$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: 5DrZwHLE+EGq5CzEAgAHKW88NWDoVHBSUZKFXAV8Upc= Subject key identifier: 9C:BA:01:2F:37:F6:F7:04:83:EA:38:FF:23:B9:47:2A:0D:8E:8F:5B Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019DA89E84AEDA83BD73F53022A24F87E986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 18F7 Signing time: Mon 20 Apr 2026 02:00:53 +0000 Manifest this update: Mon 20 Apr 2026 02:00:53 +0000 Manifest next update: Tue 21 Apr 2026 02:00:53 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: 3PP5cZHpE54hIGtHp8kbYyxaZFQ.roa (hash: H82bfxWmiHNRJ1H7gR7ROjYOhxBbx/o5pU/AxcHnke8=) 6: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 7: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 8: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 9: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 10: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 11: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 12: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 13: Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa (hash: VfijZBef7xJk1wzgvIwnq71YHQKXU+yJECoJTQRx0kE=) 14: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 15: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 16: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: UOTp9nuMW4VsUx+lL/wkENEC4+wH5kAaDVCONtQwHHQ=) 17: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 18: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a8:9e:84:ae:da:83:bd:73:f5:30:22:a2:4f:87:e9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Apr 20 02:00:53 2026 GMT Not After : Apr 21 02:00:53 2026 GMT Subject: CN=9cba012f37f6f70483ea38ff23b9472a0d8e8f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5d:7e:50:fb:50:bb:a5:db:78:c4:76:33:0a: 88:52:19:a4:8e:ed:17:4d:23:95:68:77:42:49:1c: 2c:bb:4c:ac:6f:3c:38:c5:68:7c:95:ae:af:89:22: db:01:07:66:7c:b2:6e:eb:18:85:3b:3f:d3:79:d0: 48:ad:a3:11:c7:e9:55:d6:19:af:c0:8e:64:52:35: 98:bf:59:51:f5:4f:2f:37:e0:53:1a:87:86:40:a7: d7:b9:26:34:1f:fc:6d:ec:15:a2:dd:57:d8:cf:74: 47:96:c7:61:4e:61:10:b1:2f:70:62:1e:1a:0d:4e: e5:e6:55:f1:75:a5:90:fa:44:2b:63:ff:de:8c:fc: 7b:f3:52:c6:7b:50:3d:eb:d8:d2:23:4a:cf:ec:51: fd:7e:7b:b5:4e:be:e6:cd:14:14:e9:db:88:0f:82: 26:86:26:14:d4:18:d6:f5:56:be:a1:db:86:2f:18: 54:cf:c4:60:6a:de:12:96:e0:6b:9e:5b:86:ac:f5: b9:46:b4:65:a1:c7:c3:06:2e:8c:64:66:b1:00:da: 51:8d:45:ca:df:c9:d3:a7:ae:9c:5f:62:6d:51:25: c6:46:bb:91:e6:59:6a:a2:6b:28:b9:2b:d2:38:fc: 87:e1:50:a6:9b:a5:60:b7:c6:f7:09:3c:d6:6d:d5: 87:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BA:01:2F:37:F6:F7:04:83:EA:38:FF:23:B9:47:2A:0D:8E:8F:5B X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a9:c7:3a:33:55:16:bc:9c:5f:a0:18:81:15:e2:7c:27:e5: 79:53:af:07:67:fc:95:f2:f2:1c:75:84:3d:66:5d:6f:81:f4: 60:01:5e:4a:1d:34:a2:8d:00:4b:ea:fa:ec:e8:4d:cc:b3:f5: c0:13:02:c4:97:59:a9:ed:f6:1d:61:aa:42:49:a3:46:d1:79: ff:1f:25:83:44:2f:6a:db:74:33:a1:a8:d9:a5:19:80:8e:40: be:81:a0:2a:85:81:e6:02:9e:af:4b:ee:9c:96:b4:a1:57:e0: 5c:f8:20:d5:3a:d8:42:11:81:b6:9c:af:fa:d2:7e:b5:93:39: fd:da:b5:12:17:bf:0d:eb:23:0e:11:65:8e:5d:73:95:dd:38: 44:6e:5c:ba:cc:db:c1:51:95:07:e8:fd:2e:9f:77:fb:de:5e: 7d:96:3f:d2:cb:02:40:38:8c:3e:4f:12:95:d8:52:78:f3:fe: 73:b1:46:73:54:bb:91:fd:b7:73:d5:58:fa:3c:a1:7e:98:92: 43:d5:c1:2d:9b:d8:66:a6:b9:b5:d1:b4:34:9e:03:19:aa:33: 6c:c2:ae:8b:aa:b0:ea:e4:2f:60:63:fd:d5:f0:3a:6e:71:8f: 47:14:d5:cc:ee:1b:ea:1f:30:52:60:99:23:46:74:3a:d8:2f: 05:15:99:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2onoSu2oO9c/UwIqJPh+mGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwNDIwMDIwMDUzWhcNMjYwNDIxMDIwMDUzWjAzMTEwLwYDVQQD Eyg5Y2JhMDEyZjM3ZjZmNzA0ODNlYTM4ZmYyM2I5NDcyYTBkOGU4ZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl1+UPtQu6XbeMR2MwqIUhmkju0X TSOVaHdCSRwsu0ysbzw4xWh8la6viSLbAQdmfLJu6xiFOz/TedBIraMRx+lV1hmv wI5kUjWYv1lR9U8vN+BTGoeGQKfXuSY0H/xt7BWi3VfYz3RHlsdhTmEQsS9wYh4a DU7l5lXxdaWQ+kQrY//ejPx781LGe1A969jSI0rP7FH9fnu1Tr7mzRQU6duID4Im hiYU1BjW9Va+oduGLxhUz8Rgat4SluBrnluGrPW5RrRlocfDBi6MZGaxANpRjUXK 38nTp66cX2JtUSXGRruR5llqomsouSvSOPyH4VCmm6Vgt8b3CTzWbdWHhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJy6AS839vcEg+o4/yO5RyoNjo9bMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnanHOjNV FrycX6AYgRXifCfleVOvB2f8lfLyHHWEPWZdb4H0YAFeSh00oo0AS+r67OhNzLP1 wBMCxJdZqe32HWGqQkmjRtF5/x8lg0Qvatt0M6Go2aUZgI5AvoGgKoWB5gKer0vu nJa0oVfgXPgg1TrYQhGBtpyv+tJ+tZM5/dq1Ehe/DesjDhFljl1zld04RG5cuszb wVGVB+j9Lp93+95efZY/0ssCQDiMPk8SldhSePP+c7FGc1S7kf23c9VY+jyhfpiS Q9XBLZvYZqa5tdG0NJ4DGaozbMKui6qw6uQvYGP91fA6bnGPRxTVzO4b6h8wUmCZ I0Z0OtgvBRWZSw== -----END CERTIFICATE-----Generated at Mon Apr 20 04:50:50 2026 by rpki-client