$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: XYoSfKJ0ERc5X8dHWAzmhdARH82IhiBGG/eXGVp0lKg= Subject key identifier: E7:DA:4B:83:3A:B3:ED:7E:27:8F:8E:1C:C0:F1:6E:84:A7:D8:5F:BB Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019CAB6B2564FDEA86D11D24984A53B62754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 187D Signing time: Sun 01 Mar 2026 22:00:51 +0000 Manifest this update: Sun 01 Mar 2026 22:00:51 +0000 Manifest next update: Mon 02 Mar 2026 22:00:51 +0000 Files and hashes: 1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=) 2: 1R7h_wZhp_xxY9H_mngh36eF568.roa (hash: XHhZWlRzYf4o0swQwybTv+9LiLjvzb0GDOX/kg+FBwg=) 3: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=) 4: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=) 5: 43Q8B1j8uCGR8HMdyPrt74IDtQ0.roa (hash: jg6HtmjBC3mwgDbDxK1J2hnGtmR596d4s1Ft0DjJQas=) 6: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=) 7: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=) 8: 9YlysPtVTEwS2FnSYKmXWK5fG9k.roa (hash: PZpws1i/n8l20ITPpZrngd7OOBW1H8sAPAQXDA4/JNI=) 9: CZtGpLAUhYdLU22gYJ3M8sldtRE.roa (hash: dqMfLW0eVcLT+nytfHwV4Lxmua3438Ke47oKR7OOxJ8=) 10: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=) 11: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=) 12: FX4K8uvL18Ya_j-jtZW2so9Gc9c.roa (hash: 4q5Zv7mkQbbSlNQl2wVZY06OF2suCswfRbO5hgu61w4=) 13: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=) 14: JvVBjIVS37lGpa1c9VOz2MPmHLs.roa (hash: q6ySAZv2zhPxzY0nSmdFaI6zSZkHXmEvHC/T+bksOH4=) 15: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=) 16: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=) 17: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=) 18: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=) 19: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (hash: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo=) 20: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=) 21: SN_hOoDnXXBMcILu8asIJSSFU6k.roa (hash: xhiPqOnTIih2H9KpMIJWF1OUuAAkuYs+jap/kl2QWL8=) 22: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=) 23: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=) 24: VuDnLvJNIcWc0RLDRhnQzJGXYlA.roa (hash: yHuXaf7xfAo1NMtfTvQ/YeqZYNx5yuNzc9kHv5WBJS0=) 25: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=) 26: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=) 27: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=) 28: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=) 29: cOL7BOKAJYOJxPSrnov-oNaIuRs.roa (hash: g8VERbJXRbI2dU9SyaKhLOuOuH0cRbFR+I6mLnbuocs=) 30: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: QE4H5oixg3z/B8HvB+KmmL4d2wgAHZSCwEnNXENlNL0=) 31: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=) 32: pyMmPiyFBVEcpAFu8BS9uRp5Uw8.roa (hash: C8etRVkdvpzZnpJ/5uCibkOtHku0DBM1Z5FvpwY5MNY=) 33: tLf5ip-0tWoMgAwYuoZfyo8CpBU.roa (hash: PQveRSA2vw+ZAZ9XdzrjIK3UE1FOAh6fR0K2OuWyFVk=) 34: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=) 35: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=) 36: zote-bU43Xc3L_TsvE3s0Qqd22g.roa (hash: C40MNHbMRurC40NZMuiNePjAq8avbr212pcusOQWouU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:6b:25:64:fd:ea:86:d1:1d:24:98:4a:53:b6:27:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Mar 1 22:00:51 2026 GMT Not After : Mar 2 22:00:51 2026 GMT Subject: CN=e7da4b833ab3ed7e278f8e1cc0f16e84a7d85fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2c:db:dc:22:c2:9b:8d:e3:d4:da:3e:e9:ce: bf:dd:1f:d9:1f:96:1c:ee:20:64:2e:a7:43:7c:8c: cf:96:2f:0f:12:ca:1c:54:10:5f:61:5a:ba:96:ed: 1e:b1:34:d4:4b:8e:69:2d:40:6b:9b:88:26:49:59: 34:27:0f:bc:a4:90:ff:7c:ee:7a:02:a8:bd:b1:05: 59:6d:4c:8d:3c:52:92:99:65:46:2a:f9:db:10:87: a5:81:8c:0a:82:90:90:7c:7a:73:44:4b:37:38:2b: de:73:6e:42:53:5e:fb:0f:ac:69:68:10:54:ad:77: be:62:33:04:4d:b8:83:9f:0a:0e:c7:e8:3a:fb:d5: 5b:fa:0c:5e:8f:a9:84:e6:12:1c:cc:8a:f3:c0:62: de:92:59:f3:43:1c:d9:8e:39:35:4d:77:20:97:be: dc:9f:ec:c3:48:0c:98:f7:66:44:18:6c:7a:bc:11: cd:8c:a7:a3:92:b2:06:d6:b1:ed:fb:d2:18:b8:15: fa:e3:96:30:e1:a3:e3:73:5a:36:e3:82:ce:ea:ba: fc:2e:40:42:93:55:6f:83:c5:9c:7a:94:6d:a9:c9: e9:82:d5:d3:dd:43:bc:bc:89:83:b0:6d:84:de:a8: dc:d1:bd:8c:0f:dc:59:d7:95:39:8f:27:16:8c:a2: fe:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DA:4B:83:3A:B3:ED:7E:27:8F:8E:1C:C0:F1:6E:84:A7:D8:5F:BB X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a2:e4:8b:ac:5d:b0:0c:22:46:a6:6a:f8:ac:75:03:7c:df: f5:e0:f1:15:d8:8f:5a:27:13:fc:be:6b:dd:68:44:07:c3:77: c5:27:7f:92:64:64:82:c4:f4:b8:4d:e0:c0:7c:53:c6:f9:3d: 4c:bd:58:bc:3a:e2:47:05:5e:e2:d9:b1:c9:eb:49:2e:9d:0b: fd:3e:ff:fa:ce:ea:b4:26:21:b9:a9:d4:ec:f3:45:50:2e:dc: 8b:0c:7b:3d:77:04:87:99:f0:6e:22:65:95:f2:49:b1:f4:8d: 91:83:75:37:35:33:c9:9f:fb:01:41:6d:06:25:d1:c6:71:27: cc:d9:54:b4:1a:c7:82:f7:76:e4:bf:ac:f6:4f:17:85:99:67: eb:db:d0:76:fd:17:97:e8:46:f9:f0:b0:55:7c:d7:5d:8b:d1: ae:e8:55:0a:3a:85:d9:f6:9e:d0:ea:f0:d3:57:f1:44:40:72: 43:c6:b8:4d:09:99:2d:43:af:f8:bd:82:87:2f:e4:ce:cb:9e: 5e:b1:bf:33:b3:06:29:1e:3a:98:de:c7:e8:a6:09:a6:75:a5: 90:3d:e6:b9:19:e1:e0:83:82:b5:96:31:e5:de:cc:da:4f:48: cc:13:57:26:f0:8e:7b:e2:24:56:34:04:fa:89:af:35:5e:80: 36:34:f8:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrayVk/eqG0R0kmEpTtidUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMzAxMjIwMDUxWhcNMjYwMzAyMjIwMDUxWjAzMTEwLwYDVQQD EyhlN2RhNGI4MzNhYjNlZDdlMjc4ZjhlMWNjMGYxNmU4NGE3ZDg1ZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0izb3CLCm43j1No+6c6/3R/ZH5Yc 7iBkLqdDfIzPli8PEsocVBBfYVq6lu0esTTUS45pLUBrm4gmSVk0Jw+8pJD/fO56 Aqi9sQVZbUyNPFKSmWVGKvnbEIelgYwKgpCQfHpzREs3OCvec25CU177D6xpaBBU rXe+YjMETbiDnwoOx+g6+9Vb+gxej6mE5hIczIrzwGLeklnzQxzZjjk1TXcgl77c n+zDSAyY92ZEGGx6vBHNjKejkrIG1rHt+9IYuBX645Yw4aPjc1o244LO6rr8LkBC k1Vvg8WcepRtqcnpgtXT3UO8vImDsG2E3qjc0b2MD9xZ15U5jycWjKL+PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfaS4M6s+1+J4+OHMDxboSn2F+7MB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaLki6xd sAwiRqZq+Kx1A3zf9eDxFdiPWicT/L5r3WhEB8N3xSd/kmRkgsT0uE3gwHxTxvk9 TL1YvDriRwVe4tmxyetJLp0L/T7/+s7qtCYhuanU7PNFUC7ciwx7PXcEh5nwbiJl lfJJsfSNkYN1NzUzyZ/7AUFtBiXRxnEnzNlUtBrHgvd25L+s9k8XhZln69vQdv0X l+hG+fCwVXzXXYvRruhVCjqF2fae0Orw01fxREByQ8a4TQmZLUOv+L2Chy/kzsue XrG/M7MGKR46mN7H6KYJpnWlkD3muRnh4IOCtZYx5d7M2k9IzBNXJvCOe+IkVjQE +omvNV6ANjT4Cw== -----END CERTIFICATE-----Generated at Mon Mar 2 04:34:19 2026 by rpki-client