$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: 9vaAvJic3qj/rHnx8pW5vTlZwYX6tbeiNzWbxznNMFk= Subject key identifier: 7D:AE:52:39:F5:54:16:7D:6F:B1:D3:83:3F:E3:5A:88:79:14:E1:37 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019D2928FB0CA3B41958ACB045EB55642BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 18C4 Signing time: Thu 26 Mar 2026 08:00:44 +0000 Manifest this update: Thu 26 Mar 2026 08:00:44 +0000 Manifest next update: Fri 27 Mar 2026 08:00:44 +0000 Files and hashes: 1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=) 2: 1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa (hash: Iaj382heCZM+jzCY8eetFxeK6yVOOq/mB7H0r3jsr2Y=) 3: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=) 4: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=) 5: 43Q8B1j8uCGR8HMdyPrt74IDtQ0.roa (hash: jg6HtmjBC3mwgDbDxK1J2hnGtmR596d4s1Ft0DjJQas=) 6: 5Ql1DuHvDbOT4tt9jPjY3Yj4dk4.roa (hash: IaK+6glbfLn675Ana2ZWNnz6fJPNT0v9FztBnnlAGxw=) 7: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=) 8: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=) 9: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=) 10: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=) 11: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=) 12: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=) 13: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=) 14: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=) 15: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=) 16: LW-5clw67EFsnBjcAb7ZCZ1ciqI.roa (hash: e8fixB5X0C/SORa/tFJebK0n/Ac594LhZDRQ+zVtE8I=) 17: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=) 18: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=) 19: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (hash: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo=) 20: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=) 21: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=) 22: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=) 23: VuDnLvJNIcWc0RLDRhnQzJGXYlA.roa (hash: yHuXaf7xfAo1NMtfTvQ/YeqZYNx5yuNzc9kHv5WBJS0=) 24: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=) 25: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=) 26: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=) 27: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=) 28: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=) 29: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: UUQ2fi9jlNgBw42Ao9Jq+DGQRvEuGOpeoW7LCpgHAYY=) 30: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=) 31: pyMmPiyFBVEcpAFu8BS9uRp5Uw8.roa (hash: C8etRVkdvpzZnpJ/5uCibkOtHku0DBM1Z5FvpwY5MNY=) 32: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=) 33: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:28:fb:0c:a3:b4:19:58:ac:b0:45:eb:55:64:2b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Mar 26 08:00:44 2026 GMT Not After : Mar 27 08:00:44 2026 GMT Subject: CN=7dae5239f554167d6fb1d3833fe35a887914e137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:7b:b5:9a:d9:f1:ef:99:4f:5f:87:cf:e6: 83:ed:d6:c3:00:b7:bd:49:51:74:a9:b8:ba:9f:e9: 34:15:09:52:9e:19:e8:03:28:4a:e5:d2:d0:7d:73: 02:a8:96:22:3e:8e:7e:b2:12:db:7e:61:a1:2b:c0: 2f:df:50:bc:30:d4:7f:d7:dc:7b:d7:35:99:b2:a1: b6:c2:ba:c2:78:de:af:5b:d5:92:c4:77:73:df:a1: 62:71:31:11:7d:c3:ef:a7:fd:ef:13:15:85:a4:88: e2:d9:21:3c:f3:ca:fd:18:e9:84:c7:43:a7:ab:50: 3a:6b:00:18:00:8e:2f:ba:da:8b:b1:15:4b:d5:54: 6b:66:92:d9:9e:ec:18:ef:ee:e2:39:a3:ad:05:c3: e8:ad:3e:81:5b:05:4c:86:10:7f:ab:9d:31:bd:a3: 4d:4b:6e:5d:4f:be:c7:3d:68:f6:6e:16:e8:c6:2a: ff:2f:50:cc:15:e0:f5:97:3b:f7:8b:87:f4:05:86: 9e:7c:c1:81:8c:d0:a6:4d:97:f0:3b:72:f7:05:ff: 21:f4:09:a5:44:31:87:33:22:f0:93:48:a3:26:04: 96:6a:f7:48:9b:a9:75:94:a3:7a:f0:f2:99:a2:21: 21:a2:fb:d2:2d:cd:d3:57:5d:67:44:f6:fd:23:27: fc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AE:52:39:F5:54:16:7D:6F:B1:D3:83:3F:E3:5A:88:79:14:E1:37 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:00:96:5a:08:3e:bd:b8:6b:69:e8:42:9d:10:56:de:14:d0: f2:40:b4:4f:39:85:17:9d:31:3a:c5:e7:80:a6:16:5d:35:79: 1d:6e:a3:df:60:1c:65:ea:95:d8:76:bf:e8:ed:3e:cd:91:e1: 8c:ed:94:9e:48:85:1e:30:69:6a:c9:7e:fd:54:1d:db:3a:f0: 0b:2d:ad:bb:2c:76:4e:41:a3:14:a4:59:28:7e:09:a9:f9:a8: 61:2f:2b:33:c3:fc:58:47:1f:9a:63:af:83:aa:07:19:11:1a: 8d:8a:25:cd:1f:fe:a5:e3:ad:be:79:20:7c:60:78:52:27:98: d3:6c:ea:6f:b9:2e:90:e1:c4:b7:14:f3:22:97:e4:19:ca:a9: 38:b0:f2:d5:07:fb:3b:fe:56:1c:5b:02:88:a5:36:ea:f7:99: ce:ae:12:2e:a4:21:5e:a3:a7:4f:18:9c:d8:74:4d:a5:db:ec: 0f:b1:48:57:26:18:96:ea:ca:fc:84:bf:5f:da:27:71:c7:ae: 1e:4e:ab:b2:e4:7c:ac:77:d8:64:95:c9:0a:d2:94:20:75:f0: 52:ba:a6:37:46:25:b0:01:a2:9f:29:75:0c:de:6f:4f:4f:9b: 75:bf:04:d8:42:06:28:41:f4:b9:d9:4c:3d:ba:2b:70:50:c5: 70:e2:2e:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pKPsMo7QZWKywRetVZCv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMzI2MDgwMDQ0WhcNMjYwMzI3MDgwMDQ0WjAzMTEwLwYDVQQD Eyg3ZGFlNTIzOWY1NTQxNjdkNmZiMWQzODMzZmUzNWE4ODc5MTRlMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLx7tZrZ8e+ZT1+Hz+aD7dbDALe9 SVF0qbi6n+k0FQlSnhnoAyhK5dLQfXMCqJYiPo5+shLbfmGhK8Av31C8MNR/19x7 1zWZsqG2wrrCeN6vW9WSxHdz36FicTERfcPvp/3vExWFpIji2SE888r9GOmEx0On q1A6awAYAI4vutqLsRVL1VRrZpLZnuwY7+7iOaOtBcPorT6BWwVMhhB/q50xvaNN S25dT77HPWj2bhboxir/L1DMFeD1lzv3i4f0BYaefMGBjNCmTZfwO3L3Bf8h9Aml RDGHMyLwk0ijJgSWavdIm6l1lKN68PKZoiEhovvSLc3TV11nRPb9Iyf82wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2uUjn1VBZ9b7HTgz/jWoh5FOE3MB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQCWWgg+ vbhraehCnRBW3hTQ8kC0TzmFF50xOsXngKYWXTV5HW6j32AcZeqV2Ha/6O0+zZHh jO2UnkiFHjBpasl+/VQd2zrwCy2tuyx2TkGjFKRZKH4JqfmoYS8rM8P8WEcfmmOv g6oHGREajYolzR/+peOtvnkgfGB4UieY02zqb7kukOHEtxTzIpfkGcqpOLDy1Qf7 O/5WHFsCiKU26veZzq4SLqQhXqOnTxic2HRNpdvsD7FIVyYYlurK/IS/X9oncceu Hk6rsuR8rHfYZJXJCtKUIHXwUrqmN0YlsAGinyl1DN5vT0+bdb8E2EIGKEH0udlM PborcFDFcOIuEg== -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:09 2026 by rpki-client