$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: VjT3It/tou4xl3YG0rGSMV//PNA20stnZUhrtOTLMLg= Subject key identifier: 39:6C:68:5F:00:FA:45:DC:3B:99:C8:80:2F:C4:86:C2:BF:6B:50:FD Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019CAAC7047F4C753E385BF464F38980548A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 183B Signing time: Sun 01 Mar 2026 19:01:35 +0000 Manifest this update: Sun 01 Mar 2026 19:01:35 +0000 Manifest next update: Mon 02 Mar 2026 19:01:35 +0000 Files and hashes: 1: 16Y1yxGLE6UIufa5rH9U3RXAvAs.roa (hash: hVmSptnLaPbenQ9xb8iMn2l1+6sGRbct+J+Pmp6z9tk=) 2: F4LdvSuBLKoy58NMp2qP4-TZx2U.roa (hash: BFVQu+JaHlGGz8F88qjrXCmVUp4qOhDziCZpUN8E7E0=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: fmb2i1gk9UcnSwBDPQAbfX8XxNUUDvMZk5RVv/h6iZ0=) 4: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=) 5: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=) 6: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=) 7: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=) 8: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=) 9: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=) 10: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:c7:04:7f:4c:75:3e:38:5b:f4:64:f3:89:80:54:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Mar 1 19:01:35 2026 GMT Not After : Mar 2 19:01:35 2026 GMT Subject: CN=396c685f00fa45dc3b99c8802fc486c2bf6b50fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2b:b5:e7:f0:01:0a:66:62:4a:57:db:f9:e5: 4c:0a:4c:49:7c:5c:e4:80:eb:96:af:5f:a0:4e:a0: 36:90:60:ca:63:9a:75:13:7d:fe:07:0b:cc:00:90: 73:03:b3:c3:a9:01:8b:9c:a7:2a:fa:1d:a6:b1:7f: 90:ba:8f:6d:81:90:ee:24:c9:b9:69:fb:e4:45:f2: 9c:89:4e:02:65:2c:c3:6d:4a:35:b1:cd:2f:33:c8: 9a:f2:b4:c5:9a:54:cd:4b:c7:7f:e5:b4:f2:bf:b7: 1a:66:df:cf:11:cb:cd:13:46:6c:d7:54:c6:63:89: d8:85:c8:6f:b7:46:64:b8:93:ba:aa:39:7d:68:9a: b3:9b:fc:72:5b:05:d6:1e:fa:e7:58:c3:f4:1c:52: fc:ad:8d:0a:03:9e:9c:6a:d7:72:3a:67:0a:94:41: 3e:6d:c8:23:15:08:f5:7d:eb:64:07:1d:2b:d2:19: 09:dd:a6:0c:95:ef:0e:4e:68:60:24:fb:5d:35:8c: 0f:13:d2:cf:8a:8f:a6:58:0e:1c:5f:53:4a:be:21: 41:d0:4b:fd:29:99:44:2a:84:92:76:a7:84:7a:9d: 5e:dc:65:57:83:cc:7e:8d:5a:4a:10:c4:0c:ff:d9: 82:72:ae:12:02:d1:65:24:99:61:17:68:6a:fc:37: eb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6C:68:5F:00:FA:45:DC:3B:99:C8:80:2F:C4:86:C2:BF:6B:50:FD X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:29:08:4d:94:96:fb:57:fd:c2:b7:dd:90:74:d9:2f:04:61: 07:52:8e:81:b1:30:d5:a6:d5:a8:75:dc:2f:48:bb:b7:49:45: 98:11:c9:0b:72:83:ce:61:a2:17:e4:a9:a1:f1:b8:31:3e:3e: 8b:15:9e:b5:8e:ed:a2:59:4e:db:53:41:06:1f:6d:3a:38:d5: 8a:85:96:7b:82:29:e9:53:f0:49:df:b6:5c:c3:2c:f1:96:ec: 4f:bd:09:fd:bc:ca:39:24:87:54:1e:0f:51:70:44:b9:f7:98: e8:2a:98:c5:96:17:b9:69:65:2c:50:da:5c:f4:71:fc:a4:db: 26:de:1b:cb:96:fe:d5:b7:ae:d2:c5:b8:48:dc:ee:21:26:ec: 6d:9a:1c:1f:ce:df:f8:bf:e3:9a:66:3e:15:20:a5:2c:28:4c: b4:e5:7a:d4:c2:4d:a6:e7:c3:e9:b6:18:a7:22:71:3f:94:3e: f9:21:26:d8:20:8c:82:aa:00:3d:63:ec:5b:3e:15:75:26:8d: a0:da:e3:5a:37:ba:7b:40:48:5c:40:18:22:53:8d:f0:90:d2: 83:f6:77:d3:b8:b3:44:3b:82:55:6d:44:24:30:c5:01:8f:8d: b9:d3:56:f6:bd:d6:29:b3:db:56:2e:c9:b9:4a:4d:e5:30:ed: 3c:ee:e0:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqxwR/THU+OFv0ZPOJgFSKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwMzAxMTkwMTM1WhcNMjYwMzAyMTkwMTM1WjAzMTEwLwYDVQQD EygzOTZjNjg1ZjAwZmE0NWRjM2I5OWM4ODAyZmM0ODZjMmJmNmI1MGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiu15/ABCmZiSlfb+eVMCkxJfFzk gOuWr1+gTqA2kGDKY5p1E33+BwvMAJBzA7PDqQGLnKcq+h2msX+Quo9tgZDuJMm5 afvkRfKciU4CZSzDbUo1sc0vM8ia8rTFmlTNS8d/5bTyv7caZt/PEcvNE0Zs11TG Y4nYhchvt0ZkuJO6qjl9aJqzm/xyWwXWHvrnWMP0HFL8rY0KA56catdyOmcKlEE+ bcgjFQj1fetkBx0r0hkJ3aYMle8OTmhgJPtdNYwPE9LPio+mWA4cX1NKviFB0Ev9 KZlEKoSSdqeEep1e3GVXg8x+jVpKEMQM/9mCcq4SAtFlJJlhF2hq/DfrvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlsaF8A+kXcO5nIgC/EhsK/a1D9MB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCkITZSW +1f9wrfdkHTZLwRhB1KOgbEw1abVqHXcL0i7t0lFmBHJC3KDzmGiF+SpofG4MT4+ ixWetY7tollO21NBBh9tOjjVioWWe4Ip6VPwSd+2XMMs8ZbsT70J/bzKOSSHVB4P UXBEufeY6CqYxZYXuWllLFDaXPRx/KTbJt4by5b+1beu0sW4SNzuISbsbZocH87f +L/jmmY+FSClLChMtOV61MJNpufD6bYYpyJxP5Q++SEm2CCMgqoAPWPsWz4VdSaN oNrjWje6e0BIXEAYIlON8JDSg/Z307izRDuCVW1EJDDFAY+NudNW9r3WKbPbVi7J uUpN5TDtPO7gag== -----END CERTIFICATE-----Generated at Mon Mar 2 02:33:56 2026 by rpki-client