$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft File: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft (raw, json) Hash identifier: jL8BdwnayKJ7ky1oFWFrnzaZ6OoX/La0i2gEW3kbo9Y= Subject key identifier: A3:DD:88:D4:AB:49:E4:09:A9:4B:A8:55:21:1F:EB:24:ED:EC:3E:8F Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 019DD0513EB0EC0B4DF187EE6539009C99C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft Manifest number: 18EE Signing time: Mon 27 Apr 2026 19:01:18 +0000 Manifest this update: Mon 27 Apr 2026 19:01:18 +0000 Manifest next update: Tue 28 Apr 2026 19:01:18 +0000 Files and hashes: 1: 9erLWxF1i2Yda53dAoQL85cyRkQ.roa (hash: HcHl1aLLGyWyupRGZPmxNJ07j4g0I7ADLsDIJrI6OWA=) 2: GQiwBku-A5AZLc3avjt2f6r__BY.roa (hash: /sgvG1yd4aMwAy5Ru1eFPap5cgqJXUuTDaejadWpONE=) 3: KSQwvTcsugLeF8ojPhELBKcj4Vw.roa (hash: 9l2WRr+rrJBrqb+AyibzJsgOlsg/AuUh8/D4ng4z+vQ=) 4: SCVJdWoRmH545gbM0DgpC1jcOnU.roa (hash: cnGnIwzj7a9yMWu26KJot1qAUH3CJ8AY59GR+q3RFlo=) 5: WspMkb0p51mqI6CuSe5VuWipa0M.roa (hash: irxEvyIWUgOHMwq1N9qORbjVDA2FSkyh31LjTzt2wmg=) 6: ZmDWBkTRxBEt7eOvAGxI4ejJXRI.roa (hash: 4M3edEvw4um6hyXUTM5nV4KdfiUrbAeRuOpOMqVgH7w=) 7: ev4p5UC95DYulsJCA9cdXoaT76s.roa (hash: zACQ+LVNdYL8laZ9viOyRqqo+Dy/VXCfui0X6gmWGIQ=) 8: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl (hash: r2Flajj/LfBvWSDBEGucKuO5En7tuksV8GaHJHZDCDw=) 9: pE8M2TbspfgGizKPo-eHgEwMXpo.roa (hash: FBu5TKtrrPKwi3n1Wm4wF0JEluk4YeXT4bYDomJA4O4=) 10: v38e3j02THySXqkb5HchPvBe2-U.roa (hash: gT8zWmgwHK6wYraJegRxM73OA8zJN0ZGTcjtlfQRATU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d0:51:3e:b0:ec:0b:4d:f1:87:ee:65:39:00:9c:99:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: Apr 27 19:01:18 2026 GMT Not After : Apr 28 19:01:18 2026 GMT Subject: CN=a3dd88d4ab49e409a94ba855211feb24edec3e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:f9:99:71:b4:da:2f:d6:01:d3:9c:a1:ed: 0b:f3:b6:53:7f:f6:8a:be:da:5d:3a:af:08:40:43: a9:1b:3b:d4:29:39:2b:37:d5:f5:45:84:ab:52:f7: 7d:95:ff:6a:a4:68:32:69:a1:f2:f5:a2:01:8d:33: e5:3b:4b:9f:88:43:7f:1e:ef:04:f5:0c:49:d2:a1: 12:92:3e:02:a8:1c:54:43:6f:9b:ea:52:45:9a:1c: 76:a1:3f:a1:55:f7:61:13:e4:a0:4f:e2:3f:d8:f3: 33:6b:36:6a:d2:84:d9:3c:a7:6c:6c:d6:b7:c5:28: 0b:d8:61:e0:12:b8:d9:fb:a7:ed:18:ba:75:99:81: 49:01:e2:8f:c5:5d:3b:a6:23:51:43:46:90:1c:6f: 88:51:8c:92:83:a1:77:46:f3:b4:fc:f0:cf:82:5e: 80:2a:66:7b:45:e0:a0:19:25:43:ab:9b:b2:d6:78: e7:8e:71:e3:47:26:72:ec:b0:25:45:74:0c:9b:6f: 72:7a:59:21:e9:f5:d7:f3:c3:f8:3b:ef:54:91:ae: c0:fa:f3:a7:c3:b8:3f:40:ab:dd:ea:1c:66:b5:0b: 8a:0b:c3:15:42:07:b3:34:0a:91:5b:3d:e9:19:e1: a2:88:8c:9d:d8:d2:1e:5b:ac:7c:bd:da:52:97:f6: 5b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DD:88:D4:AB:49:E4:09:A9:4B:A8:55:21:1F:EB:24:ED:EC:3E:8F X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c5:47:e5:9f:b6:b1:03:6b:29:87:1a:fd:4b:50:6d:24:76: bd:7c:73:72:9e:b9:ef:88:1d:70:1d:b2:bc:b1:23:31:25:bf: bc:99:87:4a:ea:58:d4:1d:24:68:2a:ec:1e:e2:d6:43:e3:32: 29:3f:57:92:37:19:5f:d8:4f:5c:75:a9:9f:f0:18:9c:b7:a4: a1:73:27:4e:fb:50:e5:62:ed:d8:cd:2a:b2:25:14:f4:8e:45: 67:f6:67:0d:e6:74:98:fb:e8:15:9c:58:21:17:aa:46:11:04: a8:ce:cc:ab:1d:41:eb:22:9f:65:ec:60:ca:09:f5:ae:11:15: 8c:04:b4:11:c8:e2:f4:5f:2c:b0:2f:b5:d0:51:18:b0:f8:fc: 83:41:74:af:fc:1e:a6:3e:5f:5e:04:79:a1:4d:f1:f9:01:c3: 89:f0:c4:43:b0:27:ac:54:fe:f1:4f:48:d1:7c:67:e9:6f:d8: 4a:cf:79:12:3a:c7:14:ee:b9:3f:da:02:b8:33:8d:c9:4b:89: ff:8a:66:b8:ae:a9:91:7a:70:bf:c0:b4:17:23:d7:78:75:5d: bd:fb:13:7f:0d:e4:f6:dc:13:ad:c8:d1:df:7e:10:60:e9:b0: f5:ac:39:23:a2:45:98:4d:7d:af:d9:d7:d2:18:19:cf:58:df: a1:b8:60:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3QUT6w7AtN8YfuZTkAnJnFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjYwNDI3MTkwMTE4WhcNMjYwNDI4MTkwMTE4WjAzMTEwLwYDVQQD EyhhM2RkODhkNGFiNDllNDA5YTk0YmE4NTUyMTFmZWIyNGVkZWMzZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWb5mXG02i/WAdOcoe0L87ZTf/aK vtpdOq8IQEOpGzvUKTkrN9X1RYSrUvd9lf9qpGgyaaHy9aIBjTPlO0ufiEN/Hu8E 9QxJ0qESkj4CqBxUQ2+b6lJFmhx2oT+hVfdhE+SgT+I/2PMzazZq0oTZPKdsbNa3 xSgL2GHgErjZ+6ftGLp1mYFJAeKPxV07piNRQ0aQHG+IUYySg6F3RvO0/PDPgl6A KmZ7ReCgGSVDq5uy1njnjnHjRyZy7LAlRXQMm29yelkh6fXX88P4O+9Uka7A+vOn w7g/QKvd6hxmtQuKC8MVQgezNAqRWz3pGeGiiIyd2NIeW6x8vdpSl/ZbaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPdiNSrSeQJqUuoVSEf6yTt7D6PMB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcVH5Z+2 sQNrKYca/UtQbSR2vXxzcp6574gdcB2yvLEjMSW/vJmHSupY1B0kaCrsHuLWQ+My KT9XkjcZX9hPXHWpn/AYnLekoXMnTvtQ5WLt2M0qsiUU9I5FZ/ZnDeZ0mPvoFZxY IReqRhEEqM7Mqx1B6yKfZexgygn1rhEVjAS0Ecji9F8ssC+10FEYsPj8g0F0r/we pj5fXgR5oU3x+QHDifDEQ7AnrFT+8U9I0Xxn6W/YSs95EjrHFO65P9oCuDONyUuJ /4pmuK6pkXpwv8C0FyPXeHVdvfsTfw3k9twTrcjR334QYOmw9aw5I6JFmE19r9nX 0hgZz1jfobhgfQ== -----END CERTIFICATE-----Generated at Mon Apr 27 22:28:48 2026 by rpki-client