$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: 6hbpqBDcJJBjdXViI/0ng2nQBrVYY8pBnZlK7dBFhS8= Subject key identifier: 73:88:17:D3:2E:67:46:AE:87:23:63:59:FA:28:96:F4:40:8E:53:37 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019CC2624A60FBCC3BFDAF14EA0689DAD8BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0C40 Signing time: Fri 06 Mar 2026 09:02:27 +0000 Manifest this update: Fri 06 Mar 2026 09:02:27 +0000 Manifest next update: Sat 07 Mar 2026 09:02:27 +0000 Files and hashes: 1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=) 2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=) 3: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=) 4: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=) 5: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=) 6: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=) 7: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=) 8: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=) 9: AuUO_2nojen66WlGiolepOvX49M.roa (hash: 8bQ2m0qspgGLeEntrk9gejaiydTwb1cwJB94m7ellzo=) 10: BLvck3jtH0yiq7mj0oSIpxGzim0.roa (hash: rNoyDTYrAexTBbf0FBqXytC/SgHvT/1Wqrx2FO97F4M=) 11: CIRls3stTp9BOjHce35suioz25Y.crl (hash: vjYu+o6J89lgsyem1PgicMlLR+CkZL/sABAVc6o9cOA=) 12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=) 13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=) 14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=) 15: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=) 16: GZ6UBoQpzQZ5nnueVLzAmnKmgtU.roa (hash: JQ9oHlCO6nVyRvoDL2t1IbPT0MDRKsWss7+nbXLpRjQ=) 17: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=) 18: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=) 19: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=) 20: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=) 21: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=) 22: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=) 23: hqaui3y0dJBb-G_swK9JTqsP15I.roa (hash: IYmlHOKbbIfZroL4w4V7fPkYaUorBcPfFwoIP2cIOs8=) 24: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=) 25: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=) 26: kjrIZIW45KaOyNR8g_TQidHhKxQ.roa (hash: azT5mOJbUfFEST0Ir7ouylIomcyXSpCUxWYnorkrsXI=) 27: ksfyX1A66qksMi7yY2YUuYkItDI.roa (hash: Ka6tT0UzQN7PNatMEnkGYWsSHnAlF+3+njRwkEMDhP0=) 28: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=) 29: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=) 30: oaaK-SykNHj4NMtAlojIzptkrl8.roa (hash: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0=) 31: pGtQQai-dxwqAqhELvcpGWvnJZQ.roa (hash: bWty7Pjo+KwFzlM1rDtQDVkiqqU12gvaV9LDUSEaGgU=) 32: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=) 33: xdV6BMUZwA6HK6ackAXJc9L3G8U.roa (hash: qL+/RVIhCRk9UXo6uWsZ6mzt5EaHjBCt/5Hbb7yGo78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Mar 2026 09:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c2:62:4a:60:fb:cc:3b:fd:af:14:ea:06:89:da:d8:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Mar 6 09:02:27 2026 GMT Not After : Mar 7 09:02:27 2026 GMT Subject: CN=738817d32e6746ae87236359fa2896f4408e5337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:3d:7f:b8:b5:81:05:89:b7:12:da:4b:09: c2:f8:0d:d6:2f:39:9d:8a:66:ef:4a:c2:92:85:24: b8:6f:79:92:0e:9e:8c:2d:7c:3b:ac:62:25:a4:a8: 46:9f:25:1a:b9:04:db:fa:82:fd:81:70:ff:20:2f: 43:c5:51:ce:28:84:0a:08:e3:a8:04:99:49:58:ed: 70:e7:76:8c:2e:75:f9:f6:e5:0b:01:23:bd:5f:57: 34:98:c5:d3:a9:ad:f2:1c:5a:24:4b:4f:01:9e:c0: ce:ce:f4:bd:33:14:b7:85:09:d1:20:59:df:1b:2f: be:4f:99:3b:40:dc:24:7d:6e:e4:d2:19:c7:1e:63: 6b:6c:33:08:73:c7:e2:fa:dc:b0:fa:cf:29:2c:90: a8:f8:cd:98:17:be:76:4c:41:96:48:1f:19:6a:3f: 1a:a6:8e:c5:3c:20:b2:d8:bd:fb:2e:de:d4:3d:38: 3b:40:b3:17:66:6a:1b:aa:1a:27:3b:2b:c0:16:b6: 0c:a0:5a:8b:c7:3b:25:23:b2:37:49:16:75:a9:51: c1:63:4a:4f:7e:b0:d2:b3:21:fe:f8:86:60:86:eb: 31:16:3b:f5:9b:fb:a6:b8:1b:fc:fe:fc:46:f4:ed: e8:62:a6:a7:09:bb:9c:07:4e:86:d2:22:ff:df:be: e4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:88:17:D3:2E:67:46:AE:87:23:63:59:FA:28:96:F4:40:8E:53:37 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8d:47:8e:ee:b3:1c:62:5b:78:07:fa:64:82:c8:8e:ee:43: 9c:17:7e:d6:e9:d3:d1:64:d4:73:07:89:66:7d:d2:fa:db:6f: 42:36:db:7c:45:34:83:6d:db:ce:20:31:d6:4b:b4:d4:66:2e: 2a:62:1c:18:49:30:fd:74:e5:18:b9:34:94:ca:7d:44:be:6f: ed:07:40:a3:ba:48:a3:cf:98:56:9e:54:eb:fd:18:80:65:14: 67:76:5e:5a:8b:e7:96:52:36:a3:a8:4d:3f:52:f5:25:1a:d6: e2:4d:d1:fd:d2:51:27:10:c2:f7:c9:b2:e5:34:da:d8:32:4c: 35:c7:bc:a6:ec:ca:72:4b:45:bb:6a:34:21:31:36:af:31:5a: 41:17:74:29:ab:21:37:ea:f7:c6:ef:29:cf:23:54:1e:9c:0a: 25:4c:40:02:29:f4:6e:f2:79:0f:f5:4f:63:3d:ee:3f:18:60: 6b:20:fa:b7:13:47:cc:3e:0e:14:00:9a:fd:6a:be:3e:d1:47: 01:28:ef:fc:30:d7:98:1f:ec:ee:4d:d2:56:ae:28:ff:d1:d5: 2b:6f:08:24:ca:8c:b1:18:6f:c3:9f:b2:4f:c6:f2:82:67:d2: 04:6e:d8:72:89:58:43:a6:0f:04:a0:47:83:55:21:5a:4a:5b: 25:64:18:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzCYkpg+8w7/a8U6gaJ2ti9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMzA2MDkwMjI3WhcNMjYwMzA3MDkwMjI3WjAzMTEwLwYDVQQD Eyg3Mzg4MTdkMzJlNjc0NmFlODcyMzYzNTlmYTI4OTZmNDQwOGU1MzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAc9f7i1gQWJtxLaSwnC+A3WLzmd imbvSsKShSS4b3mSDp6MLXw7rGIlpKhGnyUauQTb+oL9gXD/IC9DxVHOKIQKCOOo BJlJWO1w53aMLnX59uULASO9X1c0mMXTqa3yHFokS08BnsDOzvS9MxS3hQnRIFnf Gy++T5k7QNwkfW7k0hnHHmNrbDMIc8fi+tyw+s8pLJCo+M2YF752TEGWSB8Zaj8a po7FPCCy2L37Lt7UPTg7QLMXZmobqhonOyvAFrYMoFqLxzslI7I3SRZ1qVHBY0pP frDSsyH++IZghusxFjv1m/umuBv8/vxG9O3oYqanCbucB06G0iL/377kpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOIF9MuZ0auhyNjWfoolvRAjlM3MB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeo1Hju6z HGJbeAf6ZILIju5DnBd+1unT0WTUcweJZn3S+ttvQjbbfEU0g23bziAx1ku01GYu KmIcGEkw/XTlGLk0lMp9RL5v7QdAo7pIo8+YVp5U6/0YgGUUZ3ZeWovnllI2o6hN P1L1JRrW4k3R/dJRJxDC98my5TTa2DJMNce8puzKcktFu2o0ITE2rzFaQRd0Kash N+r3xu8pzyNUHpwKJUxAAin0bvJ5D/VPYz3uPxhgayD6txNHzD4OFACa/Wq+PtFH ASjv/DDXmB/s7k3SVq4o/9HVK28IJMqMsRhvw5+yT8bygmfSBG7YcolYQ6YPBKBH g1UhWkpbJWQY0g== -----END CERTIFICATE-----Generated at Fri Mar 6 12:55:58 2026 by rpki-client