$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: RtD0gjTGnwxnlFnnKeqIJrWvJo1p4EZrenT3BMyoRp8= Subject key identifier: 3C:E1:6A:97:F3:14:BE:0A:02:4D:4D:7E:D1:19:00:CF:A8:7D:8B:CC Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019EC0DB0F98656DE6A1E2F9C1DF09575DB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 19A1 Signing time: Sat 13 Jun 2026 12:00:42 +0000 Manifest this update: Sat 13 Jun 2026 12:00:42 +0000 Manifest next update: Sun 14 Jun 2026 12:00:42 +0000 Files and hashes: 1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=) 2: 1-_1qCNtot2hgU_IZPJL2qsTTFXc.roa (hash: Iaj382heCZM+jzCY8eetFxeK6yVOOq/mB7H0r3jsr2Y=) 3: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=) 4: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=) 5: 43Q8B1j8uCGR8HMdyPrt74IDtQ0.roa (hash: jg6HtmjBC3mwgDbDxK1J2hnGtmR596d4s1Ft0DjJQas=) 6: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=) 7: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=) 8: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=) 9: E3-_fXrx3WJEz1xqKZqUxJBmM-Q.roa (hash: aSCX2XxnC/aSPKRCNlxxflXs9icajrveCo9SBL09YdY=) 10: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=) 11: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=) 12: KsTzSaaFVIdfKiI35XLhL2mOYwY.roa (hash: +4JAmHk3Gn/aestC45pzoS352L2AknY9Wetv1FFGjm0=) 13: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=) 14: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=) 15: LQ2MMiTg73YogggMlO3q0fwzTYs.roa (hash: jiGxpN7PaAMkunNkUqVgtCVKMwjT12Y2+fuZm4c5duo=) 16: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=) 17: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=) 18: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (hash: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo=) 19: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (hash: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=) 20: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=) 21: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=) 22: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=) 23: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=) 24: ZjiYZgyUyGbsMqMk6TlW1sfkzSw.roa (hash: SquU6V0h1qjRAFh6dK52pQTVF5CX1sx9oQRtEcOh8ks=) 25: _iSoJoSQU2rWRPQsCDM8n6gmZr0.roa (hash: jprC0r9ZYRJlUMCI1TbisXmvXfahkQeehe5ckHPPRcM=) 26: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=) 27: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=) 28: dhJildBdnZloo4poxJ4mC7kw6Ag.roa (hash: EWtd6p1SEWsSY07NqVyBMZcvWFTTHxhlSXR3BRJMANc=) 29: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: B3yIhukdGG46Zij5cTdGadlZhVWmGjO9zjbtE/C7xBA=) 30: jKMbEYpcNPxKWCIMI-LubBs0DH0.roa (hash: MYW0L6JQHwowkFpc6oaF9/EWozaJk4IrXDYZ8vBuxfM=) 31: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=) 32: q2L5SyKqID2l1hg0Qhj5bxpMU78.roa (hash: Z9AmXohIpa+e04Joh+QhWbWtZMLnK/rjPBTVsW3zyT8=) 33: q9K5X-x5m3r2gOyHks1WDwyq-7Q.roa (hash: y0PtBOWuJ4HDoeaCO6HZcOEzqPu8pe2J9jjSvPgHyiU=) 34: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=) 35: uj4j6cfJ7bOcHn5Z6sqT_zROd8E.roa (hash: P13gsQor+N4Emp0P4NO+P2Eyz4EQ9E4uMhkwNyYMsOA=) 36: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=) 37: xe5Lcg3JTJHR_eWIXGRcFm9VxKM.roa (hash: 125ShwFH043Mwx/YVzTZ+aTSmLm1FUB4/5PjVBfP5So=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:db:0f:98:65:6d:e6:a1:e2:f9:c1:df:09:57:5d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jun 13 12:00:42 2026 GMT Not After : Jun 14 12:00:42 2026 GMT Subject: CN=3ce16a97f314be0a024d4d7ed11900cfa87d8bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d7:f9:98:04:f3:c8:da:e4:49:3b:59:b0:ab: c1:ca:b5:80:94:f8:9d:80:c2:68:8c:46:e8:0a:71: b5:e3:0b:a0:be:d3:37:4c:e8:54:27:59:27:24:b5: a1:5b:c7:d6:b9:66:80:bd:48:c3:22:15:40:12:71: aa:82:c5:d5:b0:80:45:b3:2d:e6:4d:1d:31:52:60: 92:3d:84:00:d0:c2:b8:b0:54:d4:6c:9b:43:22:81: 17:9e:b7:0c:3f:2d:72:f3:5a:60:16:cd:5d:9e:d7: 51:85:81:25:16:e2:6f:41:b3:b8:8f:73:6a:96:b9: 46:8b:61:84:2e:1b:b7:89:02:16:c2:c9:1e:bb:72: f9:8a:3a:73:0c:ce:18:bc:c1:5f:d0:1f:6f:b6:23: 72:9f:a6:29:ec:0a:d0:a0:20:59:46:ec:b6:96:f1: 47:09:47:bd:2f:a1:fc:e0:29:2a:40:e5:0f:de:5f: fe:f8:d1:01:4c:6b:75:ab:78:a7:5a:50:1d:4b:21: e1:55:b8:ba:b4:36:ee:13:ab:71:d3:34:8d:a4:ab: dd:0b:a5:be:2a:2d:4e:52:11:7d:c8:30:fa:23:5e: d3:34:33:a9:15:e7:84:98:b2:dc:d0:e2:fc:66:aa: 33:59:e9:e4:ff:c0:b6:90:f7:92:8b:42:78:4a:84: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E1:6A:97:F3:14:BE:0A:02:4D:4D:7E:D1:19:00:CF:A8:7D:8B:CC X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:bc:d5:2a:1d:2b:60:c7:7e:97:1c:81:a8:1e:63:30:d9:01: 92:47:6f:02:0f:7d:07:f4:5d:ea:51:26:d9:5c:9f:8b:f4:46: 20:b8:43:4c:0f:da:9e:d0:e9:0c:02:8e:9e:24:5b:b6:b9:ef: fb:bb:33:73:8a:67:f5:16:dd:78:38:98:0e:37:f8:6a:0b:1a: fe:5c:d0:58:19:b3:de:fb:a3:3d:98:78:78:f6:34:c5:ef:90: ff:4f:db:4e:7d:d5:31:b9:29:be:5a:ce:46:8f:24:cb:68:de: 18:4c:af:92:84:c5:c0:ad:e9:a4:42:ac:23:5c:3d:30:be:cd: 80:76:a2:07:4e:6e:47:a7:26:ef:04:00:b9:1d:32:1e:ae:ac: 54:9f:e4:35:f0:f9:9b:16:72:df:72:ce:db:58:d7:0e:8d:ed: 39:7c:87:45:e5:f3:c6:59:32:c5:f0:4d:e9:09:0d:b3:be:c7: 76:e2:07:eb:e5:1e:e9:87:0a:8f:ee:a8:af:0b:5c:57:99:b5: a1:ca:4f:80:ab:6e:6d:3f:d4:81:5a:7f:fd:36:95:ac:30:af: 29:03:0b:66:c0:30:25:63:80:3c:1a:65:4f:1f:ce:ec:df:85: aa:7c:f5:9a:0a:a8:cd:e2:ae:57:e3:b8:ad:27:cd:89:44:7a: c0:12:ff:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7A2w+YZW3moeL5wd8JV12wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwNjEzMTIwMDQyWhcNMjYwNjE0MTIwMDQyWjAzMTEwLwYDVQQD EygzY2UxNmE5N2YzMTRiZTBhMDI0ZDRkN2VkMTE5MDBjZmE4N2Q4YmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9f5mATzyNrkSTtZsKvByrWAlPid gMJojEboCnG14wugvtM3TOhUJ1knJLWhW8fWuWaAvUjDIhVAEnGqgsXVsIBFsy3m TR0xUmCSPYQA0MK4sFTUbJtDIoEXnrcMPy1y81pgFs1dntdRhYElFuJvQbO4j3Nq lrlGi2GELhu3iQIWwskeu3L5ijpzDM4YvMFf0B9vtiNyn6Yp7ArQoCBZRuy2lvFH CUe9L6H84CkqQOUP3l/++NEBTGt1q3inWlAdSyHhVbi6tDbuE6tx0zSNpKvdC6W+ Ki1OUhF9yDD6I17TNDOpFeeEmLLc0OL8ZqozWenk/8C2kPeSi0J4SoR4OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzhapfzFL4KAk1NftEZAM+ofYvMMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbzVKh0r YMd+lxyBqB5jMNkBkkdvAg99B/Rd6lEm2Vyfi/RGILhDTA/antDpDAKOniRbtrnv +7szc4pn9RbdeDiYDjf4agsa/lzQWBmz3vujPZh4ePY0xe+Q/0/bTn3VMbkpvlrO Ro8ky2jeGEyvkoTFwK3ppEKsI1w9ML7NgHaiB05uR6cm7wQAuR0yHq6sVJ/kNfD5 mxZy33LO21jXDo3tOXyHReXzxlkyxfBN6QkNs77HduIH6+Ue6YcKj+6orwtcV5m1 ocpPgKtubT/UgVp//TaVrDCvKQMLZsAwJWOAPBplTx/O7N+Fqnz1mgqozeKuV+O4 rSfNiUR6wBL/lQ== -----END CERTIFICATE-----Generated at Sat Jun 13 14:27:17 2026 by rpki-client