$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: y5C2IxRvjG2fBXu6kOXQTMP+WowEGtREUAC43KEfsNs= Subject key identifier: 98:E8:07:02:E4:98:6B:DA:0B:A9:5F:99:31:FA:24:2A:02:77:56:81 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019DAFEA3B905ED9D7F5E44B1EFF3923371F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0CC1 Signing time: Tue 21 Apr 2026 12:00:56 +0000 Manifest this update: Tue 21 Apr 2026 12:00:56 +0000 Manifest next update: Wed 22 Apr 2026 12:00:56 +0000 Files and hashes: 1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=) 2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=) 3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=) 4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=) 5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=) 6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=) 7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=) 8: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=) 9: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=) 10: BLvck3jtH0yiq7mj0oSIpxGzim0.roa (hash: rNoyDTYrAexTBbf0FBqXytC/SgHvT/1Wqrx2FO97F4M=) 11: CIRls3stTp9BOjHce35suioz25Y.crl (hash: 4LUazVXAyXLfOHcO/OsgPg0eUKj0tboj8/2KeY9alrU=) 12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=) 13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=) 14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=) 15: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=) 16: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=) 17: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=) 18: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=) 19: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=) 20: d7vhMptggQFYv4qlk9QDH-CnrvE.roa (hash: 5WfqwGw+8t3Ft4vuWjlX8VLSDMoVxLzDo6LwKTusUiA=) 21: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=) 22: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=) 23: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=) 24: hqaui3y0dJBb-G_swK9JTqsP15I.roa (hash: IYmlHOKbbIfZroL4w4V7fPkYaUorBcPfFwoIP2cIOs8=) 25: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=) 26: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=) 27: kjrIZIW45KaOyNR8g_TQidHhKxQ.roa (hash: azT5mOJbUfFEST0Ir7ouylIomcyXSpCUxWYnorkrsXI=) 28: ksfyX1A66qksMi7yY2YUuYkItDI.roa (hash: Ka6tT0UzQN7PNatMEnkGYWsSHnAlF+3+njRwkEMDhP0=) 29: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=) 30: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=) 31: oaaK-SykNHj4NMtAlojIzptkrl8.roa (hash: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0=) 32: pGtQQai-dxwqAqhELvcpGWvnJZQ.roa (hash: bWty7Pjo+KwFzlM1rDtQDVkiqqU12gvaV9LDUSEaGgU=) 33: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:af:ea:3b:90:5e:d9:d7:f5:e4:4b:1e:ff:39:23:37:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Apr 21 12:00:56 2026 GMT Not After : Apr 22 12:00:56 2026 GMT Subject: CN=98e80702e4986bda0ba95f9931fa242a02775681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d7:81:0d:10:82:6b:0f:ff:c8:8c:cb:28:b0: 56:4a:c5:9a:74:e0:6a:e3:b1:7f:f0:88:ac:e3:cc: 57:b9:24:ad:63:84:ae:9b:82:a1:b7:6d:dc:0d:d3: 85:3b:6f:f0:91:0c:9a:e0:55:22:d3:e6:4e:59:7e: 9a:42:ab:49:3c:f3:02:54:84:37:b4:ed:f6:61:56: cd:44:8f:89:aa:2a:63:f9:b1:89:1c:b7:81:36:a4: 7e:71:12:4d:c6:02:9a:b0:bc:00:76:1f:32:e5:b7: e4:60:88:8c:85:54:54:7c:da:12:75:1b:c1:b2:e1: cc:92:51:88:c9:00:71:3c:79:cd:10:6f:32:21:ec: 12:00:5a:ff:fa:1e:32:97:79:f6:ea:e7:23:ac:2f: 5d:26:6c:86:bb:c0:31:a6:64:4d:62:55:2f:22:97: 2b:aa:91:38:a9:3e:84:05:fe:25:e0:45:c1:5b:f4: ee:0f:2d:53:7b:44:b0:bc:35:15:d7:53:05:40:cc: 6a:d7:0f:ef:6e:10:91:5f:73:98:65:1e:0e:48:34: c7:e5:85:9a:fa:90:f6:82:c0:bb:11:9c:9d:72:af: cd:68:b0:a1:d1:48:e9:c1:02:8f:4c:8b:db:5c:f3: e3:59:8c:9d:2c:e8:7d:84:ae:2c:29:6f:5d:67:eb: 3f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E8:07:02:E4:98:6B:DA:0B:A9:5F:99:31:FA:24:2A:02:77:56:81 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:1b:4c:e2:f8:23:0e:bc:f1:8f:5a:82:a0:6d:02:00:3e:6f: 4c:94:56:94:9c:e8:56:72:78:e0:dc:8a:70:13:15:6b:9c:0e: 38:6a:24:b4:2f:47:c2:33:f4:ff:f0:20:c7:be:d2:50:7f:a9: d0:12:20:85:b3:61:61:62:b2:3f:00:ae:32:b6:4a:75:0b:24: 01:70:0f:e5:3e:6d:62:3c:3b:9a:f1:0e:cd:55:74:b5:90:55: c1:e3:de:c1:2d:cb:73:ae:f9:03:4e:f1:bb:ed:70:8b:b1:e3: 93:c8:a5:b6:27:e8:1a:4c:b3:0d:bb:23:eb:93:3d:ec:f4:ff: 71:6a:79:60:2a:91:f5:d0:6a:79:ec:04:79:c3:02:de:f1:f8: a2:af:ef:28:03:6e:95:04:9e:a3:e2:8d:b1:1e:ad:83:f3:99: c8:57:be:aa:7c:ec:03:a2:cf:dd:51:7c:8c:1a:21:c7:12:24: c8:c5:88:07:12:49:f9:e6:35:22:39:c8:3c:eb:7d:60:ba:e9: c0:4f:09:a1:43:56:97:a8:0b:21:29:8b:6e:b7:71:33:70:19: 32:7e:f2:2a:14:4c:39:00:e3:ed:cd:3c:53:12:16:8a:18:bf: 30:9c:61:2d:c6:00:06:94:7b:4b:ed:55:27:4f:25:89:d3:62: c8:1e:70:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2v6juQXtnX9eRLHv85IzcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwNDIxMTIwMDU2WhcNMjYwNDIyMTIwMDU2WjAzMTEwLwYDVQQD Eyg5OGU4MDcwMmU0OTg2YmRhMGJhOTVmOTkzMWZhMjQyYTAyNzc1NjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NeBDRCCaw//yIzLKLBWSsWadOBq 47F/8Iis48xXuSStY4Sum4Kht23cDdOFO2/wkQya4FUi0+ZOWX6aQqtJPPMCVIQ3 tO32YVbNRI+Jqipj+bGJHLeBNqR+cRJNxgKasLwAdh8y5bfkYIiMhVRUfNoSdRvB suHMklGIyQBxPHnNEG8yIewSAFr/+h4yl3n26ucjrC9dJmyGu8AxpmRNYlUvIpcr qpE4qT6EBf4l4EXBW/TuDy1Te0SwvDUV11MFQMxq1w/vbhCRX3OYZR4OSDTH5YWa +pD2gsC7EZydcq/NaLCh0UjpwQKPTIvbXPPjWYydLOh9hK4sKW9dZ+s/3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjoBwLkmGvaC6lfmTH6JCoCd1aBMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRtM4vgj Drzxj1qCoG0CAD5vTJRWlJzoVnJ44NyKcBMVa5wOOGoktC9HwjP0//Agx77SUH+p 0BIghbNhYWKyPwCuMrZKdQskAXAP5T5tYjw7mvEOzVV0tZBVwePewS3Lc675A07x u+1wi7Hjk8iltifoGkyzDbsj65M97PT/cWp5YCqR9dBqeewEecMC3vH4oq/vKANu lQSeo+KNsR6tg/OZyFe+qnzsA6LP3VF8jBohxxIkyMWIBxJJ+eY1IjnIPOt9YLrp wE8JoUNWl6gLISmLbrdxM3AZMn7yKhRMOQDj7c08UxIWihi/MJxhLcYABpR7S+1V J08lidNiyB5wbw== -----END CERTIFICATE-----Generated at Tue Apr 21 21:34:33 2026 by rpki-client