$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: PCaMA4fqUXCTzHrYkcd/UPvGtP+aqvydqzXMqIeO9ak= Subject key identifier: 8B:15:E5:3A:84:63:59:11:2B:2F:AA:73:2B:1C:25:61:66:9A:EB:B6 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019FA63C8F4B34C434741805ABE7BA248829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 1A1C Signing time: Tue 28 Jul 2026 01:00:14 +0000 Manifest this update: Tue 28 Jul 2026 01:00:14 +0000 Manifest next update: Wed 29 Jul 2026 01:00:14 +0000 Files and hashes: 1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=) 2: 1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa (hash: Iaj382heCZM+jzCY8eetFxeK6yVOOq/mB7H0r3jsr2Y=) 3: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=) 4: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=) 5: 43Q8B1j8uCGR8HMdyPrt74IDtQ0.roa (hash: jg6HtmjBC3mwgDbDxK1J2hnGtmR596d4s1Ft0DjJQas=) 6: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=) 7: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=) 8: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=) 9: E3-_fXrx3WJEz1xqKZqUxJBmM-Q.roa (hash: aSCX2XxnC/aSPKRCNlxxflXs9icajrveCo9SBL09YdY=) 10: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=) 11: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=) 12: KV59OO7KJClf-nV-SktyqxjeQD0.roa (hash: +DyBXnPmKjRM65p+azkaO5DME2Q2gJhFVzsQryAN8lM=) 13: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=) 14: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=) 15: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=) 16: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=) 17: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=) 18: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=) 19: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (hash: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo=) 20: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=) 21: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=) 22: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=) 23: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=) 24: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=) 25: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=) 26: b9FVlLpsFxBIKBB7Kyvph_cz5R0.roa (hash: d/rt4wkS114V2Yg74RJgDLL2fbT20LSDB5Gyac2XFLQ=) 27: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=) 28: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=) 29: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: RsEXIYgnIigMtfaJgoabc+sSh+ZfuyU8xXrkXiFTFR0=) 30: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=) 31: q2L5SyKqID2l1hg0Qhj5bxpMU78.roa (hash: Z9AmXohIpa+e04Joh+QhWbWtZMLnK/rjPBTVsW3zyT8=) 32: q9K5X-x5m3r2gOyHks1WDwyq-7Q.roa (hash: y0PtBOWuJ4HDoeaCO6HZcOEzqPu8pe2J9jjSvPgHyiU=) 33: qrB3Eo2Ov1FmKMVfZK8XfTmirqc.roa (hash: hZfGNLtJikKtYnLkrqax5kP9tjeXld/JNv+JEvk0F/g=) 34: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=) 35: uj4j6cfJ7bOcHn5Z6sqT_zROd8E.roa (hash: P13gsQor+N4Emp0P4NO+P2Eyz4EQ9E4uMhkwNyYMsOA=) 36: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=) 37: xe5Lcg3JTJHR_eWIXGRcFm9VxKM.roa (hash: 125ShwFH043Mwx/YVzTZ+aTSmLm1FUB4/5PjVBfP5So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 01:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a6:3c:8f:4b:34:c4:34:74:18:05:ab:e7:ba:24:88:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jul 28 01:00:14 2026 GMT Not After : Jul 29 01:00:14 2026 GMT Subject: CN=8b15e53a846359112b2faa732b1c2561669aebb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:1b:e1:1c:34:c1:0b:eb:97:6a:8d:78:e4: ce:9a:f5:43:13:ee:fd:4f:ac:13:0c:03:71:ef:4a: bf:f4:06:43:29:b8:35:8d:a8:a1:7a:32:c9:11:72: d2:bb:23:f8:2d:50:5b:96:f5:aa:00:88:fb:f0:8d: bf:18:76:1a:4d:05:49:c4:17:8f:a6:3d:58:e9:88: 22:af:ad:c4:27:d5:9c:4b:02:7c:22:77:5b:7d:dd: bb:a6:d1:59:fc:81:10:63:5a:06:49:93:25:0c:c4: f8:35:1d:2b:c8:cd:93:31:4c:dc:e6:1e:78:0b:5e: 20:45:b0:1c:ce:99:3b:cb:ae:74:e4:4a:b1:d4:a2: 86:33:02:8a:12:d6:94:64:ee:0d:39:27:20:2c:9f: fd:98:a0:6b:35:eb:dd:6e:70:f7:c0:26:91:db:aa: 33:a2:10:7a:19:06:ba:2e:14:dc:ea:c4:5e:52:74: 6c:b9:b7:95:c7:7c:78:ae:ec:0d:3a:61:b7:22:f3: fa:c2:2b:3a:04:63:4d:30:95:3d:30:49:14:1b:9f: ec:db:2e:e3:56:19:e1:b6:cf:3c:46:b6:a9:6a:c3: af:ac:b1:f1:dd:3c:40:5e:87:5f:e7:85:2b:2f:84: fd:cf:01:7c:aa:c3:65:b8:dd:83:5b:8e:8c:5e:17: 7d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:15:E5:3A:84:63:59:11:2B:2F:AA:73:2B:1C:25:61:66:9A:EB:B6 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ea:13:81:3a:d4:1d:46:92:0d:a4:e3:c7:39:86:0a:7c:70: 7d:a1:cd:4d:bd:95:4f:c7:2a:1c:e2:ce:7e:95:3e:02:b9:94: 95:6b:58:8d:e3:76:7d:b7:c6:a9:29:cd:ab:de:88:b2:cc:18: 3e:a7:a1:02:52:f7:70:4d:96:25:d4:cb:71:bf:7e:58:54:ac: 04:52:e8:1d:57:74:6f:07:43:19:2e:45:3c:c1:d4:b4:56:6c: 07:2e:24:d0:6a:71:8b:9f:67:f2:67:50:ab:06:8f:7b:db:6b: 36:8b:07:1a:db:aa:b9:f6:21:5f:90:75:ec:c2:ee:38:86:82: 45:90:89:b5:77:a3:0f:46:aa:3d:9f:bc:e1:cd:cf:a2:46:dc: e6:4a:c0:5e:24:89:27:f7:3d:d3:9d:bd:36:fc:49:03:49:d5: bd:9f:48:c7:d6:e3:de:5e:59:7f:78:37:9b:9d:78:06:cb:dc: 3d:2c:ee:0b:78:c1:77:91:90:d0:f7:60:1b:5d:d8:8e:9c:c2: ee:56:9a:ed:6e:c6:7a:5d:2e:b9:fb:60:d8:c9:ab:46:7c:ba: 27:53:8d:6d:ca:6e:44:6f:c6:61:cc:6d:c3:2d:94:bb:3a:4a: b3:88:09:76:b1:c4:af:68:03:22:1a:03:cb:9d:c9:62:0c:51: 3c:0d:83:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+mPI9LNMQ0dBgFq+e6JIgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwNzI4MDEwMDE0WhcNMjYwNzI5MDEwMDE0WjAzMTEwLwYDVQQD Eyg4YjE1ZTUzYTg0NjM1OTExMmIyZmFhNzMyYjFjMjU2MTY2OWFlYmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEAb4Rw0wQvrl2qNeOTOmvVDE+79 T6wTDANx70q/9AZDKbg1jaihejLJEXLSuyP4LVBblvWqAIj78I2/GHYaTQVJxBeP pj1Y6Ygir63EJ9WcSwJ8Indbfd27ptFZ/IEQY1oGSZMlDMT4NR0ryM2TMUzc5h54 C14gRbAczpk7y6505Eqx1KKGMwKKEtaUZO4NOScgLJ/9mKBrNevdbnD3wCaR26oz ohB6GQa6LhTc6sReUnRsubeVx3x4ruwNOmG3IvP6wis6BGNNMJU9MEkUG5/s2y7j Vhnhts88RrapasOvrLHx3TxAXodf54UrL4T9zwF8qsNluN2DW46MXhd9jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsV5TqEY1kRKy+qcyscJWFmmuu2MB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuoTgTrU HUaSDaTjxzmGCnxwfaHNTb2VT8cqHOLOfpU+ArmUlWtYjeN2fbfGqSnNq96IsswY PqehAlL3cE2WJdTLcb9+WFSsBFLoHVd0bwdDGS5FPMHUtFZsBy4k0Gpxi59n8mdQ qwaPe9trNosHGtuqufYhX5B17MLuOIaCRZCJtXejD0aqPZ+84c3Pokbc5krAXiSJ J/c90529NvxJA0nVvZ9Ix9bj3l5Zf3g3m514BsvcPSzuC3jBd5GQ0PdgG13YjpzC 7laa7W7Gel0uuftg2MmrRny6J1ONbcpuRG/GYcxtwy2UuzpKs4gJdrHEr2gDIhoD y53JYgxRPA2Dcw== -----END CERTIFICATE-----Generated at Tue Jul 28 10:35:04 2026 by rpki-client