$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft File: igGrbNRKej6kACwQapbEJ7UsgdU.mft (raw, json) Hash identifier: TsSiPGekCQlyKIZhtFs5l2xII0vUSZlWogrIe6K2wr0= Subject key identifier: 70:8B:A1:16:88:77:D8:5A:A4:92:B7:83:F3:29:8B:E9:BE:76:3A:AA Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019DA29CD8A4B9E8D405C9742C54C23ABDC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft Manifest number: 1637 Signing time: Sat 18 Apr 2026 22:01:21 +0000 Manifest this update: Sat 18 Apr 2026 22:01:21 +0000 Manifest next update: Sun 19 Apr 2026 22:01:21 +0000 Files and hashes: 1: 1OL-qss1xL-YpeaGHmfjzbs-eBQ.roa (hash: xs10e9jaV604BsV9Pzfe1bmNIH85FVUyiV7iCr1lQcQ=) 2: A8pB-9bz15cQYivfjGrzOwMc7LY.roa (hash: EeHyMuPO8kK3PqKlWgKjT50oovE1gmYEWW0HAbBX2NI=) 3: Ao4tPl0KDOwD2fTQaCXik9Mge2U.roa (hash: 61/JPhEn5agbl9M1kpw2R6W8Sk9wD7VpGF8lP+w7aKs=) 4: IoVIx2I3x-PhEDaNiA3QsmgYRfU.roa (hash: LJmLkrAVOpzOpZpY71yZciCd1TYlZWcX63CtNAvFvDI=) 5: JvSklV-wlWBMdiMFZHYwnOO4qno.roa (hash: 2Y5pgGlMimFGDoHDIk55HXcJoD340d10aMUaMx1CDGE=) 6: Kyf5heLwSi5U3rZkdpAZyV8bXbo.roa (hash: ujg1A0vQ9FG1rTPZa8Vj4tuAeoDxeA7TxCNsFbsOZaw=) 7: O0sj8jaNSyJUdTMszyVTwWQYdYc.roa (hash: ooQVZiGPbWLyp8e14BPaFJ5BGA9hgoAsiHuX+p9bq/k=) 8: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (hash: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=) 9: ZwbE6iJuhOqSlTd6nz-JgpAF4fM.roa (hash: v52Dzc19mHueWoSFW6XDDWD5yvdBIL0zDQiUyzndmos=) 10: aF7Fo61ARbfY3WCMykxFMZf-unI.roa (hash: mq0b7oZuWEbUNwXpwzKZdx4ZOZCDCH66xKYzqJWE62c=) 11: eWxjkloqakNfEmZwEtQCfivxqIs.roa (hash: 5ErIQvliDAsKQcv1GoMnvUfA57BgdmnpadbjnGhR00Y=) 12: gJ8qTz8F8Bxee7YRY3fHs5lSfBE.roa (hash: ZSsM99NPJ9mDrPjXKAfCF2Vn2curJz1IzgR3LOEpDF4=) 13: hpf_CEMkLorIKvLyN-JcZEe8ptI.roa (hash: 2BuEcKt8pkg3PWstEMN+HFgmR1tbhBkfcpJh+d1wIHc=) 14: igGrbNRKej6kACwQapbEJ7UsgdU.crl (hash: WHGE32BoxkXTtWHjffppB1G4i21GcI132VkmKNVMTgU=) 15: sVnkdz-If3BToP_lR8Kbr7aviEw.roa (hash: Rccu1mXIlX1/SPnYu01bLRxxpECZ4YTVP8mo65xnQx0=) 16: sfRY7oi8Cy67vRa8TsGmyb-biXw.roa (hash: e12FlexHma7yK74h/ZUgXE8E6Z1jM1kIctBTzVSEvaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 22:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a2:9c:d8:a4:b9:e8:d4:05:c9:74:2c:54:c2:3a:bd:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Apr 18 22:01:21 2026 GMT Not After : Apr 19 22:01:21 2026 GMT Subject: CN=708ba1168877d85aa492b783f3298be9be763aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6e:ad:a1:64:a0:fd:f0:37:cf:4a:fb:d3:b6: e8:b8:99:21:8e:30:0d:01:dd:37:81:27:53:e6:a3: bc:55:57:e3:1d:04:61:dd:e0:10:fe:c9:20:fd:89: c8:2b:a9:47:b1:06:5a:18:80:cd:48:b4:bd:1b:4b: 37:58:d3:aa:c6:6d:02:f4:8d:c2:da:f1:8d:be:1c: 31:2a:12:e0:82:3c:6a:3a:d3:74:f9:f0:72:90:93: fb:b8:19:3c:64:6a:46:6c:66:59:44:31:c6:66:5b: 47:03:f8:88:a6:56:a9:0c:c9:34:e9:78:cb:75:e5: 85:d1:ab:96:42:83:29:51:db:0a:bb:1a:ec:de:5a: 90:77:cb:52:39:71:8e:94:4e:6c:92:f2:86:33:85: 65:14:25:b0:d5:a9:d0:4c:0a:4a:e9:33:e9:e3:8a: 58:2b:e4:ca:c3:a7:bf:49:10:cb:51:ad:ab:bc:40: da:b2:e8:2a:31:51:77:69:f9:c5:26:85:1a:6b:94: f1:76:03:cf:5d:b7:06:6c:e3:48:fc:9f:a9:7a:49: c3:02:74:20:ce:50:3f:18:a2:a9:2a:13:56:cf:b2: 6c:1f:43:f8:47:26:bf:5c:22:92:80:6f:a8:47:2c: 0c:03:af:24:1b:4e:15:a1:24:54:d4:22:f0:c4:75: c6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8B:A1:16:88:77:D8:5A:A4:92:B7:83:F3:29:8B:E9:BE:76:3A:AA X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:d7:69:47:7e:71:66:52:4b:ff:4a:eb:41:55:5f:b6:a4:e1: 9a:e0:39:a3:9b:e2:d1:8e:d0:9a:02:46:ed:23:8b:b1:dc:f5: 62:f5:e2:23:18:18:dd:53:3d:53:b5:b9:29:31:34:a9:06:73: ac:23:c4:f9:08:88:c0:85:63:ab:33:bd:d4:6d:76:46:cc:b7: 44:61:e6:38:64:a4:83:39:b4:46:18:14:41:5b:6d:23:05:a5: 94:4c:44:46:d7:d6:5a:d4:ec:e2:e7:64:63:b1:4f:84:d7:ca: 4a:8c:96:0d:8e:bf:44:b2:5c:28:cd:ec:95:fe:37:b2:b5:c1: ff:4b:58:cf:11:f1:60:ce:16:8d:a2:6f:5a:f4:9e:88:9d:4b: 5c:6b:61:9e:dd:08:c1:8e:87:e9:6b:75:8d:2f:07:a8:78:41: 23:1f:26:50:48:9d:24:6e:98:2d:9a:b5:f5:6f:49:27:66:6f: 2f:ea:27:8c:1e:34:ae:b0:bd:98:29:2c:2b:44:5a:cf:74:13: f1:a7:cd:c8:dc:26:74:c6:cd:07:4a:4b:57:f0:af:43:6a:9c: 72:cc:c0:f0:8e:45:28:72:61:4b:1b:e5:7f:4f:86:ba:cf:d5: 6c:0c:dd:72:4b:c2:aa:4b:84:15:b8:b8:26:fd:13:e6:49:c1: 80:ac:7f:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2inNikuejUBcl0LFTCOr3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjYwNDE4MjIwMTIxWhcNMjYwNDE5MjIwMTIxWjAzMTEwLwYDVQQD Eyg3MDhiYTExNjg4NzdkODVhYTQ5MmI3ODNmMzI5OGJlOWJlNzYzYWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx26toWSg/fA3z0r707bouJkhjjAN Ad03gSdT5qO8VVfjHQRh3eAQ/skg/YnIK6lHsQZaGIDNSLS9G0s3WNOqxm0C9I3C 2vGNvhwxKhLggjxqOtN0+fBykJP7uBk8ZGpGbGZZRDHGZltHA/iIplapDMk06XjL deWF0auWQoMpUdsKuxrs3lqQd8tSOXGOlE5skvKGM4VlFCWw1anQTApK6TPp44pY K+TKw6e/SRDLUa2rvEDasugqMVF3afnFJoUaa5TxdgPPXbcGbONI/J+peknDAnQg zlA/GKKpKhNWz7JsH0P4Rya/XCKSgG+oRywMA68kG04VoSRU1CLwxHXGowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCLoRaId9hapJK3g/Mpi+m+djqqMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ddpR35x ZlJL/0rrQVVftqThmuA5o5vi0Y7QmgJG7SOLsdz1YvXiIxgY3VM9U7W5KTE0qQZz rCPE+QiIwIVjqzO91G12Rsy3RGHmOGSkgzm0RhgUQVttIwWllExERtfWWtTs4udk Y7FPhNfKSoyWDY6/RLJcKM3slf43srXB/0tYzxHxYM4WjaJvWvSeiJ1LXGthnt0I wY6H6Wt1jS8HqHhBIx8mUEidJG6YLZq19W9JJ2ZvL+onjB40rrC9mCksK0Raz3QT 8afNyNwmdMbNB0pLV/CvQ2qccszA8I5FKHJhSxvlf0+Gus/VbAzdckvCqkuEFbi4 Jv0T5knBgKx/VA== -----END CERTIFICATE-----Generated at Sun Apr 19 08:27:55 2026 by rpki-client