
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier: /aE/A3hEu98jIrE9NHLnPHyL9GtPPp55XklzPcUM0o8=
Subject key identifier: BB:07:26:32:2C:BE:BA:20:17:E5:13:87:21:A0:70:15:CD:23:4A:AE
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 01A176281D658333C3D9E183F3A517E495A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number: 1908
Signing time: Mon 26 Oct 2026 03:01:42 +0000
Manifest this update: Mon 26 Oct 2026 03:01:42 +0000
Manifest next update: Tue 27 Oct 2026 03:01:42 +0000
Files and hashes: 1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=)
2: 2hF8o3nRCJeM-T2KUqB72EQXa3E.roa (hash: AMf4zC4JBXPeXIjLuCvMdhg4jyKKMdkmmnMx34J32GM=)
3: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=)
4: BtTsEzm1e4QtS6zSVmaB8DAQMQo.roa (hash: mtVrLrYhk6uqSmhAjEOJwmtobN2n9Pkskxjnj6FvPpU=)
5: FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa (hash: tg987J0i644Z+rDUbSmguymeU+9jrpbhpfN7TJ7twhQ=)
6: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=)
7: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: VigNHX3KJ/oIntm+xYLVMBA9MzYzkEMJSMgz4IcXGfA=)
8: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=)
9: M4yvFOCrNQYrMEvHUynTCH1sRYg.roa (hash: AUJ02SjlaCnhsHTiNOzqXyVE53GehhBlvRs76nGe1NA=)
10: Nekk3PxF8fO-rhzaegHvfM_t41w.roa (hash: A1QX31c5i0IexwLkYJODSCPQogKNlG8IRZDo0disb/U=)
11: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=)
12: ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa (hash: rjgdc1W6vPpG3uPNkDBN/qtt12z0N51cOglFEFDyoWY=)
13: Pi6uT0MDxxHleo3_yZKxdHy8ou0.roa (hash: 5x3VDZkeU6jGG2nc7DGajOTETO/SJdxa0o8peRVLzVg=)
14: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=)
15: SZu55x7en_czyZkzfAyJFpU244Y.roa (hash: OzvmzSsqolBamLC2DAGFHbq89A4Q/ST8nHE6ANWH5N4=)
16: StqYfznXE-QPiA-TOmLGA4FrAS8.roa (hash: h5TKEuBn2q4c0zbHABA+TvU5nsvIwHYwDNRGaJto+e8=)
17: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=)
18: WBw7gw6osmHy0IqvZHLM8HMfKls.roa (hash: 9skt4Vx5fYnNFz8d3wonj2F4Wujetk0O7qCLQaqmEmE=)
19: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=)
20: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=)
21: aa15nZfX27ubGWEeb2X5ayBEBXE.roa (hash: w+5MiVWAe1cAGq7vjX3zG5riF68ch5od/IXze+J4XLM=)
22: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=)
23: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=)
24: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=)
25: jIiWE2zJZX5pFl0vy1PL64bE8T0.roa (hash: 2YBMClvraF+AFYCDBE549nteIWo0rkRBKQCVhkycQQk=)
26: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=)
27: lGKAv74gYmGH37A1DRbh0Rl9bx4.roa (hash: E14cPJbJ1TEA8BquVRSARSC5FdHT+0thzYkCOpdQdEk=)
28: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=)
29: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=)
30: oE74MoN2bW6fiMiut7Z-JHHL4Zo.roa (hash: eaim3HM5ZdDDRgbNAkLs2CPrhY68/sGFs70q9m6jby4=)
31: oKhpIH_BWd5Noqx6eV2DySEcGb0.roa (hash: N7FlWOqyJoex6ZmwsucsTTYLs5nNX4sZKRbn/6c/tug=)
32: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=)
33: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=)
34: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=)
35: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=)
36: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=)
37: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=)
38: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:28:1d:65:83:33:c3:d9:e1:83:f3:a5:17:e4:95:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Oct 26 03:01:42 2026 GMT
Not After : Oct 27 03:01:42 2026 GMT
Subject: CN=bb0726322cbeba2017e5138721a07015cd234aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:87:57:56:27:a8:04:cc:00:3c:c8:a3:4f:
e1:a8:5c:46:7c:ff:65:84:e0:c7:92:10:4b:40:05:
da:02:ac:4a:76:38:3b:2f:c3:47:70:15:2b:d4:52:
7e:92:21:51:cf:86:d4:0d:3d:78:ad:05:26:c3:a1:
6b:a1:6e:51:53:25:f0:17:09:02:5a:1e:f9:81:90:
a0:a1:55:e2:2b:cc:a0:05:f9:43:46:27:62:fe:f4:
85:e8:a4:d1:23:d8:dd:05:ce:45:3c:9e:17:55:27:
86:6b:86:29:eb:1c:ff:a7:32:cb:8e:f7:5d:cc:fd:
3d:91:c6:a9:d9:58:94:f3:81:b7:78:61:81:d0:9d:
b2:78:09:3e:28:90:f0:d5:8c:1e:8d:f1:d4:bf:02:
2b:17:86:4d:c4:e9:e5:f4:9e:2c:bf:bc:51:18:55:
9f:9e:88:2b:9c:fb:0d:c0:1b:7f:b8:d4:9e:26:10:
f9:f1:e7:f7:87:be:06:51:8d:05:c3:de:fd:9f:e1:
12:78:d3:70:c3:28:40:2e:a8:06:a3:e9:fe:ea:4e:
10:d7:e8:3f:e1:77:96:54:78:8b:d9:13:77:cc:7b:
6b:cb:a6:43:f5:4e:e1:7c:d9:ed:36:85:2b:59:ce:
99:f8:1e:5b:90:48:04:2b:b2:61:83:12:36:9b:ca:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:07:26:32:2C:BE:BA:20:17:E5:13:87:21:A0:70:15:CD:23:4A:AE
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c9:da:d6:d6:13:e2:76:b2:e4:88:41:f1:bb:5b:68:30:95:
6c:c2:7d:fb:c6:39:a8:10:11:bb:b8:6b:1d:54:e1:94:34:9a:
75:72:73:1d:04:86:27:29:21:dd:16:50:45:eb:2c:78:ba:41:
76:c0:eb:40:60:3d:42:21:cf:57:1b:05:21:9e:f0:e7:9d:40:
ac:18:d8:58:8a:c3:3d:e7:ca:79:c8:6d:bd:b3:7b:86:f1:5f:
b0:bb:ba:66:db:d3:54:f2:71:72:40:25:85:fc:26:26:54:de:
d6:15:85:eb:83:e7:3d:c4:99:50:3c:d1:66:f9:8a:82:23:0f:
00:31:c3:c0:2b:bb:9e:a5:6a:7c:5c:f4:b4:0c:cf:b6:61:12:
7a:4c:d2:5b:e6:a6:17:a0:8b:d3:0d:35:d6:98:06:c5:2c:21:
27:14:dc:f4:c5:76:af:99:34:b0:1e:e6:e2:9b:90:44:94:f5:
d3:21:c0:76:f9:23:a6:9f:ff:38:46:78:5d:75:43:53:27:78:
2a:f9:79:3e:4d:a8:4f:b3:0c:16:a9:dc:38:df:74:9b:c3:c9:
d4:5c:db:ff:56:bb:15:7f:0e:19:6d:b5:94:53:2f:b4:3c:bb:
68:43:7b:43:db:c2:30:68:75:3c:9b:b5:0b:f5:70:f0:51:9c:
4b:66:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:28:17 2026 by rpki-client