$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: o7kPPC6qgeaW2bdv9FTAaLc2upSCEKNHnPzOuqxR3F8= Subject key identifier: 21:59:EC:5D:07:17:AA:40:71:EE:30:D0:B6:6B:72:57:F5:55:7F:8F Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019F81C24561F88D745972649A9F5AE5A246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 1AE5 Signing time: Mon 20 Jul 2026 23:00:20 +0000 Manifest this update: Mon 20 Jul 2026 23:00:20 +0000 Manifest next update: Tue 21 Jul 2026 23:00:20 +0000 Files and hashes: 1: 0EJd6KM5OKs4ZeWtakfKi4LfHMQ.roa (hash: lq/+jqUsuGMmo0V5eC2lYaf4+vkz0NSEYMEZoOw+h8M=) 2: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 3: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 4: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 5: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=) 6: 79P1nblmX5Sl5oZdwI0Dj3MUbys.roa (hash: La6+lZpjnP/18h6j5GqiME+A/vxO0IF8qjUuVJayEN4=) 7: Au6ztzaYOL8tiA06L7XgEOvNL7w.roa (hash: 2gixSAvahjHMVkdyFo4/SHHkZ2SyI5tRyn1jTT+SjAw=) 8: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=) 9: BSJwseKs8IstwvoydvzKDO4yjpk.roa (hash: 6WIA++2azmJG3DLJYorfCdBV6cXv3FDFWjwIcVYK2xA=) 10: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=) 11: CuwON2MJZtvZI4g-9no7hDi-jTM.roa (hash: t4dkHT6G4U30/rLqAkRNH5wHWvEqi8n3uM1IPVPedwg=) 12: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 13: Rr2zhV2BMuYwAMQjOZC17bpA4NM.roa (hash: EMKdr17+gur82xEd8d0NLRU71QAL7ROjLErF0ye4dUQ=) 14: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=) 15: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 16: Xi1n82G6gX7UAY2_fbZogWirIn4.roa (hash: DgSYKj3HKBtQlWF7ILEGvT4SnZn/5ZATo7Dhfv1URjQ=) 17: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=) 18: a3awGspUbD83lR3SbJMhhWhWXUU.roa (hash: 4wacv1ZaHYO9NbaUGd81FOMwUiV7hBGJzXqLo1BRDrY=) 19: bAQWAvcm3T6rfyaf7ljIBvlFtAM.roa (hash: 2DAvyPmgh36vWxZnNmX769qlQ+GKNipPDNKBhtCFjHA=) 20: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 21: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: pQtg0r3AhW3XfPPID3MZbxCgCwBO6zWDZ1jtyuZDydk=) 22: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=) 23: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 24: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 25: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 26: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 27: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 28: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 29: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=) 30: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=) 31: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 32: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 33: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:81:c2:45:61:f8:8d:74:59:72:64:9a:9f:5a:e5:a2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jul 20 23:00:20 2026 GMT Not After : Jul 21 23:00:20 2026 GMT Subject: CN=2159ec5d0717aa4071ee30d0b66b7257f5557f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:95:f8:60:02:33:54:a0:34:c0:6b:60:c5:84: 2d:d7:4a:77:6b:e0:a9:4f:81:58:59:67:23:42:2a: 5f:10:50:56:4b:0b:0f:8e:dc:02:4a:9d:74:8b:26: a3:c8:1c:85:5d:e3:b7:71:23:b0:fe:74:a3:27:e1: 90:bc:24:1d:0b:41:1e:f0:45:5e:38:8d:11:72:da: 49:a2:3e:ca:4d:6f:94:08:10:2b:e4:fb:53:8a:95: c8:6d:ed:e6:2c:95:e5:0a:f2:fc:83:14:b0:aa:b6: 83:ac:b9:68:c1:f5:6e:b0:7d:73:7c:9b:dc:ec:02: 19:68:60:9a:41:b3:80:c9:b9:f1:19:20:1f:04:6f: 39:b9:f7:f7:1c:10:fe:1c:e8:88:f4:1d:7d:55:92: 1f:81:68:c6:fb:3c:af:78:b0:96:24:78:da:08:b3: 09:46:13:3b:6f:82:7e:ba:22:22:48:64:db:57:06: 77:1c:af:d8:9b:13:5f:dd:2d:3d:7d:95:61:e3:17: 6f:c4:b9:06:0e:0c:6a:38:dd:0a:c6:1d:9a:3e:0b: 84:08:d9:1f:e3:e1:e5:ca:fa:af:14:5f:3b:23:06: 6f:a0:af:a2:94:72:83:de:64:40:10:e2:f4:67:3e: 84:1c:41:12:4d:59:d2:46:a3:52:e4:4e:1f:09:1e: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:59:EC:5D:07:17:AA:40:71:EE:30:D0:B6:6B:72:57:F5:55:7F:8F X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:08:5f:8c:02:35:b2:19:9b:63:0e:70:2e:b9:69:d1:ef:6c: d9:33:c2:45:ae:ea:71:82:b3:54:86:70:c0:b0:71:26:5b:3e: 5b:5d:40:e8:c2:57:73:24:ea:31:dc:0a:e9:69:75:69:e2:c6: cd:3a:a9:f1:1c:3b:ed:4d:f8:77:90:c7:14:9f:de:2a:fc:e8: 79:ce:c2:aa:19:2b:ce:b1:38:6d:17:c3:9b:b9:7e:61:ba:74: 8c:97:83:fc:47:c7:c5:d0:a8:c6:8c:4a:e5:5c:f3:d8:0c:ac: 81:50:9b:c0:e2:ee:0b:c9:b0:92:1c:fe:bc:7e:5a:96:58:13: 08:0d:8f:38:f8:72:f2:c0:74:71:7d:1a:89:f3:ca:89:0a:40: 1c:35:4e:a2:23:d7:2e:2f:fd:c7:71:27:9a:d8:7b:4b:7c:c1: e3:d3:b6:cb:7e:99:f7:0c:51:e3:6d:e3:e9:76:69:25:07:f7: d1:70:e8:0c:3a:0b:6e:5f:8b:d7:30:0d:cb:cf:fb:bc:f2:a5: 46:84:94:de:ca:6d:13:6d:2d:1c:0a:f0:5c:9b:1b:da:86:eb: 75:3d:8f:36:ff:62:32:eb:72:41:f7:eb:ba:36:39:0c:e8:0a: 74:24:47:f9:8f:42:77:48:aa:bb:7c:47:87:c1:a8:f3:a9:dc: e1:ef:3e:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+BwkVh+I10WXJkmp9a5aJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwNzIwMjMwMDIwWhcNMjYwNzIxMjMwMDIwWjAzMTEwLwYDVQQD EygyMTU5ZWM1ZDA3MTdhYTQwNzFlZTMwZDBiNjZiNzI1N2Y1NTU3ZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JX4YAIzVKA0wGtgxYQt10p3a+Cp T4FYWWcjQipfEFBWSwsPjtwCSp10iyajyByFXeO3cSOw/nSjJ+GQvCQdC0Ee8EVe OI0RctpJoj7KTW+UCBAr5PtTipXIbe3mLJXlCvL8gxSwqraDrLlowfVusH1zfJvc 7AIZaGCaQbOAybnxGSAfBG85uff3HBD+HOiI9B19VZIfgWjG+zyveLCWJHjaCLMJ RhM7b4J+uiIiSGTbVwZ3HK/YmxNf3S09fZVh4xdvxLkGDgxqON0Kxh2aPguECNkf 4+HlyvqvFF87IwZvoK+ilHKD3mRAEOL0Zz6EHEESTVnSRqNS5E4fCR7LjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFZ7F0HF6pAce4w0LZrclf1VX+PMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALghfjAI1 shmbYw5wLrlp0e9s2TPCRa7qcYKzVIZwwLBxJls+W11A6MJXcyTqMdwK6Wl1aeLG zTqp8Rw77U34d5DHFJ/eKvzoec7CqhkrzrE4bRfDm7l+Ybp0jJeD/EfHxdCoxoxK 5Vzz2AysgVCbwOLuC8mwkhz+vH5allgTCA2POPhy8sB0cX0aifPKiQpAHDVOoiPX Li/9x3Enmth7S3zB49O2y36Z9wxR423j6XZpJQf30XDoDDoLbl+L1zANy8/7vPKl RoSU3sptE20tHArwXJsb2obrdT2PNv9iMutyQffrujY5DOgKdCRH+Y9Cd0iqu3xH h8Go86nc4e8+Uw== -----END CERTIFICATE-----Generated at Tue Jul 21 09:01:07 2026 by rpki-client