$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: hvfLuiQTPFfpt5BTY11SjSMHb/9FEDekZt2ukvcleKY= Subject key identifier: 16:66:6D:FC:9C:2B:58:53:77:A2:57:42:E0:86:3F:17:2B:4C:34:4A Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019DA7C3D0A9D97C990603BF81AA8836FA93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 19E7 Signing time: Sun 19 Apr 2026 22:02:01 +0000 Manifest this update: Sun 19 Apr 2026 22:02:01 +0000 Manifest next update: Mon 20 Apr 2026 22:02:01 +0000 Files and hashes: 1: 0EJd6KM5OKs4ZeWtakfKi4LfHMQ.roa (hash: lq/+jqUsuGMmo0V5eC2lYaf4+vkz0NSEYMEZoOw+h8M=) 2: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 3: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 4: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 5: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=) 6: Au6ztzaYOL8tiA06L7XgEOvNL7w.roa (hash: 2gixSAvahjHMVkdyFo4/SHHkZ2SyI5tRyn1jTT+SjAw=) 7: Axyirs6pJ3W80QJ3YDoIci5zTRg.roa (hash: 43m1rEQkLo40I+R1w7uE4v2Z71kSfJJ3j7fM0HCzcL4=) 8: BSJwseKs8IstwvoydvzKDO4yjpk.roa (hash: 6WIA++2azmJG3DLJYorfCdBV6cXv3FDFWjwIcVYK2xA=) 9: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=) 10: Fmg3wL_o3aopIsEQbXgCHXFam4E.roa (hash: OY+cWfR5jYsnEPm1uZa4VUsODu3TKMDkMdv4TNeG75Q=) 11: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 12: Rr2zhV2BMuYwAMQjOZC17bpA4NM.roa (hash: EMKdr17+gur82xEd8d0NLRU71QAL7ROjLErF0ye4dUQ=) 13: V2KSUUK3NKjzpMrOniGAS6f0lYc.roa (hash: HcEBW9Swj6mWiXzSBMZMgQ58umIWR03BqrfbmgIYn1s=) 14: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 15: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=) 16: a3awGspUbD83lR3SbJMhhWhWXUU.roa (hash: 4wacv1ZaHYO9NbaUGd81FOMwUiV7hBGJzXqLo1BRDrY=) 17: bAQWAvcm3T6rfyaf7ljIBvlFtAM.roa (hash: 2DAvyPmgh36vWxZnNmX769qlQ+GKNipPDNKBhtCFjHA=) 18: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 19: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: DCwIDHCI0boRnqWH1Org5Q4CaQpU2AtifjEqMSLMJ6w=) 20: eEhMeiaypyt_S7BVopD2YgmSnOw.roa (hash: uB9NgFQsx1uvRWrD7GiIwr7cOwywAd7AGSIePb5dgOc=) 21: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 22: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 23: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 24: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 25: jp5nTIoItTHIHDPX2kZzUPRHlto.roa (hash: HE9yyxrPG49EMZWs9Brm5CRMxvDO542oZ8FihK7J/do=) 26: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 27: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 28: r-spS_s4o3tHQBEBuSgZxxRzODk.roa (hash: r+m8p33XcobkJHbwUm4VvDqKa1R52exPo6p81YpRS1w=) 29: sQrvyzK7N0wULm1wo0uM6xtxoDE.roa (hash: RQiHy4v+nKjO+WuHpQyymNIHaVpKrkrIV4MD67pQ4Kg=) 30: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 31: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 32: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a7:c3:d0:a9:d9:7c:99:06:03:bf:81:aa:88:36:fa:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Apr 19 22:02:01 2026 GMT Not After : Apr 20 22:02:01 2026 GMT Subject: CN=16666dfc9c2b585377a25742e0863f172b4c344a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:47:aa:36:df:c1:71:91:d0:03:6d:3d:e0:15: e9:96:69:22:d6:c7:37:82:11:27:da:17:50:aa:aa: a4:b9:89:0d:fc:44:4a:1c:d6:c6:c5:85:da:db:a1: 81:cf:ca:c4:e4:c1:65:e1:17:18:03:df:9f:d7:ef: 84:83:0f:bd:52:fd:45:47:0b:44:70:91:26:c9:a4: 40:d0:c3:78:f5:fe:b4:8d:9a:8d:1b:a2:8d:a2:24: 0a:b2:09:0c:9f:5e:e5:82:3d:45:93:8c:10:c0:29: 76:a8:8f:ad:36:a0:8e:61:95:6c:4c:73:9d:11:76: 9f:64:73:31:6d:f8:ac:b0:79:c4:f8:f2:0b:25:43: ae:82:31:12:ed:fe:98:f5:4c:8a:3e:0c:12:78:2e: 83:b1:cd:3b:fc:8f:e2:86:8e:c6:f3:da:f0:95:09: f2:9d:df:e4:5f:2d:31:48:07:0f:dc:95:96:09:9b: 72:6a:a6:64:08:5f:4a:b9:8e:74:0f:ec:66:b6:3c: 49:c2:e8:5d:7d:a9:f2:f2:b6:18:94:d1:4e:82:b5: d5:d5:ea:39:c5:fe:ce:d1:31:70:50:c2:83:3c:6c: 3c:89:8c:95:89:88:07:bd:3f:35:73:45:e5:7c:3b: 03:5b:a3:1b:d1:9d:0a:bb:6e:ed:22:d1:f1:f0:2c: 45:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:66:6D:FC:9C:2B:58:53:77:A2:57:42:E0:86:3F:17:2B:4C:34:4A X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4d:d9:4f:c6:15:c5:73:c0:0a:cb:d6:c4:35:9d:74:5d:8f: ab:89:e2:18:94:57:05:41:bc:02:9d:eb:33:c2:bc:96:ea:ec: d0:00:e8:a0:e2:7a:2b:e8:cb:32:f2:ef:f5:75:c6:26:76:24: 1f:b2:77:c9:d3:13:e9:d7:45:25:c6:fa:b5:7a:28:2f:a8:55: 2e:0e:22:fb:12:02:e3:aa:4b:d0:09:ba:e5:fd:5c:f5:c8:b6: 21:cc:8d:57:37:f0:e6:c9:87:ef:64:c5:91:ef:94:4d:50:96: 36:e4:2f:8e:46:7f:2a:28:25:78:b7:b3:1e:7d:e7:be:b8:ea: ab:d4:72:22:26:fb:18:10:53:85:e7:d0:87:b9:b4:c4:27:3c: e0:96:81:50:ec:cf:36:ee:08:33:60:e3:13:53:82:e1:4c:74: 82:98:a1:57:4c:43:46:05:5e:2b:30:de:af:13:6a:c7:4f:4f: a1:5c:a3:ef:0a:c9:10:6c:14:c1:28:ee:47:1a:3f:6f:08:00: ae:42:9a:f0:1d:60:2e:64:56:60:82:09:c0:93:07:43:9b:d1: bf:35:3d:36:86:ff:e8:4b:fe:c1:24:f7:7b:b9:ce:24:d3:59: e8:fe:42:d7:1d:bc:35:b0:23:ea:f9:a3:36:5a:5a:d9:94:d4: 4e:8e:ff:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2nw9Cp2XyZBgO/gaqINvqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwNDE5MjIwMjAxWhcNMjYwNDIwMjIwMjAxWjAzMTEwLwYDVQQD EygxNjY2NmRmYzljMmI1ODUzNzdhMjU3NDJlMDg2M2YxNzJiNGMzNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkeqNt/BcZHQA2094BXplmki1sc3 ghEn2hdQqqqkuYkN/ERKHNbGxYXa26GBz8rE5MFl4RcYA9+f1++Egw+9Uv1FRwtE cJEmyaRA0MN49f60jZqNG6KNoiQKsgkMn17lgj1Fk4wQwCl2qI+tNqCOYZVsTHOd EXafZHMxbfissHnE+PILJUOugjES7f6Y9UyKPgwSeC6Dsc07/I/iho7G89rwlQny nd/kXy0xSAcP3JWWCZtyaqZkCF9KuY50D+xmtjxJwuhdfany8rYYlNFOgrXV1eo5 xf7O0TFwUMKDPGw8iYyViYgHvT81c0XlfDsDW6Mb0Z0Ku27tItHx8CxFCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZmbfycK1hTd6JXQuCGPxcrTDRKMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW03ZT8YV xXPACsvWxDWddF2Pq4niGJRXBUG8Ap3rM8K8lurs0ADooOJ6K+jLMvLv9XXGJnYk H7J3ydMT6ddFJcb6tXooL6hVLg4i+xIC46pL0Am65f1c9ci2IcyNVzfw5smH72TF ke+UTVCWNuQvjkZ/KigleLezHn3nvrjqq9RyIib7GBBThefQh7m0xCc84JaBUOzP Nu4IM2DjE1OC4Ux0gpihV0xDRgVeKzDerxNqx09PoVyj7wrJEGwUwSjuRxo/bwgA rkKa8B1gLmRWYIIJwJMHQ5vRvzU9Nob/6Ev+wST3e7nOJNNZ6P5C1x28NbAj6vmj Nlpa2ZTUTo7/+g== -----END CERTIFICATE-----Generated at Mon Apr 20 04:49:21 2026 by rpki-client