$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: d4JtzSa5MxM7oGeg1Yhh6S8aGSJgDY2HobfPKEHglSE= Subject key identifier: 2F:0F:A3:1C:F7:E5:D3:74:16:DC:E1:C9:0C:4A:33:35:A2:1B:56:83 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 01A1D9B7D449D935AC87B129332DFC85233C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 1B5C Signing time: Sat 14 Nov 2026 11:01:05 +0000 Manifest this update: Sat 14 Nov 2026 11:01:05 +0000 Manifest next update: Sun 15 Nov 2026 11:01:05 +0000 Files and hashes: 1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=) 2: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=) 3: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=) 4: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=) 5: 9y9vUW18OgMTeEnJ_6NHhJaCuGE.roa (hash: VPYfKLh4X+Cxtn4NwGg/AMQBRlBu4LVEqeIjyHaPvbE=) 6: CRbRvhC1uKqes8IR89lmtpIQTt4.roa (hash: EO562tiebnOW6btwaNkc9PtYJgNjll1/iyRvRluHUWM=) 7: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=) 8: E3-_fXrx3WJEz1xqKZqUxJBmM-Q.roa (hash: aSCX2XxnC/aSPKRCNlxxflXs9icajrveCo9SBL09YdY=) 9: EtfbqtbVgmE5k5EfNQal1jQqIao.roa (hash: qGpfhIH2gNSP3ygzOk+ijrsunW7Qn03B2PkdlyJWXCg=) 10: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=) 11: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=) 12: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=) 13: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=) 14: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=) 15: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=) 16: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=) 17: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=) 18: RNLAho-QCCsGT4LlSBmDznPzISI.roa (hash: k9qrK3CB3pZBI/+ijf1H63IQuNeWEj/N3CKMuUtiwh0=) 19: RRKsQC6M9AkjMNnb6Dbgy31a89c.roa (hash: RgVs/FEdPi9iuMl4X4UjocrvDXfBoeU0x5T2+6iJk9Y=) 20: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=) 21: SfVssagpmlLqkacWNaVNOz0XlmM.roa (hash: uCMy1ITfrqfwsVTW0YgDEO2gh3l99Zy01fzA2hgxApQ=) 22: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=) 23: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=) 24: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=) 25: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=) 26: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=) 27: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=) 28: f6vxDfNcKmbcRMocWBWqx0klFfU.roa (hash: yF/U9wmEqkEVL+v6ftdK6mnwfqDPE8fyPj5MQZHAAd8=) 29: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: yE0ogzvUJMCKgZ56C+4QzGX+F76V7TnzJUwdT1DAwWU=) 30: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=) 31: oOzmaNZ6GWhwZ9PMuptoBXvDQ7g.roa (hash: /GMLFT87ZcuxWm4NUS3n3SFS8892JGBM4AaN6RwI2TY=) 32: oqbInV5y5jVijngnsT6Z4KkwCJs.roa (hash: Jofbkqy8kOPIsDBzvJum0QcsSO9pDkw/9K4nko6x7wQ=) 33: qt1QwLqwucEqiS_HCsqZaECHD-Q.roa (hash: MG72GciveOCAsSd/PHOMOToEY9AgjSuj5ZNePoC3YD4=) 34: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=) 35: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=) 36: xCY-jwx9TbNDKze1sHckd7X3tBk.roa (hash: QqEPzXWUxO16JFzM38SIXYJvIofroFhSqR/yItN6UWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 10:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:d9:b7:d4:49:d9:35:ac:87:b1:29:33:2d:fc:85:23:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Nov 14 11:01:05 2026 GMT Not After : Nov 15 11:01:05 2026 GMT Subject: CN=2f0fa31cf7e5d37416dce1c90c4a3335a21b5683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:e8:84:e7:66:85:75:ee:ab:ca:1e:9f:14: a7:02:69:75:40:30:50:56:25:c3:9d:b0:3e:f3:a2: fe:06:61:61:c8:24:5b:34:84:42:3d:ff:8a:58:14: 07:24:3b:a0:11:58:40:0b:f3:2a:88:5c:30:8c:63: 83:e2:3b:5d:26:00:96:93:70:53:20:ed:7c:a1:91: 31:ff:d6:e7:a2:3f:8a:38:cd:eb:55:8a:26:90:cd: b0:ce:c9:bb:22:e2:22:e7:22:98:32:5c:cc:74:e8: 7e:7e:26:b7:8d:41:06:63:8c:f4:1e:35:13:e6:80: a5:d1:6f:51:40:0b:12:f7:7b:6b:ef:c4:52:47:4a: 39:1c:0c:15:0c:d1:82:5b:ed:05:0c:b0:2f:0c:41: 66:e0:87:d5:de:cf:33:5d:ae:cf:ee:68:7e:bc:f7: a6:ae:ca:33:34:a1:ca:64:04:81:16:31:2f:4a:97: a9:57:89:9c:72:72:7c:5a:d6:17:5d:c1:4e:f1:e6: e1:ab:96:28:6b:17:81:36:da:9f:70:db:b7:5f:ba: e3:ce:82:b5:b6:6e:e4:35:ff:99:8e:f8:58:7e:d7: c9:c8:7e:6f:3f:9c:e6:5b:1e:2a:57:7c:88:41:91: ff:95:cb:c1:62:c5:ed:3f:01:00:8c:a6:e3:cd:cd: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0F:A3:1C:F7:E5:D3:74:16:DC:E1:C9:0C:4A:33:35:A2:1B:56:83 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:11:41:8f:37:f5:72:28:93:f3:4f:ee:f2:6e:22:ba:1f:8d: b6:17:20:a9:24:f8:ee:9a:46:95:0f:e3:be:e3:0d:5c:e7:8b: 6d:df:96:f8:3f:b5:0b:c6:0a:50:b2:a4:79:54:6a:8b:55:ea: 22:64:d7:00:66:e9:95:1a:b4:c3:15:86:1c:7b:07:28:03:13: 34:9f:72:c5:79:50:3d:da:e0:73:05:f3:3e:20:4c:d0:db:37: 37:82:83:ad:c6:40:d8:23:fb:f5:d3:42:4c:fc:56:a8:f0:e9: 05:89:2a:77:28:1d:03:da:19:a9:cf:ba:53:89:64:7b:5b:f3: d9:56:dd:57:06:2a:77:d0:53:2d:1a:5b:9b:d7:96:6d:4c:e9: da:df:47:7a:bc:8c:6f:30:fb:7e:57:de:3f:3a:50:00:c6:ac: 2f:f2:f2:ff:c5:04:39:1b:80:38:a7:38:0a:4d:5a:15:6e:aa: d9:26:bf:b1:8c:fa:21:23:e9:4f:c1:97:76:83:ba:be:64:2b: f5:99:f2:30:0c:5c:cf:82:31:d8:38:7e:9c:2c:24:8f:64:34: fd:aa:7b:fb:92:16:20:20:50:14:cb:1d:fb:0b:bd:00:06:b7: 7d:99:14:e9:44:c5:30:7c:de:15:3c:03:4d:f8:ad:61:df:e3: 9f:a3:1b:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHZt9RJ2TWsh7EpMy38hSM8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYxMTE0MTEwMTA1WhcNMjYxMTE1MTEwMTA1WjAzMTEwLwYDVQQD EygyZjBmYTMxY2Y3ZTVkMzc0MTZkY2UxYzkwYzRhMzMzNWEyMWI1NjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWvohOdmhXXuq8oenxSnAml1QDBQ ViXDnbA+86L+BmFhyCRbNIRCPf+KWBQHJDugEVhAC/MqiFwwjGOD4jtdJgCWk3BT IO18oZEx/9bnoj+KOM3rVYomkM2wzsm7IuIi5yKYMlzMdOh+fia3jUEGY4z0HjUT 5oCl0W9RQAsS93tr78RSR0o5HAwVDNGCW+0FDLAvDEFm4IfV3s8zXa7P7mh+vPem rsozNKHKZASBFjEvSpepV4mccnJ8WtYXXcFO8ebhq5YoaxeBNtqfcNu3X7rjzoK1 tm7kNf+ZjvhYftfJyH5vP5zmWx4qV3yIQZH/lcvBYsXtPwEAjKbjzc0YhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8Poxz35dN0FtzhyQxKMzWiG1aDMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRFBjzf1 ciiT80/u8m4iuh+NthcgqST47ppGlQ/jvuMNXOeLbd+W+D+1C8YKULKkeVRqi1Xq ImTXAGbplRq0wxWGHHsHKAMTNJ9yxXlQPdrgcwXzPiBM0Ns3N4KDrcZA2CP79dNC TPxWqPDpBYkqdygdA9oZqc+6U4lke1vz2VbdVwYqd9BTLRpbm9eWbUzp2t9HeryM bzD7flfePzpQAMasL/Ly/8UEORuAOKc4Ck1aFW6q2Sa/sYz6ISPpT8GXdoO6vmQr 9ZnyMAxcz4Ix2Dh+nCwkj2Q0/ap7+5IWICBQFMsd+wu9AAa3fZkU6UTFMHzeFTwD TfitYd/jn6MbEQ== -----END CERTIFICATE-----Generated at Sat Nov 14 20:54:25 2026 by rpki-client