$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: ibA1TRVC/Tz/KaycCn+8BmmP1v4mNJNUGPp6Gn9u4aA= Subject key identifier: F8:B1:D7:6D:44:1B:9B:4F:53:47:F9:13:78:4A:E8:25:78:AA:8C:3E Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019D273AFE5F46BE69BE2B2E27210BEB43DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 18C3 Signing time: Wed 25 Mar 2026 23:01:10 +0000 Manifest this update: Wed 25 Mar 2026 23:01:10 +0000 Manifest next update: Thu 26 Mar 2026 23:01:10 +0000 Files and hashes: 1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=) 2: 1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa (hash: Iaj382heCZM+jzCY8eetFxeK6yVOOq/mB7H0r3jsr2Y=) 3: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=) 4: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=) 5: 43Q8B1j8uCGR8HMdyPrt74IDtQ0.roa (hash: jg6HtmjBC3mwgDbDxK1J2hnGtmR596d4s1Ft0DjJQas=) 6: 5Ql1DuHvDbOT4tt9jPjY3Yj4dk4.roa (hash: IaK+6glbfLn675Ana2ZWNnz6fJPNT0v9FztBnnlAGxw=) 7: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=) 8: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=) 9: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=) 10: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=) 11: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=) 12: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=) 13: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=) 14: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=) 15: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=) 16: LW-5clw67EFsnBjcAb7ZCZ1ciqI.roa (hash: e8fixB5X0C/SORa/tFJebK0n/Ac594LhZDRQ+zVtE8I=) 17: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=) 18: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=) 19: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (hash: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo=) 20: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=) 21: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=) 22: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=) 23: VuDnLvJNIcWc0RLDRhnQzJGXYlA.roa (hash: yHuXaf7xfAo1NMtfTvQ/YeqZYNx5yuNzc9kHv5WBJS0=) 24: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=) 25: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=) 26: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=) 27: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=) 28: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=) 29: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: 8A9AtBgt8rcsOeuDaCyGH7Q3dj/EYNWnbECEiZgSZDU=) 30: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=) 31: pyMmPiyFBVEcpAFu8BS9uRp5Uw8.roa (hash: C8etRVkdvpzZnpJ/5uCibkOtHku0DBM1Z5FvpwY5MNY=) 32: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=) 33: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:3a:fe:5f:46:be:69:be:2b:2e:27:21:0b:eb:43:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Mar 25 23:01:10 2026 GMT Not After : Mar 26 23:01:10 2026 GMT Subject: CN=f8b1d76d441b9b4f5347f913784ae82578aa8c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:6f:f0:a8:fe:8a:1d:7d:f7:bd:44:dd:ca: 49:01:a4:cd:5a:85:d5:4f:b5:41:d4:6e:37:87:48: 4f:7c:bb:e3:d8:5b:2f:94:07:2e:4f:38:7d:68:5c: 3b:24:5d:f7:0f:4b:bb:91:52:90:eb:2b:86:d8:df: 9a:24:fd:cc:c1:a5:01:0a:3c:dd:2b:37:e6:b8:7a: a9:25:e9:55:cf:99:4a:3f:0f:21:bd:ea:18:1d:43: 0e:f6:e5:78:47:1d:4c:de:ac:89:21:7e:90:13:63: d9:03:e4:be:17:d4:43:4f:50:1e:51:e2:84:61:53: bd:2f:2c:fc:d1:81:c9:9c:04:4b:c1:97:a6:7e:06: 8a:17:32:94:79:8d:bb:3f:93:13:af:3a:22:3b:ec: 7c:41:56:ef:f3:ce:54:91:15:86:ef:7f:15:eb:93: 1b:ed:ab:4d:76:f3:af:d2:a8:c8:2f:d3:6c:a6:a7: ff:77:20:4e:9f:94:09:e1:63:4e:d3:4c:dd:d3:41: 23:22:1f:9f:84:b4:13:40:0b:b9:c9:c9:3b:1a:57: 8d:d1:cf:16:e5:24:3e:ca:c0:eb:30:67:80:67:e6: 95:bc:36:d1:38:26:27:34:47:75:df:73:27:c4:90: de:02:f7:f8:e2:d4:d8:78:b1:13:d1:c9:d5:4f:bd: 3f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B1:D7:6D:44:1B:9B:4F:53:47:F9:13:78:4A:E8:25:78:AA:8C:3E X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a3:91:a7:2e:1e:c7:c2:ed:18:0b:7a:f0:c8:ce:a0:c3:8c: 30:7a:ad:98:b7:de:13:66:ad:9f:b1:05:28:f6:25:2c:84:2b: e9:16:52:ee:f7:5c:21:a4:1d:f2:2f:c0:59:42:b6:83:5d:ed: 9c:fe:39:82:8c:d3:41:a7:ce:95:a1:06:68:c4:1e:0b:e7:78: 68:df:61:da:51:04:7c:4e:4c:2f:9d:8d:61:5d:28:6d:30:93: 53:f5:55:c2:cb:aa:18:92:25:c9:62:07:06:28:6b:78:84:64: 5e:fb:87:4f:1e:ac:a7:b6:cc:ca:fc:d9:61:f5:ea:9f:95:32: ef:51:e3:91:e2:d2:ea:81:34:77:0f:68:d9:34:a9:3d:03:dd: 60:31:e7:57:6a:d9:a6:2a:3a:7a:de:68:ba:f2:49:ef:1a:49: 03:19:e1:3f:cf:9a:61:b0:be:8a:25:a7:42:77:52:47:63:76: 3f:2e:be:db:2f:26:9a:cc:22:64:66:e3:4e:c2:6f:45:34:30: b4:d1:cb:dd:a0:d3:cf:c6:fc:2d:da:aa:15:e6:f4:7f:5f:e2: d1:3b:b3:72:a0:4e:fb:38:5e:87:23:25:2f:2c:79:48:8a:ab: 83:ff:74:62:ef:34:49:86:19:56:c3:94:97:7c:d3:8a:5a:f6: 0a:2f:2f:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nOv5fRr5pvisuJyEL60PeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMzI1MjMwMTEwWhcNMjYwMzI2MjMwMTEwWjAzMTEwLwYDVQQD EyhmOGIxZDc2ZDQ0MWI5YjRmNTM0N2Y5MTM3ODRhZTgyNTc4YWE4YzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoBv8Kj+ih19971E3cpJAaTNWoXV T7VB1G43h0hPfLvj2FsvlAcuTzh9aFw7JF33D0u7kVKQ6yuG2N+aJP3MwaUBCjzd KzfmuHqpJelVz5lKPw8hveoYHUMO9uV4Rx1M3qyJIX6QE2PZA+S+F9RDT1AeUeKE YVO9Lyz80YHJnARLwZemfgaKFzKUeY27P5MTrzoiO+x8QVbv885UkRWG738V65Mb 7atNdvOv0qjIL9Nspqf/dyBOn5QJ4WNO00zd00EjIh+fhLQTQAu5yck7GleN0c8W 5SQ+ysDrMGeAZ+aVvDbROCYnNEd133MnxJDeAvf44tTYeLET0cnVT70/AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPix121EG5tPU0f5E3hK6CV4qow+MB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaORpy4e x8LtGAt68MjOoMOMMHqtmLfeE2atn7EFKPYlLIQr6RZS7vdcIaQd8i/AWUK2g13t nP45gozTQafOlaEGaMQeC+d4aN9h2lEEfE5ML52NYV0obTCTU/VVwsuqGJIlyWIH BihreIRkXvuHTx6sp7bMyvzZYfXqn5Uy71HjkeLS6oE0dw9o2TSpPQPdYDHnV2rZ pio6et5ouvJJ7xpJAxnhP8+aYbC+iiWnQndSR2N2Py6+2y8mmswiZGbjTsJvRTQw tNHL3aDTz8b8LdqqFeb0f1/i0TuzcqBO+zhehyMlLyx5SIqrg/90Yu80SYYZVsOU l3zTilr2Ci8vlw== -----END CERTIFICATE-----Generated at Thu Mar 26 06:02:13 2026 by rpki-client