$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: uPJUQhzjvcwvfafwHjJlEismp9J+7O4QbQmKkV9oBJA= Subject key identifier: AD:A0:20:E9:D3:5B:C8:E2:EA:C6:BA:8A:EF:EB:E1:CB:7D:79:48:72 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 01A15EFB18A0A231C42F78D9DD17953FB282 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0EC1 Signing time: Wed 21 Oct 2026 15:01:16 +0000 Manifest this update: Wed 21 Oct 2026 15:01:16 +0000 Manifest next update: Thu 22 Oct 2026 15:01:16 +0000 Files and hashes: 1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=) 2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=) 3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=) 4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=) 5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=) 6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=) 7: 5ooeaCm2GVXR9XvefHU3KcHGzAg.roa (hash: z+fcRSGZZhusERHDemZwyeqvYCjCNJ3sScP4ATvOp0M=) 8: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=) 9: ALWlDjtkuCanlBUglBYrOhOEChU.roa (hash: K7wmpstsUMavHfxPhtRlXCbDpugDG9dlFqpbywewXHk=) 10: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=) 11: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=) 12: CIRls3stTp9BOjHce35suioz25Y.crl (hash: tcNhuRsutumV9Wt2Rrej8TH3Yv8++zuMq0ZcCyxFOxU=) 13: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=) 14: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=) 15: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=) 16: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=) 17: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=) 18: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=) 19: dRzGNjF88MErNhrrQg2yz8rafv0.roa (hash: +FBAp00ZDN+iU5QU1eqzTHX3mavDuO3cm22qwXqFd98=) 20: eLNvcIhcifMiuZuVr-32k8Ix3FQ.roa (hash: 89+ilmGcJ6hj7xwFlojvHqwE8OenZvCIJ6FtZfkz1MY=) 21: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=) 22: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=) 23: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=) 24: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=) 25: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=) 26: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=) 27: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 14:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5e:fb:18:a0:a2:31:c4:2f:78:d9:dd:17:95:3f:b2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Oct 21 15:01:16 2026 GMT Not After : Oct 22 15:01:16 2026 GMT Subject: CN=ada020e9d35bc8e2eac6ba8aefebe1cb7d794872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:83:6a:1d:20:a7:c5:77:88:26:45:f6:81:84: e1:96:3c:39:97:42:7c:f3:47:81:19:8b:34:f8:3f: b2:cd:df:b3:06:80:5d:20:65:8b:98:0e:1b:1b:1c: 3a:ec:6e:10:81:b5:d7:b4:b0:ed:c0:d3:db:7a:c8: ea:e1:19:b6:dc:be:74:62:d9:94:5c:0e:3c:a5:7f: d0:a2:ee:2b:76:39:ac:4b:ef:d1:2f:50:56:48:6c: d7:7d:ee:3c:3a:b4:46:c2:36:a9:74:11:f0:42:bd: 63:dc:08:7e:a5:1d:37:4d:37:b0:40:ac:5e:ee:95: 39:52:4b:57:9b:34:51:01:c0:67:99:1d:6a:37:3d: c1:c9:8e:dd:ba:4c:62:5e:3b:96:50:05:ae:bb:ec: 37:3f:c7:02:ff:5d:2c:62:41:4b:3c:2f:cb:af:4a: a8:b3:4e:c8:ba:f4:6a:13:18:1e:47:0f:d4:36:38: c1:12:1b:76:d2:b1:bf:87:3e:51:71:dd:73:96:ae: 36:cb:5d:ef:35:a2:e0:79:4a:9c:89:52:f5:0f:3f: 0c:d9:c5:a8:ef:8c:eb:db:93:75:99:74:22:ff:18: f5:86:5d:0a:47:a0:9c:c9:77:8a:45:2c:b7:cb:72: a2:ef:ef:21:12:21:17:6f:ce:2e:1d:e3:79:35:b3: 94:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A0:20:E9:D3:5B:C8:E2:EA:C6:BA:8A:EF:EB:E1:CB:7D:79:48:72 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7f:44:4b:90:71:9e:68:8d:78:ba:65:b8:3a:61:a0:fb:99: 33:63:55:3c:a4:b2:06:2a:36:d9:fd:eb:fd:39:60:1f:ee:8a: 52:b1:91:41:fe:83:39:43:a2:d9:42:a3:31:95:51:96:bf:00: ba:71:9d:c1:47:b2:9a:12:04:9f:cc:b0:4a:8c:fa:d2:33:f0: ca:f0:8c:be:7a:aa:e4:b3:25:42:17:ff:89:dd:ad:07:ee:65: 77:0b:ac:5f:e7:5b:88:8a:c7:46:08:ba:7d:6e:cf:f9:46:38: 9b:4c:9f:21:13:75:3e:59:68:7d:60:21:b0:29:48:c4:5a:f4: 06:de:6d:f5:4c:50:a6:30:92:62:5f:e1:03:9d:96:e6:74:78: b8:33:ce:42:0a:63:99:a8:02:02:4e:8a:9a:c9:af:55:80:53: e4:da:b9:86:21:d9:8e:c8:bd:89:d1:07:15:95:b0:83:05:55: c3:a4:6a:e7:ed:bd:88:6f:4f:66:a3:eb:4d:c3:d7:6d:3a:60: 07:44:08:29:37:32:62:7c:3c:2e:b1:98:ba:9e:3e:bb:7b:37: 6d:df:ee:f8:21:e3:8f:c6:34:bf:68:e5:44:35:be:c1:d5:21: a4:61:86:ad:d8:3a:ad:c3:e8:23:a0:6c:8a:4c:85:bd:20:cd: 4d:10:59:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFe+xigojHEL3jZ3ReVP7KCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYxMDIxMTUwMTE2WhcNMjYxMDIyMTUwMTE2WjAzMTEwLwYDVQQD EyhhZGEwMjBlOWQzNWJjOGUyZWFjNmJhOGFlZmViZTFjYjdkNzk0ODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYNqHSCnxXeIJkX2gYThljw5l0J8 80eBGYs0+D+yzd+zBoBdIGWLmA4bGxw67G4QgbXXtLDtwNPbesjq4Rm23L50YtmU XA48pX/Qou4rdjmsS+/RL1BWSGzXfe48OrRGwjapdBHwQr1j3Ah+pR03TTewQKxe 7pU5UktXmzRRAcBnmR1qNz3ByY7dukxiXjuWUAWuu+w3P8cC/10sYkFLPC/Lr0qo s07IuvRqExgeRw/UNjjBEht20rG/hz5Rcd1zlq42y13vNaLgeUqciVL1Dz8M2cWo 74zr25N1mXQi/xj1hl0KR6CcyXeKRSy3y3Ki7+8hEiEXb84uHeN5NbOUdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2gIOnTW8ji6sa6iu/r4ct9eUhyMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfn9ES5Bx nmiNeLpluDphoPuZM2NVPKSyBio22f3r/TlgH+6KUrGRQf6DOUOi2UKjMZVRlr8A unGdwUeymhIEn8ywSoz60jPwyvCMvnqq5LMlQhf/id2tB+5ldwusX+dbiIrHRgi6 fW7P+UY4m0yfIRN1PllofWAhsClIxFr0Bt5t9UxQpjCSYl/hA52W5nR4uDPOQgpj magCAk6KmsmvVYBT5Nq5hiHZjsi9idEHFZWwgwVVw6Rq5+29iG9PZqPrTcPXbTpg B0QIKTcyYnw8LrGYup4+u3s3bd/u+CHjj8Y0v2jlRDW+wdUhpGGGrdg6rcPoI6Bs ikyFvSDNTRBZBw== -----END CERTIFICATE-----Generated at Wed Oct 21 18:22:17 2026 by rpki-client