$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json) Hash identifier: qLZ/ZwQiBJwQ3B/EgcjtdEfb6ZILEqbAZjeZEzxOdE8= Subject key identifier: 7E:F1:52:55:92:1D:40:8A:7C:A3:80:AC:49:8C:81:08:88:FB:43:30 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019D281704237876E939F41AFFC250E14697 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft Manifest number: 15F2 Signing time: Thu 26 Mar 2026 03:01:30 +0000 Manifest this update: Thu 26 Mar 2026 03:01:30 +0000 Manifest next update: Fri 27 Mar 2026 03:01:30 +0000 Files and hashes: 1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=) 2: A8pB-9bz15cQYivfjGrzOwMc7LY.roa (hash: EeHyMuPO8kK3PqKlWgKjT50oovE1gmYEWW0HAbBX2NI=) 3: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=) 4: IoVIx2I3x-PhEDaNiA3QsmgYRfU.roa (hash: LJmLkrAVOpzOpZpY71yZciCd1TYlZWcX63CtNAvFvDI=) 5: K_nPRyyftR4ZBlRYe5o2Y5tUvJI.roa (hash: q4zqaL21M35s9vhO9oi9xK7MF0lYvuEB0k/Aafia0Vg=) 6: Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa (hash: ujg1A0vQ9FG1rTPZa8Vj4tuAeoDxeA7TxCNsFbsOZaw=) 7: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=) 8: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (hash: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=) 9: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=) 10: b0ikFO_qS9n_MIPrxxc6L5fetdI.roa (hash: Iw0obDEuYCcKatWgGaJ1UaUj/yi9Stb3XdDj5CWjvRg=) 11: gJ8qTz8F8Bxee7YRY3fHs5lSfBE.roa (hash: ZSsM99NPJ9mDrPjXKAfCF2Vn2curJz1IzgR3LOEpDF4=) 12: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=) 13: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: 2AvHZxCC+GCEsqEbu28tp+d2WznJeWtXPC1pKNItMLE=) 14: sVnkdz-If3BToP_lR8Kbr7aviEw.roa (hash: Rccu1mXIlX1/SPnYu01bLRxxpECZ4YTVP8mo65xnQx0=) 15: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:17:04:23:78:76:e9:39:f4:1a:ff:c2:50:e1:46:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Mar 26 03:01:30 2026 GMT Not After : Mar 27 03:01:30 2026 GMT Subject: CN=7ef15255921d408a7ca380ac498c810888fb4330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c7:4d:29:3b:fc:fb:e5:e2:e9:2d:1d:15:eb: cb:e0:35:3c:df:c9:bf:d9:63:8d:ab:fc:f8:8b:03: 6a:f5:58:69:17:da:b3:81:bc:1e:b9:12:3f:b5:98: f3:15:68:b9:3e:94:94:f5:55:3f:e2:0a:36:dc:dc: 6e:fb:8a:3f:eb:8e:d2:db:15:61:a7:d1:4e:77:3c: 1a:3e:4a:cc:c3:ed:4e:e1:09:91:46:7b:cb:58:67: d9:10:9d:ca:a9:bc:74:da:d2:fa:9f:a0:b1:7f:53: a7:08:2e:d4:b3:db:95:a8:ca:8f:d6:5e:b3:00:96: c3:4b:af:a0:0f:f7:a7:ba:0b:c6:35:0e:db:a5:aa: 1b:01:9a:7c:28:ad:4b:0e:72:24:ba:e5:e0:08:f7: fc:04:74:04:4d:1d:d1:48:a1:8e:91:43:e1:39:37: 74:6c:56:f9:c8:95:19:70:8b:34:94:45:59:43:57: 15:ec:ac:70:7c:c1:46:1b:35:18:52:04:f1:e0:40: ac:60:c8:61:d3:a5:a9:24:45:e9:ca:98:da:07:68: ed:11:2d:f3:32:9f:ad:11:10:b6:8f:73:49:e5:92: 68:be:23:d0:6f:1e:0e:32:1b:9e:f6:a6:f4:f4:76: a3:4b:2e:9d:74:ca:8a:48:3d:1a:ec:5b:28:cc:ea: ba:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F1:52:55:92:1D:40:8A:7C:A3:80:AC:49:8C:81:08:88:FB:43:30 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:04:4a:83:e2:dc:f6:d3:38:48:b9:86:d2:d4:be:65:e6:58: 96:46:51:ac:bd:01:72:ca:1f:31:62:9d:e5:9a:7f:98:fd:9d: 9a:84:14:60:5a:74:b8:97:86:8f:1e:4c:37:a5:47:30:56:35: aa:60:ba:14:b3:48:79:d9:6d:c4:f7:4f:8f:c4:b1:4e:77:c0: e3:26:d0:31:59:54:0e:15:35:1b:3a:24:e0:d7:d4:2b:45:21: 65:c2:10:77:5b:fc:40:0b:1a:b9:12:4e:79:80:c2:23:59:7f: 87:2c:12:57:cf:59:72:2e:de:4f:38:23:84:9a:c4:55:d5:e4: 3b:f3:6f:21:e9:af:b8:3b:b5:74:d6:2f:8a:51:2f:85:6a:e9: 5a:de:cc:32:14:60:e8:1e:c0:75:3d:51:e0:27:7e:ef:5a:e9: 4b:21:51:21:54:d6:68:65:46:f7:ac:cd:6b:af:94:3f:4f:b9: 6d:b4:d7:a6:90:c5:d4:e8:53:87:ac:39:83:d2:bc:11:5c:28: de:a6:33:12:3e:25:f6:db:79:f7:94:c6:fb:f7:a4:9c:ed:ed: 88:19:76:59:2f:60:15:1b:e3:87:fd:cf:87:27:47:37:60:3e: 9c:e9:a3:07:70:1a:71:68:e9:17:e1:49:1c:69:dd:4a:20:4a: 85:45:84:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFwQjeHbpOfQa/8JQ4UaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwMzI2MDMwMTMwWhcNMjYwMzI3MDMwMTMwWjAzMTEwLwYDVQQD Eyg3ZWYxNTI1NTkyMWQ0MDhhN2NhMzgwYWM0OThjODEwODg4ZmI0MzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcdNKTv8++Xi6S0dFevL4DU838m/ 2WONq/z4iwNq9VhpF9qzgbweuRI/tZjzFWi5PpSU9VU/4go23Nxu+4o/647S2xVh p9FOdzwaPkrMw+1O4QmRRnvLWGfZEJ3Kqbx02tL6n6Cxf1OnCC7Us9uVqMqP1l6z AJbDS6+gD/enugvGNQ7bpaobAZp8KK1LDnIkuuXgCPf8BHQETR3RSKGOkUPhOTd0 bFb5yJUZcIs0lEVZQ1cV7KxwfMFGGzUYUgTx4ECsYMhh06WpJEXpypjaB2jtES3z Mp+tERC2j3NJ5ZJoviPQbx4OMhue9qb09HajSy6ddMqKSD0a7FsozOq6rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7xUlWSHUCKfKOArEmMgQiI+0MwMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwRKg+Lc 9tM4SLmG0tS+ZeZYlkZRrL0BcsofMWKd5Zp/mP2dmoQUYFp0uJeGjx5MN6VHMFY1 qmC6FLNIedltxPdPj8SxTnfA4ybQMVlUDhU1Gzok4NfUK0UhZcIQd1v8QAsauRJO eYDCI1l/hywSV89Zci7eTzgjhJrEVdXkO/NvIemvuDu1dNYvilEvhWrpWt7MMhRg 6B7AdT1R4Cd+71rpSyFRIVTWaGVG96zNa6+UP0+5bbTXppDF1OhTh6w5g9K8EVwo 3qYzEj4l9tt595TG+/eknO3tiBl2WS9gFRvjh/3PhydHN2A+nOmjB3AacWjpF+FJ HGndSiBKhUWExw== -----END CERTIFICATE-----Generated at Thu Mar 26 05:54:28 2026 by rpki-client