$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: 9PumqqyBUtxWlU6iCcrR4afyKh0uOVjcSBwKavEOuDk= Subject key identifier: FF:EA:6E:94:3E:0E:69:B2:11:B2:7D:21:55:BD:AD:A9:82:E7:82:CE Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019E1E6C843F1E73B212E86E5DFC219BE903 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1919 Signing time: Tue 12 May 2026 23:01:28 +0000 Manifest this update: Tue 12 May 2026 23:01:28 +0000 Manifest next update: Wed 13 May 2026 23:01:28 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: 9vuOuOvj62P021fXQQxf0hIL-7Y.asa (hash: IV14GyGa+T6PyA00vxABTsOZmDpbofMON8dQI+vejQo=) 4: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 5: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: pU4xuNHYSAymiozpUJkrhe5y1QhfqVvurbPpXIJlskA=) 6: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 7: WimZdTjw5Lm8MtebopYruWKL5rI.roa (hash: ZsNGt4iJIvs0TYMA8I/lIAfczIzjQsE/8A1JQl2JcVU=) 8: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 9: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 10: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 11: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 12: iKMbSLMsYD3IPy4aFTgWFbR5-7Q.roa (hash: FLy0rWO0Tm6EmloSEokoF4mkm9Xo/LOqQZJUxQFOv+k=) 13: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 14: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:6c:84:3f:1e:73:b2:12:e8:6e:5d:fc:21:9b:e9:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: May 12 23:01:28 2026 GMT Not After : May 13 23:01:28 2026 GMT Subject: CN=ffea6e943e0e69b211b27d2155bdada982e782ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1a:14:59:63:3a:26:1a:c6:4f:79:f7:b7:bc: 8e:5f:d1:40:01:f0:77:2a:2b:ba:22:bc:a5:7a:8c: 50:65:7c:4a:09:af:b0:e4:d5:b8:a0:6a:99:ae:60: 31:9c:9a:38:45:6a:d5:ca:74:17:ba:4d:0b:fa:3f: 80:c2:05:47:d3:6b:98:fa:eb:4f:a0:ad:68:e4:7f: 75:a7:7f:5d:04:f7:49:37:ed:09:5f:66:2a:bc:94: 4d:b4:f5:5a:f3:c5:0f:a7:fc:e9:3e:23:2b:a8:2f: 95:d9:d9:83:57:19:8e:d5:3d:d9:25:32:62:86:ca: 7b:9b:81:98:be:b6:68:41:c2:e5:5f:fb:30:1e:fc: b2:95:f3:ce:fd:f2:a8:4f:c3:8c:05:37:71:6f:c0: 2b:9f:cf:aa:8a:c8:80:05:38:d8:c8:66:41:3b:2d: ff:0c:d5:48:0e:0e:d8:50:05:da:a3:a5:0e:a3:1f: 40:12:29:47:af:ba:90:a4:30:ae:21:86:d8:04:14: f9:f9:82:1f:60:b0:38:4e:3e:00:d6:d8:3f:b0:f3: 25:cd:9f:cc:b5:20:47:af:31:01:60:e6:7c:4d:e2: d4:bd:61:4e:1c:7c:c6:a7:ba:e0:a1:16:a8:c2:9c: a3:81:99:cb:fb:b0:85:96:75:c9:32:12:65:0b:04: 65:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EA:6E:94:3E:0E:69:B2:11:B2:7D:21:55:BD:AD:A9:82:E7:82:CE X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:86:2a:ee:ac:f5:f2:4b:ed:0e:34:15:3a:9f:2f:3d:d6:0f: 56:a1:d5:80:50:26:cf:95:18:52:5b:69:7f:c8:35:fb:af:a5: dd:23:a8:e9:ea:f5:c4:be:31:ee:95:bb:f3:f2:87:c0:7f:76: f5:ae:16:4d:78:f1:6f:44:01:4d:de:70:8d:04:15:e1:7a:39: e9:00:32:02:7f:e0:ae:b4:c2:67:39:76:c3:61:d6:ea:e7:61: 80:4a:9a:b8:12:e3:3a:62:b7:9f:c4:75:0a:fd:a6:75:b2:2c: 13:4d:0c:86:ed:9a:1b:a9:05:09:07:65:79:8c:83:02:f5:4e: bd:d8:a0:95:6c:3c:07:fc:b2:0d:fa:25:32:eb:66:7e:4f:b2: 65:02:9a:47:77:19:5d:61:24:46:f1:0e:79:d6:97:43:77:df: 2b:da:e3:68:9f:0e:f0:66:a9:a9:b7:b8:6b:57:c1:43:c1:7c: 3b:18:78:cd:b1:75:7c:b7:1c:73:94:41:a0:f9:7d:77:fe:30: 75:3a:4c:c8:60:11:7b:b4:06:4d:ec:20:b2:41:32:b5:fb:ba: 53:5a:27:a9:03:23:8a:34:9a:1e:44:bc:d4:04:cd:3e:7a:3a: 2a:c6:56:64:e6:2f:18:15:53:c4:49:40:1d:da:f4:ec:47:26: 24:bb:03:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ebIQ/HnOyEuhuXfwhm+kDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwNTEyMjMwMTI4WhcNMjYwNTEzMjMwMTI4WjAzMTEwLwYDVQQD EyhmZmVhNmU5NDNlMGU2OWIyMTFiMjdkMjE1NWJkYWRhOTgyZTc4MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRoUWWM6JhrGT3n3t7yOX9FAAfB3 Kiu6IryleoxQZXxKCa+w5NW4oGqZrmAxnJo4RWrVynQXuk0L+j+AwgVH02uY+utP oK1o5H91p39dBPdJN+0JX2YqvJRNtPVa88UPp/zpPiMrqC+V2dmDVxmO1T3ZJTJi hsp7m4GYvrZoQcLlX/swHvyylfPO/fKoT8OMBTdxb8Arn8+qisiABTjYyGZBOy3/ DNVIDg7YUAXao6UOox9AEilHr7qQpDCuIYbYBBT5+YIfYLA4Tj4A1tg/sPMlzZ/M tSBHrzEBYOZ8TeLUvWFOHHzGp7rgoRaowpyjgZnL+7CFlnXJMhJlCwRlswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/qbpQ+DmmyEbJ9IVW9ramC54LOMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIYq7qz1 8kvtDjQVOp8vPdYPVqHVgFAmz5UYUltpf8g1+6+l3SOo6er1xL4x7pW78/KHwH92 9a4WTXjxb0QBTd5wjQQV4Xo56QAyAn/grrTCZzl2w2HW6udhgEqauBLjOmK3n8R1 Cv2mdbIsE00Mhu2aG6kFCQdleYyDAvVOvdiglWw8B/yyDfolMutmfk+yZQKaR3cZ XWEkRvEOedaXQ3ffK9rjaJ8O8Gapqbe4a1fBQ8F8Oxh4zbF1fLccc5RBoPl9d/4w dTpMyGARe7QGTewgskEytfu6U1onqQMjijSaHkS81ATNPno6KsZWZOYvGBVTxElA Hdr07EcmJLsDSA== -----END CERTIFICATE-----Generated at Wed May 13 06:07:55 2026 by rpki-client