$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json) Hash identifier: eYtNxDJeiaAuoi/x9xE6sVih36Fj1fwQWd2NtoWR5zs= Subject key identifier: 0B:FD:9E:6B:09:0D:F1:0B:40:9D:32:92:BA:BD:D6:99:81:89:36:57 Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019CA90EA3FD6D24B699B0C222F0EEDC4388 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft Manifest number: 15A5 Signing time: Sun 01 Mar 2026 11:00:34 +0000 Manifest this update: Sun 01 Mar 2026 11:00:34 +0000 Manifest next update: Mon 02 Mar 2026 11:00:34 +0000 Files and hashes: 1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=) 2: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=) 3: FJCduZ5F_LNl1B68SNwAcaqcnVM.roa (hash: ik7VYECA7V9tZz9/6iTk6xsMHVkaLzTDiIFqRWej80U=) 4: K_nPRyyftR4ZBlRYe5o2Y5tUvJI.roa (hash: q4zqaL21M35s9vhO9oi9xK7MF0lYvuEB0k/Aafia0Vg=) 5: Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa (hash: ujg1A0vQ9FG1rTPZa8Vj4tuAeoDxeA7TxCNsFbsOZaw=) 6: NGjdUubhTaDpN7BWGdqVsarGKK4.roa (hash: WEVoIWeksgLWhIoYIU2Xs8oUAeGV+4dGK/PL2s/49yo=) 7: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=) 8: _z2AETln5h0EJM43e3v3oGPmobw.roa (hash: dTSObFPPNK6gQmE+hkeFVAZehlQ/J5wYJQcm52Y6s9s=) 9: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=) 10: esDeqCDyoqRbsAQHRMglZbrhqEw.roa (hash: 8qsCJZ3G69ZmXBetACQrczxZCcilKLtmeUcqYta84tw=) 11: gJ8qTz8F8Bxee7YRY3fHs5lSfBE.roa (hash: ZSsM99NPJ9mDrPjXKAfCF2Vn2curJz1IzgR3LOEpDF4=) 12: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=) 13: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: FmYqKeJA3EdUlXSIlltkRqCgrMLSKLJBTZkiBv0H3Mg=) 14: sVnkdz-If3BToP_lR8Kbr7aviEw.roa (hash: Rccu1mXIlX1/SPnYu01bLRxxpECZ4YTVP8mo65xnQx0=) 15: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=) 16: y5RS8HrEJ8kED5BskhLhm_4BWLI.roa (hash: kUt0c51YaiS0sol14q/MFCa1xF2Vh48fis+8qbFBh2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:0e:a3:fd:6d:24:b6:99:b0:c2:22:f0:ee:dc:43:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Mar 1 11:00:34 2026 GMT Not After : Mar 2 11:00:34 2026 GMT Subject: CN=0bfd9e6b090df10b409d3292babdd69981893657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:03:0d:44:06:bd:e7:aa:56:85:89:12:29:8a: bf:a5:38:4a:4e:25:3b:b8:f1:4b:02:bb:a0:d8:9e: 9a:46:f9:29:de:7a:05:c8:8d:fa:4b:af:ab:e2:3b: 89:ec:14:9a:e1:d7:38:2e:37:89:13:42:da:13:8d: b6:7f:6e:15:87:39:91:24:74:d2:bc:f0:72:bb:ae: 7f:0f:f4:41:1c:6f:b4:69:ab:74:da:fe:a2:ab:05: 49:8d:ab:9e:3d:84:8d:36:35:3b:4b:5f:7a:87:e6: ce:64:8b:f3:cf:ff:1d:d6:05:86:29:fc:73:96:12: d8:31:4e:27:7c:0e:82:d6:e9:5a:d7:70:a3:20:70: ea:7b:3b:18:4e:d9:34:90:9e:cc:c7:cd:53:18:26: 18:ee:a0:5c:f8:45:f0:7d:cc:34:f2:3c:6a:b2:56: 59:92:de:3f:27:c7:be:f9:24:0f:8a:27:91:cb:b4: 9d:f7:7e:e9:33:21:b6:b4:82:9c:ec:94:1b:6c:36: 4b:27:bc:1e:f9:3b:60:90:6b:57:eb:e4:51:5e:83: 09:c6:d1:98:d8:c0:65:87:b7:a8:e8:68:0f:c2:24: 27:c0:31:a6:3f:86:aa:33:b3:5c:5b:e4:96:57:0b: 33:55:51:a0:01:cc:0a:af:95:bf:50:69:a4:05:b1: 15:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FD:9E:6B:09:0D:F1:0B:40:9D:32:92:BA:BD:D6:99:81:89:36:57 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:93:e4:8e:04:0b:18:d9:f4:3c:ca:f1:6f:eb:7f:6a:fa:e1: 50:76:17:e4:99:bf:a0:c9:98:92:47:aa:c2:c0:38:17:7f:bd: 53:39:ae:68:b9:0b:43:0a:85:f2:07:d9:30:2f:ef:d6:20:70: 93:70:03:b2:65:0f:a9:12:5a:d6:c8:78:ca:49:10:fb:77:d0: ee:bd:df:34:98:8f:ff:c5:ba:a3:83:ed:27:44:cb:68:76:ea: 07:eb:4c:76:af:92:d4:c6:67:a0:44:d5:c8:b4:0c:22:a2:29: c4:aa:65:65:41:97:df:b3:3e:db:37:33:d8:4b:82:e4:e9:c2: 83:4d:20:62:99:ef:95:1e:a8:53:5d:c2:c6:a5:7f:a2:83:d3: a9:0f:97:25:dc:90:d7:8c:56:d8:6e:cd:05:42:6d:6f:cc:4f: 46:bf:de:a0:44:12:25:2c:1b:83:70:74:c1:13:df:85:aa:05: 87:12:ca:95:1d:54:fc:2b:31:8e:bc:ff:31:ee:70:87:27:ff: 3a:51:df:44:53:b8:ff:c1:fb:96:1d:59:1f:c5:fe:e5:e2:df: 72:e3:8e:d0:7d:12:79:72:72:d3:2b:53:42:59:f1:86:bf:e8: a5:39:17:ee:3a:48:ec:ad:f7:df:b4:7f:bc:9f:76:cc:13:e7: 12:3f:ee:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypDqP9bSS2mbDCIvDu3EOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwMzAxMTEwMDM0WhcNMjYwMzAyMTEwMDM0WjAzMTEwLwYDVQQD EygwYmZkOWU2YjA5MGRmMTBiNDA5ZDMyOTJiYWJkZDY5OTgxODkzNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQMNRAa956pWhYkSKYq/pThKTiU7 uPFLArug2J6aRvkp3noFyI36S6+r4juJ7BSa4dc4LjeJE0LaE422f24VhzmRJHTS vPByu65/D/RBHG+0aat02v6iqwVJjauePYSNNjU7S196h+bOZIvzz/8d1gWGKfxz lhLYMU4nfA6C1ula13CjIHDqezsYTtk0kJ7Mx81TGCYY7qBc+EXwfcw08jxqslZZ kt4/J8e++SQPiieRy7Sd937pMyG2tIKc7JQbbDZLJ7we+TtgkGtX6+RRXoMJxtGY 2MBlh7eo6GgPwiQnwDGmP4aqM7NcW+SWVwszVVGgAcwKr5W/UGmkBbEVGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAv9nmsJDfELQJ0ykrq91pmBiTZXMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx5PkjgQL GNn0PMrxb+t/avrhUHYX5Jm/oMmYkkeqwsA4F3+9UzmuaLkLQwqF8gfZMC/v1iBw k3ADsmUPqRJa1sh4ykkQ+3fQ7r3fNJiP/8W6o4PtJ0TLaHbqB+tMdq+S1MZnoETV yLQMIqIpxKplZUGX37M+2zcz2EuC5OnCg00gYpnvlR6oU13CxqV/ooPTqQ+XJdyQ 14xW2G7NBUJtb8xPRr/eoEQSJSwbg3B0wRPfhaoFhxLKlR1U/Csxjrz/Me5whyf/ OlHfRFO4/8H7lh1ZH8X+5eLfcuOO0H0SeXJy0ytTQlnxhr/opTkX7jpI7K3337R/ vJ92zBPnEj/uVw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:16:36 2026 by rpki-client