$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: Fcct/YBo3nD8jPMLD3h5rLCE6ZgtY7Tztzo3PQJj0zI= Subject key identifier: 7F:5A:A8:48:53:FE:85:52:AD:A6:01:61:D9:A4:80:F7:E0:BB:D3:42 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019EBEED271562B5D5C0488C839A352504C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 19A0 Signing time: Sat 13 Jun 2026 03:01:13 +0000 Manifest this update: Sat 13 Jun 2026 03:01:13 +0000 Manifest next update: Sun 14 Jun 2026 03:01:13 +0000 Files and hashes: 1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=) 2: 1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa (hash: Iaj382heCZM+jzCY8eetFxeK6yVOOq/mB7H0r3jsr2Y=) 3: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=) 4: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=) 5: 43Q8B1j8uCGR8HMdyPrt74IDtQ0.roa (hash: jg6HtmjBC3mwgDbDxK1J2hnGtmR596d4s1Ft0DjJQas=) 6: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=) 7: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=) 8: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=) 9: E3-_fXrx3WJEz1xqKZqUxJBmM-Q.roa (hash: aSCX2XxnC/aSPKRCNlxxflXs9icajrveCo9SBL09YdY=) 10: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=) 11: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=) 12: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=) 13: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=) 14: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=) 15: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=) 16: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=) 17: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=) 18: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (hash: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo=) 19: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=) 20: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=) 21: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=) 22: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=) 23: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=) 24: ZjiYZgyUyGbsMqMk6TlW1sfkzSw.roa (hash: SquU6V0h1qjRAFh6dK52pQTVF5CX1sx9oQRtEcOh8ks=) 25: _iSoJoSQU2rWRPQsCDM8n6gmZr0.roa (hash: jprC0r9ZYRJlUMCI1TbisXmvXfahkQeehe5ckHPPRcM=) 26: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=) 27: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=) 28: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=) 29: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: R4Z3lsIxeBkssr8a2dopuAdkj6xTTSNVypCHCejS2b4=) 30: jKMbEYpcNPxKWCIMI-LubBs0DH0.roa (hash: MYW0L6JQHwowkFpc6oaF9/EWozaJk4IrXDYZ8vBuxfM=) 31: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=) 32: q2L5SyKqID2l1hg0Qhj5bxpMU78.roa (hash: Z9AmXohIpa+e04Joh+QhWbWtZMLnK/rjPBTVsW3zyT8=) 33: q9K5X-x5m3r2gOyHks1WDwyq-7Q.roa (hash: y0PtBOWuJ4HDoeaCO6HZcOEzqPu8pe2J9jjSvPgHyiU=) 34: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=) 35: uj4j6cfJ7bOcHn5Z6sqT_zROd8E.roa (hash: P13gsQor+N4Emp0P4NO+P2Eyz4EQ9E4uMhkwNyYMsOA=) 36: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=) 37: xe5Lcg3JTJHR_eWIXGRcFm9VxKM.roa (hash: 125ShwFH043Mwx/YVzTZ+aTSmLm1FUB4/5PjVBfP5So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:ed:27:15:62:b5:d5:c0:48:8c:83:9a:35:25:04:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jun 13 03:01:13 2026 GMT Not After : Jun 14 03:01:13 2026 GMT Subject: CN=7f5aa84853fe8552ada60161d9a480f7e0bbd342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:cb:b5:a2:3d:d2:92:8f:ab:e0:6b:db:7b: 84:86:cd:cb:c7:0a:c0:18:67:06:00:3a:5b:2b:d4: cf:33:04:22:4a:52:65:94:80:30:c1:ce:da:37:8c: 1b:05:2c:fe:f4:81:a7:d3:8a:d7:6e:27:6c:97:97: 51:6d:9f:c3:22:50:66:9e:ab:a2:98:87:ec:d4:e0: fe:9d:bb:10:15:d7:39:aa:0d:06:8c:6e:ed:0a:ea: 24:75:f5:40:9c:42:ab:54:63:b0:6c:40:31:6f:24: f8:80:05:ce:91:8a:3e:1d:f2:86:0f:2e:24:ec:32: 8b:b8:c6:73:38:fa:4c:c2:a1:a8:87:13:6e:45:70: c9:d7:ed:2b:73:87:5d:82:5a:df:e2:68:70:6a:d7: 51:f6:81:79:fc:be:51:b1:10:12:ea:0d:02:36:87: be:cc:92:fd:c6:59:8a:ac:49:93:0e:cf:3e:30:08: 1d:9b:48:70:a8:91:14:e0:d5:c5:17:80:92:3b:a7: a1:27:35:89:1b:df:d0:24:08:29:39:cd:48:5e:34: b3:01:a6:61:b4:b2:ec:f3:cf:ae:71:3a:d3:9a:ed: 23:eb:f3:60:8e:e7:e8:c6:b9:8c:1a:02:9b:93:8c: 30:98:e3:a5:a8:b2:f5:ec:4f:45:39:81:7e:c5:cd: 1e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5A:A8:48:53:FE:85:52:AD:A6:01:61:D9:A4:80:F7:E0:BB:D3:42 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:65:dc:cb:fe:48:be:92:e5:06:3d:0b:fb:75:42:eb:29:5b: 87:63:94:5b:bb:45:7c:ac:d3:fd:de:23:2a:a7:8d:e8:67:cf: 77:0d:b6:c4:2b:cb:f3:3c:56:20:d8:dc:25:04:af:a1:ad:3d: 1e:ee:43:a3:2a:56:32:62:65:3c:52:32:c7:bc:92:bf:1c:f1: d8:ce:17:27:0a:85:6d:23:2b:02:8b:aa:6c:f0:67:17:72:0b: 28:8a:c7:86:39:99:f0:a6:69:90:be:e1:fa:98:fd:1b:a0:01: 41:60:b8:02:47:4b:93:bf:19:7f:c6:5e:b5:a8:5f:36:0d:2c: 1f:6e:0b:4c:40:6d:78:2c:7d:8f:f3:83:9f:c5:2e:c5:6a:2f: fd:9c:b5:d5:1e:d3:1a:31:7f:c0:55:f0:96:74:25:5f:2e:23: ce:b0:0d:96:85:05:f3:37:70:d1:50:c5:15:53:68:32:6f:5a: f6:9d:9d:98:bd:d2:8f:77:7c:1a:be:d7:de:4a:e5:61:39:43: 5d:e2:14:76:b0:b4:1b:79:93:95:61:e0:92:c5:34:24:8c:48: d6:26:f2:12:78:61:9b:bc:c2:9d:68:4d:05:30:4c:53:31:92: 24:1a:de:6d:6b:2a:8a:91:90:e3:da:36:e5:2e:2a:d3:be:3c: d2:20:f3:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+7ScVYrXVwEiMg5o1JQTCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwNjEzMDMwMTEzWhcNMjYwNjE0MDMwMTEzWjAzMTEwLwYDVQQD Eyg3ZjVhYTg0ODUzZmU4NTUyYWRhNjAxNjFkOWE0ODBmN2UwYmJkMzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrPLtaI90pKPq+Br23uEhs3LxwrA GGcGADpbK9TPMwQiSlJllIAwwc7aN4wbBSz+9IGn04rXbidsl5dRbZ/DIlBmnqui mIfs1OD+nbsQFdc5qg0GjG7tCuokdfVAnEKrVGOwbEAxbyT4gAXOkYo+HfKGDy4k 7DKLuMZzOPpMwqGohxNuRXDJ1+0rc4ddglrf4mhwatdR9oF5/L5RsRAS6g0CNoe+ zJL9xlmKrEmTDs8+MAgdm0hwqJEU4NXFF4CSO6ehJzWJG9/QJAgpOc1IXjSzAaZh tLLs88+ucTrTmu0j6/NgjufoxrmMGgKbk4wwmOOlqLL17E9FOYF+xc0exwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9aqEhT/oVSraYBYdmkgPfgu9NCMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWXcy/5I vpLlBj0L+3VC6ylbh2OUW7tFfKzT/d4jKqeN6GfPdw22xCvL8zxWINjcJQSvoa09 Hu5DoypWMmJlPFIyx7ySvxzx2M4XJwqFbSMrAouqbPBnF3ILKIrHhjmZ8KZpkL7h +pj9G6ABQWC4AkdLk78Zf8ZetahfNg0sH24LTEBteCx9j/ODn8UuxWov/Zy11R7T GjF/wFXwlnQlXy4jzrANloUF8zdw0VDFFVNoMm9a9p2dmL3Sj3d8Gr7X3krlYTlD XeIUdrC0G3mTlWHgksU0JIxI1ibyEnhhm7zCnWhNBTBMUzGSJBrebWsqipGQ49o2 5S4q07480iDz9g== -----END CERTIFICATE-----Generated at Sat Jun 13 13:23:54 2026 by rpki-client