$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json) Hash identifier: tLt5/V2WOkjrsnu4zlotLn/rprvxScbyu5zkT6kTPyw= Subject key identifier: D5:2C:3E:75:DB:D2:5B:2E:5E:EB:75:40:D2:2F:99:A3:2E:85:C5:78 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 01A0C030B2A57A78C00750274FAC14DF47F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft Manifest number: 17F6 Signing time: Sun 20 Sep 2026 19:00:11 +0000 Manifest this update: Sun 20 Sep 2026 19:00:11 +0000 Manifest next update: Mon 21 Sep 2026 19:00:11 +0000 Files and hashes: 1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=) 2: 8-_TWMNK9smVCIZHx2gSgefBTvk.roa (hash: GoPHoDZXQ4RK7VcYW0JWFdEHGQJJF9f+5F3ghTg1XDg=) 3: 9qAEHUby2kuUCMI19wdK7QIhAg8.roa (hash: j0PyiEMnRv/aYSZCH4c3fek9SvuRs8/liv5iE7aCOm0=) 4: A8pB-9bz15cQYivfjGrzOwMc7LY.roa (hash: EeHyMuPO8kK3PqKlWgKjT50oovE1gmYEWW0HAbBX2NI=) 5: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=) 6: BIlBx7GNQtDXs3rYutuCu_mCEbs.roa (hash: PjkQd4dOSp8nnX9aBaii5mDXPUnbKEUEDpkzwxtH96g=) 7: GspeMP674JCoxzmabdO8Nx2F6fQ.roa (hash: VKbOH4JHpKYz0hG7SgazWoJ56gIYm3db7hsnAsPcBug=) 8: JvSklV-wlWBMdiMFZHYwnOO4qno.roa (hash: 2Y5pgGlMimFGDoHDIk55HXcJoD340d10aMUaMx1CDGE=) 9: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=) 10: Qww9gCj-X4B4Xg_aKnU4H1Tk5uo.roa (hash: SIiEXR4hvpH9UtDtRw7spSH/X12xxic4pC9q8/Dobkw=) 11: W16xmLErxPDDZuAkpXsmTDvXhKo.roa (hash: ZZMh5yS+zh9z7B0QaTGmfn6lspQ+YRQASiUwjCDNxLk=) 12: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (hash: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=) 13: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=) 14: c4Dm4UgqUL4CUx9nOOL5uBAzFTA.roa (hash: U3K1dzpYsUWsqrAD5WtyRGP2OtEEKqHJp0n2MHiucNo=) 15: f4t99DHwC1imSdH0qBOau6ppWXc.roa (hash: R9huUo4NQkxmrWCn+znDnfiLaLSzUXjUqRrEAKTH5p0=) 16: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=) 17: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: DkCPTPv1WO+mKzq+8RNOsVOEhNEp2lWMPAUqBihJ2KE=) 18: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=) 19: yWXTyKbdzhf70aOdG1K-qa2Vqzo.roa (hash: HsTOFLq2DipgL762bkM6mfxMBIXe/4uYryzBcH67ZcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c0:30:b2:a5:7a:78:c0:07:50:27:4f:ac:14:df:47:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Sep 20 19:00:11 2026 GMT Not After : Sep 21 19:00:11 2026 GMT Subject: CN=d52c3e75dbd25b2e5eeb7540d22f99a32e85c578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:03:04:bd:5c:ad:94:5d:92:6a:53:c5:be: 29:9e:18:29:3c:7d:6e:1f:9a:d5:b1:b4:fb:94:61: c9:b8:0a:b4:46:75:99:7f:17:43:42:4e:76:a3:ff: e1:60:e8:dc:63:bf:91:65:c4:98:79:22:0d:bf:24: 5a:18:49:29:d0:47:31:a2:de:e7:2a:13:7e:7a:91: 9d:59:fc:59:6c:31:c9:cb:e7:db:df:7e:76:7b:52: d6:57:bb:22:10:21:85:4c:cf:ff:bb:b2:2b:6e:63: 84:df:47:ae:cf:86:1b:42:1b:36:55:90:6b:ff:c7: c2:f2:a0:92:3d:2d:cb:0b:bb:27:0f:76:6c:77:2b: 41:e9:48:ae:c7:4c:b7:60:98:8c:ed:34:84:10:01: a2:7d:57:6f:23:6b:26:02:28:82:36:3d:54:4a:de: 8c:2d:70:ee:90:8d:0f:43:ca:c6:9b:1a:fc:2c:8e: eb:a5:a1:ba:b5:5b:e7:8c:5c:db:63:30:ac:2d:bb: 7d:1a:7c:60:60:83:2a:52:5e:25:18:41:87:a8:79: 09:df:bb:0b:47:d2:21:57:74:a8:a3:1b:57:62:a4: 45:b6:10:fb:3e:9a:85:55:2e:e3:65:91:0a:78:4e: d9:90:01:1c:0a:71:0a:46:ff:2b:43:8c:cc:6d:6d: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2C:3E:75:DB:D2:5B:2E:5E:EB:75:40:D2:2F:99:A3:2E:85:C5:78 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:3a:14:7e:c2:23:f4:89:f7:a1:e0:6a:0b:45:aa:7c:f6:57: de:b1:ff:9a:ba:45:2a:b9:85:02:9a:76:6c:87:0d:50:3f:8f: 2d:0a:a8:c4:5c:a4:c0:d1:a0:09:41:a3:90:47:8b:60:96:33: 2f:92:5f:86:5e:22:0e:28:87:b4:fb:75:c0:aa:7a:ee:26:82: 24:65:ab:ac:42:f4:1a:83:b7:d6:72:91:9f:44:3c:09:5d:e5: 86:ef:ae:8d:9c:c6:95:7b:40:b7:88:76:a0:08:83:7f:a3:04: ff:34:9d:f3:89:be:9c:a4:e9:d3:6a:42:0c:86:49:ad:f9:4f: f5:4c:a6:15:c2:03:47:8f:21:41:68:ce:e7:c6:64:62:96:42: d3:b0:99:45:25:7c:74:a2:c9:18:a1:1f:57:36:de:d2:f7:7d: c3:ff:01:ee:dc:4f:43:e4:78:f8:eb:98:ec:ed:f8:5a:38:79: b1:39:4e:cc:39:37:b3:93:a7:55:69:62:eb:33:c8:32:c1:bb: be:32:1e:67:91:89:18:44:da:a4:55:a6:19:fd:17:5c:76:7e: 36:0b:0d:fc:40:f1:6c:66:a2:ca:2a:7b:63:03:3e:48:f3:5f: b4:82:8f:11:ae:57:6d:1a:42:ff:20:cd:f2:90:22:c4:a0:d6: 24:52:1c:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDAMLKlenjAB1AnT6wU30f4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwOTIwMTkwMDExWhcNMjYwOTIxMTkwMDExWjAzMTEwLwYDVQQD EyhkNTJjM2U3NWRiZDI1YjJlNWVlYjc1NDBkMjJmOTlhMzJlODVjNTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq60DBL1crZRdkmpTxb4pnhgpPH1u H5rVsbT7lGHJuAq0RnWZfxdDQk52o//hYOjcY7+RZcSYeSINvyRaGEkp0Ecxot7n KhN+epGdWfxZbDHJy+fb3352e1LWV7siECGFTM//u7IrbmOE30euz4YbQhs2VZBr /8fC8qCSPS3LC7snD3ZsdytB6Uiux0y3YJiM7TSEEAGifVdvI2smAiiCNj1USt6M LXDukI0PQ8rGmxr8LI7rpaG6tVvnjFzbYzCsLbt9GnxgYIMqUl4lGEGHqHkJ37sL R9IhV3SooxtXYqRFthD7PpqFVS7jZZEKeE7ZkAEcCnEKRv8rQ4zMbW1QSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUsPnXb0lsuXut1QNIvmaMuhcV4MB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2DoUfsIj 9In3oeBqC0WqfPZX3rH/mrpFKrmFApp2bIcNUD+PLQqoxFykwNGgCUGjkEeLYJYz L5Jfhl4iDiiHtPt1wKp67iaCJGWrrEL0GoO31nKRn0Q8CV3lhu+ujZzGlXtAt4h2 oAiDf6ME/zSd84m+nKTp02pCDIZJrflP9UymFcIDR48hQWjO58ZkYpZC07CZRSV8 dKLJGKEfVzbe0vd9w/8B7txPQ+R4+OuY7O34Wjh5sTlOzDk3s5OnVWli6zPIMsG7 vjIeZ5GJGETapFWmGf0XXHZ+NgsN/EDxbGaiyip7YwM+SPNftIKPEa5XbRpC/yDN 8pAixKDWJFIcTw== -----END CERTIFICATE-----Generated at Sun Sep 20 22:36:03 2026 by rpki-client