$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: bRsT51OtZI9XLa94XzkTdFDY5IZcv4c9Z9+GEHZFH28= Subject key identifier: DF:5A:65:FB:E8:4C:D8:F8:B7:2D:58:66:C1:1E:F3:17:91:B1:5E:B3 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 01A15966496288A0A9C398970B11A7611ADF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 1BE8 Signing time: Tue 20 Oct 2026 13:00:37 +0000 Manifest this update: Tue 20 Oct 2026 13:00:37 +0000 Manifest next update: Wed 21 Oct 2026 13:00:37 +0000 Files and hashes: 1: 0YUDAiE-yuhK94EMmLyzQMgIlF0.roa (hash: rsg5CjblS2OIdnbLSyR6XK4Mryfl50YgeWhG09XSsvk=) 2: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 3: 2GJBZKsIm3jc4Z15-3kXAAPem8A.roa (hash: jTvDg98QyTQnWxiM6YIXTY0rLTQHghhXeVF09n/3SKQ=) 4: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 5: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 6: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=) 7: 79P1nblmX5Sl5oZdwI0Dj3MUbys.roa (hash: La6+lZpjnP/18h6j5GqiME+A/vxO0IF8qjUuVJayEN4=) 8: AuE2rwLS8SAwP0zsffvoZ2RJKhw.roa (hash: TM4O7+3WS0xFrNfC6juWwcHyA2+UIAU1iXbpY1CJY+s=) 9: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=) 10: BYI4akM6lhIw21VZknTh_NCIqSU.roa (hash: YdN03lqeu5vvLCQrhnxcW6iOxgWPrgZFciSU6zX3FMs=) 11: CuwON2MJZtvZI4g-9no7hDi-jTM.roa (hash: t4dkHT6G4U30/rLqAkRNH5wHWvEqi8n3uM1IPVPedwg=) 12: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 13: QL7_ykelTLhFLJAjvfuxzqWP2vk.roa (hash: 4QL9CwOY1xIzLU+QxTfnx6oHiWUSUqf0UtoKPhqw5LE=) 14: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=) 15: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 16: ciIgS1TjaGOTBbmOnGozAmnHfUc.roa (hash: ntXa2GYDAO0jxPMtQsYXddkZE8eGPrFUqY/SdPvPIvw=) 17: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 18: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: yRg6ScuXIOaJT8zuB+apJvp8AjmYEdpgGbU8HMEM+T8=) 19: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=) 20: fPY6U_1618fK0NT9X8wGnZOYgN8.roa (hash: fCX4MpPK80jOGQxrsBevkbA6sqLzfKitTFXIWhDmcZw=) 21: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 22: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 23: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 24: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 25: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 26: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 27: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=) 28: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=) 29: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 30: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 31: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) 32: ywexjdSx58c_dnH_pe3prB5KbBc.roa (hash: CEx8v6bvzNC8gDYFXGH5Ep5ijCVlKNxtjBQGlyVSklQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:59:66:49:62:88:a0:a9:c3:98:97:0b:11:a7:61:1a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Oct 20 13:00:37 2026 GMT Not After : Oct 21 13:00:37 2026 GMT Subject: CN=df5a65fbe84cd8f8b72d5866c11ef31791b15eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:27:4e:31:7e:03:27:99:f2:a3:87:96:8d: 52:ec:ec:14:41:4b:f2:1e:60:aa:35:18:e2:be:1a: c8:1b:a5:04:33:07:18:2a:3b:28:29:d0:65:05:00: f3:df:e6:5a:c5:52:74:a9:58:64:fc:e3:b8:4f:7d: 22:53:c4:cb:1a:a3:31:e7:dd:2e:84:b3:37:7d:fc: 93:26:04:3e:bf:5a:83:e9:61:94:5a:da:fc:22:4f: fe:83:a1:ea:57:53:e9:46:7a:52:5d:40:7f:9f:ae: 4c:82:8f:6b:67:bd:0c:8a:00:29:4b:66:03:e6:eb: 1f:23:cb:bc:91:09:7f:96:56:ad:21:a1:b8:ea:e9: 7b:a7:68:8d:95:64:47:16:20:9f:5e:51:c3:ae:cf: 97:2c:48:23:b7:df:39:d8:71:ed:cb:80:3e:ef:c8: 1b:10:5d:5a:bf:4e:67:0a:dd:02:82:5d:d7:65:7a: 54:9d:82:d9:81:65:2b:76:14:a0:d7:4d:dc:a7:9f: 14:4d:89:5e:01:04:a2:04:77:9b:b3:53:18:2e:3c: 24:53:b2:2f:43:ed:0c:a9:fa:48:07:79:49:02:cb: fe:17:ed:63:34:4b:b6:14:30:27:a7:aa:d9:b8:d9: 3a:0a:39:27:61:e6:0c:21:9b:ae:ed:21:c2:be:13: 23:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5A:65:FB:E8:4C:D8:F8:B7:2D:58:66:C1:1E:F3:17:91:B1:5E:B3 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c9:67:ba:71:fb:c1:81:97:62:33:05:d0:cb:1c:2b:44:d4: 4d:62:19:5b:c2:95:45:f8:28:96:dc:5e:de:51:26:dc:ed:35: e3:62:24:5f:e8:33:35:e6:b8:2e:b3:78:5f:a3:50:46:da:8a: 5d:f4:44:58:13:5d:8d:11:f4:bd:87:2d:95:e1:44:51:69:5d: d8:ed:76:37:85:db:14:ae:b9:f4:74:33:b5:0e:ac:94:21:32: d7:fc:93:aa:e4:11:a9:41:10:fb:67:55:3e:f4:fd:bd:e2:02: 3f:a8:75:91:80:8b:b3:3c:c5:9c:14:44:0b:22:ff:3a:e4:aa: b2:8a:bd:5e:4c:f7:c1:e1:75:70:e1:63:3d:1e:39:b1:4a:17: 5f:13:bb:cf:20:70:db:ae:c1:33:cc:bc:39:75:ba:5c:99:73: eb:ee:07:ab:a5:62:b2:44:b3:58:47:31:f6:1d:4c:fc:f8:2e: e9:30:4d:01:89:6d:aa:6f:16:18:84:1c:df:97:7d:6a:dc:fd: 9c:a7:56:42:61:b6:ac:d5:57:7e:9a:4b:59:41:cd:35:3d:77: 0f:64:a9:ad:5f:fc:72:8f:2e:53:22:f9:bb:91:98:59:a6:ad: 9d:f9:0b:7c:84:62:df:40:99:50:b3:04:29:38:70:b7:95:84: 4d:10:89:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFZZkliiKCpw5iXCxGnYRrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYxMDIwMTMwMDM3WhcNMjYxMDIxMTMwMDM3WjAzMTEwLwYDVQQD EyhkZjVhNjVmYmU4NGNkOGY4YjcyZDU4NjZjMTFlZjMxNzkxYjE1ZWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa0nTjF+AyeZ8qOHlo1S7OwUQUvy HmCqNRjivhrIG6UEMwcYKjsoKdBlBQDz3+ZaxVJ0qVhk/OO4T30iU8TLGqMx590u hLM3ffyTJgQ+v1qD6WGUWtr8Ik/+g6HqV1PpRnpSXUB/n65Mgo9rZ70MigApS2YD 5usfI8u8kQl/llatIaG46ul7p2iNlWRHFiCfXlHDrs+XLEgjt9852HHty4A+78gb EF1av05nCt0Cgl3XZXpUnYLZgWUrdhSg103cp58UTYleAQSiBHebs1MYLjwkU7Iv Q+0MqfpIB3lJAsv+F+1jNEu2FDAnp6rZuNk6CjknYeYMIZuu7SHCvhMj3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9aZfvoTNj4ty1YZsEe8xeRsV6zMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8lnunH7 wYGXYjMF0MscK0TUTWIZW8KVRfgoltxe3lEm3O0142IkX+gzNea4LrN4X6NQRtqK XfREWBNdjRH0vYctleFEUWld2O12N4XbFK659HQztQ6slCEy1/yTquQRqUEQ+2dV PvT9veICP6h1kYCLszzFnBRECyL/OuSqsoq9Xkz3weF1cOFjPR45sUoXXxO7zyBw 267BM8y8OXW6XJlz6+4Hq6ViskSzWEcx9h1M/Pgu6TBNAYltqm8WGIQc35d9atz9 nKdWQmG2rNVXfppLWUHNNT13D2SprV/8co8uUyL5u5GYWaatnfkLfIRi30CZULME KThwt5WETRCJVg== -----END CERTIFICATE-----Generated at Tue Oct 20 20:46:24 2026 by rpki-client