$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: tTLxij/EseT95Ku2Bgs47aBQG6fJq8LG2KViOSAw8k0= Subject key identifier: FC:9D:68:A9:28:7B:E9:F9:84:70:C7:2F:6C:0A:36:9E:C9:44:82:38 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019DD38921F2650B9E39290DD1E59D2F92DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 191F Signing time: Tue 28 Apr 2026 10:01:12 +0000 Manifest this update: Tue 28 Apr 2026 10:01:12 +0000 Manifest next update: Wed 29 Apr 2026 10:01:12 +0000 Files and hashes: 1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=) 2: 1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa (hash: Iaj382heCZM+jzCY8eetFxeK6yVOOq/mB7H0r3jsr2Y=) 3: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=) 4: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=) 5: 43Q8B1j8uCGR8HMdyPrt74IDtQ0.roa (hash: jg6HtmjBC3mwgDbDxK1J2hnGtmR596d4s1Ft0DjJQas=) 6: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=) 7: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=) 8: AU4pJEgj6WCviZ2QJJdCQH2gbpw.roa (hash: TC1IhDPtH+BGNVruTwqyE+T+g7XpQfKzSMZ9r7v5voI=) 9: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=) 10: E3-_fXrx3WJEz1xqKZqUxJBmM-Q.roa (hash: aSCX2XxnC/aSPKRCNlxxflXs9icajrveCo9SBL09YdY=) 11: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=) 12: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=) 13: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=) 14: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=) 15: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=) 16: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=) 17: LW-5clw67EFsnBjcAb7ZCZ1ciqI.roa (hash: e8fixB5X0C/SORa/tFJebK0n/Ac594LhZDRQ+zVtE8I=) 18: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=) 19: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=) 20: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (hash: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo=) 21: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=) 22: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=) 23: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=) 24: VuDnLvJNIcWc0RLDRhnQzJGXYlA.roa (hash: yHuXaf7xfAo1NMtfTvQ/YeqZYNx5yuNzc9kHv5WBJS0=) 25: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=) 26: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=) 27: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=) 28: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=) 29: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=) 30: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: xDyWbc071zym4o7hHgardiUN/0mL9vGt1fjJPja5nao=) 31: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=) 32: pyMmPiyFBVEcpAFu8BS9uRp5Uw8.roa (hash: C8etRVkdvpzZnpJ/5uCibkOtHku0DBM1Z5FvpwY5MNY=) 33: q2L5SyKqID2l1hg0Qhj5bxpMU78.roa (hash: Z9AmXohIpa+e04Joh+QhWbWtZMLnK/rjPBTVsW3zyT8=) 34: q9K5X-x5m3r2gOyHks1WDwyq-7Q.roa (hash: y0PtBOWuJ4HDoeaCO6HZcOEzqPu8pe2J9jjSvPgHyiU=) 35: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=) 36: uj4j6cfJ7bOcHn5Z6sqT_zROd8E.roa (hash: P13gsQor+N4Emp0P4NO+P2Eyz4EQ9E4uMhkwNyYMsOA=) 37: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Apr 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d3:89:21:f2:65:0b:9e:39:29:0d:d1:e5:9d:2f:92:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Apr 28 10:01:12 2026 GMT Not After : Apr 29 10:01:12 2026 GMT Subject: CN=fc9d68a9287be9f98470c72f6c0a369ec9448238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:de:23:aa:3e:84:1a:09:9c:3e:22:88:3e: a7:26:8c:ff:e3:35:9a:69:3a:75:00:d8:54:3a:1d: e7:02:f7:76:af:88:59:18:68:d2:dc:5a:bc:99:5f: d4:d3:4f:05:d9:43:49:80:ff:e9:6d:50:19:25:cb: a1:0d:24:4a:29:78:12:17:38:03:54:f9:69:ab:9e: 07:55:e4:77:4c:d8:85:ee:4e:b5:14:1a:b2:0d:02: 5f:0b:37:9d:d0:76:ae:a7:0c:6c:4f:26:b8:eb:9d: 4a:8e:6b:bc:22:5d:8a:0f:08:ff:39:9b:7c:bd:10: 78:db:6d:17:7d:7e:45:41:b8:44:38:c7:cc:73:d6: 3d:5f:72:9c:82:f0:df:33:0c:9d:33:97:01:b4:26: 3e:76:44:cd:27:2c:b6:3b:9c:9c:de:f2:1c:8f:f6: 05:68:0d:4d:49:e3:60:82:fc:fb:63:10:4c:1e:89: 24:a0:26:2e:37:c7:e6:17:34:12:a0:da:90:6e:57: 0e:b1:5a:09:2d:52:26:87:28:a3:1a:ad:be:10:07: 5a:ca:9d:8f:09:bb:01:b4:bd:b0:eb:14:3f:9c:3a: 1e:0e:a7:94:17:91:c3:e3:66:01:47:44:10:4d:8b: f9:50:be:10:73:c6:20:6f:32:b5:a0:69:1c:0b:50: 67:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9D:68:A9:28:7B:E9:F9:84:70:C7:2F:6C:0A:36:9E:C9:44:82:38 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:9f:83:3a:bf:72:fd:fe:09:54:66:2a:a3:67:8b:47:b4:e7: 4f:b7:63:38:c9:1c:bc:de:f8:01:ca:d6:b4:ed:12:c8:f8:8d: 28:ae:e6:66:3a:c1:ed:89:2f:81:76:72:db:21:7d:5f:55:06: a0:36:79:b3:1f:ab:d6:76:f9:9e:bd:0c:40:b3:83:ff:58:0f: 11:74:b6:b1:d9:5b:ad:6e:4c:42:6c:3e:6e:10:88:93:cb:ad: 42:6c:5a:15:31:6e:28:7f:e7:92:95:d9:2b:15:35:72:43:a8: 47:41:38:dc:2b:ca:ce:1b:20:56:79:c6:46:25:3b:28:c3:ac: ca:2c:e9:58:33:e3:82:be:6d:99:e0:c8:5f:90:f6:c7:55:fc: 07:8f:b5:2b:bd:f7:ae:d0:84:29:49:aa:e9:51:2f:57:e0:83: cf:fa:ec:11:02:fd:40:60:ad:24:eb:4f:57:59:00:7c:d7:76: 90:04:bb:fd:15:72:9f:04:17:49:a9:4c:46:1c:b3:aa:ca:3d: 15:f2:0d:e3:83:79:d9:cc:ca:10:54:9b:0a:54:9b:36:19:64: 43:dc:66:a8:44:07:36:29:b0:f3:9e:ed:e3:69:70:9b:99:9e: 5c:2f:4d:a1:5d:d5:62:eb:70:f1:d9:3f:d2:02:5e:81:b7:7f: ea:61:c5:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3TiSHyZQueOSkN0eWdL5LbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwNDI4MTAwMTEyWhcNMjYwNDI5MTAwMTEyWjAzMTEwLwYDVQQD EyhmYzlkNjhhOTI4N2JlOWY5ODQ3MGM3MmY2YzBhMzY5ZWM5NDQ4MjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbPeI6o+hBoJnD4iiD6nJoz/4zWa aTp1ANhUOh3nAvd2r4hZGGjS3Fq8mV/U008F2UNJgP/pbVAZJcuhDSRKKXgSFzgD VPlpq54HVeR3TNiF7k61FBqyDQJfCzed0HaupwxsTya4651Kjmu8Il2KDwj/OZt8 vRB4220XfX5FQbhEOMfMc9Y9X3KcgvDfMwydM5cBtCY+dkTNJyy2O5yc3vIcj/YF aA1NSeNggvz7YxBMHokkoCYuN8fmFzQSoNqQblcOsVoJLVImhyijGq2+EAdayp2P CbsBtL2w6xQ/nDoeDqeUF5HD42YBR0QQTYv5UL4Qc8YgbzK1oGkcC1BneQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPydaKkoe+n5hHDHL2wKNp7JRII4MB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZ+DOr9y /f4JVGYqo2eLR7TnT7djOMkcvN74AcrWtO0SyPiNKK7mZjrB7YkvgXZy2yF9X1UG oDZ5sx+r1nb5nr0MQLOD/1gPEXS2sdlbrW5MQmw+bhCIk8utQmxaFTFuKH/nkpXZ KxU1ckOoR0E43CvKzhsgVnnGRiU7KMOsyizpWDPjgr5tmeDIX5D2x1X8B4+1K733 rtCEKUmq6VEvV+CDz/rsEQL9QGCtJOtPV1kAfNd2kAS7/RVynwQXSalMRhyzqso9 FfIN44N52czKEFSbClSbNhlkQ9xmqEQHNimw857t42lwm5meXC9NoV3VYutw8dk/ 0gJegbd/6mHFkQ== -----END CERTIFICATE-----Generated at Tue Apr 28 18:42:09 2026 by rpki-client