$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: ybpjxUZ99n5wI3d/k6HWdcyUEf3YBV/ieQnXd3QXLf4= Subject key identifier: 2A:B0:35:8A:ED:6C:18:C3:F8:7F:01:9D:73:40:07:7C:65:66:A2:26 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019E1D91065666CE33E8027048B3E049C313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 1A24 Signing time: Tue 12 May 2026 19:01:43 +0000 Manifest this update: Tue 12 May 2026 19:01:43 +0000 Manifest next update: Wed 13 May 2026 19:01:43 +0000 Files and hashes: 1: 0EJd6KM5OKs4ZeWtakfKi4LfHMQ.roa (hash: lq/+jqUsuGMmo0V5eC2lYaf4+vkz0NSEYMEZoOw+h8M=) 2: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 3: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 4: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 5: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=) 6: Au6ztzaYOL8tiA06L7XgEOvNL7w.roa (hash: 2gixSAvahjHMVkdyFo4/SHHkZ2SyI5tRyn1jTT+SjAw=) 7: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=) 8: BSJwseKs8IstwvoydvzKDO4yjpk.roa (hash: 6WIA++2azmJG3DLJYorfCdBV6cXv3FDFWjwIcVYK2xA=) 9: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=) 10: Fmg3wL_o3aopIsEQbXgCHXFam4E.roa (hash: OY+cWfR5jYsnEPm1uZa4VUsODu3TKMDkMdv4TNeG75Q=) 11: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 12: Rr2zhV2BMuYwAMQjOZC17bpA4NM.roa (hash: EMKdr17+gur82xEd8d0NLRU71QAL7ROjLErF0ye4dUQ=) 13: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=) 14: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 15: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=) 16: a3awGspUbD83lR3SbJMhhWhWXUU.roa (hash: 4wacv1ZaHYO9NbaUGd81FOMwUiV7hBGJzXqLo1BRDrY=) 17: bAQWAvcm3T6rfyaf7ljIBvlFtAM.roa (hash: 2DAvyPmgh36vWxZnNmX769qlQ+GKNipPDNKBhtCFjHA=) 18: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 19: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: wyNoE0vlWPYGMsl/kpE/zQeFWH1JtnUzv9qHyWNo4c4=) 20: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=) 21: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 22: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 23: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 24: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 25: jp5nTIoItTHIHDPX2kZzUPRHlto.roa (hash: HE9yyxrPG49EMZWs9Brm5CRMxvDO542oZ8FihK7J/do=) 26: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 27: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 28: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=) 29: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=) 30: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 31: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 32: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:91:06:56:66:ce:33:e8:02:70:48:b3:e0:49:c3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: May 12 19:01:43 2026 GMT Not After : May 13 19:01:43 2026 GMT Subject: CN=2ab0358aed6c18c3f87f019d7340077c6566a226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dc:fe:95:fb:63:94:9f:0c:da:18:ca:eb:92: 41:49:ab:02:9b:cf:65:d2:51:78:15:2c:bd:be:0a: 97:27:fd:3f:e3:89:b8:b6:95:58:4f:b3:ed:ce:83: 27:04:32:3a:0f:1a:e6:aa:2e:16:de:54:de:93:e4: 38:50:cf:c2:bc:7b:47:37:d2:23:98:31:5f:ab:fa: d4:2c:47:fc:47:dd:ac:61:ff:79:2c:5c:f7:75:49: 85:d6:ef:ec:8f:da:d2:15:40:9e:0f:47:f5:6e:26: 4d:9d:02:ee:1c:35:7f:b3:49:64:34:b8:5c:3e:a4: c8:83:7b:78:64:a8:3f:44:52:23:72:06:28:83:53: 4e:e9:17:53:80:70:12:2c:e6:d2:ca:92:5e:1d:ba: 13:b4:a9:5b:ac:8b:13:43:1e:26:eb:71:b6:d9:2a: 42:24:b4:d1:b4:86:2c:87:4b:3a:f2:6a:66:8b:ff: 08:cd:40:36:51:6f:f5:bc:30:97:01:8c:3d:94:03: 75:bf:82:a5:96:c0:82:ee:c6:53:fe:92:b9:7c:d1: 97:11:a5:ba:0d:f6:ee:c4:92:0c:38:58:05:0c:4a: 87:c8:cd:04:03:79:3d:65:b4:40:8b:eb:72:12:7d: 8f:23:bc:3e:d0:f8:cc:f0:7b:11:9f:88:73:a9:f4: ef:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B0:35:8A:ED:6C:18:C3:F8:7F:01:9D:73:40:07:7C:65:66:A2:26 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:32:26:35:e7:f2:82:1e:cc:ed:43:c9:99:b4:80:ec:29:cc: 93:c7:b5:af:0a:e1:b6:04:95:c2:0f:28:9e:b7:74:71:1d:ed: 2c:32:5b:d8:13:ac:6f:e6:dd:98:a4:15:88:83:1b:6a:23:0e: af:a7:d1:87:f7:3b:5b:7d:55:8d:06:f5:b7:d9:55:27:27:98: 51:a7:cb:aa:13:00:44:e8:79:cc:c3:3d:f1:53:9b:58:3d:fa: d4:9e:a1:63:b8:45:33:1b:29:7e:5d:97:22:e5:f2:67:c8:a7: 88:54:9c:2f:af:6f:2d:78:64:f3:16:9d:b6:0f:37:bb:8e:ca: ba:59:6e:c5:0f:9d:4f:68:51:17:14:79:77:60:56:1d:e9:05: 99:dc:11:b5:42:61:be:3a:d2:09:e2:44:d0:f2:21:f5:d6:99: 3c:2b:42:86:c6:15:9c:6d:23:04:fb:a4:dd:97:33:2e:da:58: 26:f1:cf:62:4f:18:b1:ca:a5:85:cf:41:92:c4:71:f9:81:9d: 78:d1:55:36:91:95:1d:60:9f:82:4c:7e:49:7c:2f:41:a4:f7: e9:fa:5c:27:a3:cb:78:f2:77:2f:1c:87:83:82:d6:10:b2:e1: 62:60:9d:b2:82:a3:e5:59:d3:0f:73:b0:ec:3b:09:c6:07:3c: 24:a3:d3:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dkQZWZs4z6AJwSLPgScMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwNTEyMTkwMTQzWhcNMjYwNTEzMTkwMTQzWjAzMTEwLwYDVQQD EygyYWIwMzU4YWVkNmMxOGMzZjg3ZjAxOWQ3MzQwMDc3YzY1NjZhMjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidz+lftjlJ8M2hjK65JBSasCm89l 0lF4FSy9vgqXJ/0/44m4tpVYT7PtzoMnBDI6Dxrmqi4W3lTek+Q4UM/CvHtHN9Ij mDFfq/rULEf8R92sYf95LFz3dUmF1u/sj9rSFUCeD0f1biZNnQLuHDV/s0lkNLhc PqTIg3t4ZKg/RFIjcgYog1NO6RdTgHASLObSypJeHboTtKlbrIsTQx4m63G22SpC JLTRtIYsh0s68mpmi/8IzUA2UW/1vDCXAYw9lAN1v4KllsCC7sZT/pK5fNGXEaW6 DfbuxJIMOFgFDEqHyM0EA3k9ZbRAi+tyEn2PI7w+0PjM8HsRn4hzqfTvtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqwNYrtbBjD+H8BnXNAB3xlZqImMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDImNefy gh7M7UPJmbSA7CnMk8e1rwrhtgSVwg8onrd0cR3tLDJb2BOsb+bdmKQViIMbaiMO r6fRh/c7W31VjQb1t9lVJyeYUafLqhMAROh5zMM98VObWD361J6hY7hFMxspfl2X IuXyZ8iniFScL69vLXhk8xadtg83u47KulluxQ+dT2hRFxR5d2BWHekFmdwRtUJh vjrSCeJE0PIh9daZPCtChsYVnG0jBPuk3ZczLtpYJvHPYk8Yscqlhc9BksRx+YGd eNFVNpGVHWCfgkx+SXwvQaT36fpcJ6PLePJ3LxyHg4LWELLhYmCdsoKj5VnTD3Ow 7DsJxgc8JKPTMw== -----END CERTIFICATE-----Generated at Wed May 13 02:21:24 2026 by rpki-client