$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: xxgBMaYrwhVadqRQlxvmDVmhj8ieJbv4s/nWQke2uOE= Subject key identifier: 05:EB:A5:F1:00:2C:25:C1:E5:C5:6B:D9:15:D3:B2:01:76:67:18:F7 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019D273AD2434E81364DBF9BBC2A71071EC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1898 Signing time: Wed 25 Mar 2026 23:00:59 +0000 Manifest this update: Wed 25 Mar 2026 23:00:59 +0000 Manifest next update: Thu 26 Mar 2026 23:00:59 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: 9vuOuOvj62P021fXQQxf0hIL-7Y.asa (hash: IV14GyGa+T6PyA00vxABTsOZmDpbofMON8dQI+vejQo=) 4: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 5: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: tw4o0JgsIkQu828g6n5IZblLpRDRACJclPYRhDRmYC0=) 6: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 7: WimZdTjw5Lm8MtebopYruWKL5rI.roa (hash: ZsNGt4iJIvs0TYMA8I/lIAfczIzjQsE/8A1JQl2JcVU=) 8: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 9: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 10: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 11: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 12: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 13: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:3a:d2:43:4e:81:36:4d:bf:9b:bc:2a:71:07:1e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Mar 25 23:00:59 2026 GMT Not After : Mar 26 23:00:59 2026 GMT Subject: CN=05eba5f1002c25c1e5c56bd915d3b201766718f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:b5:6a:73:1a:1b:5f:aa:00:6e:84:67:f6: 67:fc:94:a5:6c:20:6d:81:2f:73:12:40:a9:4e:74: f9:dd:32:9d:88:d4:36:50:53:0d:69:19:70:e7:b1: 39:ea:b4:ba:e8:df:ac:75:a3:6d:b0:ad:d5:18:91: e8:78:45:d9:1e:1c:1f:44:ee:5c:c0:f9:bf:38:10: 84:fa:70:44:03:27:8e:69:67:b5:b0:41:7e:cc:ff: a1:9b:a5:bb:51:a4:31:cb:59:3f:13:6d:f9:da:10: 51:fc:cd:a2:e0:b8:fe:bf:8e:c1:da:c4:17:c5:30: 20:a3:bf:6b:2c:3e:f9:9b:7d:7a:56:50:93:1f:d5: f8:99:92:e7:5b:c6:bb:6a:fd:56:10:c0:04:22:45: 92:58:3e:9c:ba:d6:ca:24:df:b1:b9:66:ec:68:d6: f6:e5:94:8f:81:44:af:0c:37:0e:23:99:45:39:42: 26:4e:c7:17:d6:f8:49:d1:7a:fc:46:a0:29:85:64: 92:b7:d6:9e:04:2e:d6:7d:79:94:48:fa:3d:3b:0a: 95:27:86:31:f2:27:57:dc:c7:62:5e:9e:a9:0a:60: 30:b8:65:0e:e1:12:dc:ec:fc:f8:22:e4:09:74:3a: a5:37:1e:c8:a8:f5:41:76:b6:2f:8e:fe:4f:c2:56: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EB:A5:F1:00:2C:25:C1:E5:C5:6B:D9:15:D3:B2:01:76:67:18:F7 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:60:14:53:93:3c:ce:03:27:de:12:ad:82:dc:7d:3c:3a:10: de:ef:03:5b:c3:a5:c1:b9:bc:ea:5d:a9:b7:fa:ed:7c:fe:bd: 34:bb:5e:c5:75:14:5d:cc:d3:78:fe:37:14:42:41:0d:a4:1b: 2a:7b:8e:41:39:e4:a8:1e:7b:03:2a:f6:b8:07:8c:b3:d4:0b: 68:3b:d8:fe:bf:9c:9a:47:95:d5:15:5e:28:7b:ef:fd:1e:57: a6:78:f8:27:cb:af:a5:68:c9:99:40:35:38:c6:31:4d:2c:ff: 9e:4c:a7:4d:09:f0:2a:3e:9d:d3:09:33:bd:82:2e:ce:f6:a6: df:32:99:b9:7a:3f:d3:4e:55:ac:5a:87:2a:e2:d0:29:35:96: f7:1c:fc:00:4c:be:3b:5e:7b:6a:36:7f:3f:d5:f1:19:85:2e: 8a:37:92:6b:01:78:d3:b4:02:08:dd:ef:c7:7a:7d:b6:a2:89: 4f:e0:74:70:8d:5d:0e:71:d2:62:62:1b:e6:f8:9e:64:49:15: cc:17:88:9f:8c:27:5e:13:5c:41:a4:56:c7:fa:b7:1e:b2:b2: b9:2a:11:d0:7d:8a:a8:b2:a5:43:a5:fa:2b:04:f3:27:18:72: 48:17:25:42:13:a0:fa:a8:12:5b:57:dd:34:60:0a:dc:df:66: d9:13:0b:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nOtJDToE2Tb+bvCpxBx7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwMzI1MjMwMDU5WhcNMjYwMzI2MjMwMDU5WjAzMTEwLwYDVQQD EygwNWViYTVmMTAwMmMyNWMxZTVjNTZiZDkxNWQzYjIwMTc2NjcxOGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1u1anMaG1+qAG6EZ/Zn/JSlbCBt gS9zEkCpTnT53TKdiNQ2UFMNaRlw57E56rS66N+sdaNtsK3VGJHoeEXZHhwfRO5c wPm/OBCE+nBEAyeOaWe1sEF+zP+hm6W7UaQxy1k/E2352hBR/M2i4Lj+v47B2sQX xTAgo79rLD75m316VlCTH9X4mZLnW8a7av1WEMAEIkWSWD6cutbKJN+xuWbsaNb2 5ZSPgUSvDDcOI5lFOUImTscX1vhJ0Xr8RqAphWSSt9aeBC7WfXmUSPo9OwqVJ4Yx 8idX3MdiXp6pCmAwuGUO4RLc7Pz4IuQJdDqlNx7IqPVBdrYvjv5PwlawxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXrpfEALCXB5cVr2RXTsgF2Zxj3MB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWAUU5M8 zgMn3hKtgtx9PDoQ3u8DW8Olwbm86l2pt/rtfP69NLtexXUUXczTeP43FEJBDaQb KnuOQTnkqB57Ayr2uAeMs9QLaDvY/r+cmkeV1RVeKHvv/R5Xpnj4J8uvpWjJmUA1 OMYxTSz/nkynTQnwKj6d0wkzvYIuzvam3zKZuXo/005VrFqHKuLQKTWW9xz8AEy+ O157ajZ/P9XxGYUuijeSawF407QCCN3vx3p9tqKJT+B0cI1dDnHSYmIb5vieZEkV zBeIn4wnXhNcQaRWx/q3HrKyuSoR0H2KqLKlQ6X6KwTzJxhySBclQhOg+qgSW1fd NGAK3N9m2RML+w== -----END CERTIFICATE-----Generated at Thu Mar 26 02:14:46 2026 by rpki-client