$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: MiI+lCF1ocA0YAPVGId0cGtCHUOswRhkkLSoIDr1QTA= Subject key identifier: D0:6B:C1:0C:9A:82:D1:5D:11:83:C8:54:A2:BF:E1:19:A7:0F:63:0D Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 01A1AB5E7EBC657F0369FBF2AA67A6AE4DBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 0788 Signing time: Thu 05 Nov 2026 11:00:59 +0000 Manifest this update: Thu 05 Nov 2026 11:00:59 +0000 Manifest next update: Fri 06 Nov 2026 11:00:59 +0000 Files and hashes: 1: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (hash: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ=) 2: 1fRolkRjd-APCzNnG-5bwuoOqNg.roa (hash: uECN6gUKiv+lFioLhpnkI4G1xAlKUZVG1VCjkCRQOjI=) 3: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (hash: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0=) 4: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (hash: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA=) 5: 776kTfMAU9E-GA6tUE0dWf03NFE.roa (hash: XZPUoY2R1970iMjMj9p+da3kkexyw+ixtJZJMB7YrV8=) 6: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (hash: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww=) 7: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (hash: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU=) 8: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (hash: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4=) 9: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (hash: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU=) 10: Jt1l3PmmzdbcYP2rfmhzsDtcPhI.roa (hash: zt/605nd1EgOMLhSVE8EHytRNsfa1q/ziCZNE0ebjzg=) 11: PI0GWokWQCIYbfxBSxMKrWG4rlA.roa (hash: qRwJTh2gHSy2lv6qJPXbAlMzsB4kzURHt7CqQP0XkRU=) 12: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (hash: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA=) 13: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (hash: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=) 14: Y0JbxOj_u8eJzUeHjUqUp5ZzdjI.roa (hash: upN3TgIZvGzCE5YLEWAdPuZbKmynb15EXTQ5pfRhfMc=) 15: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (hash: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ=) 16: avrcnfB12N6L1uAItV4pxr4ZeBk.roa (hash: UCrkK/t7tVltSG/GoHf/iVcJnaXfqtG/1ac64yo7m4E=) 17: eACO2yCjoUrbvQ0JX-Nn8dYuPTk.roa (hash: Wd2jDAAyhumbAmYMvyrhZDJmp4gnAqsr/TiV6fYbZEY=) 18: hMoYvytTC8MSE72GcaOmUQp55TM.roa (hash: QNj9222JszfBwsXWHLHqGbqHpk9emhsVOXPVoX1Flpc=) 19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: ivhouN4UZl49r8wI+Sz5MY7NlOCR+S0pJflCylzQf1M=) 20: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (hash: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs=) 21: mteXnhrKW4UcFXmC6pNCQAuf4Pw.roa (hash: NnB8bbhHyzge0VH991cztaw1RwdFso0G4mF03oqzlUw=) 22: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (hash: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE=) 23: xJkF66cCvGxEcbXW72kYSvCe9pc.roa (hash: 8ukNpwANOCXSCFQousC6/SlMGWqDu4dvIjSPXAjmXlo=) 24: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (hash: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg=) 25: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (hash: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE=) 26: y78xNtcYu21c47h3KufgEPgZVnE.roa (hash: MwiDwZITS/z04aTqMBZZx2J7qe1RkzKld+egFNWQZro=) 27: ycFTntx4cs4onGaGpj0o47JW98Y.roa (hash: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:ab:5e:7e:bc:65:7f:03:69:fb:f2:aa:67:a6:ae:4d:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Nov 5 11:00:59 2026 GMT Not After : Nov 6 11:00:59 2026 GMT Subject: CN=d06bc10c9a82d15d1183c854a2bfe119a70f630d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f1:a7:c7:e2:a4:68:e4:54:57:51:36:1c:f5: fb:c7:18:42:88:fb:3b:0f:41:08:ce:b0:fe:6a:8c: 4f:0d:d4:06:a5:1d:36:05:3a:41:84:2b:1d:08:4b: b3:37:b4:b7:de:17:29:cb:0f:84:a0:85:21:c5:e1: 4f:e1:01:1f:25:40:3e:2f:ed:b5:9d:74:f4:cc:cc: d0:47:a7:06:32:3c:78:4e:a4:51:ea:29:9c:e3:f3: ec:d0:f9:43:e4:aa:ae:86:5a:c3:df:e2:08:5f:31: 26:03:a5:eb:c2:f7:5b:c3:49:2f:22:a0:f9:5c:02: c2:79:80:23:c9:10:40:5f:40:6e:9b:a8:1e:a5:d4: a4:67:f9:ef:a0:68:70:75:3d:43:2d:7f:a8:a1:b0: 7d:93:f6:84:0d:61:71:01:00:34:7a:59:71:08:f3: cb:85:8a:26:a3:21:03:76:bb:ca:f5:45:b5:a9:71: b9:5d:46:2d:63:5e:8b:ec:15:f8:9c:3a:b6:06:2b: d8:3a:b0:6c:f2:08:24:31:9c:28:83:01:3f:70:b6: 54:4d:9a:50:07:75:27:71:af:eb:08:aa:00:0c:d2: 37:dc:31:c9:ef:98:50:5f:4b:86:18:97:2e:a0:0f: c0:82:a4:10:3e:f0:2e:35:f6:ea:da:14:66:fe:1a: 2b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6B:C1:0C:9A:82:D1:5D:11:83:C8:54:A2:BF:E1:19:A7:0F:63:0D X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d4:55:f5:6e:08:2b:58:f5:44:e8:8e:02:04:11:e6:81:9d: 47:dc:dc:20:c7:85:af:ab:e8:14:a9:26:6a:20:0d:db:2d:81: b4:32:27:b6:8f:bc:fc:58:29:2d:79:ec:8d:23:ba:e3:0e:48: 3f:a5:33:f7:28:0a:db:cc:50:f3:97:1a:8e:de:2d:26:ae:c9: 36:f0:00:ba:38:72:28:70:96:0e:51:4f:70:83:e5:8b:3d:67: d0:d3:27:3f:95:fe:79:4f:92:6c:e4:bf:f5:9b:95:1b:91:0d: e3:a5:05:ef:f0:0e:fb:a8:4a:5c:67:35:34:54:7c:8b:9d:c2: f1:e4:58:52:a5:11:6e:94:1d:ef:f9:18:aa:69:b1:93:de:57: b4:80:37:15:df:97:61:c1:b9:1b:19:69:92:77:69:32:86:e3: 23:60:5d:aa:ed:9d:fc:8a:b6:de:b5:69:c6:4b:17:44:88:29: dd:c1:a2:da:c2:d3:db:ed:75:a9:b4:89:a0:91:80:d3:6d:68: e6:a5:34:da:7d:4e:2f:c3:c4:7d:2d:60:79:83:d9:f2:fa:1e: a3:a5:2d:b0:00:d1:2f:25:31:cb:f6:bf:24:ce:cf:e6:8f:24: a1:e3:25:48:ea:d6:c6:3b:a4:44:04:bd:fc:45:17:99:7f:e5: b1:5d:29:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGrXn68ZX8Dafvyqmemrk2+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYxMTA1MTEwMDU5WhcNMjYxMTA2MTEwMDU5WjAzMTEwLwYDVQQD EyhkMDZiYzEwYzlhODJkMTVkMTE4M2M4NTRhMmJmZTExOWE3MGY2MzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/Gnx+KkaORUV1E2HPX7xxhCiPs7 D0EIzrD+aoxPDdQGpR02BTpBhCsdCEuzN7S33hcpyw+EoIUhxeFP4QEfJUA+L+21 nXT0zMzQR6cGMjx4TqRR6imc4/Ps0PlD5KquhlrD3+IIXzEmA6Xrwvdbw0kvIqD5 XALCeYAjyRBAX0Bum6gepdSkZ/nvoGhwdT1DLX+oobB9k/aEDWFxAQA0ellxCPPL hYomoyEDdrvK9UW1qXG5XUYtY16L7BX4nDq2BivYOrBs8ggkMZwogwE/cLZUTZpQ B3Unca/rCKoADNI33DHJ75hQX0uGGJcuoA/AgqQQPvAuNfbq2hRm/horRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBrwQyagtFdEYPIVKK/4RmnD2MNMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdRV9W4I K1j1ROiOAgQR5oGdR9zcIMeFr6voFKkmaiAN2y2BtDInto+8/FgpLXnsjSO64w5I P6Uz9ygK28xQ85cajt4tJq7JNvAAujhyKHCWDlFPcIPliz1n0NMnP5X+eU+SbOS/ 9ZuVG5EN46UF7/AO+6hKXGc1NFR8i53C8eRYUqURbpQd7/kYqmmxk95XtIA3Fd+X YcG5GxlpkndpMobjI2Bdqu2d/Iq23rVpxksXRIgp3cGi2sLT2+11qbSJoJGA021o 5qU02n1OL8PEfS1geYPZ8voeo6UtsADRLyUxy/a/JM7P5o8koeMlSOrWxjukRAS9 /EUXmX/lsV0pAw== -----END CERTIFICATE-----Generated at Thu Nov 5 16:15:10 2026 by rpki-client