$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: sMXF2E5KAprHFbjoAnX5a4V4bWpZp+6X0n2/Hmv3GkI= Subject key identifier: 00:37:50:15:99:35:CA:5E:48:C4:13:DE:41:E5:1A:B7:68:EE:29:9B Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 01A17DE1CDA8D1B77C03D635E78995F236A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 190C Signing time: Tue 27 Oct 2026 15:01:52 +0000 Manifest this update: Tue 27 Oct 2026 15:01:52 +0000 Manifest next update: Wed 28 Oct 2026 15:01:52 +0000 Files and hashes: 1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=) 2: 2hF8o3nRCJeM-T2KUqB72EQXa3E.roa (hash: AMf4zC4JBXPeXIjLuCvMdhg4jyKKMdkmmnMx34J32GM=) 3: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=) 4: BtTsEzm1e4QtS6zSVmaB8DAQMQo.roa (hash: mtVrLrYhk6uqSmhAjEOJwmtobN2n9Pkskxjnj6FvPpU=) 5: FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa (hash: tg987J0i644Z+rDUbSmguymeU+9jrpbhpfN7TJ7twhQ=) 6: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=) 7: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: WpFEeAdTVnmsvBliyLnUKT9EJfyt3mM9hNLYUdBvZQE=) 8: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=) 9: M4yvFOCrNQYrMEvHUynTCH1sRYg.roa (hash: AUJ02SjlaCnhsHTiNOzqXyVE53GehhBlvRs76nGe1NA=) 10: Nekk3PxF8fO-rhzaegHvfM_t41w.roa (hash: A1QX31c5i0IexwLkYJODSCPQogKNlG8IRZDo0disb/U=) 11: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=) 12: ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa (hash: rjgdc1W6vPpG3uPNkDBN/qtt12z0N51cOglFEFDyoWY=) 13: Pi6uT0MDxxHleo3_yZKxdHy8ou0.roa (hash: 5x3VDZkeU6jGG2nc7DGajOTETO/SJdxa0o8peRVLzVg=) 14: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=) 15: SZu55x7en_czyZkzfAyJFpU244Y.roa (hash: OzvmzSsqolBamLC2DAGFHbq89A4Q/ST8nHE6ANWH5N4=) 16: StqYfznXE-QPiA-TOmLGA4FrAS8.roa (hash: h5TKEuBn2q4c0zbHABA+TvU5nsvIwHYwDNRGaJto+e8=) 17: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=) 18: WBw7gw6osmHy0IqvZHLM8HMfKls.roa (hash: 9skt4Vx5fYnNFz8d3wonj2F4Wujetk0O7qCLQaqmEmE=) 19: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=) 20: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=) 21: aa15nZfX27ubGWEeb2X5ayBEBXE.roa (hash: w+5MiVWAe1cAGq7vjX3zG5riF68ch5od/IXze+J4XLM=) 22: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=) 23: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=) 24: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=) 25: jIiWE2zJZX5pFl0vy1PL64bE8T0.roa (hash: 2YBMClvraF+AFYCDBE549nteIWo0rkRBKQCVhkycQQk=) 26: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=) 27: lGKAv74gYmGH37A1DRbh0Rl9bx4.roa (hash: E14cPJbJ1TEA8BquVRSARSC5FdHT+0thzYkCOpdQdEk=) 28: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=) 29: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=) 30: oE74MoN2bW6fiMiut7Z-JHHL4Zo.roa (hash: eaim3HM5ZdDDRgbNAkLs2CPrhY68/sGFs70q9m6jby4=) 31: oKhpIH_BWd5Noqx6eV2DySEcGb0.roa (hash: N7FlWOqyJoex6ZmwsucsTTYLs5nNX4sZKRbn/6c/tug=) 32: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=) 33: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=) 34: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=) 35: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=) 36: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=) 37: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=) 38: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7d:e1:cd:a8:d1:b7:7c:03:d6:35:e7:89:95:f2:36:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Oct 27 15:01:52 2026 GMT Not After : Oct 28 15:01:52 2026 GMT Subject: CN=003750159935ca5e48c413de41e51ab768ee299b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:81:3d:0d:71:11:7f:4c:5e:08:0e:23:39: 3a:bd:52:0f:76:0e:62:63:04:2c:98:9d:2f:fc:14: 5e:10:86:83:79:53:df:86:84:27:ce:05:89:fe:46: e4:ff:53:5b:73:5c:40:c3:4e:60:54:a6:56:2d:ac: d7:7f:79:7c:47:c1:52:90:89:39:a0:4b:8f:ba:3e: e0:db:da:6a:44:f3:2e:c7:d8:82:28:db:27:49:2b: 72:f8:77:6c:71:c7:de:92:fe:9f:29:0f:80:79:b9: a3:8f:ee:e0:2a:1e:09:d6:7d:e2:62:26:bd:c4:e9: b3:00:fe:8b:1c:3c:00:3b:cb:fe:e8:49:6c:0f:24: fd:3d:a9:d6:f3:c0:9d:ef:62:23:7c:de:86:80:78: 12:d8:62:5b:59:ee:68:4f:07:b5:b0:20:7b:ab:26: 05:b8:45:15:5c:06:c7:04:4b:1a:65:63:86:32:fc: ed:e1:d4:2f:22:d1:2e:6d:86:7f:69:91:fb:52:8a: 56:41:1a:f6:f8:2a:82:c4:eb:c9:9b:d3:c7:8b:c3: 52:52:38:b1:2f:fe:fc:27:96:c4:4a:81:22:7c:36: b8:f4:59:9a:33:3e:0c:ad:99:85:13:19:95:5b:9d: 39:19:b9:f6:41:fe:b4:6b:8b:e4:5b:b3:e3:7a:1f: b7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:37:50:15:99:35:CA:5E:48:C4:13:DE:41:E5:1A:B7:68:EE:29:9B X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:db:a5:52:ec:99:6d:c2:70:b6:5d:a4:2b:0e:6d:9f:96:44: ee:04:76:3c:69:93:25:0b:5e:f4:d1:49:b0:26:33:15:0f:b4: 6c:88:e2:5b:02:85:44:0c:5f:06:83:2d:d5:2f:92:98:af:1b: d5:b3:5d:16:67:93:c7:90:f4:7b:36:7c:80:58:1e:c9:e5:c2: 50:25:5d:d2:7b:ab:91:80:72:68:fe:d1:76:46:9b:4b:d1:90: 8c:aa:ad:30:89:6e:ef:11:0a:a9:78:6b:6d:79:7c:2e:6b:44: cf:6a:c8:c1:e2:ac:21:62:b8:c8:0c:35:22:58:a8:a8:49:75: 94:31:b1:4e:fa:20:77:6a:4c:94:c9:a5:11:5b:3c:14:f1:5b: be:8b:f5:f0:13:c1:3d:26:92:be:bd:ad:97:d5:ed:67:f6:a5: 91:5a:14:70:2a:38:2e:80:1e:5b:9b:a7:0d:f0:a5:66:d8:50: 1f:30:66:a3:81:8a:64:8c:7e:59:cf:c2:36:9f:98:e6:a8:0a: 74:15:66:ab:ac:2e:7f:ff:0f:3b:87:2d:92:fd:c5:d2:db:82: 0b:5c:89:60:a0:bb:46:cf:c9:27:f4:ce:28:d2:c3:5c:cc:bc: 3b:0b:f2:fb:29:97:53:b0:f2:11:59:83:d0:f0:fa:09:37:67: bb:62:b1:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF94c2o0bd8A9Y154mV8jahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYxMDI3MTUwMTUyWhcNMjYxMDI4MTUwMTUyWjAzMTEwLwYDVQQD EygwMDM3NTAxNTk5MzVjYTVlNDhjNDEzZGU0MWU1MWFiNzY4ZWUyOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwGBPQ1xEX9MXggOIzk6vVIPdg5i YwQsmJ0v/BReEIaDeVPfhoQnzgWJ/kbk/1Nbc1xAw05gVKZWLazXf3l8R8FSkIk5 oEuPuj7g29pqRPMux9iCKNsnSSty+Hdsccfekv6fKQ+Aebmjj+7gKh4J1n3iYia9 xOmzAP6LHDwAO8v+6ElsDyT9PanW88Cd72IjfN6GgHgS2GJbWe5oTwe1sCB7qyYF uEUVXAbHBEsaZWOGMvzt4dQvItEubYZ/aZH7UopWQRr2+CqCxOvJm9PHi8NSUjix L/78J5bESoEifDa49FmaMz4MrZmFExmVW505Gbn2Qf60a4vkW7Pjeh+3zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAA3UBWZNcpeSMQT3kHlGrdo7imbMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdulUuyZ bcJwtl2kKw5tn5ZE7gR2PGmTJQte9NFJsCYzFQ+0bIjiWwKFRAxfBoMt1S+SmK8b 1bNdFmeTx5D0ezZ8gFgeyeXCUCVd0nurkYByaP7RdkabS9GQjKqtMIlu7xEKqXhr bXl8LmtEz2rIweKsIWK4yAw1IlioqEl1lDGxTvogd2pMlMmlEVs8FPFbvov18BPB PSaSvr2tl9XtZ/alkVoUcCo4LoAeW5unDfClZthQHzBmo4GKZIx+Wc/CNp+Y5qgK dBVmq6wuf/8PO4ctkv3F0tuCC1yJYKC7Rs/JJ/TOKNLDXMy8Owvy+ymXU7DyEVmD 0PD6CTdnu2KxTg== -----END CERTIFICATE-----Generated at Wed Oct 28 00:15:18 2026 by rpki-client