$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json) Hash identifier: Ln/sRqqlBp38RpKh8U98uuu/Ka9t3XAiHnLLfz1TebA= Subject key identifier: 09:C0:DE:C7:22:3F:D0:B8:B9:9A:D3:E5:12:B7:D6:D8:1A:FE:EC:92 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019EC0DBAB7C54814DEA0434152F1435612B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft Manifest number: 16D8 Signing time: Sat 13 Jun 2026 12:01:22 +0000 Manifest this update: Sat 13 Jun 2026 12:01:22 +0000 Manifest next update: Sun 14 Jun 2026 12:01:22 +0000 Files and hashes: 1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=) 2: 4Uc22LPWnWUE2R7euaG4ZHnFv6s.roa (hash: RGTqZUMIJDCt8fg43m28f23pkWbeJCT3vhwBQSzMBNo=) 3: 8-_TWMNK9smVCIZHx2gSgefBTvk.roa (hash: GoPHoDZXQ4RK7VcYW0JWFdEHGQJJF9f+5F3ghTg1XDg=) 4: A8pB-9bz15cQYivfjGrzOwMc7LY.roa (hash: EeHyMuPO8kK3PqKlWgKjT50oovE1gmYEWW0HAbBX2NI=) 5: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=) 6: BIlBx7GNQtDXs3rYutuCu_mCEbs.roa (hash: PjkQd4dOSp8nnX9aBaii5mDXPUnbKEUEDpkzwxtH96g=) 7: JvSklV-wlWBMdiMFZHYwnOO4qno.roa (hash: 2Y5pgGlMimFGDoHDIk55HXcJoD340d10aMUaMx1CDGE=) 8: Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa (hash: ujg1A0vQ9FG1rTPZa8Vj4tuAeoDxeA7TxCNsFbsOZaw=) 9: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=) 10: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (hash: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=) 11: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=) 12: c-uurSvFwdZ4HnQ-2FusksHz4JY.roa (hash: L6sexLXbR65THJCvf0Zc/VUy29DDIcDYXnW872IpKPc=) 13: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=) 14: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: 8wsyEm5FIw7OtUn2JHdeHwna25z9PKHkYFo8n4QaB6s=) 15: qpYQo3kblbWomPwFmEhdi-yU3Ws.roa (hash: TeIBrPWRZVXfPEfWweP/JAjqy2VRwcKRY0wXngW8UGg=) 16: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=) 17: tQsPmObVMxsGs2USQ--MlT6lmJc.roa (hash: S6g3w3tZ77+L4/5UZR+GE+6G9JUS385U/WfguqUEU+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:db:ab:7c:54:81:4d:ea:04:34:15:2f:14:35:61:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Jun 13 12:01:22 2026 GMT Not After : Jun 14 12:01:22 2026 GMT Subject: CN=09c0dec7223fd0b8b99ad3e512b7d6d81afeec92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:ee:ec:6a:41:1b:d8:5b:28:75:0c:6f:51: 97:83:05:21:90:e1:81:f8:f7:10:4f:3d:0e:2c:1b: 08:9f:e5:e0:8b:55:54:33:18:0e:e2:51:9f:e7:0e: bd:ca:09:ee:2b:33:ea:c1:74:bf:18:68:10:0d:7f: 90:7f:16:94:d0:40:51:fb:8d:9f:32:34:c0:44:99: 7e:19:e7:9f:ba:d2:db:96:88:38:f8:68:b1:14:5f: 76:ca:e6:d7:0c:1e:30:3e:2e:97:7c:00:bc:ca:db: 82:c5:17:bc:e0:d7:47:4b:43:11:4e:d7:04:8c:51: 0d:71:47:9e:5a:fd:89:1c:42:3d:e1:6d:7e:7a:9f: b4:8a:54:0b:57:15:2a:fd:c1:f4:e2:0d:2a:38:02: ef:4a:9b:68:10:4c:dc:5a:c6:71:87:e0:96:a9:fd: 38:79:82:f2:d9:9b:23:0b:2e:8e:a2:5e:e0:82:6e: d8:fd:c2:22:85:fb:0b:15:01:57:05:d3:8a:b6:05: ee:6e:88:b4:98:a8:68:15:ca:d6:ff:27:9f:e3:63: 27:df:d8:30:dd:dd:0d:f4:1f:8d:9c:67:7e:57:e0: 88:0c:c9:7d:7d:52:05:62:ae:da:ea:48:91:c3:1a: 81:af:80:58:2f:60:0e:40:a4:d4:2b:28:4f:a4:58: 91:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C0:DE:C7:22:3F:D0:B8:B9:9A:D3:E5:12:B7:D6:D8:1A:FE:EC:92 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:c0:04:e5:ef:a1:6e:f9:8d:d8:63:85:53:66:23:f1:bc:6c: 1d:de:81:67:11:61:23:80:76:31:f4:79:78:6e:49:e1:e5:da: 88:e9:29:cc:d2:0b:c8:84:ef:c8:f7:30:77:37:b7:ef:0d:ae: e4:ec:18:f1:ea:3c:42:fe:52:1e:22:2d:a3:ae:6e:18:58:46: 93:4c:9c:bd:df:34:b2:95:05:3b:2c:e9:d4:b0:33:41:93:bd: 9c:a3:2b:a2:d4:f2:f5:35:40:88:fa:d4:12:23:60:6a:d1:ca: c2:80:62:c0:63:4b:c9:f4:56:f2:40:9a:4a:c4:e1:66:3a:d7: c1:ee:6f:43:d3:8e:91:5a:73:be:61:08:c7:46:ab:06:e3:44: b8:43:e5:af:ad:d2:31:39:dd:8a:aa:57:a6:17:7a:14:d0:85: 6a:d3:09:cf:8f:50:8b:6e:f1:60:62:e7:88:79:06:0f:5f:36: 40:5e:63:ff:8a:56:d7:9c:e3:25:26:da:9e:d8:9c:df:b6:a1: c8:74:fd:55:88:b0:97:fc:2d:22:41:00:32:51:3a:59:8a:2e: b9:bb:4d:e9:97:ba:c5:7b:d3:f7:58:1b:41:a0:4f:8f:62:d3: 95:a3:00:7e:df:5c:1f:77:e4:8e:d8:cc:32:39:3c:69:72:01: 74:f8:38:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7A26t8VIFN6gQ0FS8UNWErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwNjEzMTIwMTIyWhcNMjYwNjE0MTIwMTIyWjAzMTEwLwYDVQQD EygwOWMwZGVjNzIyM2ZkMGI4Yjk5YWQzZTUxMmI3ZDZkODFhZmVlYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBvu7GpBG9hbKHUMb1GXgwUhkOGB +PcQTz0OLBsIn+Xgi1VUMxgO4lGf5w69ygnuKzPqwXS/GGgQDX+QfxaU0EBR+42f MjTARJl+GeefutLblog4+GixFF92yubXDB4wPi6XfAC8ytuCxRe84NdHS0MRTtcE jFENcUeeWv2JHEI94W1+ep+0ilQLVxUq/cH04g0qOALvSptoEEzcWsZxh+CWqf04 eYLy2ZsjCy6Ool7ggm7Y/cIihfsLFQFXBdOKtgXuboi0mKhoFcrW/yef42Mn39gw 3d0N9B+NnGd+V+CIDMl9fVIFYq7a6kiRwxqBr4BYL2AOQKTUKyhPpFiRfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnA3sciP9C4uZrT5RK31tga/uySMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwsAE5e+h bvmN2GOFU2Yj8bxsHd6BZxFhI4B2MfR5eG5J4eXaiOkpzNILyITvyPcwdze37w2u 5OwY8eo8Qv5SHiIto65uGFhGk0ycvd80spUFOyzp1LAzQZO9nKMrotTy9TVAiPrU EiNgatHKwoBiwGNLyfRW8kCaSsThZjrXwe5vQ9OOkVpzvmEIx0arBuNEuEPlr63S MTndiqpXphd6FNCFatMJz49Qi27xYGLniHkGD182QF5j/4pW15zjJSbantic37ah yHT9VYiwl/wtIkEAMlE6WYouubtN6Ze6xXvT91gbQaBPj2LTlaMAft9cH3fkjtjM Mjk8aXIBdPg4aA== -----END CERTIFICATE-----Generated at Sat Jun 13 14:14:20 2026 by rpki-client