$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: 2EzYMQE/rZ8OsIU61pUdrG8V8jQSWee6iDV/d65jFg4= Subject key identifier: 38:2D:F3:A7:79:F1:F5:C2:3B:8B:97:A6:F1:31:05:AF:CE:CD:51:CF Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 01A15778A9CE3E86F5E3AA473C0B044E7990 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 1BE7 Signing time: Tue 20 Oct 2026 04:01:27 +0000 Manifest this update: Tue 20 Oct 2026 04:01:27 +0000 Manifest next update: Wed 21 Oct 2026 04:01:27 +0000 Files and hashes: 1: 0YUDAiE-yuhK94EMmLyzQMgIlF0.roa (hash: rsg5CjblS2OIdnbLSyR6XK4Mryfl50YgeWhG09XSsvk=) 2: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 3: 2GJBZKsIm3jc4Z15-3kXAAPem8A.roa (hash: jTvDg98QyTQnWxiM6YIXTY0rLTQHghhXeVF09n/3SKQ=) 4: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 5: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 6: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=) 7: 79P1nblmX5Sl5oZdwI0Dj3MUbys.roa (hash: La6+lZpjnP/18h6j5GqiME+A/vxO0IF8qjUuVJayEN4=) 8: AuE2rwLS8SAwP0zsffvoZ2RJKhw.roa (hash: TM4O7+3WS0xFrNfC6juWwcHyA2+UIAU1iXbpY1CJY+s=) 9: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=) 10: BYI4akM6lhIw21VZknTh_NCIqSU.roa (hash: YdN03lqeu5vvLCQrhnxcW6iOxgWPrgZFciSU6zX3FMs=) 11: CuwON2MJZtvZI4g-9no7hDi-jTM.roa (hash: t4dkHT6G4U30/rLqAkRNH5wHWvEqi8n3uM1IPVPedwg=) 12: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 13: QL7_ykelTLhFLJAjvfuxzqWP2vk.roa (hash: 4QL9CwOY1xIzLU+QxTfnx6oHiWUSUqf0UtoKPhqw5LE=) 14: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=) 15: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 16: ciIgS1TjaGOTBbmOnGozAmnHfUc.roa (hash: ntXa2GYDAO0jxPMtQsYXddkZE8eGPrFUqY/SdPvPIvw=) 17: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 18: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: phyD8V3Y2vSRqzLPwHk0gTECeKRRVObpoHF/ouOffSQ=) 19: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=) 20: fPY6U_1618fK0NT9X8wGnZOYgN8.roa (hash: fCX4MpPK80jOGQxrsBevkbA6sqLzfKitTFXIWhDmcZw=) 21: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 22: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 23: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 24: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 25: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 26: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 27: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=) 28: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=) 29: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 30: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 31: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) 32: ywexjdSx58c_dnH_pe3prB5KbBc.roa (hash: CEx8v6bvzNC8gDYFXGH5Ep5ijCVlKNxtjBQGlyVSklQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:57:78:a9:ce:3e:86:f5:e3:aa:47:3c:0b:04:4e:79:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Oct 20 04:01:27 2026 GMT Not After : Oct 21 04:01:27 2026 GMT Subject: CN=382df3a779f1f5c23b8b97a6f13105afcecd51cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d1:e0:85:5c:78:9d:03:84:d5:cb:11:3d:0b: 10:2c:43:91:c3:9c:7e:8e:b0:e6:36:10:62:0c:e1: 15:ca:1c:fd:84:dd:3e:9d:9e:66:6f:3f:81:00:30: 87:50:38:b8:30:5f:66:47:2c:e0:9e:8c:f6:5f:c6: 54:dd:71:0c:60:b3:fc:a1:62:09:b7:ff:45:7e:a9: 54:26:c5:f8:7f:bb:ec:ec:e6:3b:a6:e4:70:8d:70: 0c:5a:cd:1e:7f:15:9b:cf:e7:43:4e:b3:6a:ec:45: 42:46:c1:14:37:a4:19:50:e0:c3:4d:c6:99:f4:48: b8:a0:36:ba:b7:a2:26:bc:5d:a6:1a:46:ed:b1:0f: 2f:d7:b0:f8:7a:d1:32:79:4a:67:22:c6:6b:97:ea: 88:3b:1b:be:49:00:4a:1f:fb:eb:64:35:b3:08:c9: 3d:f0:ef:66:56:fb:87:7d:69:e1:82:11:4e:f9:e9: 51:03:79:ec:c2:53:c8:c5:ae:e7:1b:4c:7f:74:6b: 60:7f:f3:69:7e:1f:81:28:f2:f2:a6:28:f0:4e:79: 3d:35:4d:c1:c1:c0:02:cc:61:d3:19:3a:83:27:ff: c4:53:ab:87:6c:fc:91:01:58:45:e8:67:fa:10:ec: 0d:21:fe:c7:20:f1:f4:e4:2c:89:c6:a7:27:17:ae: d3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2D:F3:A7:79:F1:F5:C2:3B:8B:97:A6:F1:31:05:AF:CE:CD:51:CF X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:15:fd:e8:ac:b8:92:85:7b:79:0a:1a:f7:39:da:85:b2:8f: 3a:4f:09:08:48:d1:e3:e4:e5:ab:1a:54:2f:fa:09:05:c1:74: 8e:74:ff:e1:41:1c:4f:97:0d:4b:1b:10:02:81:61:b0:e4:89: 17:c9:85:37:4e:81:a4:11:53:0e:fb:07:dd:32:f4:4d:81:c2: 96:31:3f:45:13:13:c2:62:64:e0:7a:32:13:fc:52:6b:50:e0: d0:b2:6c:0a:39:a8:24:64:6e:3b:25:79:ad:ca:5e:80:f5:df: 7f:05:8c:19:3d:fc:c9:d3:d3:80:91:2f:27:e8:c7:2a:15:44: 38:d0:13:ad:15:80:8a:bb:45:15:96:3a:9d:4b:d9:43:71:98: 15:49:27:fc:5e:e3:9e:e9:83:f5:eb:19:4c:bb:be:cd:89:c6: ba:b2:9d:f9:71:b3:dc:44:52:f5:54:74:49:77:30:e7:e8:90: 13:e0:82:68:33:77:f2:0f:fc:8d:5e:8b:ac:d6:35:76:5d:32: b2:5e:8c:45:d7:8b:f0:a4:bb:6c:22:ab:b3:4b:04:e3:45:30: ce:f5:3a:2c:6d:60:4a:c8:e0:28:ca:77:1d:81:4f:5c:61:59: 8f:7d:8e:ce:c6:28:4a:16:61:96:5b:26:43:b2:a0:50:ca:86: ec:d6:08:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFXeKnOPob146pHPAsETnmQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYxMDIwMDQwMTI3WhcNMjYxMDIxMDQwMTI3WjAzMTEwLwYDVQQD EygzODJkZjNhNzc5ZjFmNWMyM2I4Yjk3YTZmMTMxMDVhZmNlY2Q1MWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNHghVx4nQOE1csRPQsQLEORw5x+ jrDmNhBiDOEVyhz9hN0+nZ5mbz+BADCHUDi4MF9mRyzgnoz2X8ZU3XEMYLP8oWIJ t/9FfqlUJsX4f7vs7OY7puRwjXAMWs0efxWbz+dDTrNq7EVCRsEUN6QZUODDTcaZ 9Ei4oDa6t6ImvF2mGkbtsQ8v17D4etEyeUpnIsZrl+qIOxu+SQBKH/vrZDWzCMk9 8O9mVvuHfWnhghFO+elRA3nswlPIxa7nG0x/dGtgf/Npfh+BKPLypijwTnk9NU3B wcACzGHTGTqDJ//EU6uHbPyRAVhF6Gf6EOwNIf7HIPH05CyJxqcnF67TRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgt86d58fXCO4uXpvExBa/OzVHPMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRX96Ky4 koV7eQoa9znahbKPOk8JCEjR4+TlqxpUL/oJBcF0jnT/4UEcT5cNSxsQAoFhsOSJ F8mFN06BpBFTDvsH3TL0TYHCljE/RRMTwmJk4HoyE/xSa1Dg0LJsCjmoJGRuOyV5 rcpegPXffwWMGT38ydPTgJEvJ+jHKhVEONATrRWAirtFFZY6nUvZQ3GYFUkn/F7j numD9esZTLu+zYnGurKd+XGz3ERS9VR0SXcw5+iQE+CCaDN38g/8jV6LrNY1dl0y sl6MRdeL8KS7bCKrs0sE40UwzvU6LG1gSsjgKMp3HYFPXGFZj32OzsYoShZhllsm Q7KgUMqG7NYIEQ== -----END CERTIFICATE-----Generated at Tue Oct 20 07:28:32 2026 by rpki-client