$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: bVvohL60UbGBnL3wUsJnphPuykfuEbnDmY+D0dWYLkc= Subject key identifier: 10:D5:10:96:0F:E9:FC:36:C7:63:8E:7B:AE:50:94:9D:BA:75:E5:7F Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019CBEF21D4EFDE8F40C9B35E8240C547EBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 187E Signing time: Thu 05 Mar 2026 17:01:04 +0000 Manifest this update: Thu 05 Mar 2026 17:01:04 +0000 Manifest next update: Fri 06 Mar 2026 17:01:04 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: 3PP5cZHpE54hIGtHp8kbYyxaZFQ.roa (hash: H82bfxWmiHNRJ1H7gR7ROjYOhxBbx/o5pU/AxcHnke8=) 6: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 7: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 8: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 9: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 10: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 11: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 12: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 13: Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa (hash: VfijZBef7xJk1wzgvIwnq71YHQKXU+yJECoJTQRx0kE=) 14: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 15: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 16: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: ImBWaSBfNoj6Wi/GxuHFmOr9JMU53CVjYewvxBI1z+Y=) 17: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 18: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Mar 2026 16:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:be:f2:1d:4e:fd:e8:f4:0c:9b:35:e8:24:0c:54:7e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Mar 5 17:01:04 2026 GMT Not After : Mar 6 17:01:04 2026 GMT Subject: CN=10d510960fe9fc36c7638e7bae50949dba75e57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:36:f7:68:b5:be:27:b0:c0:3a:c8:a5:9d: 86:86:ec:d0:d0:58:3e:c7:9e:86:f4:4b:e3:4b:d3: 5d:05:b8:21:63:82:a8:ac:6a:2d:54:79:39:68:e6: ae:ae:7f:5b:c6:04:14:8a:bb:78:9b:e7:df:13:f2: c9:70:34:d8:1a:3d:5f:bc:dc:5d:f2:25:53:90:51: fb:eb:d6:34:c1:1e:40:d8:85:7a:bf:3b:09:b1:0c: ce:ee:8b:8a:e5:8a:6b:9b:49:e4:b2:14:57:52:f1: d9:fa:24:df:61:7e:cf:fb:5c:0b:1a:29:cd:54:70: 8e:5b:ea:63:96:68:79:42:c3:2a:fe:51:ec:6c:6b: 30:09:fe:62:31:fa:03:aa:99:8b:e2:a1:d9:2b:e4: a9:54:77:1f:51:d3:ae:2b:a1:ff:67:eb:4e:f7:b6: d5:ab:40:46:48:90:32:27:ef:59:a8:ae:3b:0a:41: 81:3d:f8:e8:ff:bb:94:1c:10:1e:18:22:2e:51:21: 43:d6:b8:4c:e0:5d:b6:2c:b0:62:9f:a5:1e:f0:89: c5:b0:48:3d:84:c2:04:2f:99:c4:bf:a7:4d:ae:d2: fb:76:f0:10:c6:2a:30:3d:aa:c0:eb:c4:0f:be:e3: 03:fb:28:c6:23:6c:2a:41:56:b2:64:5d:20:69:47: 0a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D5:10:96:0F:E9:FC:36:C7:63:8E:7B:AE:50:94:9D:BA:75:E5:7F X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d8:7a:c2:4e:9a:61:bc:a8:92:b1:a7:16:72:d2:e2:98:e1: 03:03:90:03:f2:9d:37:de:61:71:c6:72:eb:ad:cf:fa:73:79: 5d:2a:f0:1f:2a:6a:a1:24:69:52:11:0c:f8:0d:b5:61:bf:4c: 46:cb:7d:95:74:92:65:42:16:fa:33:65:2a:63:a2:74:e3:1a: 5e:bc:e7:05:f5:8d:8c:94:05:3e:eb:e9:76:75:81:85:28:a6: cc:2e:07:cb:a8:d9:33:5d:e3:11:46:83:5a:51:7f:da:24:48: 46:6a:67:e5:4a:c4:f1:a8:4e:dc:81:11:b1:0d:73:a9:02:6c: 5a:f3:40:91:32:24:39:c9:f1:eb:63:5d:03:7c:fa:f7:46:a1: e8:5b:dd:e0:a4:fa:54:af:67:d6:52:4a:3c:ce:aa:df:c0:69: 51:c0:48:52:59:a0:46:fb:46:fd:4d:da:f9:f0:ad:50:62:14: de:bf:1a:39:b9:d4:c9:26:b8:30:54:d0:94:4c:83:26:5d:c7: e6:84:5a:45:46:ab:d0:88:40:bf:5a:48:52:ce:1c:5a:3f:e1: 78:91:39:ce:f7:e5:cf:1d:eb:53:0a:42:19:05:3f:2f:17:7d: 24:a7:41:df:41:b9:81:58:e9:8b:69:39:33:9c:79:3e:00:af: a0:e5:ac:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZy+8h1O/ej0DJs16CQMVH6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwMzA1MTcwMTA0WhcNMjYwMzA2MTcwMTA0WjAzMTEwLwYDVQQD EygxMGQ1MTA5NjBmZTlmYzM2Yzc2MzhlN2JhZTUwOTQ5ZGJhNzVlNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzs292i1viewwDrIpZ2GhuzQ0Fg+ x56G9EvjS9NdBbghY4KorGotVHk5aOaurn9bxgQUirt4m+ffE/LJcDTYGj1fvNxd 8iVTkFH769Y0wR5A2IV6vzsJsQzO7ouK5Yprm0nkshRXUvHZ+iTfYX7P+1wLGinN VHCOW+pjlmh5QsMq/lHsbGswCf5iMfoDqpmL4qHZK+SpVHcfUdOuK6H/Z+tO97bV q0BGSJAyJ+9ZqK47CkGBPfjo/7uUHBAeGCIuUSFD1rhM4F22LLBin6Ue8InFsEg9 hMIEL5nEv6dNrtL7dvAQxiowParA68QPvuMD+yjGI2wqQVayZF0gaUcKPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDVEJYP6fw2x2OOe65QlJ26deV/MB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9h6wk6a YbyokrGnFnLS4pjhAwOQA/KdN95hccZy663P+nN5XSrwHypqoSRpUhEM+A21Yb9M Rst9lXSSZUIW+jNlKmOidOMaXrznBfWNjJQFPuvpdnWBhSimzC4Hy6jZM13jEUaD WlF/2iRIRmpn5UrE8ahO3IERsQ1zqQJsWvNAkTIkOcnx62NdA3z690ah6Fvd4KT6 VK9n1lJKPM6q38BpUcBIUlmgRvtG/U3a+fCtUGIU3r8aObnUySa4MFTQlEyDJl3H 5oRaRUar0IhAv1pIUs4cWj/heJE5zvflzx3rUwpCGQU/Lxd9JKdB30G5gVjpi2k5 M5x5PgCvoOWsdg== -----END CERTIFICATE-----Generated at Thu Mar 5 23:21:58 2026 by rpki-client