$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json) Hash identifier: oOqN3i175on3kSwE69/MAElR2R6YiD3i+BJfNPtz+Qg= Subject key identifier: 4E:FD:7C:0D:00:1C:42:73:15:55:C4:D3:32:03:15:2E:30:97:EC:17 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019D2FD05C3C0747000AF21659C278C5C068 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft Manifest number: 15F6 Signing time: Fri 27 Mar 2026 15:01:17 +0000 Manifest this update: Fri 27 Mar 2026 15:01:17 +0000 Manifest next update: Sat 28 Mar 2026 15:01:17 +0000 Files and hashes: 1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=) 2: A8pB-9bz15cQYivfjGrzOwMc7LY.roa (hash: EeHyMuPO8kK3PqKlWgKjT50oovE1gmYEWW0HAbBX2NI=) 3: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=) 4: IoVIx2I3x-PhEDaNiA3QsmgYRfU.roa (hash: LJmLkrAVOpzOpZpY71yZciCd1TYlZWcX63CtNAvFvDI=) 5: K_nPRyyftR4ZBlRYe5o2Y5tUvJI.roa (hash: q4zqaL21M35s9vhO9oi9xK7MF0lYvuEB0k/Aafia0Vg=) 6: Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa (hash: ujg1A0vQ9FG1rTPZa8Vj4tuAeoDxeA7TxCNsFbsOZaw=) 7: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=) 8: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (hash: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=) 9: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=) 10: b0ikFO_qS9n_MIPrxxc6L5fetdI.roa (hash: Iw0obDEuYCcKatWgGaJ1UaUj/yi9Stb3XdDj5CWjvRg=) 11: gJ8qTz8F8Bxee7YRY3fHs5lSfBE.roa (hash: ZSsM99NPJ9mDrPjXKAfCF2Vn2curJz1IzgR3LOEpDF4=) 12: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=) 13: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: V2qIsNlcLN8/TzegbDy8gLL5oHV/GfjWZ34pQdOB4fQ=) 14: sVnkdz-If3BToP_lR8Kbr7aviEw.roa (hash: Rccu1mXIlX1/SPnYu01bLRxxpECZ4YTVP8mo65xnQx0=) 15: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2f:d0:5c:3c:07:47:00:0a:f2:16:59:c2:78:c5:c0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Mar 27 15:01:17 2026 GMT Not After : Mar 28 15:01:17 2026 GMT Subject: CN=4efd7c0d001c42731555c4d33203152e3097ec17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:77:bd:c2:7c:7c:86:a3:e8:c3:f7:af:4b: 57:bb:7d:c8:d4:85:c4:4c:89:f6:d6:2f:f1:4b:a7: 57:24:9d:5a:c9:3c:53:2b:39:22:01:63:49:dc:a5: 05:04:79:83:db:86:f2:47:c6:12:08:c1:cf:01:85: 4c:aa:b1:6e:63:80:86:5d:d2:ec:22:f1:35:a3:35: fc:cd:b3:0c:7c:c0:57:32:16:89:12:9f:16:70:41: 92:6f:fc:d9:c7:88:35:62:f7:d6:f5:c4:5c:38:76: 20:6d:6f:8f:cb:dc:a7:b2:52:d8:2c:c1:c7:ea:f2: 67:54:32:b7:a3:07:7c:44:76:4b:6e:9d:4e:d7:5b: 8c:34:77:3f:78:7d:c0:87:96:24:6c:10:ca:ab:f5: d4:5c:99:b9:73:21:cb:5b:fb:21:8a:fa:b5:58:a0: c7:12:7d:55:84:fc:85:7f:99:fb:ec:f7:45:4e:ad: 75:64:fc:0c:32:73:66:e7:d7:93:e3:4a:ba:50:33: c0:1d:b2:12:16:7c:04:ce:64:6a:8c:ae:76:a0:8f: f6:af:d6:35:ad:ab:2a:27:36:75:a2:1a:cf:98:60: 49:69:0d:83:ba:5c:3f:a3:b1:32:82:c7:53:5a:a0: 9a:81:5b:cb:fa:9e:f1:37:3b:e9:3b:07:49:44:c6: 15:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FD:7C:0D:00:1C:42:73:15:55:C4:D3:32:03:15:2E:30:97:EC:17 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:5a:37:26:6d:36:39:5c:f1:21:24:74:7a:73:76:5c:87:a2: 3a:6f:a7:86:51:39:89:7f:d0:ae:4d:fa:f7:8b:b3:5b:52:6c: 37:e5:94:e9:ea:cc:97:b5:8d:b0:cb:b0:42:e8:b8:37:3d:78: ce:f3:2a:a7:25:18:77:4f:56:e3:f4:67:75:c4:e0:39:8d:d7: 6b:50:cd:17:c1:df:da:3f:7b:4f:23:e2:a4:ad:e2:84:03:8a: b9:e5:21:d0:90:f2:0d:4d:07:28:50:75:56:5c:96:2e:5b:6e: 99:d4:4e:29:53:5e:c7:e1:75:d8:9f:4c:f5:d5:76:f4:a0:ca: a3:ae:1b:0b:0b:84:35:1b:3b:99:91:db:59:89:24:e6:2f:82: e1:b9:ca:32:59:17:49:d4:8b:26:05:9e:b7:a8:cf:07:cd:8b: 3b:9c:17:8a:9c:87:35:23:9f:a8:a7:81:7f:a0:d1:83:d2:cf: 36:02:38:ab:86:4d:9c:23:13:f3:34:3d:cc:b8:86:2e:74:95: 15:ae:f3:89:1b:f3:23:09:28:08:47:d3:fe:26:fe:2f:01:fa: 9e:2b:eb:9e:ad:a7:cf:74:be:00:1c:83:17:89:d6:ed:5b:cc: 07:5c:f2:4f:64:06:d8:e3:e2:db:ee:31:45:f3:87:d9:60:7a: 1f:7e:e3:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0v0Fw8B0cACvIWWcJ4xcBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwMzI3MTUwMTE3WhcNMjYwMzI4MTUwMTE3WjAzMTEwLwYDVQQD Eyg0ZWZkN2MwZDAwMWM0MjczMTU1NWM0ZDMzMjAzMTUyZTMwOTdlYzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNl3vcJ8fIaj6MP3r0tXu33I1IXE TIn21i/xS6dXJJ1ayTxTKzkiAWNJ3KUFBHmD24byR8YSCMHPAYVMqrFuY4CGXdLs IvE1ozX8zbMMfMBXMhaJEp8WcEGSb/zZx4g1YvfW9cRcOHYgbW+Py9ynslLYLMHH 6vJnVDK3owd8RHZLbp1O11uMNHc/eH3Ah5YkbBDKq/XUXJm5cyHLW/shivq1WKDH En1VhPyFf5n77PdFTq11ZPwMMnNm59eT40q6UDPAHbISFnwEzmRqjK52oI/2r9Y1 rasqJzZ1ohrPmGBJaQ2Dulw/o7EygsdTWqCagVvL+p7xNzvpOwdJRMYVsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE79fA0AHEJzFVXE0zIDFS4wl+wXMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFo3Jm02 OVzxISR0enN2XIeiOm+nhlE5iX/Qrk3694uzW1JsN+WU6erMl7WNsMuwQui4Nz14 zvMqpyUYd09W4/RndcTgOY3Xa1DNF8Hf2j97TyPipK3ihAOKueUh0JDyDU0HKFB1 VlyWLltumdROKVNex+F12J9M9dV29KDKo64bCwuENRs7mZHbWYkk5i+C4bnKMlkX SdSLJgWet6jPB82LO5wXipyHNSOfqKeBf6DRg9LPNgI4q4ZNnCMT8zQ9zLiGLnSV Fa7ziRvzIwkoCEfT/ib+LwH6nivrnq2nz3S+AByDF4nW7VvMB1zyT2QG2OPi2+4x RfOH2WB6H37jVw== -----END CERTIFICATE-----Generated at Fri Mar 27 22:22:41 2026 by rpki-client