$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json) Hash identifier: Tc4teODKFu+wIJMtb0eDrr7QHeKxIoRh+omqa+bujKU= Subject key identifier: 6C:A7:D0:53:23:63:2E:A0:6C:9F:C3:5A:0E:53:A8:D7:B2:73:0B:9D Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019E1D226C76FCBD1730CAD03FDB6F5C12EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft Manifest number: 167E Signing time: Tue 12 May 2026 17:00:55 +0000 Manifest this update: Tue 12 May 2026 17:00:55 +0000 Manifest next update: Wed 13 May 2026 17:00:55 +0000 Files and hashes: 1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=) 2: 4HCRVHg_7Fpp7PvqVl5KuccIESk.roa (hash: puBwqjPV6QqbrN+4fAjWbkC+7OOzoSwZ1Vj+oyvzRbs=) 3: 4Uc22LPWnWUE2R7euaG4ZHnFv6s.roa (hash: RGTqZUMIJDCt8fg43m28f23pkWbeJCT3vhwBQSzMBNo=) 4: 8-_TWMNK9smVCIZHx2gSgefBTvk.roa (hash: GoPHoDZXQ4RK7VcYW0JWFdEHGQJJF9f+5F3ghTg1XDg=) 5: A8pB-9bz15cQYivfjGrzOwMc7LY.roa (hash: EeHyMuPO8kK3PqKlWgKjT50oovE1gmYEWW0HAbBX2NI=) 6: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=) 7: IoVIx2I3x-PhEDaNiA3QsmgYRfU.roa (hash: LJmLkrAVOpzOpZpY71yZciCd1TYlZWcX63CtNAvFvDI=) 8: JvSklV-wlWBMdiMFZHYwnOO4qno.roa (hash: 2Y5pgGlMimFGDoHDIk55HXcJoD340d10aMUaMx1CDGE=) 9: Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa (hash: ujg1A0vQ9FG1rTPZa8Vj4tuAeoDxeA7TxCNsFbsOZaw=) 10: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=) 11: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (hash: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=) 12: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=) 13: c-uurSvFwdZ4HnQ-2FusksHz4JY.roa (hash: L6sexLXbR65THJCvf0Zc/VUy29DDIcDYXnW872IpKPc=) 14: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=) 15: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: 9dwTNEqikoYR1d1V3lGRUU7/7mygk31O2vnbmsFRti8=) 16: sVnkdz-If3BToP_lR8Kbr7aviEw.roa (hash: Rccu1mXIlX1/SPnYu01bLRxxpECZ4YTVP8mo65xnQx0=) 17: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:22:6c:76:fc:bd:17:30:ca:d0:3f:db:6f:5c:12:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: May 12 17:00:55 2026 GMT Not After : May 13 17:00:55 2026 GMT Subject: CN=6ca7d05323632ea06c9fc35a0e53a8d7b2730b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:fe:ca:5e:dd:b6:6e:df:c2:f3:5b:86:01: ca:c9:e0:f7:b9:f7:ab:70:79:fc:39:6c:65:f6:1d: 67:32:3e:82:a1:fd:7f:fa:5a:74:a9:0b:eb:d2:89: f4:b5:71:27:da:dd:d6:af:e5:72:ce:c9:c1:cc:c7: 16:de:65:73:8e:81:50:76:8e:80:b8:8f:02:4b:ca: 55:22:ac:11:aa:d0:6b:ee:b0:8f:88:6d:58:a9:06: 37:73:8a:26:a6:88:3b:4b:89:66:8d:a3:47:c9:52: 76:aa:83:7d:a9:85:8d:d9:bf:23:8a:b2:17:9d:20: de:71:1f:0b:94:0d:23:09:f4:9a:68:b7:3d:fe:8c: 99:a2:5b:68:8d:48:d8:c1:7f:76:c8:8d:5d:f6:c5: 12:24:60:e8:bb:9b:ce:9c:c5:12:35:99:dd:08:55: d6:de:16:5d:ba:92:ec:f8:47:87:ce:66:03:b6:63: 0b:1b:60:3e:9d:85:9f:b7:84:86:0c:b1:d9:6a:a4: 06:81:73:5c:18:a8:5b:c0:89:a4:be:b3:07:9f:8c: 7b:08:45:d5:34:20:74:3c:8c:bf:f2:53:3a:75:69: 5c:71:92:8a:40:01:7c:ff:6c:1d:dd:94:6e:4f:8d: d5:49:09:2c:75:62:83:1b:a2:3b:3a:b1:5d:07:a8: 44:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A7:D0:53:23:63:2E:A0:6C:9F:C3:5A:0E:53:A8:D7:B2:73:0B:9D X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:c3:e1:8b:25:ef:b2:99:83:8d:aa:0b:b3:57:2a:65:2b:25: 2d:b3:19:78:cd:30:10:e0:9b:1a:79:57:9c:4a:19:ab:7d:47: c5:bc:bc:ed:50:cc:6a:07:52:70:8f:d2:ec:cb:53:b9:fe:e1: 53:f6:c0:42:44:f0:fe:d2:7a:ec:1a:3a:3b:07:e1:d5:0c:8a: 5e:01:83:a2:bf:ec:be:00:77:06:6e:b8:45:c5:ae:eb:92:0a: 62:1c:e6:83:72:bd:67:1f:21:d6:7a:c7:e8:3e:4b:e2:8e:8c: 6c:28:a2:0c:9c:8f:4d:f5:ea:51:d6:92:61:72:d7:42:4c:f3: 39:b7:70:b5:4a:08:38:b7:9b:15:c1:6b:d3:a0:33:88:20:c0: 20:74:d4:83:65:87:b3:9b:de:c1:f7:09:32:4b:3d:3f:06:38: fb:73:53:8b:38:38:10:46:76:04:58:66:44:69:9d:1d:ed:49: 44:85:1b:f3:1f:5f:72:45:3d:8c:e3:d9:ff:dd:67:38:7f:9b: 93:af:bf:7e:53:d2:06:5b:f1:9a:c2:22:c4:0f:61:3c:a7:f4: c6:e6:57:6a:fd:9c:2a:a7:c7:75:39:97:b5:32:f8:72:1e:23: b6:c2:a7:28:ac:53:f3:59:99:1d:8f:c9:56:2a:b3:17:38:19: d2:5f:80:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dImx2/L0XMMrQP9tvXBLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwNTEyMTcwMDU1WhcNMjYwNTEzMTcwMDU1WjAzMTEwLwYDVQQD Eyg2Y2E3ZDA1MzIzNjMyZWEwNmM5ZmMzNWEwZTUzYThkN2IyNzMwYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptv+yl7dtm7fwvNbhgHKyeD3ufer cHn8OWxl9h1nMj6Cof1/+lp0qQvr0on0tXEn2t3Wr+VyzsnBzMcW3mVzjoFQdo6A uI8CS8pVIqwRqtBr7rCPiG1YqQY3c4ompog7S4lmjaNHyVJ2qoN9qYWN2b8jirIX nSDecR8LlA0jCfSaaLc9/oyZoltojUjYwX92yI1d9sUSJGDou5vOnMUSNZndCFXW 3hZdupLs+EeHzmYDtmMLG2A+nYWft4SGDLHZaqQGgXNcGKhbwImkvrMHn4x7CEXV NCB0PIy/8lM6dWlccZKKQAF8/2wd3ZRuT43VSQksdWKDG6I7OrFdB6hEywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyn0FMjYy6gbJ/DWg5TqNeycwudMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2sPhiyXv spmDjaoLs1cqZSslLbMZeM0wEOCbGnlXnEoZq31Hxby87VDMagdScI/S7MtTuf7h U/bAQkTw/tJ67Bo6Owfh1QyKXgGDor/svgB3Bm64RcWu65IKYhzmg3K9Zx8h1nrH 6D5L4o6MbCiiDJyPTfXqUdaSYXLXQkzzObdwtUoIOLebFcFr06AziCDAIHTUg2WH s5vewfcJMks9PwY4+3NTizg4EEZ2BFhmRGmdHe1JRIUb8x9fckU9jOPZ/91nOH+b k6+/flPSBlvxmsIixA9hPKf0xuZXav2cKqfHdTmXtTL4ch4jtsKnKKxT81mZHY/J ViqzFzgZ0l+A1A== -----END CERTIFICATE-----Generated at Tue May 12 21:59:05 2026 by rpki-client