$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: T6qXmBI60TGltAcst58q82U5tA0gBOhjAf72YGtTQ/s= Subject key identifier: 1F:4E:A1:ED:77:80:32:59:AA:1E:E5:B9:BB:58:55:C2:18:7C:44:B5 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019CE937FE8776063581C1FD934CE363637B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 189E Signing time: Fri 13 Mar 2026 22:01:26 +0000 Manifest this update: Fri 13 Mar 2026 22:01:26 +0000 Manifest next update: Sat 14 Mar 2026 22:01:26 +0000 Files and hashes: 1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=) 2: 1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa (hash: Iaj382heCZM+jzCY8eetFxeK6yVOOq/mB7H0r3jsr2Y=) 3: 1R7h_wZhp_xxY9H_mngh36eF568.roa (hash: XHhZWlRzYf4o0swQwybTv+9LiLjvzb0GDOX/kg+FBwg=) 4: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=) 5: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=) 6: 43Q8B1j8uCGR8HMdyPrt74IDtQ0.roa (hash: jg6HtmjBC3mwgDbDxK1J2hnGtmR596d4s1Ft0DjJQas=) 7: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=) 8: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=) 9: 9YlysPtVTEwS2FnSYKmXWK5fG9k.roa (hash: PZpws1i/n8l20ITPpZrngd7OOBW1H8sAPAQXDA4/JNI=) 10: CZtGpLAUhYdLU22gYJ3M8sldtRE.roa (hash: dqMfLW0eVcLT+nytfHwV4Lxmua3438Ke47oKR7OOxJ8=) 11: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=) 12: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=) 13: FX4K8uvL18Ya_j-jtZW2so9Gc9c.roa (hash: 4q5Zv7mkQbbSlNQl2wVZY06OF2suCswfRbO5hgu61w4=) 14: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=) 15: JvVBjIVS37lGpa1c9VOz2MPmHLs.roa (hash: q6ySAZv2zhPxzY0nSmdFaI6zSZkHXmEvHC/T+bksOH4=) 16: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=) 17: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=) 18: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=) 19: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=) 20: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (hash: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo=) 21: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=) 22: SN_hOoDnXXBMcILu8asIJSSFU6k.roa (hash: xhiPqOnTIih2H9KpMIJWF1OUuAAkuYs+jap/kl2QWL8=) 23: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=) 24: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=) 25: VuDnLvJNIcWc0RLDRhnQzJGXYlA.roa (hash: yHuXaf7xfAo1NMtfTvQ/YeqZYNx5yuNzc9kHv5WBJS0=) 26: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=) 27: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=) 28: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=) 29: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=) 30: cOL7BOKAJYOJxPSrnov-oNaIuRs.roa (hash: g8VERbJXRbI2dU9SyaKhLOuOuH0cRbFR+I6mLnbuocs=) 31: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: SVkSje3R1QBg9SlftkroXyGjsYNJRaNOfYZxk2R/gRQ=) 32: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=) 33: pyMmPiyFBVEcpAFu8BS9uRp5Uw8.roa (hash: C8etRVkdvpzZnpJ/5uCibkOtHku0DBM1Z5FvpwY5MNY=) 34: tLf5ip-0tWoMgAwYuoZfyo8CpBU.roa (hash: PQveRSA2vw+ZAZ9XdzrjIK3UE1FOAh6fR0K2OuWyFVk=) 35: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=) 36: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=) 37: zote-bU43Xc3L_TsvE3s0Qqd22g.roa (hash: C40MNHbMRurC40NZMuiNePjAq8avbr212pcusOQWouU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 22:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e9:37:fe:87:76:06:35:81:c1:fd:93:4c:e3:63:63:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Mar 13 22:01:26 2026 GMT Not After : Mar 14 22:01:26 2026 GMT Subject: CN=1f4ea1ed77803259aa1ee5b9bb5855c2187c44b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:32:ef:49:c8:eb:6a:fb:82:97:04:03:27: 1c:21:71:63:9c:1c:3f:8f:35:3f:eb:b5:a3:d8:34: 3d:80:d0:b4:4a:07:69:66:a6:6e:47:58:c1:bd:8a: 4c:f8:ac:a0:d5:b0:77:14:be:c6:d4:d1:bf:af:35: 7e:b1:f7:29:85:8c:53:f6:33:f5:d0:1c:7d:bb:4f: 29:cd:6f:4c:ec:32:a1:31:e3:cb:34:2f:0e:cf:85: ad:87:c1:d7:a6:8b:d1:74:cd:d1:70:d9:6d:ac:57: e0:7e:34:c0:72:00:35:c2:f3:89:6c:1b:76:6d:6b: e5:73:80:1a:56:80:8a:c2:82:b3:dc:df:04:d6:26: b4:39:09:66:bf:30:e8:2a:4f:a9:01:41:76:3c:5e: 26:c7:f3:b3:ca:9e:4a:1a:5f:cf:6f:b9:99:a8:a6: 84:80:58:05:3f:29:02:1a:14:da:6f:c9:d7:2a:76: 34:41:66:5c:45:af:d5:09:b1:98:5e:00:05:d3:d1: 68:f8:a0:da:2b:b4:03:82:d5:46:85:f8:94:17:2a: c9:cc:88:cc:d4:f3:9a:bb:42:5e:97:83:27:95:5b: 16:26:d3:f2:02:4f:b7:97:d5:4b:79:42:7a:7a:8c: 61:c1:3d:de:25:4d:d4:5f:31:63:e0:03:e7:fb:bf: 83:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4E:A1:ED:77:80:32:59:AA:1E:E5:B9:BB:58:55:C2:18:7C:44:B5 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:b8:78:d9:70:95:ef:02:3b:03:49:3f:c6:fd:67:48:85:d0: 54:96:7f:4f:6b:be:bb:f2:15:28:94:1d:75:a6:b5:79:da:28: 8e:79:d6:95:6e:79:21:09:f1:fd:bb:44:ae:ac:78:96:9b:47: 27:e3:97:11:e7:ea:6b:c6:b6:00:d3:5c:3d:43:dd:79:a2:e7: 4e:2b:dd:9e:eb:00:e1:c6:4c:55:39:da:6f:70:7c:3c:41:c6: 56:f3:9f:32:6c:11:3a:7a:cd:2f:bc:f5:2f:d5:32:e1:a3:b7: 3b:b9:c9:f1:59:e8:4d:dc:ce:b9:19:69:df:69:29:0f:b8:72: 46:a0:ee:fb:fb:b1:86:3c:b8:05:fe:fd:08:f6:03:8c:3e:58: c7:45:98:8f:08:36:46:fb:2c:de:91:d4:80:01:64:cc:c4:d7: 94:d5:1a:44:88:3d:a7:a5:93:03:f7:c2:4c:ca:01:b9:31:c8: 5c:b5:37:fd:05:a4:ff:07:28:82:73:58:7f:12:6b:53:f5:07: 54:fe:73:2c:0c:f0:98:9b:66:67:e2:6d:d9:51:7b:11:b1:e9: 75:15:fb:b4:03:78:f0:b0:19:01:67:cb:14:b3:38:e6:50:ed: a6:da:b5:a0:69:49:d4:52:9b:4c:35:2c:d1:4b:67:0a:ef:87: 4e:17:fd:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzpN/6HdgY1gcH9k0zjY2N7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMzEzMjIwMTI2WhcNMjYwMzE0MjIwMTI2WjAzMTEwLwYDVQQD EygxZjRlYTFlZDc3ODAzMjU5YWExZWU1YjliYjU4NTVjMjE4N2M0NGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvEy70nI62r7gpcEAyccIXFjnBw/ jzU/67Wj2DQ9gNC0SgdpZqZuR1jBvYpM+Kyg1bB3FL7G1NG/rzV+sfcphYxT9jP1 0Bx9u08pzW9M7DKhMePLNC8Oz4Wth8HXpovRdM3RcNltrFfgfjTAcgA1wvOJbBt2 bWvlc4AaVoCKwoKz3N8E1ia0OQlmvzDoKk+pAUF2PF4mx/Ozyp5KGl/Pb7mZqKaE gFgFPykCGhTab8nXKnY0QWZcRa/VCbGYXgAF09Fo+KDaK7QDgtVGhfiUFyrJzIjM 1POau0Jel4MnlVsWJtPyAk+3l9VLeUJ6eoxhwT3eJU3UXzFj4APn+7+DpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9Ooe13gDJZqh7lubtYVcIYfES1MB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabh42XCV 7wI7A0k/xv1nSIXQVJZ/T2u+u/IVKJQddaa1edoojnnWlW55IQnx/btErqx4lptH J+OXEefqa8a2ANNcPUPdeaLnTivdnusA4cZMVTnab3B8PEHGVvOfMmwROnrNL7z1 L9Uy4aO3O7nJ8VnoTdzOuRlp32kpD7hyRqDu+/uxhjy4Bf79CPYDjD5Yx0WYjwg2 Rvss3pHUgAFkzMTXlNUaRIg9p6WTA/fCTMoBuTHIXLU3/QWk/wcognNYfxJrU/UH VP5zLAzwmJtmZ+Jt2VF7EbHpdRX7tAN48LAZAWfLFLM45lDtptq1oGlJ1FKbTDUs 0UtnCu+HThf9WA== -----END CERTIFICATE-----Generated at Sat Mar 14 07:36:13 2026 by rpki-client