$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: g8uv2XBu8u5ld1ZJB7PJpL7Xbi/iD8CTGvDyb5WUWlI= Subject key identifier: 4F:F7:60:5C:6F:C7:F4:E7:5A:44:25:C4:07:AC:2A:B0:67:9B:4A:10 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019CBF9729ADF93C04B49D8E7C4A204F3B97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 1969 Signing time: Thu 05 Mar 2026 20:01:20 +0000 Manifest this update: Thu 05 Mar 2026 20:01:20 +0000 Manifest next update: Fri 06 Mar 2026 20:01:20 +0000 Files and hashes: 1: 0EJd6KM5OKs4ZeWtakfKi4LfHMQ.roa (hash: lq/+jqUsuGMmo0V5eC2lYaf4+vkz0NSEYMEZoOw+h8M=) 2: 0v2v9lpIH8Gfe9bKfAWRc9bTf3s.roa (hash: ZS7xsxHoPgLo7pXTeMFQba/WrlLyuKrD/OKsytQQliA=) 3: 1-fnKnftkxo9cmAsQkPsG-I4ca0I.roa (hash: UbSvch0TgdBBUmSrH2mJ9dZgvzb+FMllfQIcUu2Fc2k=) 4: 1ueapHgSZeRmBOGFLmKR6_H2zUw.roa (hash: q0+HV1DIsnFoYoW/8YTV0Ggen1o+4d2qQ6LxI87aP9I=) 5: 3Eaj6yyGymoZIseF0IyHZwDsD7Q.roa (hash: iqDDjW5cOG97r4sM2JSgMTij8ljbDdlavJlc1sdy2is=) 6: 4anZiDch9d6oi83TQFLyB4qT99g.roa (hash: gEOKEHS2zoAD8h95bY8JWc94frKYylDhR359To9K6dI=) 7: 6vLBlvAYnt5lDDOZcjpwfzHCOik.roa (hash: KihGwXVua6pirrjPV5VriwFVirqc9ZJjTQEykToX1o4=) 8: BaNXpsDq6-N9oos8dJUS_8wrDB0.roa (hash: R59taLcL8XgECkHUD04YKkgGCAVhyLMLkoR8FN3GBXU=) 9: Fmg3wL_o3aopIsEQbXgCHXFam4E.roa (hash: OY+cWfR5jYsnEPm1uZa4VUsODu3TKMDkMdv4TNeG75Q=) 10: HR2CCmRRkw-hl6NVkIvyNR5G7aY.roa (hash: jPcgyS0A0CPg28Gnyk8yUak3J7zu53iE6b9g60+fx4M=) 11: OyeMYVp5OvrkmRrNy1af0fPKfIs.roa (hash: 47ed5gKnSBsJcBinRPWYBPdrDfTOHB8tg9qJU58BIJY=) 12: RN5nALXjZNUbgUzwgE6w7hssQDY.roa (hash: kiv3lC7KIYE2csnUvMxs+SFHsoHIxTYXU7zIuFIVszc=) 13: XJXC8rN2wu4yrnBhr9DvP03wKlg.roa (hash: pCQBoLdKmxtmBQ2vu5ZofXpEqg/wmN1dQJ6QlNip1Wc=) 14: a-kJ5knumGsOVePmAFmyw3gQk6M.roa (hash: n8W4R2uTKKGh4Y7lziZkfCB7vbLNy8V5BszYGmNeHKQ=) 15: a3awGspUbD83lR3SbJMhhWhWXUU.roa (hash: 4wacv1ZaHYO9NbaUGd81FOMwUiV7hBGJzXqLo1BRDrY=) 16: cn7-hcrRNirVMn7fuVChkd5gOH0.roa (hash: Jkp/J73ypJANp3uQ/SWVaEZfnou2Lr+GzdzjCKUvGzg=) 17: cpXnQ54ogNeEFY_Pmix7pjKtsVY.roa (hash: kjAIzOeWynNpPehvnohJeIDqQVE5YFpuq0XNwmJJBro=) 18: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: jiz2o1TOG+yDUiBkfgJQ0sDxXthnpO1f4c7X7/AoBW8=) 19: h_6Her04c1VJUqOWTEw-vF2QdJM.roa (hash: yF/TMLj4VWrNBEx6DvDlSkH38v+bAFKzWGIqdaI3ArE=) 20: hdqbXqEEo0WcDbUPmcA4zHyMx9g.roa (hash: wTfh43Z2dxSuhlyGF6sDvzrntnhstLzn2fKCtG4m1og=) 21: hok6Qp96mKVdQQjarDAvvs1bUeM.roa (hash: 5zV7NiDuzjvbffwRhWRdC6edDv2RAzy2F0ZnadV/k8Y=) 22: iyLqhBW7vWXE-D-a6Hy1btMt5hk.roa (hash: sRqgDDL9E/1sF3HT7gpIT6xxsbUIjda7rWB3PenCul4=) 23: jiLj3J5Bo3BCH5suARVlgU11bTo.roa (hash: LLpF3BIcUDVwpwXHzsowIz6eBq6bJYstoP6xzZ9ogdE=) 24: jp5nTIoItTHIHDPX2kZzUPRHlto.roa (hash: HE9yyxrPG49EMZWs9Brm5CRMxvDO542oZ8FihK7J/do=) 25: k2hVczUytlMTlC7CthfEzA0_AVM.roa (hash: RZTmxWFEle9vhsLQ7A7rVZuwhzSq7fez8fzezedwpMk=) 26: nFYNbXy0JhIyEmPla3EPZiB915M.roa (hash: 4Q1qQA0cyqLu7/tHU6Hpa7PqUUZygk8E+2ueMWgOYPc=) 27: ntwoakNBLWCi_eDmdQW8Ye93wMA.roa (hash: uI+s9dLYxlNIfKiVhukcn52PpzMFIuk5gWhfSg5erME=) 28: qhahxJ4ekUegtdPupvRl0hdJVdQ.roa (hash: BvwZQto8PkxkN1W4xLx00uQHLy83/08b+xF1cw9+RFA=) 29: s9crL-h4A3fkSwdexuXqPbkXvCA.roa (hash: CRLXsrde8vjqG70/Av7AifgLW8Uoo74tzTc6Om20qok=) 30: u2zHl19ZbKXvPmvwNMcLmzmNdVQ.roa (hash: WRAI6nEvaTJojleXKNb/BhG/0hyUOSj983OO/f7RP2A=) 31: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (hash: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=) 32: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (hash: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Mar 2026 16:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:bf:97:29:ad:f9:3c:04:b4:9d:8e:7c:4a:20:4f:3b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Mar 5 20:01:20 2026 GMT Not After : Mar 6 20:01:20 2026 GMT Subject: CN=4ff7605c6fc7f4e75a4425c407ac2ab0679b4a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:9d:a8:0b:77:66:f6:14:09:6e:17:67:09: 25:05:3a:6e:c5:c1:51:75:33:22:bf:a6:ff:99:2a: fa:50:95:f2:d2:94:4b:60:6d:3c:b1:60:3b:a9:be: a6:52:71:5c:c2:15:24:5c:80:d3:6e:da:89:f1:f0: 50:37:9d:06:ff:cd:15:1d:86:e4:41:9a:10:72:88: cc:1e:52:df:15:aa:1f:ed:d8:e4:20:9c:36:ca:50: 53:47:8c:65:33:e3:7b:97:3d:9b:10:07:34:55:ea: e0:fe:66:84:59:ab:c9:7d:e9:a0:89:05:16:fc:42: b2:8c:0b:82:f5:b0:3f:f1:ff:78:46:3b:0c:34:50: 60:b9:45:72:d4:7c:1c:73:25:b0:09:9d:75:a8:ee: 72:09:1e:1b:4d:bc:aa:cd:8c:28:0f:46:28:1e:94: 65:f8:0b:a3:e8:66:1a:46:73:f5:7b:fb:c1:f7:b4: 8e:60:a4:ad:26:2d:c3:89:2b:c4:fa:a4:7a:db:52: ce:7c:14:2a:87:20:4f:d2:0b:9e:85:f7:77:b3:68: c8:60:ec:55:f4:9e:6d:b6:ba:9d:f0:dd:30:38:a7: 75:f2:f9:50:63:f7:31:d3:13:e9:c5:60:30:a5:36: 5b:c3:43:6d:ef:d6:ee:30:37:55:86:2e:66:db:a8: 51:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F7:60:5C:6F:C7:F4:E7:5A:44:25:C4:07:AC:2A:B0:67:9B:4A:10 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e4:98:c7:5a:a0:2f:f7:55:49:8b:66:59:f2:ff:f5:fe:8f: 33:ff:69:21:e4:30:91:7d:75:25:a7:99:c9:b3:0f:d0:3a:62: 32:99:71:fa:8b:d7:27:4c:f2:8e:3b:e4:ed:04:58:c5:8b:fe: a4:ff:d9:a3:d9:5e:70:09:4a:01:28:73:fa:8d:02:ff:bf:f5: f4:c5:ef:c5:68:03:23:4b:ef:0a:2e:42:ac:e2:26:d6:dd:ca: f3:b8:b3:a3:5f:18:f6:ef:45:5b:c9:9a:a9:f8:eb:c5:0b:e5: 2b:87:91:a8:0a:28:b5:dd:d4:73:ba:e1:26:46:b4:88:31:e8: 26:23:7f:5a:4c:30:eb:d6:e8:d1:6e:0d:ee:2c:d2:b7:b2:23: 33:a1:eb:b7:bf:a8:3a:1b:65:35:5a:12:58:58:ea:26:4c:b7: c5:2f:79:1e:20:bf:93:60:93:23:14:98:5a:e3:1a:2e:71:1f: 9e:a8:69:75:41:e4:8b:ac:ef:42:e4:75:6d:1a:da:8c:ef:61: 82:5b:4f:b8:0f:f9:88:23:e5:f7:39:5a:75:f7:09:11:ff:f7: 9a:eb:fd:84:e1:da:8a:0d:f7:53:27:f8:75:18:6b:59:b2:0f: 50:4a:cf:9e:2a:38:ae:0e:03:98:7b:9b:ad:72:bb:8c:0b:bf: 26:98:40:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZy/lymt+TwEtJ2OfEogTzuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMzA1MjAwMTIwWhcNMjYwMzA2MjAwMTIwWjAzMTEwLwYDVQQD Eyg0ZmY3NjA1YzZmYzdmNGU3NWE0NDI1YzQwN2FjMmFiMDY3OWI0YTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx36dqAt3ZvYUCW4XZwklBTpuxcFR dTMiv6b/mSr6UJXy0pRLYG08sWA7qb6mUnFcwhUkXIDTbtqJ8fBQN50G/80VHYbk QZoQcojMHlLfFaof7djkIJw2ylBTR4xlM+N7lz2bEAc0Verg/maEWavJfemgiQUW /EKyjAuC9bA/8f94RjsMNFBguUVy1HwccyWwCZ11qO5yCR4bTbyqzYwoD0YoHpRl +Auj6GYaRnP1e/vB97SOYKStJi3DiSvE+qR621LOfBQqhyBP0guehfd3s2jIYOxV 9J5ttrqd8N0wOKd18vlQY/cx0xPpxWAwpTZbw0Nt79buMDdVhi5m26hRTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/3YFxvx/TnWkQlxAesKrBnm0oQMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOSYx1qg L/dVSYtmWfL/9f6PM/9pIeQwkX11JaeZybMP0DpiMplx+ovXJ0zyjjvk7QRYxYv+ pP/Zo9lecAlKAShz+o0C/7/19MXvxWgDI0vvCi5CrOIm1t3K87izo18Y9u9FW8ma qfjrxQvlK4eRqAootd3Uc7rhJka0iDHoJiN/Wkww69bo0W4N7izSt7IjM6Hrt7+o OhtlNVoSWFjqJky3xS95HiC/k2CTIxSYWuMaLnEfnqhpdUHki6zvQuR1bRrajO9h gltPuA/5iCPl9zladfcJEf/3muv9hOHaig33Uyf4dRhrWbIPUErPnio4rg4DmHub rXK7jAu/JphAqA== -----END CERTIFICATE-----Generated at Thu Mar 5 23:46:49 2026 by rpki-client