$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: c5QP7LU2SxVSECk1j3MUKR1UUZ8sCx45l1lp3s57QKg= Subject key identifier: B1:36:F9:7D:A2:48:B4:7B:C1:65:C4:E4:DB:F1:EE:19:FE:F4:20:B2 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019CAD909F7E765D24038A4A56F124CF5708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 1839 Signing time: Mon 02 Mar 2026 08:01:02 +0000 Manifest this update: Mon 02 Mar 2026 08:01:02 +0000 Manifest next update: Tue 03 Mar 2026 08:01:02 +0000 Files and hashes: 1: 8_MkA_mT9KIdkBcNq59qKHbc9ho.roa (hash: E24Q5XRNZzYhaFekHtHmSqKUrlGX20Uvqt/+tLWhFo4=) 2: 8dz0TrMtwzys9aId9S0iNBUOM6I.roa (hash: QLXQgTisSL5o9NDXTvqc31xSu43P2bWSnl0Mbj1LxKA=) 3: ATr9on9NXfN5KaeCexdDhihuhvE.roa (hash: fRmU0RyX9cmxFGh6vh7b2kq/1xI8atRRIR73j9hG4+Y=) 4: JSGXBtXBDhU1ugyi_XXHVVOXM3E.roa (hash: arGn6FJKM/5X/KQBvvmxnfiup95zCVTz6MKIcb88dnA=) 5: JutDRiQZPtkgRNn4DbKRtcU159k.roa (hash: TBfVgKnr15EdS367udNkZsLjUZkCmwigL6STK1CGALk=) 6: WYjaPZyXn9OqgdQ9oF2UyH6UZxY.roa (hash: EVCumPjXA28vp5ehPKHe+PCdpvR77Tfj3/cbydnM+o0=) 7: XXTLAzTN8ORt_-RYCj2-8C6GR00.roa (hash: 6BDh84FsMhXUtXLJgFo0Xh10o5gPmpg2C2PNspUTVCk=) 8: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: gCcXTEqdNUhk4epe77WvT76oPB5lSqXfUTg69M7Vq2c=) 9: m6mcSmpfmNAj9RbqZcHLhm1-GBQ.roa (hash: p83WPoiu14c7eyRfswAFJNoQrZPR/HEj5misljpRM2U=) 10: nkHJQxs3RvxryxXyywwLA5kWGDI.roa (hash: VuLzAxuuKrma6aeyKBkCPTnFtqwkCI2Bh/sV0lxF7Jc=) 11: vzjiQ62-Ida16ZpmsWaWVB-3g8U.roa (hash: jsH0jmCurlULuLa9fBp8xexVcDJDX4+DOBZF+vtnAlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:90:9f:7e:76:5d:24:03:8a:4a:56:f1:24:cf:57:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Mar 2 08:01:02 2026 GMT Not After : Mar 3 08:01:02 2026 GMT Subject: CN=b136f97da248b47bc165c4e4dbf1ee19fef420b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:a1:8b:1b:b4:6a:d4:b1:e6:14:17:98:1d: b2:f6:57:c2:0c:49:a3:2b:c1:61:ba:a4:c1:d9:0a: b2:b9:61:e9:cf:46:0c:3a:87:c4:0b:7d:73:65:24: 07:06:bd:6f:99:2a:80:ba:81:79:09:3e:d8:5d:4e: f8:93:92:84:4f:78:05:85:2e:64:8c:d7:12:47:9e: b2:47:f6:c6:e7:b6:4d:f7:0a:d8:d4:79:7a:2c:b3: 39:8d:0b:bb:b2:c3:56:15:4b:f6:4d:a2:f2:01:f7: b4:91:b7:0c:30:d1:4b:29:a9:a7:e9:19:53:a2:82: a4:d2:2c:27:f3:ed:7f:bf:e8:bf:79:fe:02:f2:a5: 72:33:b2:b9:12:7d:ac:3e:7d:f9:8c:af:32:0e:fa: 70:f4:39:bb:9d:4a:3a:99:2a:01:b0:e6:43:85:d3: 93:3f:2e:5d:cc:0a:bb:37:ad:2f:97:0d:03:ea:6f: 4b:94:2e:29:81:ec:1f:70:02:cd:ab:3c:70:2f:13: da:4e:6a:ca:b9:fa:74:82:7a:e2:48:0a:b4:ec:b4: ab:9e:eb:38:41:ce:5a:7e:4d:b9:5c:2c:50:a5:ea: a2:5b:42:f0:e2:0b:17:1a:91:34:db:9b:b6:48:97: 83:62:b5:b2:ed:88:4c:03:89:8e:a8:e0:85:64:c5: 4c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:36:F9:7D:A2:48:B4:7B:C1:65:C4:E4:DB:F1:EE:19:FE:F4:20:B2 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ae:87:62:8d:74:70:a0:84:a3:88:9e:08:1a:8f:b0:bf:55: 2c:a3:09:da:5a:00:a2:90:62:88:78:f4:2b:ff:77:d0:fa:fe: dd:04:de:49:3c:dc:a8:23:02:d6:79:5a:fb:dd:a9:1c:2a:c8: 79:41:31:d7:02:9a:be:b8:01:d5:11:ee:07:57:2c:2d:26:4b: 57:43:82:29:38:25:2e:ad:06:84:28:40:e5:5c:70:95:c3:14: 22:dd:7f:96:30:40:aa:3e:82:be:37:25:e0:a5:be:78:08:d2: 5e:a6:7c:85:d0:ee:fa:d7:1b:1b:f0:c7:58:b7:36:fa:6c:3f: 3a:54:9f:d5:3f:30:e0:42:8d:38:ab:de:d9:26:19:f2:37:39: 98:00:d5:b8:d3:5d:f0:a4:c7:0b:ae:16:e2:3e:38:41:8f:1f: 63:09:de:79:60:51:5a:5b:9b:67:a1:02:51:99:06:91:f6:0c: 4d:b5:01:9f:b6:f0:9f:d3:4f:38:f1:01:ef:dd:ab:b9:4e:82: b8:9f:2b:5d:61:80:66:87:2f:67:7d:6a:10:72:e6:aa:ab:fb: 0f:ee:06:3c:0e:af:de:ea:1d:86:26:60:6c:55:3b:f7:34:0b: 60:62:3f:83:28:5b:85:17:21:e1:43:7b:23:a4:c3:eb:7e:39: 10:41:ee:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytkJ9+dl0kA4pKVvEkz1cIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwMzAyMDgwMTAyWhcNMjYwMzAzMDgwMTAyWjAzMTEwLwYDVQQD EyhiMTM2Zjk3ZGEyNDhiNDdiYzE2NWM0ZTRkYmYxZWUxOWZlZjQyMGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6+hixu0atSx5hQXmB2y9lfCDEmj K8FhuqTB2QqyuWHpz0YMOofEC31zZSQHBr1vmSqAuoF5CT7YXU74k5KET3gFhS5k jNcSR56yR/bG57ZN9wrY1Hl6LLM5jQu7ssNWFUv2TaLyAfe0kbcMMNFLKamn6RlT ooKk0iwn8+1/v+i/ef4C8qVyM7K5En2sPn35jK8yDvpw9Dm7nUo6mSoBsOZDhdOT Py5dzAq7N60vlw0D6m9LlC4pgewfcALNqzxwLxPaTmrKufp0gnriSAq07LSrnus4 Qc5afk25XCxQpeqiW0Lw4gsXGpE025u2SJeDYrWy7YhMA4mOqOCFZMVMYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLE2+X2iSLR7wWXE5Nvx7hn+9CCyMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE66HYo10 cKCEo4ieCBqPsL9VLKMJ2loAopBiiHj0K/930Pr+3QTeSTzcqCMC1nla+92pHCrI eUEx1wKavrgB1RHuB1csLSZLV0OCKTglLq0GhChA5VxwlcMUIt1/ljBAqj6Cvjcl 4KW+eAjSXqZ8hdDu+tcbG/DHWLc2+mw/OlSf1T8w4EKNOKve2SYZ8jc5mADVuNNd 8KTHC64W4j44QY8fYwneeWBRWlubZ6ECUZkGkfYMTbUBn7bwn9NPOPEB792ruU6C uJ8rXWGAZocvZ31qEHLmqqv7D+4GPA6v3uodhiZgbFU79zQLYGI/gyhbhRch4UN7 I6TD6345EEHu9g== -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:56 2026 by rpki-client