$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: sgq7efL0C5qMPyjBvGGGJmRbFwmYR2h9C9Le2/RDC7I= Subject key identifier: 23:D8:54:2B:41:81:C0:4C:BE:95:EC:A5:DD:4C:50:A4:BE:27:A8:B2 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019CCB2D81ABBC7D882A73BE3F4EBFA609B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 196F Signing time: Sun 08 Mar 2026 02:01:22 +0000 Manifest this update: Sun 08 Mar 2026 02:01:22 +0000 Manifest next update: Mon 09 Mar 2026 02:01:22 +0000 Files and hashes: 1: 0EJd6KM5OKs4ZeWtakfKi4LfHMQ.roa (hash: lq/+jqUsuGMmo0V5eC2lYaf4+vkz0NSEYMEZoOw+h8M=) 2: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 3: 1-fnKnftkxo9cmAsQkPsG-I4ca0I.roa (hash: UbSvch0TgdBBUmSrH2mJ9dZgvzb+FMllfQIcUu2Fc2k=) 4: 1ueapHgSZeRmBOGFLmKR6_H2zUw.roa (hash: q0+HV1DIsnFoYoW/8YTV0Ggen1o+4d2qQ6LxI87aP9I=) 5: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 6: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 7: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=) 8: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=) 9: Fmg3wL_o3aopIsEQbXgCHXFam4E.roa (hash: OY+cWfR5jYsnEPm1uZa4VUsODu3TKMDkMdv4TNeG75Q=) 10: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 11: OyeMYVp5OvrkmRrNy1af0fPKfIs.roa (hash: 47ed5gKnSBsJcBinRPWYBPdrDfTOHB8tg9qJU58BIJY=) 12: RN5nALXjZNUbgUzwgE6w7hssQDY.roa (hash: kiv3lC7KIYE2csnUvMxs+SFHsoHIxTYXU7zIuFIVszc=) 13: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 14: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=) 15: a3awGspUbD83lR3SbJMhhWhWXUU.roa (hash: 4wacv1ZaHYO9NbaUGd81FOMwUiV7hBGJzXqLo1BRDrY=) 16: cn7-hcrRNirVMn7fuVChkd5gOH0.roa (hash: Jkp/J73ypJANp3uQ/SWVaEZfnou2Lr+GzdzjCKUvGzg=) 17: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 18: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: kGdvGU7KI9zj0pRSHJPD3U1Bk7b/Q4E1RbjL647s0lc=) 19: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 20: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 21: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 22: iyLqhBW7vWXE-D-a6Hy1btMt5hk.roa (hash: sRqgDDL9E/1sF3HT7gpIT6xxsbUIjda7rWB3PenCul4=) 23: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 24: jp5nTIoItTHIHDPX2kZzUPRHlto.roa (hash: HE9yyxrPG49EMZWs9Brm5CRMxvDO542oZ8FihK7J/do=) 25: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 26: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 27: ntwoakNBLWCi_eDmdQW8Ye93wMA.roa (hash: uI+s9dLYxlNIfKiVhukcn52PpzMFIuk5gWhfSg5erME=) 28: qhahxJ4ekUegtdPupvRl0hdJVdQ.roa (hash: BvwZQto8PkxkN1W4xLx00uQHLy83/08b+xF1cw9+RFA=) 29: s9crL-h4A3fkSwdexuXqPbkXvCA.roa (hash: CRLXsrde8vjqG70/Av7AifgLW8Uoo74tzTc6Om20qok=) 30: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 31: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 32: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 20:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:cb:2d:81:ab:bc:7d:88:2a:73:be:3f:4e:bf:a6:09:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Mar 8 02:01:22 2026 GMT Not After : Mar 9 02:01:22 2026 GMT Subject: CN=23d8542b4181c04cbe95eca5dd4c50a4be27a8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:40:33:ff:03:a6:1b:b4:02:23:fe:4b:f3:87: b9:20:4d:76:22:ca:aa:32:c0:a8:e7:89:93:37:62: d6:4f:00:9d:10:29:77:1d:62:62:01:1d:c8:06:3f: 74:92:32:37:e8:f0:e9:bf:23:23:e3:a7:47:20:85: 29:ad:f5:75:d2:0d:e4:8b:d7:49:99:16:ef:ea:10: 06:a4:6d:7e:9c:0e:4f:a6:8c:c6:0e:df:69:0b:4d: 9a:c2:62:57:dd:e3:cc:87:e2:3e:47:8a:5c:5e:d1: cf:2e:3c:45:44:ab:d7:12:87:60:f4:f8:fe:9b:bd: d5:92:e4:2d:ee:81:4c:71:99:fa:7d:7f:6e:2b:d6: f6:6f:e3:57:c6:ab:8c:6c:f9:09:28:81:b6:38:6b: 6d:6f:8e:54:fe:47:78:c6:56:94:14:54:d6:28:aa: e7:eb:94:1b:2c:d8:cb:3e:0c:38:63:fc:ca:f1:aa: 6f:97:e3:6e:df:96:6b:01:bf:93:54:88:e8:b6:4d: f7:59:2d:1d:dd:1c:07:b3:a8:47:01:76:63:62:48: 99:5d:0e:8b:2c:e0:b8:21:61:b0:36:b5:66:ed:1f: 7a:50:c4:b9:1f:5f:74:b5:a6:44:b9:bc:02:8e:a0: 71:ba:5b:f8:74:7c:61:7b:10:72:79:ac:fb:c8:56: 8c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D8:54:2B:41:81:C0:4C:BE:95:EC:A5:DD:4C:50:A4:BE:27:A8:B2 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f9:2e:52:7c:6c:23:ed:0d:db:84:2d:b7:70:38:8f:2e:ad: 75:3e:e8:07:06:dc:6c:71:ad:46:ce:f9:4d:0d:53:bc:fb:46: 6f:83:39:58:ad:ed:5d:31:a7:13:d4:bc:51:9e:d0:b6:56:5b: 1e:45:e6:0b:37:22:7c:03:72:fb:15:91:c5:fc:70:e0:b6:a6: 99:ff:df:21:af:a0:9e:38:b6:e3:37:e8:89:48:73:cb:29:02: ec:83:a3:32:05:7a:88:11:d3:8a:9f:9d:93:1f:48:1b:53:d4: cb:19:92:df:cd:06:16:72:56:a7:2b:67:46:45:a2:d9:aa:74: b0:68:e2:f4:d4:8d:fd:7b:d1:56:1b:83:12:73:e6:4e:b4:43: 2d:ab:c6:54:57:24:a2:a6:b4:85:57:23:5e:b0:dc:5a:8f:37: f5:45:16:be:99:ff:ac:db:92:e5:3a:7e:ed:e4:3c:d2:ee:85: 7c:02:0e:40:28:17:e9:e6:b8:d5:86:b5:1f:73:27:25:c0:36: 53:c4:f0:f7:e4:d2:d4:a9:ee:8e:05:09:35:c6:9a:f9:cd:35: ab:ae:32:94:09:78:ad:f8:9a:83:31:f2:ec:4d:b6:45:16:42: af:3c:46:43:c1:42:67:60:98:e4:2a:91:a8:e9:9c:7f:00:c4: 6a:7b:48:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzLLYGrvH2IKnO+P06/pgmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMzA4MDIwMTIyWhcNMjYwMzA5MDIwMTIyWjAzMTEwLwYDVQQD EygyM2Q4NTQyYjQxODFjMDRjYmU5NWVjYTVkZDRjNTBhNGJlMjdhOGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kAz/wOmG7QCI/5L84e5IE12Isqq MsCo54mTN2LWTwCdECl3HWJiAR3IBj90kjI36PDpvyMj46dHIIUprfV10g3ki9dJ mRbv6hAGpG1+nA5PpozGDt9pC02awmJX3ePMh+I+R4pcXtHPLjxFRKvXEodg9Pj+ m73VkuQt7oFMcZn6fX9uK9b2b+NXxquMbPkJKIG2OGttb45U/kd4xlaUFFTWKKrn 65QbLNjLPgw4Y/zK8apvl+Nu35ZrAb+TVIjotk33WS0d3RwHs6hHAXZjYkiZXQ6L LOC4IWGwNrVm7R96UMS5H190taZEubwCjqBxulv4dHxhexByeaz7yFaM3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPYVCtBgcBMvpXspd1MUKS+J6iyMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/kuUnxs I+0N24Qtt3A4jy6tdT7oBwbcbHGtRs75TQ1TvPtGb4M5WK3tXTGnE9S8UZ7QtlZb HkXmCzcifANy+xWRxfxw4Lammf/fIa+gnji24zfoiUhzyykC7IOjMgV6iBHTip+d kx9IG1PUyxmS380GFnJWpytnRkWi2ap0sGji9NSN/XvRVhuDEnPmTrRDLavGVFck oqa0hVcjXrDcWo839UUWvpn/rNuS5Tp+7eQ80u6FfAIOQCgX6ea41Ya1H3MnJcA2 U8Tw9+TS1KnujgUJNcaa+c01q64ylAl4rfiagzHy7E22RRZCrzxGQ8FCZ2CY5CqR qOmcfwDEantIXw== -----END CERTIFICATE-----Generated at Sun Mar 8 04:19:14 2026 by rpki-client