$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: KN+maVlhgULb49h83kXT5T3xJUTTkcc6hDF8Ck5bWlU= Subject key identifier: A4:C2:68:A2:93:1B:46:91:20:A1:EB:54:CF:BB:88:6B:1A:0F:8D:45 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019F8F46FC808AFEB3AF4B369EB9ADF7E069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 1AEC Signing time: Thu 23 Jul 2026 14:00:21 +0000 Manifest this update: Thu 23 Jul 2026 14:00:21 +0000 Manifest next update: Fri 24 Jul 2026 14:00:21 +0000 Files and hashes: 1: 0EJd6KM5OKs4ZeWtakfKi4LfHMQ.roa (hash: lq/+jqUsuGMmo0V5eC2lYaf4+vkz0NSEYMEZoOw+h8M=) 2: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 3: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 4: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 5: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=) 6: 79P1nblmX5Sl5oZdwI0Dj3MUbys.roa (hash: La6+lZpjnP/18h6j5GqiME+A/vxO0IF8qjUuVJayEN4=) 7: Au6ztzaYOL8tiA06L7XgEOvNL7w.roa (hash: 2gixSAvahjHMVkdyFo4/SHHkZ2SyI5tRyn1jTT+SjAw=) 8: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=) 9: BSJwseKs8IstwvoydvzKDO4yjpk.roa (hash: 6WIA++2azmJG3DLJYorfCdBV6cXv3FDFWjwIcVYK2xA=) 10: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=) 11: CuwON2MJZtvZI4g-9no7hDi-jTM.roa (hash: t4dkHT6G4U30/rLqAkRNH5wHWvEqi8n3uM1IPVPedwg=) 12: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 13: Rr2zhV2BMuYwAMQjOZC17bpA4NM.roa (hash: EMKdr17+gur82xEd8d0NLRU71QAL7ROjLErF0ye4dUQ=) 14: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=) 15: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 16: Xi1n82G6gX7UAY2_fbZogWirIn4.roa (hash: DgSYKj3HKBtQlWF7ILEGvT4SnZn/5ZATo7Dhfv1URjQ=) 17: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=) 18: a3awGspUbD83lR3SbJMhhWhWXUU.roa (hash: 4wacv1ZaHYO9NbaUGd81FOMwUiV7hBGJzXqLo1BRDrY=) 19: bAQWAvcm3T6rfyaf7ljIBvlFtAM.roa (hash: 2DAvyPmgh36vWxZnNmX769qlQ+GKNipPDNKBhtCFjHA=) 20: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 21: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: e/1FD6KPCZfM3PMoLexWfAYGMLDrRWPVPYGgvVhWTLU=) 22: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=) 23: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 24: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 25: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 26: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 27: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 28: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 29: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=) 30: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=) 31: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 32: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 33: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:46:fc:80:8a:fe:b3:af:4b:36:9e:b9:ad:f7:e0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jul 23 14:00:21 2026 GMT Not After : Jul 24 14:00:21 2026 GMT Subject: CN=a4c268a2931b469120a1eb54cfbb886b1a0f8d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:83:e0:0b:3b:c5:ae:48:4d:e3:59:2b:8a: 0e:40:89:b3:57:17:34:e0:5f:c9:a7:44:c4:87:73: a4:49:de:01:0b:7c:d7:a6:f5:6b:8c:dc:ad:76:88: 8d:91:3d:b3:bc:31:5e:64:9f:b2:06:9c:92:32:10: 28:22:a3:0f:0d:77:67:14:38:2f:5f:32:82:8f:7d: 94:93:bc:68:6d:43:00:6b:b6:d1:bb:7c:1a:1a:3a: 0c:3d:79:c5:f9:eb:0b:a6:10:cc:06:c4:33:cb:86: 69:02:cd:06:38:68:c3:81:a8:7c:6e:77:5f:58:31: 10:df:19:dc:14:6d:19:58:2e:11:79:a1:76:b4:4a: 5a:ee:85:51:91:3a:21:3a:b0:63:fb:eb:02:3c:92: bb:2b:6f:fa:26:25:7e:44:04:e5:30:d4:81:e9:94: 7e:dc:a6:a4:a8:0f:aa:be:05:38:e7:ac:f8:b7:d7: ec:e2:db:5a:06:31:d1:59:92:77:a4:a5:46:0c:ad: 2b:41:b5:68:c1:e3:0c:30:eb:0f:58:0d:49:ff:8e: 9c:e4:fb:7f:52:c3:02:61:e0:b0:7b:1f:a2:ce:c7: a1:c1:96:5c:c7:0d:f1:01:5b:1e:55:50:bd:d4:70: 4c:66:c7:80:71:e1:4d:65:8c:29:96:37:54:cb:45: f8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C2:68:A2:93:1B:46:91:20:A1:EB:54:CF:BB:88:6B:1A:0F:8D:45 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:74:af:c1:22:ea:21:6f:a6:55:3d:d0:00:60:cb:b1:5d:47: f7:69:72:80:e9:19:df:e4:e3:4f:a6:c3:06:c8:4c:18:07:aa: af:3c:ff:7b:9f:f6:77:98:85:34:cb:ec:38:d3:0e:99:b5:91: 53:ae:15:5e:15:18:3c:70:ac:4f:8b:b0:23:7a:61:7e:26:24: b2:08:39:7a:5d:13:f1:47:7b:7a:df:5b:2d:9a:60:02:7e:5f: c1:f3:e1:5a:2f:75:f2:78:38:6e:fe:a5:a1:77:e8:d6:0c:6f: 75:d5:a4:40:91:e6:74:9b:23:45:dc:c4:28:1f:b0:ad:66:14: 66:a7:63:80:ee:df:eb:f0:e8:63:60:16:e8:be:d3:d8:04:be: 2c:27:41:d3:98:c4:bc:0d:b4:0a:07:a4:b0:7c:c4:22:18:8b: 97:9c:10:e8:03:4d:dc:f8:52:eb:2f:49:92:94:81:c8:c9:b0: b9:87:af:79:12:b5:51:d1:84:ce:27:7a:54:7d:7a:67:73:44: 3e:3d:67:52:80:63:a7:e7:02:bf:2e:45:9d:df:85:e7:f2:c7: 5e:53:fb:33:a5:bb:10:73:e4:69:09:98:93:5f:f5:ba:c6:d8: 6b:d8:1e:d8:0d:86:93:c5:3b:28:e0:7e:d8:22:0f:20:07:a3: b7:de:36:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PRvyAiv6zr0s2nrmt9+BpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwNzIzMTQwMDIxWhcNMjYwNzI0MTQwMDIxWjAzMTEwLwYDVQQD EyhhNGMyNjhhMjkzMWI0NjkxMjBhMWViNTRjZmJiODg2YjFhMGY4ZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoiD4As7xa5ITeNZK4oOQImzVxc0 4F/Jp0TEh3OkSd4BC3zXpvVrjNytdoiNkT2zvDFeZJ+yBpySMhAoIqMPDXdnFDgv XzKCj32Uk7xobUMAa7bRu3waGjoMPXnF+esLphDMBsQzy4ZpAs0GOGjDgah8bndf WDEQ3xncFG0ZWC4ReaF2tEpa7oVRkTohOrBj++sCPJK7K2/6JiV+RATlMNSB6ZR+ 3KakqA+qvgU456z4t9fs4ttaBjHRWZJ3pKVGDK0rQbVoweMMMOsPWA1J/46c5Pt/ UsMCYeCwex+izsehwZZcxw3xAVseVVC91HBMZseAceFNZYwpljdUy0X4MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTCaKKTG0aRIKHrVM+7iGsaD41FMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinSvwSLq IW+mVT3QAGDLsV1H92lygOkZ3+TjT6bDBshMGAeqrzz/e5/2d5iFNMvsONMOmbWR U64VXhUYPHCsT4uwI3phfiYksgg5el0T8Ud7et9bLZpgAn5fwfPhWi918ng4bv6l oXfo1gxvddWkQJHmdJsjRdzEKB+wrWYUZqdjgO7f6/DoY2AW6L7T2AS+LCdB05jE vA20CgeksHzEIhiLl5wQ6ANN3PhS6y9JkpSByMmwuYeveRK1UdGEzid6VH16Z3NE Pj1nUoBjp+cCvy5Fnd+F5/LHXlP7M6W7EHPkaQmYk1/1usbYa9ge2A2Gk8U7KOB+ 2CIPIAejt9422w== -----END CERTIFICATE-----Generated at Thu Jul 23 21:31:42 2026 by rpki-client