$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: YQtORlC0BTO7QNnLFEO6b8ltqY6RhixsdYK9ye8gLNY= Subject key identifier: 94:18:CE:EC:1D:12:2F:0F:40:39:6D:AA:95:86:EB:C4:9A:EB:14:9C Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019D066675D0AB6F9D5611598CF024D3858D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1887 Signing time: Thu 19 Mar 2026 14:01:11 +0000 Manifest this update: Thu 19 Mar 2026 14:01:11 +0000 Manifest next update: Fri 20 Mar 2026 14:01:11 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: 9vuOuOvj62P021fXQQxf0hIL-7Y.asa (hash: IV14GyGa+T6PyA00vxABTsOZmDpbofMON8dQI+vejQo=) 4: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 5: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: IKB6KXZqWgqfiNWORDB9DD3IPAU26PV9HQNcDc2FQaU=) 6: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 7: WimZdTjw5Lm8MtebopYruWKL5rI.roa (hash: ZsNGt4iJIvs0TYMA8I/lIAfczIzjQsE/8A1JQl2JcVU=) 8: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 9: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 10: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 11: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 12: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 13: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Mar 2026 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:06:66:75:d0:ab:6f:9d:56:11:59:8c:f0:24:d3:85:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Mar 19 14:01:11 2026 GMT Not After : Mar 20 14:01:11 2026 GMT Subject: CN=9418ceec1d122f0f40396daa9586ebc49aeb149c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4e:b6:15:48:1a:42:ac:cb:e5:61:44:32:f0: 08:e9:fd:5a:d9:a0:1d:2d:61:ed:b2:93:3e:97:3b: a7:6a:1c:8d:66:52:89:bf:bd:9c:62:55:ef:ed:29: b0:d3:f7:ee:58:d7:98:9a:e7:09:13:00:10:3f:12: c8:e4:98:5a:83:0c:e0:d9:b7:72:e5:63:e9:1a:ce: 3f:05:5b:40:a5:87:4d:db:3b:da:68:54:07:54:c0: 8f:f8:6c:4f:30:08:9e:64:df:7a:b8:e3:69:d2:57: de:71:41:90:29:ad:43:3d:15:94:a8:c4:ce:ce:94: 30:ff:f2:91:fe:ce:83:01:55:b3:65:1d:09:a3:20: 2e:f7:76:60:95:2d:1d:10:a4:ba:bb:b7:38:03:bb: 03:96:a7:ac:a5:db:bf:c8:fe:95:17:58:8b:61:ca: 6a:3c:ae:69:6d:0e:af:29:36:e7:90:a6:ef:7b:49: 39:e7:b9:49:7b:de:e5:40:61:94:ee:1f:ee:f6:a5: 06:fe:a5:3d:50:44:83:6f:af:0a:78:8b:68:23:d9: 1c:12:e0:8f:71:4f:d4:e3:fe:44:b2:7c:b8:26:b8: 76:ed:59:d7:6a:47:91:2d:45:1b:bf:e1:52:c2:84: 5d:2e:9e:aa:13:ca:ad:20:36:2c:6e:aa:d9:96:ac: 35:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:18:CE:EC:1D:12:2F:0F:40:39:6D:AA:95:86:EB:C4:9A:EB:14:9C X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:59:00:86:0f:03:d4:73:a5:25:52:e4:80:52:70:f2:51:cc: de:92:20:a8:b2:0b:f0:97:6d:7d:3e:99:51:27:57:fd:ce:94: 70:b6:5c:29:4b:a7:ab:21:1a:1b:b9:5a:b7:27:d9:aa:02:1f: 95:d1:61:4c:f0:24:77:15:4e:e9:bd:06:30:e2:da:74:b6:4b: b1:a4:53:7d:1e:3c:f4:1c:15:f5:e6:14:c7:11:24:d8:e7:dc: 15:55:e8:78:a3:48:16:4a:b9:9e:4f:6d:b8:47:0f:5d:cc:57: 5c:33:d9:bb:c5:3d:ed:b0:b5:26:9b:4e:e5:86:15:c4:fe:ef: 8b:1d:e7:f4:80:43:f1:93:b9:56:63:7f:c1:72:28:ca:86:d2: 62:de:b7:83:3b:32:da:53:8f:2c:3f:9d:3d:c3:72:d4:70:58: 19:e9:a7:44:12:b0:7b:c8:20:2d:a3:8d:c5:8c:89:38:9b:e7: 10:ab:85:0e:b3:1f:51:cb:80:e2:a9:f7:f0:bc:60:5e:e4:d4: 3e:5d:85:39:68:91:c2:05:d3:c6:51:35:eb:7e:a2:27:9c:c6: 6a:e8:8b:57:dc:ec:0a:39:11:5a:7e:11:88:b3:5c:be:d9:b7: 40:6a:21:e8:a3:a4:41:0d:f9:a5:6a:12:ff:70:14:60:47:77: fd:ff:5d:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0GZnXQq2+dVhFZjPAk04WNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwMzE5MTQwMTExWhcNMjYwMzIwMTQwMTExWjAzMTEwLwYDVQQD Eyg5NDE4Y2VlYzFkMTIyZjBmNDAzOTZkYWE5NTg2ZWJjNDlhZWIxNDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E62FUgaQqzL5WFEMvAI6f1a2aAd LWHtspM+lzunahyNZlKJv72cYlXv7Smw0/fuWNeYmucJEwAQPxLI5Jhagwzg2bdy 5WPpGs4/BVtApYdN2zvaaFQHVMCP+GxPMAieZN96uONp0lfecUGQKa1DPRWUqMTO zpQw//KR/s6DAVWzZR0JoyAu93ZglS0dEKS6u7c4A7sDlqespdu/yP6VF1iLYcpq PK5pbQ6vKTbnkKbve0k557lJe97lQGGU7h/u9qUG/qU9UESDb68KeItoI9kcEuCP cU/U4/5Esny4Jrh27VnXakeRLUUbv+FSwoRdLp6qE8qtIDYsbqrZlqw1WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQYzuwdEi8PQDltqpWG68Sa6xScMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1kAhg8D 1HOlJVLkgFJw8lHM3pIgqLIL8JdtfT6ZUSdX/c6UcLZcKUunqyEaG7latyfZqgIf ldFhTPAkdxVO6b0GMOLadLZLsaRTfR489BwV9eYUxxEk2OfcFVXoeKNIFkq5nk9t uEcPXcxXXDPZu8U97bC1JptO5YYVxP7vix3n9IBD8ZO5VmN/wXIoyobSYt63gzsy 2lOPLD+dPcNy1HBYGemnRBKwe8ggLaONxYyJOJvnEKuFDrMfUcuA4qn38LxgXuTU Pl2FOWiRwgXTxlE1636iJ5zGauiLV9zsCjkRWn4RiLNcvtm3QGoh6KOkQQ35pWoS /3AUYEd3/f9d8A== -----END CERTIFICATE-----Generated at Fri Mar 20 00:29:18 2026 by rpki-client