$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: Mc3BGCafzbm8IWu53sPQoX6M8XlGVMHA4wtTqjzrB58= Subject key identifier: C3:75:81:BE:C9:A3:0E:1B:21:71:32:C3:15:F9:95:FA:15:1D:FF:A0 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019D254C6FB08C3C535AB405B3FBB00B4C8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1897 Signing time: Wed 25 Mar 2026 14:00:59 +0000 Manifest this update: Wed 25 Mar 2026 14:00:59 +0000 Manifest next update: Thu 26 Mar 2026 14:00:59 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: 9vuOuOvj62P021fXQQxf0hIL-7Y.asa (hash: IV14GyGa+T6PyA00vxABTsOZmDpbofMON8dQI+vejQo=) 4: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 5: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: 1WDabit/t16sAzH/i3qywo5wWnFObt+oCV17wJhKJko=) 6: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 7: WimZdTjw5Lm8MtebopYruWKL5rI.roa (hash: ZsNGt4iJIvs0TYMA8I/lIAfczIzjQsE/8A1JQl2JcVU=) 8: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 9: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 10: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 11: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 12: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 13: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:4c:6f:b0:8c:3c:53:5a:b4:05:b3:fb:b0:0b:4c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Mar 25 14:00:59 2026 GMT Not After : Mar 26 14:00:59 2026 GMT Subject: CN=c37581bec9a30e1b217132c315f995fa151dffa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:af:88:45:48:f6:9e:28:d1:6e:02:93:7a:22: 6e:4d:a8:14:ea:c0:aa:61:73:97:d8:43:b0:54:32: 89:d5:be:02:e3:f7:59:f7:9c:b2:55:e0:f4:0a:e7: fd:85:50:6e:f3:1f:78:f4:97:42:9c:4d:6a:3a:90: 58:dc:62:2e:9d:cf:84:02:e3:b3:49:b0:45:55:19: 5b:cc:e5:6a:aa:49:57:98:44:a9:1e:d9:42:f0:d0: 93:5f:da:88:15:5a:35:e0:4c:55:95:a5:3d:58:f3: 6c:c9:21:41:66:57:a3:f7:31:f9:cc:66:34:31:59: 36:e6:10:de:f2:ba:0c:6e:81:aa:a4:0f:ca:6c:79: 97:07:36:3a:eb:dd:f7:3b:2d:00:9a:ba:c6:cd:2b: b5:60:e7:79:94:12:98:56:60:f0:44:ff:55:f5:34: 67:a6:39:72:2c:ef:30:41:05:9f:39:33:9d:11:40: 83:17:6e:6f:cb:b4:0c:70:21:89:14:35:61:0c:29: 5b:46:a9:ce:99:21:f0:cb:33:6c:5c:84:63:8f:10: eb:9f:13:58:cf:03:ab:b1:29:9a:39:6e:3d:f5:98: 6e:bc:75:d4:fb:80:1f:c2:57:20:a6:f4:05:40:db: 45:6d:2c:e1:f8:e4:e7:02:5c:61:8a:c5:42:80:84: 4e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:75:81:BE:C9:A3:0E:1B:21:71:32:C3:15:F9:95:FA:15:1D:FF:A0 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:99:fd:c2:18:c5:58:f1:5c:02:6b:6e:f8:71:c6:6a:72:18: a2:f5:93:02:1c:e5:83:f1:5b:ad:4b:d0:e1:b8:30:8d:1e:9b: 41:76:d2:42:e3:0b:c4:d4:f8:a8:45:f9:e1:8a:45:88:4c:c1: e1:55:f2:cf:ef:e1:18:72:5e:6c:5c:d7:a9:90:2a:4c:d3:3b: f9:63:7f:00:e2:a8:7b:83:92:54:d1:d8:4b:06:a4:de:b6:75: 91:66:77:a2:3b:69:f8:f5:7a:09:f2:99:9b:77:72:93:dd:57: 36:c0:b4:e6:5c:89:04:e2:d4:d6:69:a4:c6:25:3b:f1:55:cb: 1d:e5:15:4e:19:e5:e7:d4:83:87:9b:6d:48:8f:40:fc:8b:d2: fc:cf:23:33:93:89:50:7a:6e:16:37:37:63:b0:6d:c4:49:f0: 40:93:bc:11:38:f4:57:ce:2e:5d:ae:fb:d2:bf:ad:4c:66:4d: d9:bb:e4:ce:f9:49:bf:7d:62:99:04:3e:fb:a5:78:47:5a:48: e1:60:22:b1:30:14:6c:3c:d3:01:a5:c7:e7:4b:00:ad:ca:1a: 94:4c:40:70:db:13:33:f7:d0:03:0b:e9:00:73:f2:4b:d8:2c: 1b:00:8a:42:fc:98:a5:6a:68:af:5b:ab:c9:32:7c:72:00:bf: 8e:28:51:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0lTG+wjDxTWrQFs/uwC0yMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwMzI1MTQwMDU5WhcNMjYwMzI2MTQwMDU5WjAzMTEwLwYDVQQD EyhjMzc1ODFiZWM5YTMwZTFiMjE3MTMyYzMxNWY5OTVmYTE1MWRmZmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK+IRUj2nijRbgKTeiJuTagU6sCq YXOX2EOwVDKJ1b4C4/dZ95yyVeD0Cuf9hVBu8x949JdCnE1qOpBY3GIunc+EAuOz SbBFVRlbzOVqqklXmESpHtlC8NCTX9qIFVo14ExVlaU9WPNsySFBZlej9zH5zGY0 MVk25hDe8roMboGqpA/KbHmXBzY66933Oy0AmrrGzSu1YOd5lBKYVmDwRP9V9TRn pjlyLO8wQQWfOTOdEUCDF25vy7QMcCGJFDVhDClbRqnOmSHwyzNsXIRjjxDrnxNY zwOrsSmaOW499ZhuvHXU+4AfwlcgpvQFQNtFbSzh+OTnAlxhisVCgIROZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMN1gb7Jow4bIXEywxX5lfoVHf+gMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpn9whjF WPFcAmtu+HHGanIYovWTAhzlg/FbrUvQ4bgwjR6bQXbSQuMLxNT4qEX54YpFiEzB 4VXyz+/hGHJebFzXqZAqTNM7+WN/AOKoe4OSVNHYSwak3rZ1kWZ3ojtp+PV6CfKZ m3dyk91XNsC05lyJBOLU1mmkxiU78VXLHeUVThnl59SDh5ttSI9A/IvS/M8jM5OJ UHpuFjc3Y7BtxEnwQJO8ETj0V84uXa770r+tTGZN2bvkzvlJv31imQQ++6V4R1pI 4WAisTAUbDzTAaXH50sArcoalExAcNsTM/fQAwvpAHPyS9gsGwCKQvyYpWpor1ur yTJ8cgC/jihRiA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:25:04 2026 by rpki-client