0e:7f:b7:ca:cd:bd: a7:a1:86:12:fd:52:0a:ea:e4:1a:c3:9f:8e:6e:82:55:60:c0: dd:cf:ee:a2:49:bf:c9:d9:c7:fc:32:0e:d3:dd:38:33:ec:14: 0a:2e:12:c5:9e:77:2b:bc:fe:75:54:df:a2:a1:65:06:f1:68: d5:31:33:21:d4:99:bc:ae:97:10:e0:2b:6f:6e:87:40:6b:1e: 1e:d3:46:18:e7:67:9d:c7:e9:3d:7c:d5:72:c8:89:a7:bb:57: 76:2d:4e:c6:93:4d:c8:84:7e:0f:11:dc:05:17:13:60:4f:8a: df:12:03:4f:2a:28:70:6d:36:fa:bc:bf:da:8b:59:d0:d5:eb: be:f1:9d:f7:ad:00:b8:91:58:2c:8f:9e:73:f4:62:bf:cb:24: 80:56:4c:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDXYPIQZAM8O9Y2I56ACz8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwOTI1MDcwNDA5WhcNMjYwOTI2MDcwNDA5WjAzMTEwLwYDVQQD EygyNDc3ZWYzZjMyYjA2MTAxNmMxZmZjZjFlYTg4M2MwOThhMGI3NTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Yj7lIFcbzs2HV484uNebYjrRmLT tID6bMUWtdSfsQu3JaBFID5RaoPuYnbFA5IS86ed66nbnn9aj/qm4M6SNn7kbm78 2swWE3P0QkfxksibY8KQ3m9IQS2HwgV8uWJWMURZ9fqAuv+54cKb7v4KTP4w42dP T1LkJ2NQizub/bXPgRd+S/ObqJoYMwosTCANvulo+dYYev3OOkT0cj0S5n3Mx9A7 k5XcFvTxNpjsBO1GegxyCVsBrqe9MOG4B3f9CgXrFFoY6N5qqGnGHe+eOctgnA9r Nma/aaIs9CDRG7gyMVks/j2fKJ2ROyFyuA3Zjp0Dk/8e9L20Z7uODsBM5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCR37z8ysGEBbB/88eqIPAmKC3WbMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC19N5fOl DxjpniSbMY+YRKuWHO8Tg88Uzw4v9KjxCLcwuvxwJvAjn8js+gq7Fafgu/LvrVFt T6sLqpy+BivBBUS775nY9cyzA+AfimQ3SkwdOXaLzp5MQWp94FeLpOyuk+Q806id Dn+3ys29p6GGEv1SCurkGsOfjm6CVWDA3c/uokm/ydnH/DIO0904M+wUCi4SxZ53 K7z+dVTfoqFlBvFo1TEzIdSZvK6XEOArb26HQGseHtNGGOdnncfpPXzVcsiJp7tX di1OxpNNyIR+DxHcBRcTYE+K3xIDTyoocG02+ry/2otZ0NXrvvGd960AuJFYLI+e c/Riv8skgFZMKQ== -----END CERTIFICATE-----Generated at Fri Sep 25 13:20:05 2026 by rpki-client