$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json) Hash identifier: eIqqIM/18zXI4RUT09FHpf0q/XXp96P18SXHCsajA/0= Subject key identifier: 51:40:28:E6:8F:13:41:B5:2A:73:EB:2E:8E:1C:9F:2A:89:55:CE:A7 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019DCDF4886E8D7E1FA2022DC1EF9E3D2DCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft Manifest number: 1906 Signing time: Mon 27 Apr 2026 08:00:47 +0000 Manifest this update: Mon 27 Apr 2026 08:00:47 +0000 Manifest next update: Tue 28 Apr 2026 08:00:47 +0000 Files and hashes: 1: 1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa (hash: Fu35/+YQg8Zu+dlavAtKg8JaD90oFzzH1onpdQ5Y6oY=) 2: 6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa (hash: 8GvbG6s3RPwfopIs9XgARrrF1rjC6XY19ETpAszLP8I=) 3: 9j9Cr3fnwmgjqkXx14urDbJasp0.roa (hash: KW0VD6lDdNbgIp4ZsL2MGrtyxm+1LW6cNcgokA6BqI8=) 4: FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa (hash: htFUuvTJdlK2gOgKs0gKKqW+9jnUAHhAceSH0KAekak=) 5: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: tk/BPaK0h1VxSPJ3zJkCTns2R0pnoTLNLO637cOrQcU=) 6: K7e0_WclzsRxbDgQl0m2GyC0awM.roa (hash: vQbkQa9JX2Q86b4F0AezEHB0GMnTiQRSgXLPAgphUxE=) 7: LL4asLDw3271RX0UzOrcd8UQePQ.roa (hash: g9EWeVbWKxalUxSKi4YGS0KlwOF+b+mjphC2cg6OVVo=) 8: M2737Kt-OKT4cwZg4viZL0ezWHk.roa (hash: Xgsds8L8YcUZbYe9UXVPzU1lKNJSTQTeXad2hhRxl9I=) 9: MBkrOOhdhon2PhUZJgtjDAd8tOU.roa (hash: hW4AmvxmksvcWmVBpumWyTnm5KximR6PbhMb2CKistg=) 10: N3UnlwMOiCPor8fOEr__gAYIrSM.roa (hash: x/pwXlflb9SsnKG7wuuULMx75zKgSUqP9QAnUFoqRhs=) 11: NipgiA7nWo95KVHsFSO0BGsePIE.roa (hash: G+j2PLZUQhdVgxq/HyRkEd9NcDIecek/OBFAXQhHzkc=) 12: O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa (hash: HTqDYC1nRE3LkJmUy9M4M3I587kOWgHXriuwbMluE8E=) 13: RipkiCpTN4mFL2FF9zHdpp9YCjk.roa (hash: OnPLwFbKkZSd7QY8QBHcfUOy4okcvY1rfsmoZKGmWi8=) 14: T1F3qk8LhawCDk9nTAf4naoGRg8.roa (hash: aQgPYoClwrq8NkswlVpVaf501J/wYiiEJsgo08XzB5k=) 15: Toi74ngMk8iMkETT7QmeelInLio.roa (hash: cdnyZv5QV1TwjMBRgbJCcQqcC2938hSblX1iGXnlsPg=) 16: W522yPrkm1ETf534dyGiRFmcWcU.roa (hash: ciBX1xa4glvJ/scnztG/cwNIztp6J0jz4XLKjig6bnM=) 17: YFhff6PieA-0R_-D6roOZogSJYw.roa (hash: uq54FImU4X4n4Q5wAXCqz42QpkCkIhO0GgHxJfUTPP8=) 18: aKfQ-5lMgYP0JI0A9n1qEYkxhDQ.roa (hash: r2Wo2GFq531NFIKM8VlPd5aTqIW84E3DIi1eqRZI5bQ=) 19: aPlZnQWtj-q04HWeqXabAKMT6h4.roa (hash: qMB7kiStIsp5/ItJSnoaHMSnB7QpqZcmeaPW1lPudSI=) 20: b3x9MgXvL3PTr4don27jJ7KcZ-U.roa (hash: og0sUIx4pVJgJgZExjSAsHZvgWsvBSypO6sOjz57nD0=) 21: cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa (hash: wujKocfHMBpZH00dc6pNcl9yD87nGXF+SDw9jaWJwcU=) 22: fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa (hash: Qirqc0W+Lqc03wM+xcAN53u2usp9+4O2S+/ddNQhy1w=) 23: jWoRYR9vyoo8wUHVWZfj1tYbQ0c.roa (hash: ki7rn/TPVckAv9oDK5QbYG54npDkl0kTyH1HzO1vxxw=) 24: kxJnezzNDEUiqIwrMrS9hJJJeag.roa (hash: zz7Ieb04C6jhC5Jd17Xzul9nQQzF2s391XrM6eqtYg8=) 25: lyUxPH3p1gyRR8v9TM54AekVNQY.roa (hash: P4j9D2TQV05hcP6DYizsgQ0f8usXVytikc5NgAea7u8=) 26: oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa (hash: oHOFp9TL81c7KtMVFWQ9DGRuGttBJhr1ayJ1ZSxs8Lw=) 27: p9QObIf1OeGL35dA6XPq_krw2hU.roa (hash: j+Grnpqo/obd2JzfzoB1ui5FPqoBL910Sxe8EfKjVvM=) 28: sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa (hash: opJzNV6FEUtzmIuV3nD2tt4j7hDOk/PqNpj2ykTZfgU=) 29: xc_O8fJNKB9MZ99docy925NUS6M.roa (hash: YAI+l3E+qbq82kgBXviylGXScO5+u/jTMIel+5Z3CL0=) 30: xzpWx6VUIpGcmh-1iUpPlYZppMU.roa (hash: UNWYOyMIvw/ynQuOswCka5zDXJh3HAZAPdJ+HWke4dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:f4:88:6e:8d:7e:1f:a2:02:2d:c1:ef:9e:3d:2d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Apr 27 08:00:47 2026 GMT Not After : Apr 28 08:00:47 2026 GMT Subject: CN=514028e68f1341b52a73eb2e8e1c9f2a8955cea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:da:01:0b:e4:e7:d1:77:c8:be:1e:1f:80: fa:54:52:80:46:5c:5e:71:78:a3:9e:9d:bc:26:f1: cc:f7:08:51:77:8c:3d:c5:e8:06:9f:80:fc:c9:11: 0b:9f:00:bc:e8:27:5d:c3:4e:a4:bc:36:eb:ae:20: 67:1b:92:df:73:61:b8:bb:06:aa:04:f6:fa:a8:b3: 58:c3:87:6a:67:8f:fd:89:96:30:ce:36:ca:84:92: 2a:89:d9:b3:d7:8d:a7:f5:ff:3a:7c:cb:4d:e6:09: 25:46:b7:22:ec:0d:42:88:e3:b9:f7:c6:db:a9:4b: 33:38:26:d0:56:b6:3f:b9:1d:a1:96:90:fe:30:52: 45:c0:bf:0a:ba:55:85:1d:31:06:ee:72:5e:85:31: 4f:01:4c:56:ed:9a:f7:bf:9d:35:5e:53:88:e9:54: 96:e0:5c:63:ec:58:24:cf:a4:fd:68:04:08:1b:86: 3c:7f:e2:3b:c1:08:a8:01:fe:cf:bf:98:f4:42:6a: 5d:5a:49:6d:b3:17:67:25:3f:f1:8a:2a:51:a2:a8: c0:b7:de:d6:85:1b:19:39:c4:d6:28:44:51:29:3c: 5b:64:17:de:04:33:c8:ad:f3:a3:1d:5d:78:a2:3a: 6b:d0:0d:6d:77:a7:b3:9a:5e:b0:ae:96:c9:00:7b: 85:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:40:28:E6:8F:13:41:B5:2A:73:EB:2E:8E:1C:9F:2A:89:55:CE:A7 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:4a:bf:11:4c:13:91:01:11:c1:01:dd:1b:6c:6b:29:80:e4: fe:bd:e4:79:4b:69:3e:8a:cd:86:63:5f:4b:a9:d9:3c:55:46: 23:6d:5d:68:a8:78:3c:4c:5e:b1:c9:82:29:e2:39:d9:ad:b3: a9:7a:8a:83:db:a8:77:5a:1a:c0:c5:7b:86:3e:c8:bf:a8:c6: 11:58:ff:1e:c2:97:de:fa:69:f9:7f:9c:d6:30:7c:48:b9:aa: 41:c1:d3:80:32:a9:da:27:b7:27:73:7a:63:9a:cd:b6:48:47: 3b:0e:1b:23:47:6d:26:9f:ed:4b:18:3b:2d:f4:2e:9a:a8:ad: 90:e2:3c:0e:c0:a3:55:ed:c7:46:65:a3:81:2b:c3:e8:fc:72: 28:f5:90:d9:12:bc:a3:52:ff:c6:37:b2:57:c5:f1:54:ef:f3: 1d:3f:a1:ef:d6:8c:1b:f3:3b:93:10:61:75:d8:c7:3b:cd:5a: dc:20:be:78:00:c4:a1:6a:e2:68:ff:5d:8f:68:32:98:27:da: 82:e9:7e:fc:48:fa:00:4f:0c:f9:a0:29:9d:b6:25:ac:f1:68: 54:d8:30:af:2e:07:60:bd:f5:15:5b:50:6a:79:99:00:1f:a6: 9b:84:f1:68:55:e6:95:2d:ed:6b:da:65:1f:4b:52:bd:94:a6: b3:63:81:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3N9IhujX4fogItwe+ePS3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwNDI3MDgwMDQ3WhcNMjYwNDI4MDgwMDQ3WjAzMTEwLwYDVQQD Eyg1MTQwMjhlNjhmMTM0MWI1MmE3M2ViMmU4ZTFjOWYyYTg5NTVjZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLHaAQvk59F3yL4eH4D6VFKARlxe cXijnp28JvHM9whRd4w9xegGn4D8yRELnwC86Cddw06kvDbrriBnG5Lfc2G4uwaq BPb6qLNYw4dqZ4/9iZYwzjbKhJIqidmz142n9f86fMtN5gklRrci7A1CiOO598bb qUszOCbQVrY/uR2hlpD+MFJFwL8KulWFHTEG7nJehTFPAUxW7Zr3v501XlOI6VSW 4Fxj7Fgkz6T9aAQIG4Y8f+I7wQioAf7Pv5j0QmpdWkltsxdnJT/xiipRoqjAt97W hRsZOcTWKERRKTxbZBfeBDPIrfOjHV14ojpr0A1td6ezml6wrpbJAHuFZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFAKOaPE0G1KnPrLo4cnyqJVc6nMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzkq/EUwT kQERwQHdG2xrKYDk/r3keUtpPorNhmNfS6nZPFVGI21daKh4PExescmCKeI52a2z qXqKg9uod1oawMV7hj7Iv6jGEVj/HsKX3vpp+X+c1jB8SLmqQcHTgDKp2ie3J3N6 Y5rNtkhHOw4bI0dtJp/tSxg7LfQumqitkOI8DsCjVe3HRmWjgSvD6PxyKPWQ2RK8 o1L/xjeyV8XxVO/zHT+h79aMG/M7kxBhddjHO81a3CC+eADEoWriaP9dj2gymCfa gul+/Ej6AE8M+aApnbYlrPFoVNgwry4HYL31FVtQanmZAB+mm4TxaFXmlS3ta9pl H0tSvZSms2OBuw== -----END CERTIFICATE-----Generated at Mon Apr 27 15:34:11 2026 by rpki-client