$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: rHwlweqSzH1RbmweivFLL3D+jdgDlgxuKzGQcIPVgLQ= Subject key identifier: D3:50:35:AA:37:D8:B7:6F:02:BB:D2:CD:BB:3C:E5:DC:1E:18:3D:06 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019D2960BBF065CCE4B99829E36B19126E2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 188C Signing time: Thu 26 Mar 2026 09:01:38 +0000 Manifest this update: Thu 26 Mar 2026 09:01:38 +0000 Manifest next update: Fri 27 Mar 2026 09:01:38 +0000 Files and hashes: 1: 1WyX2wYZfSpfBSYJmVIkxnQu2wQ.roa (hash: HByWovJax8W7lyVW8tq54HBM8ZSxxFTqPknO3ul1ROw=) 2: 2CXydi7pS_cJcMpLbvELMfs4pr4.roa (hash: 4VhEMr7PE71mfWduL3bPnzBAu34zlbw2TZ44djrJbfs=) 3: ABESchGm3xAWCWATli7x4kGiTzw.roa (hash: AnU+yC61NkHACr9HWnVDLRjrcdrvaYYu39Z2t2XH2V8=) 4: AkX-mzKyW-zWL7niXL60Uuhd2-M.roa (hash: KT91YU3baNR7x3ucuvqSZ47bi2WtNK8I/Rkt9bmg+ew=) 5: IwsvS8RMbeaKnb6W0isgZ_jGVmw.roa (hash: 4c2RJvFORctjrcpJUYKuJxaYNELJKpkNVKrS5LH92qg=) 6: J99XeamfX85WdvVj9bf7jMIVc1M.roa (hash: mqf7/m5EBvBpIA8HdJaRPy8S8x76AjMtaSPox8GG7EU=) 7: VOtCH4o4J2I_5xCMQITnNsVrQfM.roa (hash: lN9s8lkEygb8GJjfZSSBzQIfuy7TwscZaveIQRwQT+M=) 8: VsVyNiSsXQIos_8DFMvFrVCvPpA.roa (hash: R0tV98ZO0gRaUtsVcVg2fiIoo3NKUpn02E2MWrZq94I=) 9: _LeL1BNmnES7Us_tgk-2zM9WYz4.roa (hash: 6CIKHs+5sFlyV+xFBJTDb1/TPrK1K1Sk3+HBhp50WvE=) 10: aumQ2rFvvPhxeJtuueKJVvufvQo.roa (hash: ZFlq8TIHB2weJNR+r1TYQoztERUk3FxSRK57UxVkfCM=) 11: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: xXRAUwTi8Jl4TR1PIc6sbIntvSHdoJQzJgjjd7WAbhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:60:bb:f0:65:cc:e4:b9:98:29:e3:6b:19:12:6e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Mar 26 09:01:38 2026 GMT Not After : Mar 27 09:01:38 2026 GMT Subject: CN=d35035aa37d8b76f02bbd2cdbb3ce5dc1e183d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:29:da:33:01:fe:57:af:63:f0:6b:c5:93:1a: 17:6c:a5:4b:a0:56:e6:83:4a:da:d8:77:f2:f4:5c: 42:34:85:0a:aa:69:a0:7c:65:08:af:ad:63:1c:46: fd:e3:51:84:a0:0f:bc:26:e8:ca:8d:b6:69:59:f0: 4f:ed:d7:01:58:e6:a8:6d:c0:6c:26:49:6e:53:bb: 03:9c:77:0d:fb:89:b4:fb:d6:75:a1:de:36:31:e7: 2e:83:81:f7:50:82:c5:d2:f7:1e:e7:2b:fb:32:da: bf:56:51:d9:99:19:6c:8b:3a:96:7b:37:2a:23:d2: 1b:39:d1:c1:33:93:7b:d5:c2:2c:47:57:ad:d4:9e: 3c:5b:7b:25:09:7f:ed:b5:fc:b2:65:24:cf:02:29: 77:ce:80:86:89:02:e8:11:8c:f0:83:c2:45:e2:f8: 76:25:2a:a1:08:3b:76:1c:7c:07:0b:a9:5e:57:dc: 90:d3:94:ba:4b:45:02:22:76:d6:75:74:3a:b4:6b: c2:04:7a:91:a2:ca:0f:5b:b4:0d:5c:a5:0b:15:17: 88:a7:4c:c1:9f:62:26:07:4b:93:64:52:d5:84:32: 30:ea:72:ec:40:d0:32:24:b2:cb:a1:e0:97:90:84: 79:80:75:97:54:46:0a:eb:c1:50:83:2a:87:7f:39: a0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:50:35:AA:37:D8:B7:6F:02:BB:D2:CD:BB:3C:E5:DC:1E:18:3D:06 X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:62:1f:7e:34:d6:a7:56:28:0e:9d:79:74:c4:2e:a5:70:a0: 29:6c:71:d9:d0:05:29:99:58:fa:9f:a6:7f:51:a3:00:2a:06: 3e:cf:7e:54:73:17:e5:c8:9b:0e:49:b5:29:b7:62:f8:a2:f9: cd:20:f8:40:23:14:84:ca:1f:12:f4:9c:53:e2:6d:ee:de:45: 45:46:6d:00:e3:95:7e:02:50:b6:99:ea:aa:85:0c:cd:ec:e6: b9:56:20:7e:d9:2a:f7:62:e9:20:a0:6d:32:72:76:1b:40:0d: 92:72:3e:ff:fb:8f:e3:e8:9b:21:37:83:92:f7:6f:4b:98:9c: e2:75:65:5a:32:c6:0a:96:97:da:05:63:00:52:62:ec:32:01: 49:8d:74:26:14:ef:ff:12:e2:26:cc:30:d6:6a:3f:cd:26:f9: 4a:d0:0a:08:d9:c3:61:6c:ed:4f:ca:97:98:a9:5f:5c:5a:88: f1:43:96:f3:24:e6:4e:d6:ba:b7:34:33:23:8b:ac:a4:5e:c9: 23:41:c9:ba:1b:b5:5e:bc:3a:3b:7f:18:3d:54:26:03:57:ec: 39:8f:00:df:67:94:c9:e3:78:2d:ed:53:92:5e:f9:74:aa:95: 56:ba:14:6d:c9:05:ea:ae:56:8e:c0:82:d2:aa:8e:a7:a8:41: fa:1f:40:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pYLvwZczkuZgp42sZEm4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYwMzI2MDkwMTM4WhcNMjYwMzI3MDkwMTM4WjAzMTEwLwYDVQQD EyhkMzUwMzVhYTM3ZDhiNzZmMDJiYmQyY2RiYjNjZTVkYzFlMTgzZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoynaMwH+V69j8GvFkxoXbKVLoFbm g0ra2Hfy9FxCNIUKqmmgfGUIr61jHEb941GEoA+8JujKjbZpWfBP7dcBWOaobcBs JkluU7sDnHcN+4m0+9Z1od42Mecug4H3UILF0vce5yv7Mtq/VlHZmRlsizqWezcq I9IbOdHBM5N71cIsR1et1J48W3slCX/ttfyyZSTPAil3zoCGiQLoEYzwg8JF4vh2 JSqhCDt2HHwHC6leV9yQ05S6S0UCInbWdXQ6tGvCBHqRosoPW7QNXKULFReIp0zB n2ImB0uTZFLVhDIw6nLsQNAyJLLLoeCXkIR5gHWXVEYK68FQgyqHfzmgiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNQNao32LdvArvSzbs85dweGD0GMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2IffjTW p1YoDp15dMQupXCgKWxx2dAFKZlY+p+mf1GjACoGPs9+VHMX5cibDkm1Kbdi+KL5 zSD4QCMUhMofEvScU+Jt7t5FRUZtAOOVfgJQtpnqqoUMzezmuVYgftkq92LpIKBt MnJ2G0ANknI+//uP4+ibITeDkvdvS5ic4nVlWjLGCpaX2gVjAFJi7DIBSY10JhTv /xLiJsww1mo/zSb5StAKCNnDYWztT8qXmKlfXFqI8UOW8yTmTta6tzQzI4uspF7J I0HJuhu1Xrw6O38YPVQmA1fsOY8A32eUyeN4Le1Tkl75dKqVVroUbckF6q5WjsCC 0qqOp6hB+h9Apw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:01:03 2026 by rpki-client