$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: xJ/AVUpcaZ8u/EJSLD6K30OFTf+KNvWWyHhxQAWzRZ0= Subject key identifier: AB:26:2A:E6:94:F6:A7:30:D2:61:08:5B:D0:D3:23:50:D2:5C:1F:BF Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019F9FCD2DFDC2486F119ED62B8D43E4262D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 17D6 Signing time: Sun 26 Jul 2026 19:00:51 +0000 Manifest this update: Sun 26 Jul 2026 19:00:51 +0000 Manifest next update: Mon 27 Jul 2026 19:00:51 +0000 Files and hashes: 1: 1-MNz1qgM3BisP8pynJ-h5fPgpxw.roa (hash: Hf80PSzQpFEh05UT8oCnoafaP3U3KLXh1X8GWZOOWpQ=) 2: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=) 3: 67cb4CVEd93Kal1WB78eaZaXMaQ.roa (hash: ZcMr0wkok+GwKeLBJ19lhnn1dS3XMFc3UKTI/fu+EjQ=) 4: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=) 5: FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa (hash: tg987J0i644Z+rDUbSmguymeU+9jrpbhpfN7TJ7twhQ=) 6: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=) 7: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: oRwGFaKdPINpKP8RdUgeGw3yJ51bpKAIbIq23iL+0a0=) 8: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=) 9: JWQS_G0UFZx3QuPZOTGxg1qvEz4.roa (hash: EY/6Bg0MTFnpdKXxUkbSSCAlhGDkkCzuChVoiMDOUcE=) 10: M4yvFOCrNQYrMEvHUynTCH1sRYg.roa (hash: AUJ02SjlaCnhsHTiNOzqXyVE53GehhBlvRs76nGe1NA=) 11: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=) 12: ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa (hash: rjgdc1W6vPpG3uPNkDBN/qtt12z0N51cOglFEFDyoWY=) 13: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=) 14: StqYfznXE-QPiA-TOmLGA4FrAS8.roa (hash: h5TKEuBn2q4c0zbHABA+TvU5nsvIwHYwDNRGaJto+e8=) 15: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=) 16: UWnvj61RxMXCdGTXgUybwOUFpkE.roa (hash: UQXxnIOrFfoWsnkN1Vg3gQakqcKwTGfkenZBJ3YxlPc=) 17: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=) 18: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=) 19: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=) 20: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=) 21: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=) 22: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=) 23: lGKAv74gYmGH37A1DRbh0Rl9bx4.roa (hash: E14cPJbJ1TEA8BquVRSARSC5FdHT+0thzYkCOpdQdEk=) 24: l_T5dd2JcZVqJM1VJYNvTyV8LJw.roa (hash: HR6ptQCMdThZ1PMDVclOOHeHNKKZwAZroNYyVK4P37c=) 25: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=) 26: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=) 27: oKhpIH_BWd5Noqx6eV2DySEcGb0.roa (hash: N7FlWOqyJoex6ZmwsucsTTYLs5nNX4sZKRbn/6c/tug=) 28: pMQVecamDodQSmBw-UmLqkRzTyk.roa (hash: EmfM/FtUUlT/f5+MPBX6UPv6rg0dkI+I1HJgurEQFXU=) 29: pbnN9srlyaf0BgeZnbG7vJQQcDg.roa (hash: W564THz4iqZL14hlu/uRhAEJ9fbzZM3yuaKczKwNTLE=) 30: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=) 31: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=) 32: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=) 33: w7z-BZ3rqNQrFmRHttbnDiZ4_pc.roa (hash: Oi5pXvAB+JPYM6z0KbwrvUVqx+IEISCt2YPJDDcKR6M=) 34: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=) 35: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=) 36: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=) 37: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:cd:2d:fd:c2:48:6f:11:9e:d6:2b:8d:43:e4:26:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jul 26 19:00:51 2026 GMT Not After : Jul 27 19:00:51 2026 GMT Subject: CN=ab262ae694f6a730d261085bd0d32350d25c1fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6a:e5:21:0f:33:51:67:af:a9:90:07:01:2f: c4:10:d5:99:c2:fe:f0:03:df:fc:a6:52:3d:b0:47: 02:3b:47:88:b4:ec:a7:86:5d:eb:0c:2a:57:b6:82: 0b:62:9f:d5:ca:58:62:28:14:29:dd:ef:30:4c:7b: 33:61:fe:6d:61:d6:90:44:00:f9:ce:63:36:52:ed: c6:e9:45:1a:77:8d:0e:d3:72:12:01:33:59:c2:8e: 87:11:34:30:ba:cd:53:95:42:16:5d:66:09:fa:11: ee:e3:b0:75:e0:64:6c:e0:24:a6:7e:e4:67:89:cf: 72:27:1b:57:59:43:10:f1:30:9f:17:e8:fc:4e:72: a7:16:a7:5b:af:6e:43:de:ff:b5:c0:32:77:23:40: 40:5c:d0:54:aa:61:bd:6f:f9:23:d8:2a:9d:3a:12: 68:24:ac:59:88:c6:63:9f:61:12:3d:c6:e7:df:f1: 6b:5d:37:3d:86:ea:68:5c:53:27:e4:f1:90:34:8a: 6f:f5:2f:d7:8e:81:2a:a5:a2:0e:cf:a5:dd:81:e1: d1:51:e0:e0:e4:33:04:79:30:53:81:3a:77:e6:ac: 2f:6f:e9:30:99:72:86:6b:6a:cf:ac:17:35:9c:69: 2e:25:6a:5e:af:07:9e:12:3a:11:2e:4e:f8:d0:47: 15:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:26:2A:E6:94:F6:A7:30:D2:61:08:5B:D0:D3:23:50:D2:5C:1F:BF X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2e:ec:88:5e:24:db:71:de:ad:de:b5:cf:fc:15:d8:d0:f4: 2a:81:4f:90:6c:76:57:95:69:f4:0d:23:25:ff:29:6c:77:67: 55:83:14:3a:81:ed:e8:7b:97:42:6b:31:ec:5a:c2:5f:b5:97: 05:36:30:18:1a:6f:57:8f:43:09:b3:c3:d0:16:76:0f:07:94: 54:b8:66:5d:b4:9c:fe:02:c7:86:4b:79:51:3c:12:37:31:64: e5:ac:8a:0c:f1:e9:ea:de:0e:58:89:24:b5:58:52:cd:ed:81: a9:25:92:d9:ba:34:12:aa:15:63:78:51:27:c0:ff:45:68:5a: 1d:eb:7d:6c:bf:fc:e3:cd:2d:74:b7:9d:06:a8:4a:18:5f:f9: da:6a:64:f9:dc:f8:e1:91:eb:55:41:75:17:eb:7c:fd:2c:7e: 20:f8:56:c8:32:19:39:19:45:e0:64:65:c6:e8:31:fd:b1:7d: dc:1c:50:71:be:7c:83:bc:f7:4a:8a:87:84:0f:13:c9:89:41: 1b:0d:f1:b2:74:dc:1d:64:d0:8e:95:65:02:4c:0f:d5:05:53: 6c:b6:08:d9:9d:5c:d4:9a:89:8d:35:69:d6:fa:e5:87:66:39: ac:37:9f:42:75:45:67:9c:c2:5a:89:7e:15:d5:f7:eb:46:e2: a8:b9:b7:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fzS39wkhvEZ7WK41D5CYtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwNzI2MTkwMDUxWhcNMjYwNzI3MTkwMDUxWjAzMTEwLwYDVQQD EyhhYjI2MmFlNjk0ZjZhNzMwZDI2MTA4NWJkMGQzMjM1MGQyNWMxZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmrlIQ8zUWevqZAHAS/EENWZwv7w A9/8plI9sEcCO0eItOynhl3rDCpXtoILYp/VylhiKBQp3e8wTHszYf5tYdaQRAD5 zmM2Uu3G6UUad40O03ISATNZwo6HETQwus1TlUIWXWYJ+hHu47B14GRs4CSmfuRn ic9yJxtXWUMQ8TCfF+j8TnKnFqdbr25D3v+1wDJ3I0BAXNBUqmG9b/kj2CqdOhJo JKxZiMZjn2ESPcbn3/FrXTc9hupoXFMn5PGQNIpv9S/XjoEqpaIOz6XdgeHRUeDg 5DMEeTBTgTp35qwvb+kwmXKGa2rPrBc1nGkuJWperweeEjoRLk740EcVLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsmKuaU9qcw0mEIW9DTI1DSXB+/MB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS7siF4k 23Herd61z/wV2ND0KoFPkGx2V5Vp9A0jJf8pbHdnVYMUOoHt6HuXQmsx7FrCX7WX BTYwGBpvV49DCbPD0BZ2DweUVLhmXbSc/gLHhkt5UTwSNzFk5ayKDPHp6t4OWIkk tVhSze2BqSWS2bo0EqoVY3hRJ8D/RWhaHet9bL/8480tdLedBqhKGF/52mpk+dz4 4ZHrVUF1F+t8/Sx+IPhWyDIZORlF4GRlxugx/bF93BxQcb58g7z3SoqHhA8TyYlB Gw3xsnTcHWTQjpVlAkwP1QVTbLYI2Z1c1JqJjTVp1vrlh2Y5rDefQnVFZ5zCWol+ FdX360biqLm3rQ== -----END CERTIFICATE-----Generated at Sun Jul 26 20:33:20 2026 by rpki-client