$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json) Hash identifier: 3I6HWs4KdWkCSAa9FdeJ+uml5SGBKtzJrwhzzxzsVss= Subject key identifier: 29:14:7C:05:C9:B6:2E:FF:2A:F4:D4:01:0F:B9:41:80:AA:66:0B:DD Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019FA9E2B0F336CAA4313A6A1C8A97C02D9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft Manifest number: 175C Signing time: Tue 28 Jul 2026 18:00:33 +0000 Manifest this update: Tue 28 Jul 2026 18:00:33 +0000 Manifest next update: Wed 29 Jul 2026 18:00:33 +0000 Files and hashes: 1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=) 2: 8-_TWMNK9smVCIZHx2gSgefBTvk.roa (hash: GoPHoDZXQ4RK7VcYW0JWFdEHGQJJF9f+5F3ghTg1XDg=) 3: A8pB-9bz15cQYivfjGrzOwMc7LY.roa (hash: EeHyMuPO8kK3PqKlWgKjT50oovE1gmYEWW0HAbBX2NI=) 4: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=) 5: BIlBx7GNQtDXs3rYutuCu_mCEbs.roa (hash: PjkQd4dOSp8nnX9aBaii5mDXPUnbKEUEDpkzwxtH96g=) 6: GspeMP674JCoxzmabdO8Nx2F6fQ.roa (hash: VKbOH4JHpKYz0hG7SgazWoJ56gIYm3db7hsnAsPcBug=) 7: JvSklV-wlWBMdiMFZHYwnOO4qno.roa (hash: 2Y5pgGlMimFGDoHDIk55HXcJoD340d10aMUaMx1CDGE=) 8: Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa (hash: ujg1A0vQ9FG1rTPZa8Vj4tuAeoDxeA7TxCNsFbsOZaw=) 9: NHZjAwiNqYdXP55lTx3UrHGzF_s.roa (hash: DlXIItbGI7QMph5U0ROMZaiEwzDb77DcsZ2lNmYwWkQ=) 10: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=) 11: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (hash: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=) 12: _X0bRHceQUds2sQL_FpiWJxD9QY.roa (hash: hKjph8soEua7HoSuBbCiFUhm5tA80/17iJt8Ge1lIDg=) 13: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=) 14: c-uurSvFwdZ4HnQ-2FusksHz4JY.roa (hash: L6sexLXbR65THJCvf0Zc/VUy29DDIcDYXnW872IpKPc=) 15: c4Dm4UgqUL4CUx9nOOL5uBAzFTA.roa (hash: U3K1dzpYsUWsqrAD5WtyRGP2OtEEKqHJp0n2MHiucNo=) 16: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=) 17: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: exOGlYHkMmcnYZbp4asj/upk3uZmnYSnNMwe6qvS1BM=) 18: jtGIUucXpS25gSIxS9ey-aTaP6k.roa (hash: C7gWcR3y9LEqqxMVoaQwthR97+AE57RrFujD9LepmME=) 19: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e2:b0:f3:36:ca:a4:31:3a:6a:1c:8a:97:c0:2d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Jul 28 18:00:33 2026 GMT Not After : Jul 29 18:00:33 2026 GMT Subject: CN=29147c05c9b62eff2af4d4010fb94180aa660bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f0:79:17:53:f3:0c:d1:00:bc:46:38:a5:8d: 1c:4c:cb:b5:5b:b1:99:c2:34:20:22:cb:43:6d:e5: ab:63:20:7f:42:ee:57:2b:c5:5c:65:96:55:4e:91: f0:76:d0:0d:11:8d:f2:16:5b:c4:a3:ae:2f:3f:05: 5e:d0:e5:40:65:ca:45:1c:c9:98:2e:07:4f:df:27: f4:a6:fe:a7:5c:b5:c5:31:89:8c:12:24:ee:7c:13: 96:00:5a:7c:71:63:59:cd:22:a2:a3:4c:76:ba:a6: 8c:0f:df:c4:44:dd:6b:da:d9:ea:a0:22:54:67:34: dd:f5:68:97:82:06:8b:e2:6b:a2:ca:87:12:11:a1: 1f:c5:a9:52:0c:61:21:71:b7:eb:14:69:42:95:82: b8:7d:ba:88:5e:63:df:d0:6a:15:cb:ef:40:f1:e5: 3a:1d:33:33:40:7a:c7:7f:79:01:3c:a0:aa:d2:62: b0:35:b3:51:af:19:62:4d:d1:41:19:00:95:4e:7b: a3:b3:ae:4b:9b:54:6a:e6:f9:7e:10:5d:68:1a:2a: 6f:f3:03:77:70:45:d7:dd:8d:f6:ce:8f:34:bb:26: d1:05:10:ba:3e:b9:09:c4:67:98:10:3f:81:d0:9d: 61:89:d4:e9:7e:c4:fc:5b:e9:b3:4a:a9:f1:86:44: 0d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:14:7C:05:C9:B6:2E:FF:2A:F4:D4:01:0F:B9:41:80:AA:66:0B:DD X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:52:4f:d0:08:1b:80:68:d4:eb:a0:68:ff:1d:80:42:92:60: 66:07:29:8a:1c:5e:f8:e9:43:97:54:2a:ee:eb:11:03:0f:12: 83:5d:5c:bc:67:bb:7e:42:1b:3e:d3:b3:47:08:86:12:cb:79: 81:73:ad:2d:39:78:97:80:ef:cb:62:10:e8:35:89:90:ce:62: 4e:ef:0b:bf:22:50:05:8d:f9:ef:05:89:58:77:45:4e:35:08: d1:de:5a:06:67:11:8a:f2:7d:dc:24:ba:48:dc:46:88:f7:51: bc:28:65:64:3e:ca:7d:83:de:34:9f:35:83:41:ea:32:15:9f: 1e:d5:53:d4:18:cc:dc:12:5f:8b:eb:fe:6f:aa:2f:67:3f:96: b1:51:08:2b:d1:b9:df:31:5d:00:37:ca:1b:81:b2:28:75:42: 8b:41:77:9b:f9:d2:52:83:6f:21:53:97:87:7d:81:9c:2a:fd: 2d:bc:ac:df:15:da:35:00:7d:55:02:18:cc:9e:77:50:51:67: 72:0d:c4:51:0e:43:11:ab:cb:2a:fe:8f:7d:ce:0c:ca:fd:b7: bc:d8:b5:f4:28:b7:ac:47:ef:e9:b9:3d:b4:92:38:f5:a3:79: f0:cb:94:e8:a6:be:3a:c3:ae:c3:a1:76:30:f6:af:66:bc:7f: b1:ab:c9:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4rDzNsqkMTpqHIqXwC2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwNzI4MTgwMDMzWhcNMjYwNzI5MTgwMDMzWjAzMTEwLwYDVQQD EygyOTE0N2MwNWM5YjYyZWZmMmFmNGQ0MDEwZmI5NDE4MGFhNjYwYmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvB5F1PzDNEAvEY4pY0cTMu1W7GZ wjQgIstDbeWrYyB/Qu5XK8VcZZZVTpHwdtANEY3yFlvEo64vPwVe0OVAZcpFHMmY LgdP3yf0pv6nXLXFMYmMEiTufBOWAFp8cWNZzSKio0x2uqaMD9/ERN1r2tnqoCJU ZzTd9WiXggaL4muiyocSEaEfxalSDGEhcbfrFGlClYK4fbqIXmPf0GoVy+9A8eU6 HTMzQHrHf3kBPKCq0mKwNbNRrxliTdFBGQCVTnujs65Lm1Rq5vl+EF1oGipv8wN3 cEXX3Y32zo80uybRBRC6PrkJxGeYED+B0J1hidTpfsT8W+mzSqnxhkQNHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkUfAXJti7/KvTUAQ+5QYCqZgvdMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1JP0Agb gGjU66Bo/x2AQpJgZgcpihxe+OlDl1Qq7usRAw8Sg11cvGe7fkIbPtOzRwiGEst5 gXOtLTl4l4Dvy2IQ6DWJkM5iTu8LvyJQBY357wWJWHdFTjUI0d5aBmcRivJ93CS6 SNxGiPdRvChlZD7KfYPeNJ81g0HqMhWfHtVT1BjM3BJfi+v+b6ovZz+WsVEIK9G5 3zFdADfKG4GyKHVCi0F3m/nSUoNvIVOXh32BnCr9Lbys3xXaNQB9VQIYzJ53UFFn cg3EUQ5DEavLKv6Pfc4Myv23vNi19Ci3rEfv6bk9tJI49aN58MuU6Ka+OsOuw6F2 MPavZrx/savJAA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:31:38 2026 by rpki-client