$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: kl9EvBrB0TPcO3vhKJpN1DluPQ5H9I8O/xKWo+YJf9Y= Subject key identifier: 96:33:20:94:16:2D:BF:AF:EB:A3:6E:2A:6C:DB:17:D0:54:92:0B:08 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 01A0CFA4B552108E2A0F5C92BB29D42C5995 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 18AC Signing time: Wed 23 Sep 2026 19:01:12 +0000 Manifest this update: Wed 23 Sep 2026 19:01:12 +0000 Manifest next update: Thu 24 Sep 2026 19:01:12 +0000 Files and hashes: 1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=) 2: 9D8zRooL7GIRssyQDERj2pjLTEg.roa (hash: ou/519X40RGEgsg6xFxzjP5mJ508RHz7Yy+VOx34VIY=) 3: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=) 4: FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa (hash: tg987J0i644Z+rDUbSmguymeU+9jrpbhpfN7TJ7twhQ=) 5: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=) 6: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: 2LykxtVfeSfHxaPcAerQg/c2aLiyxDNgg9KKdXPYGDA=) 7: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=) 8: M4yvFOCrNQYrMEvHUynTCH1sRYg.roa (hash: AUJ02SjlaCnhsHTiNOzqXyVE53GehhBlvRs76nGe1NA=) 9: Nekk3PxF8fO-rhzaegHvfM_t41w.roa (hash: A1QX31c5i0IexwLkYJODSCPQogKNlG8IRZDo0disb/U=) 10: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=) 11: ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa (hash: rjgdc1W6vPpG3uPNkDBN/qtt12z0N51cOglFEFDyoWY=) 12: Pi6uT0MDxxHleo3_yZKxdHy8ou0.roa (hash: 5x3VDZkeU6jGG2nc7DGajOTETO/SJdxa0o8peRVLzVg=) 13: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=) 14: StqYfznXE-QPiA-TOmLGA4FrAS8.roa (hash: h5TKEuBn2q4c0zbHABA+TvU5nsvIwHYwDNRGaJto+e8=) 15: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=) 16: WBw7gw6osmHy0IqvZHLM8HMfKls.roa (hash: 9skt4Vx5fYnNFz8d3wonj2F4Wujetk0O7qCLQaqmEmE=) 17: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=) 18: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=) 19: aOll2yIzGlTioL_5KcotM1hRg6I.roa (hash: WjZYWFwSah/T1ngfGN/4LLm1yrnATZDAMq581306uVg=) 20: aa15nZfX27ubGWEeb2X5ayBEBXE.roa (hash: w+5MiVWAe1cAGq7vjX3zG5riF68ch5od/IXze+J4XLM=) 21: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=) 22: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=) 23: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=) 24: jIiWE2zJZX5pFl0vy1PL64bE8T0.roa (hash: 2YBMClvraF+AFYCDBE549nteIWo0rkRBKQCVhkycQQk=) 25: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=) 26: lGKAv74gYmGH37A1DRbh0Rl9bx4.roa (hash: E14cPJbJ1TEA8BquVRSARSC5FdHT+0thzYkCOpdQdEk=) 27: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=) 28: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=) 29: oKhpIH_BWd5Noqx6eV2DySEcGb0.roa (hash: N7FlWOqyJoex6ZmwsucsTTYLs5nNX4sZKRbn/6c/tug=) 30: pbnN9srlyaf0BgeZnbG7vJQQcDg.roa (hash: W564THz4iqZL14hlu/uRhAEJ9fbzZM3yuaKczKwNTLE=) 31: quUFSSqLC17PWuHw4n9doB2Ldgw.roa (hash: c+mlnrjBfuvxfpOQWD6Qk8yh8Z9jsfAhLNTYgM4TAic=) 32: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=) 33: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=) 34: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=) 35: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=) 36: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=) 37: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=) 38: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:a4:b5:52:10:8e:2a:0f:5c:92:bb:29:d4:2c:59:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Sep 23 19:01:12 2026 GMT Not After : Sep 24 19:01:12 2026 GMT Subject: CN=96332094162dbfafeba36e2a6cdb17d054920b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:45:63:75:18:88:3e:79:6b:1a:c4:3f:e6: 27:1a:57:3f:ed:24:ac:ce:a7:40:3d:b1:10:42:5b: 0f:0c:8b:ad:51:99:86:48:da:28:3a:79:3f:8d:49: b3:8d:e6:2d:cf:19:3d:c2:50:f7:74:62:8b:e9:bf: 6f:cc:8d:ea:b0:05:e4:e9:1f:1f:cb:47:0a:54:40: 31:d9:1a:38:5d:96:9c:4e:c6:34:af:07:c5:ea:e8: 2e:10:ff:de:23:66:fe:d6:b0:ac:e2:fc:38:f8:50: 02:1d:ff:e4:2d:d2:d9:f8:15:af:0e:dc:9b:a6:b4: 4b:ad:f8:ca:72:08:bd:51:96:5c:1b:d7:b0:12:e8: 4f:bc:ca:4e:5b:74:6a:d5:f6:8a:28:c6:d9:91:f5: a0:a8:c9:38:ad:62:96:66:a2:9c:ac:db:27:43:58: 8f:91:f3:fd:49:58:b2:be:8f:74:2b:04:cb:9a:ab: 2b:e3:a3:d8:48:8a:19:58:9d:63:b6:0a:20:70:db: 1e:b9:ab:1a:71:9c:4b:c9:07:a1:3f:7e:ce:16:30: b2:7a:5f:fa:a6:5b:34:30:87:b0:44:52:fc:9c:03: 67:c6:60:ff:e5:24:8a:3c:73:c3:36:95:79:d0:8b: 79:1c:2d:2b:7a:e0:8f:28:91:8a:24:07:85:6c:92: 21:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:33:20:94:16:2D:BF:AF:EB:A3:6E:2A:6C:DB:17:D0:54:92:0B:08 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ba:e4:b0:14:75:f8:0f:37:d0:e5:86:01:a8:0d:a1:7e:a6: 95:6a:d3:b2:06:a6:d7:00:57:fe:72:27:d1:85:aa:fc:f5:22: 82:a8:14:f7:7a:52:2d:a4:51:24:f8:a8:84:26:87:50:8b:0c: ad:b2:2d:ba:ef:58:96:33:6b:bb:27:ed:59:a7:f1:eb:df:30: 22:21:d8:cb:ee:be:14:be:79:73:fe:ad:c6:c1:9b:88:ad:3c: b0:cb:33:0b:58:41:24:cd:c9:7e:b9:82:f4:ca:90:d8:15:e3: d5:56:32:a6:eb:d1:1a:77:1f:f1:cf:0e:55:98:4b:d5:26:8f: 15:e1:6c:59:db:df:e7:aa:d1:db:34:23:60:0b:b9:8c:15:bb: e7:a0:3e:a5:86:6c:82:54:a7:57:41:95:0f:03:09:64:ac:56: 1e:d8:e4:74:9c:b1:3f:97:0e:61:d1:3d:e6:16:bf:9e:57:b5: 92:e4:42:23:d8:9f:91:a6:7b:8c:1c:e0:0d:90:59:bc:11:7e: 14:ad:74:e8:5d:2c:f3:bd:bf:eb:61:c0:61:90:64:3a:c3:5c: d4:07:a1:0f:c6:dd:dd:3f:7c:f7:3e:5f:6b:aa:1c:5b:69:a9: ad:86:c2:1a:ac:de:9d:39:44:cd:38:cc:08:c1:8c:1a:c3:5f: 75:c1:12:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDPpLVSEI4qD1ySuynULFmVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwOTIzMTkwMTEyWhcNMjYwOTI0MTkwMTEyWjAzMTEwLwYDVQQD Eyg5NjMzMjA5NDE2MmRiZmFmZWJhMzZlMmE2Y2RiMTdkMDU0OTIwYjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AhFY3UYiD55axrEP+YnGlc/7SSs zqdAPbEQQlsPDIutUZmGSNooOnk/jUmzjeYtzxk9wlD3dGKL6b9vzI3qsAXk6R8f y0cKVEAx2Ro4XZacTsY0rwfF6uguEP/eI2b+1rCs4vw4+FACHf/kLdLZ+BWvDtyb prRLrfjKcgi9UZZcG9ewEuhPvMpOW3Rq1faKKMbZkfWgqMk4rWKWZqKcrNsnQ1iP kfP9SViyvo90KwTLmqsr46PYSIoZWJ1jtgogcNseuasacZxLyQehP37OFjCyel/6 pls0MIewRFL8nANnxmD/5SSKPHPDNpV50It5HC0reuCPKJGKJAeFbJIhgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYzIJQWLb+v66NuKmzbF9BUkgsIMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLrksBR1 +A830OWGAagNoX6mlWrTsgam1wBX/nIn0YWq/PUigqgU93pSLaRRJPiohCaHUIsM rbItuu9YljNruyftWafx698wIiHYy+6+FL55c/6txsGbiK08sMszC1hBJM3JfrmC 9MqQ2BXj1VYypuvRGncf8c8OVZhL1SaPFeFsWdvf56rR2zQjYAu5jBW756A+pYZs glSnV0GVDwMJZKxWHtjkdJyxP5cOYdE95ha/nle1kuRCI9ifkaZ7jBzgDZBZvBF+ FK106F0s872/62HAYZBkOsNc1AehD8bd3T989z5fa6ocW2mprYbCGqzenTlEzTjM CMGMGsNfdcES1A== -----END CERTIFICATE-----Generated at Thu Sep 24 01:29:31 2026 by rpki-client