$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json) Hash identifier: OIWmptM5XNMlN/9wWO9IoWcLJg9POM4T/jPL7dOGnf4= Subject key identifier: 14:25:CF:4E:DD:23:20:18:AF:AD:B3:5D:B5:6D:44:B5:CA:FD:B4:3F Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019F081930AB7491B68D79294023ABE8CB29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft Manifest number: 16FE Signing time: Sat 27 Jun 2026 08:01:36 +0000 Manifest this update: Sat 27 Jun 2026 08:01:36 +0000 Manifest next update: Sun 28 Jun 2026 08:01:36 +0000 Files and hashes: 1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=) 2: 4Uc22LPWnWUE2R7euaG4ZHnFv6s.roa (hash: RGTqZUMIJDCt8fg43m28f23pkWbeJCT3vhwBQSzMBNo=) 3: 8-_TWMNK9smVCIZHx2gSgefBTvk.roa (hash: GoPHoDZXQ4RK7VcYW0JWFdEHGQJJF9f+5F3ghTg1XDg=) 4: A8pB-9bz15cQYivfjGrzOwMc7LY.roa (hash: EeHyMuPO8kK3PqKlWgKjT50oovE1gmYEWW0HAbBX2NI=) 5: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=) 6: BIlBx7GNQtDXs3rYutuCu_mCEbs.roa (hash: PjkQd4dOSp8nnX9aBaii5mDXPUnbKEUEDpkzwxtH96g=) 7: JvSklV-wlWBMdiMFZHYwnOO4qno.roa (hash: 2Y5pgGlMimFGDoHDIk55HXcJoD340d10aMUaMx1CDGE=) 8: Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa (hash: ujg1A0vQ9FG1rTPZa8Vj4tuAeoDxeA7TxCNsFbsOZaw=) 9: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=) 10: Qm64jgfqxLdzTqUP2yFFZCwEFkQ.roa (hash: VPkNMl1uM93BZxfba0RCbl2fSg1bQeZ6TYM16W6VTeE=) 11: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (hash: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=) 12: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=) 13: c-uurSvFwdZ4HnQ-2FusksHz4JY.roa (hash: L6sexLXbR65THJCvf0Zc/VUy29DDIcDYXnW872IpKPc=) 14: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=) 15: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: WmrnRBWypz8yc76P3xmD/85WQMz0ddc56X4E7g048MA=) 16: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Jun 2026 08:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:08:19:30:ab:74:91:b6:8d:79:29:40:23:ab:e8:cb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Jun 27 08:01:36 2026 GMT Not After : Jun 28 08:01:36 2026 GMT Subject: CN=1425cf4edd232018afadb35db56d44b5cafdb43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:86:fe:f0:d8:44:be:35:b9:fd:49:05:86:5c: d5:0c:a0:5a:26:8b:54:ea:14:5b:f8:28:b2:27:68: e8:6d:61:a1:c7:13:5d:a2:f7:7a:d6:60:d3:30:e2: c9:32:c0:0d:2d:0b:dd:f4:8f:52:ae:60:bd:62:41: b3:30:93:47:dd:fd:15:a4:bf:53:dc:e8:b8:34:a5: 07:88:6e:29:aa:d5:8e:d8:36:89:25:86:82:fd:d6: 36:c4:35:96:68:f7:eb:73:e5:9b:e9:37:af:15:b2: 9c:6b:f4:16:db:d2:31:e1:a4:e1:a6:dc:b7:06:e0: db:ef:c9:f7:06:96:74:32:ae:75:0e:8b:46:8e:37: 77:bd:7a:a9:0d:4e:09:a0:0a:85:8b:25:b9:fe:20: 31:95:8a:2d:7e:ee:59:87:6b:85:70:36:86:43:8f: 08:88:3c:7d:a6:18:c8:72:35:12:a0:9d:92:01:c8: 44:49:da:3d:5e:b6:ba:3d:d7:ef:24:7b:78:e2:21: e9:b8:fc:91:70:77:ef:70:b4:c2:2e:4f:e2:e4:10: ad:aa:87:3d:29:12:c6:cd:ba:37:e9:29:59:59:57: 0a:eb:a8:2d:86:a1:57:01:a3:c9:d9:cc:d1:ca:1a: ab:a8:78:cb:76:cc:e5:06:19:fb:72:9d:03:7d:47: a5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:25:CF:4E:DD:23:20:18:AF:AD:B3:5D:B5:6D:44:B5:CA:FD:B4:3F X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3d:81:ca:49:1e:1c:48:cc:c5:72:94:12:6f:cb:bf:77:22: 42:0c:fa:e7:2b:e9:05:53:50:8d:eb:50:69:ae:9d:f2:3e:3b: 6e:6f:74:01:86:c9:9e:4b:e9:13:04:f2:8a:1b:16:3b:5c:da: 15:6b:35:f2:7e:98:48:06:c6:7b:8d:fb:48:37:3a:34:79:bd: 31:0c:39:9f:20:02:90:89:ba:f9:7a:66:9b:a6:23:61:9a:b1: bc:ad:b6:36:b2:9c:6e:35:19:29:49:7a:96:af:00:ab:1f:3b: e6:aa:c2:8a:7e:f1:39:39:10:62:ed:ca:1c:b7:2e:a3:f1:4d: 85:84:24:23:ff:9a:08:73:2c:48:d7:8d:f2:66:41:35:6f:06: 90:34:4c:b0:3b:27:83:c3:53:59:17:85:a7:9f:63:98:25:e3: 94:60:ac:20:10:17:d2:63:e5:d8:ba:1c:f5:d5:5b:3f:55:93: 88:3f:31:f1:51:3b:d4:a4:41:60:ee:89:0c:08:74:e2:ca:fa: 7c:69:96:5f:5b:46:6d:30:fa:6f:4e:63:42:1d:66:42:e5:1f: a0:91:31:ed:fd:ae:9e:d5:eb:1d:97:43:86:eb:82:a8:fa:59: 71:e2:b5:5d:4e:c6:a9:bc:5b:f7:3f:c0:38:02:6f:29:07:5c: 07:ca:22:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8IGTCrdJG2jXkpQCOr6MspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwNjI3MDgwMTM2WhcNMjYwNjI4MDgwMTM2WjAzMTEwLwYDVQQD EygxNDI1Y2Y0ZWRkMjMyMDE4YWZhZGIzNWRiNTZkNDRiNWNhZmRiNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ib+8NhEvjW5/UkFhlzVDKBaJotU 6hRb+CiyJ2jobWGhxxNdovd61mDTMOLJMsANLQvd9I9SrmC9YkGzMJNH3f0VpL9T 3Oi4NKUHiG4pqtWO2DaJJYaC/dY2xDWWaPfrc+Wb6TevFbKca/QW29Ix4aThpty3 BuDb78n3BpZ0Mq51DotGjjd3vXqpDU4JoAqFiyW5/iAxlYotfu5Zh2uFcDaGQ48I iDx9phjIcjUSoJ2SAchESdo9Xra6PdfvJHt44iHpuPyRcHfvcLTCLk/i5BCtqoc9 KRLGzbo36SlZWVcK66gthqFXAaPJ2czRyhqrqHjLdszlBhn7cp0DfUelbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQlz07dIyAYr62zXbVtRLXK/bQ/MB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABj2Bykke HEjMxXKUEm/Lv3ciQgz65yvpBVNQjetQaa6d8j47bm90AYbJnkvpEwTyihsWO1za FWs18n6YSAbGe437SDc6NHm9MQw5nyACkIm6+Xpmm6YjYZqxvK22NrKcbjUZKUl6 lq8Aqx875qrCin7xOTkQYu3KHLcuo/FNhYQkI/+aCHMsSNeN8mZBNW8GkDRMsDsn g8NTWReFp59jmCXjlGCsIBAX0mPl2Loc9dVbP1WTiD8x8VE71KRBYO6JDAh04sr6 fGmWX1tGbTD6b05jQh1mQuUfoJEx7f2untXrHZdDhuuCqPpZceK1XU7Gqbxb9z/A OAJvKQdcB8oiGA== -----END CERTIFICATE-----Generated at Sat Jun 27 16:29:19 2026 by rpki-client