$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: PIJAA0+kyZ60AA5VBip/CCmCTz3F9Zmk4YMscc3rkXc= Subject key identifier: 2D:EF:F4:96:3A:14:77:63:38:57:BE:BE:B4:48:F2:82:36:6B:E5:64 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 01A157AFB11C62F04801F644795D4268B3F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0EBD Signing time: Tue 20 Oct 2026 05:01:34 +0000 Manifest this update: Tue 20 Oct 2026 05:01:34 +0000 Manifest next update: Wed 21 Oct 2026 05:01:34 +0000 Files and hashes: 1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=) 2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=) 3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=) 4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=) 5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=) 6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=) 7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=) 8: ALWlDjtkuCanlBUglBYrOhOEChU.roa (hash: K7wmpstsUMavHfxPhtRlXCbDpugDG9dlFqpbywewXHk=) 9: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=) 10: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=) 11: CIRls3stTp9BOjHce35suioz25Y.crl (hash: vImtiYrnT3JhkO/AWqWryu90dpkMt9G2qM4Bm9txthU=) 12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=) 13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=) 14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=) 15: F7G_GWiGHM-ftUMTD-Pke8L8IdU.roa (hash: qM8WGs05zAkWAsp0xqxA3NSL7e8011qxrQ8yMnI3sFA=) 16: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=) 17: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=) 18: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=) 19: dRzGNjF88MErNhrrQg2yz8rafv0.roa (hash: +FBAp00ZDN+iU5QU1eqzTHX3mavDuO3cm22qwXqFd98=) 20: eLNvcIhcifMiuZuVr-32k8Ix3FQ.roa (hash: 89+ilmGcJ6hj7xwFlojvHqwE8OenZvCIJ6FtZfkz1MY=) 21: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=) 22: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (hash: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=) 23: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=) 24: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=) 25: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=) 26: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=) 27: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 05:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:57:af:b1:1c:62:f0:48:01:f6:44:79:5d:42:68:b3:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Oct 20 05:01:34 2026 GMT Not After : Oct 21 05:01:34 2026 GMT Subject: CN=2deff4963a1477633857bebeb448f282366be564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:af:8f:35:2e:60:7d:02:1b:34:38:ba:6b:d1: 0b:1e:d2:cb:c1:f1:47:c1:15:45:79:f6:7b:8c:f1: 57:db:43:0d:98:70:be:5a:99:87:60:0e:c7:80:6b: 63:54:49:76:a9:09:fa:83:61:fd:bc:1c:c4:92:87: 80:cd:33:dc:87:8b:34:02:45:d2:59:58:c2:5e:01: 5a:09:fa:50:59:b8:e2:37:cf:f2:90:4c:21:89:76: 63:70:af:59:38:a2:ca:c6:e0:b0:c4:02:b9:01:b9: 77:4a:0a:57:c8:6f:ff:13:e0:5e:90:a8:e9:c3:4e: dc:38:7e:44:b5:e2:42:96:7c:33:8e:e5:b9:12:2f: f9:61:89:fd:bd:ff:80:0c:5d:f3:0d:fa:65:6d:b2: 3e:a5:74:f5:57:31:57:39:e4:87:a7:49:20:7e:7d: 9a:e3:ea:bf:4e:6e:dc:66:ea:3b:de:ad:ba:9d:14: e2:57:64:82:ca:b7:92:f5:7a:c3:df:df:23:8f:17: 45:cc:44:88:67:4a:80:60:49:f3:c8:6f:80:2e:dd: 0a:d0:a0:06:aa:2b:b1:69:cf:52:3c:c9:d4:64:75: b0:ee:13:88:9f:9b:06:7c:16:47:49:12:17:2d:d2: de:a8:59:5e:4d:ab:0b:b0:98:f1:8d:a7:b5:ff:f5: b6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EF:F4:96:3A:14:77:63:38:57:BE:BE:B4:48:F2:82:36:6B:E5:64 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:67:18:6b:ff:7e:ec:c5:44:04:6e:7b:19:77:64:77:39:ff: 2e:bb:8c:1a:0f:42:06:49:51:d9:da:bf:79:e3:e9:dc:f1:59: 02:37:0b:78:9f:e3:11:23:06:2c:8d:07:40:c9:0e:8c:4d:92: 06:3a:8b:5a:e3:96:78:d3:a8:1c:2a:98:c7:72:db:19:f3:4d: 5c:25:9d:6e:a5:f1:fb:37:1e:1b:48:78:4f:0e:4e:96:b6:c1: 20:43:dd:f2:e5:78:23:c3:4d:8a:8b:19:77:b8:28:3a:f5:d5: 4c:c3:12:65:b8:8d:f2:65:cc:c0:2b:30:63:ec:4a:dd:19:14: 67:95:03:86:f9:42:b6:8d:b8:1b:0e:df:8a:8f:a5:2b:78:09: 0f:26:f2:c1:05:78:15:6b:6d:c1:18:f5:78:a1:af:b9:21:1b: 9e:d0:9d:84:b2:ea:27:30:53:90:47:f3:4c:d1:f2:55:3b:22: 43:66:3b:44:3c:db:91:b4:4d:28:1e:3d:20:1f:1a:0a:1a:1a: 66:c7:17:e6:d1:0c:25:ea:96:e9:b2:92:7b:75:b0:18:7e:eb: 44:b7:16:32:bc:4a:6e:05:43:6d:ce:e9:b2:b3:2c:74:1c:28: 5b:5d:47:dc:27:f9:d0:00:8b:ee:08:74:c2:c5:aa:2a:3e:5a: e9:2a:e4:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFXr7EcYvBIAfZEeV1CaLPzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYxMDIwMDUwMTM0WhcNMjYxMDIxMDUwMTM0WjAzMTEwLwYDVQQD EygyZGVmZjQ5NjNhMTQ3NzYzMzg1N2JlYmViNDQ4ZjI4MjM2NmJlNTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq+PNS5gfQIbNDi6a9ELHtLLwfFH wRVFefZ7jPFX20MNmHC+WpmHYA7HgGtjVEl2qQn6g2H9vBzEkoeAzTPch4s0AkXS WVjCXgFaCfpQWbjiN8/ykEwhiXZjcK9ZOKLKxuCwxAK5Abl3SgpXyG//E+BekKjp w07cOH5EteJClnwzjuW5Ei/5YYn9vf+ADF3zDfplbbI+pXT1VzFXOeSHp0kgfn2a 4+q/Tm7cZuo73q26nRTiV2SCyreS9XrD398jjxdFzESIZ0qAYEnzyG+ALt0K0KAG qiuxac9SPMnUZHWw7hOIn5sGfBZHSRIXLdLeqFleTasLsJjxjae1//W28QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3v9JY6FHdjOFe+vrRI8oI2a+VkMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmcYa/9+ 7MVEBG57GXdkdzn/LruMGg9CBklR2dq/eePp3PFZAjcLeJ/jESMGLI0HQMkOjE2S BjqLWuOWeNOoHCqYx3LbGfNNXCWdbqXx+zceG0h4Tw5OlrbBIEPd8uV4I8NNiosZ d7goOvXVTMMSZbiN8mXMwCswY+xK3RkUZ5UDhvlCto24Gw7fio+lK3gJDybywQV4 FWttwRj1eKGvuSEbntCdhLLqJzBTkEfzTNHyVTsiQ2Y7RDzbkbRNKB49IB8aChoa ZscX5tEMJeqW6bKSe3WwGH7rRLcWMrxKbgVDbc7psrMsdBwoW11H3Cf50ACL7gh0 wsWqKj5a6Srk3A== -----END CERTIFICATE-----Generated at Tue Oct 20 12:27:15 2026 by rpki-client