$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: rH/IuPgd/kpYJFvdpbZ4oVGZZTZ6Pnv+wIYk9C0kmP8= Subject key identifier: D9:96:A3:AF:63:9A:AD:62:DB:D4:BE:32:47:14:58:A6:F9:84:38:06 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 01A0BE433F6F266A227D9BB776C1622EC0AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 18A3 Signing time: Sun 20 Sep 2026 10:01:13 +0000 Manifest this update: Sun 20 Sep 2026 10:01:13 +0000 Manifest next update: Mon 21 Sep 2026 10:01:13 +0000 Files and hashes: 1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=) 2: 9D8zRooL7GIRssyQDERj2pjLTEg.roa (hash: ou/519X40RGEgsg6xFxzjP5mJ508RHz7Yy+VOx34VIY=) 3: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=) 4: FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa (hash: tg987J0i644Z+rDUbSmguymeU+9jrpbhpfN7TJ7twhQ=) 5: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=) 6: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: KV8fbhnGgUd/GLQkSJq/4+hQCnWvQ3/yxn4QRDC8/Os=) 7: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=) 8: M4yvFOCrNQYrMEvHUynTCH1sRYg.roa (hash: AUJ02SjlaCnhsHTiNOzqXyVE53GehhBlvRs76nGe1NA=) 9: Nekk3PxF8fO-rhzaegHvfM_t41w.roa (hash: A1QX31c5i0IexwLkYJODSCPQogKNlG8IRZDo0disb/U=) 10: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=) 11: ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa (hash: rjgdc1W6vPpG3uPNkDBN/qtt12z0N51cOglFEFDyoWY=) 12: Pi6uT0MDxxHleo3_yZKxdHy8ou0.roa (hash: 5x3VDZkeU6jGG2nc7DGajOTETO/SJdxa0o8peRVLzVg=) 13: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=) 14: StqYfznXE-QPiA-TOmLGA4FrAS8.roa (hash: h5TKEuBn2q4c0zbHABA+TvU5nsvIwHYwDNRGaJto+e8=) 15: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=) 16: WBw7gw6osmHy0IqvZHLM8HMfKls.roa (hash: 9skt4Vx5fYnNFz8d3wonj2F4Wujetk0O7qCLQaqmEmE=) 17: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=) 18: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=) 19: aOll2yIzGlTioL_5KcotM1hRg6I.roa (hash: WjZYWFwSah/T1ngfGN/4LLm1yrnATZDAMq581306uVg=) 20: aa15nZfX27ubGWEeb2X5ayBEBXE.roa (hash: w+5MiVWAe1cAGq7vjX3zG5riF68ch5od/IXze+J4XLM=) 21: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=) 22: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=) 23: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=) 24: jIiWE2zJZX5pFl0vy1PL64bE8T0.roa (hash: 2YBMClvraF+AFYCDBE549nteIWo0rkRBKQCVhkycQQk=) 25: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=) 26: lGKAv74gYmGH37A1DRbh0Rl9bx4.roa (hash: E14cPJbJ1TEA8BquVRSARSC5FdHT+0thzYkCOpdQdEk=) 27: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=) 28: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=) 29: oKhpIH_BWd5Noqx6eV2DySEcGb0.roa (hash: N7FlWOqyJoex6ZmwsucsTTYLs5nNX4sZKRbn/6c/tug=) 30: pbnN9srlyaf0BgeZnbG7vJQQcDg.roa (hash: W564THz4iqZL14hlu/uRhAEJ9fbzZM3yuaKczKwNTLE=) 31: quUFSSqLC17PWuHw4n9doB2Ldgw.roa (hash: c+mlnrjBfuvxfpOQWD6Qk8yh8Z9jsfAhLNTYgM4TAic=) 32: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=) 33: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=) 34: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=) 35: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=) 36: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=) 37: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=) 38: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 10:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:43:3f:6f:26:6a:22:7d:9b:b7:76:c1:62:2e:c0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Sep 20 10:01:13 2026 GMT Not After : Sep 21 10:01:13 2026 GMT Subject: CN=d996a3af639aad62dbd4be32471458a6f9843806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:10:f5:d5:a6:de:07:31:40:33:05:1f:1b:82: 18:b1:bd:ac:77:39:b7:7b:fb:7e:19:b4:85:52:07: 90:fc:c4:d9:89:81:83:99:8a:a9:a3:d8:52:54:7d: 7a:02:03:3d:81:78:f7:6b:e9:75:45:f5:a6:a9:5d: ea:31:cf:51:23:e1:78:2f:da:19:35:cf:4e:67:5b: 68:53:b2:71:ac:e2:81:0d:f9:19:b3:26:8f:1d:06: 3f:c2:54:a2:4d:29:6d:b9:5b:81:ec:b0:f7:9f:18: 17:1b:45:06:71:65:de:98:df:47:ec:67:fa:c2:89: 82:f5:f1:7a:1d:7b:4c:35:8a:9f:83:1d:eb:1e:a2: e2:4f:7d:58:5f:dd:f7:d8:7d:1c:7b:3f:84:f3:e3: 30:86:2f:4b:f4:3f:9f:19:00:14:be:47:f1:21:8d: 58:b2:7e:79:78:d7:50:98:e4:7b:6a:2c:a6:78:11: 9d:a6:f6:da:34:ff:3c:6a:9f:9e:7c:ea:48:2c:37: 4b:b3:20:d6:81:3f:e5:c1:28:0b:fd:72:70:30:b4: fc:5b:1f:db:63:9e:b9:14:a1:b5:73:53:01:c5:a8: e7:07:5d:2d:ae:b8:2f:a0:be:79:de:69:f5:c7:99: e3:81:3e:13:d1:e6:1a:6f:42:37:9d:da:a9:e6:20: 50:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:96:A3:AF:63:9A:AD:62:DB:D4:BE:32:47:14:58:A6:F9:84:38:06 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:5b:3a:7d:7a:1d:29:17:1d:e6:a7:91:06:f3:59:f1:65:4c: b2:19:4b:b0:09:0b:bb:c0:e8:2a:04:45:7c:ae:05:d8:49:d7: d1:68:76:3d:d8:09:89:dd:d2:fc:8a:fe:6d:a2:a5:62:ff:66: 45:a2:f3:d1:1a:56:92:59:f0:d4:00:8e:1d:1a:21:4d:9f:06: 87:fb:34:32:eb:cb:55:0c:60:29:75:9a:f5:3f:5b:70:8b:bc: b0:36:91:b5:67:16:e9:30:37:54:64:fd:df:7e:3d:26:38:43: b6:ca:9c:64:fb:49:8b:b4:71:57:85:df:28:ad:b7:ea:54:67: e1:8b:1b:31:bb:1e:ce:08:cd:7e:ed:be:c8:14:5b:f5:c2:d4: 14:b5:3f:77:86:f2:6e:6a:80:5e:6e:46:79:f8:7f:87:aa:69: 47:bb:cd:4d:08:1b:78:13:f1:27:10:06:4f:d3:f0:f5:e8:74: 4a:b9:03:d5:02:5d:1a:19:75:73:ff:4d:f5:ea:81:6c:dc:96: 66:c3:d0:2d:7b:ec:87:e6:eb:33:30:fd:60:d2:67:7e:5f:20: 3b:39:50:22:fa:f3:ee:4d:df:e7:4f:80:fa:f1:b3:16:81:bf: ba:bb:8b:3a:89:62:15:c6:70:75:a9:4b:4f:12:10:3b:6d:1d: 22:4e:d0:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+Qz9vJmoifZu3dsFiLsCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwOTIwMTAwMTEzWhcNMjYwOTIxMTAwMTEzWjAzMTEwLwYDVQQD EyhkOTk2YTNhZjYzOWFhZDYyZGJkNGJlMzI0NzE0NThhNmY5ODQzODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xD11abeBzFAMwUfG4IYsb2sdzm3 e/t+GbSFUgeQ/MTZiYGDmYqpo9hSVH16AgM9gXj3a+l1RfWmqV3qMc9RI+F4L9oZ Nc9OZ1toU7JxrOKBDfkZsyaPHQY/wlSiTSltuVuB7LD3nxgXG0UGcWXemN9H7Gf6 womC9fF6HXtMNYqfgx3rHqLiT31YX9332H0cez+E8+Mwhi9L9D+fGQAUvkfxIY1Y sn55eNdQmOR7aiymeBGdpvbaNP88ap+efOpILDdLsyDWgT/lwSgL/XJwMLT8Wx/b Y565FKG1c1MBxajnB10trrgvoL553mn1x5njgT4T0eYab0I3ndqp5iBQuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmWo69jmq1i29S+MkcUWKb5hDgGMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1s6fXod KRcd5qeRBvNZ8WVMshlLsAkLu8DoKgRFfK4F2EnX0Wh2PdgJid3S/Ir+baKlYv9m RaLz0RpWklnw1ACOHRohTZ8Gh/s0MuvLVQxgKXWa9T9bcIu8sDaRtWcW6TA3VGT9 3349JjhDtsqcZPtJi7RxV4XfKK236lRn4YsbMbsezgjNfu2+yBRb9cLUFLU/d4by bmqAXm5Gefh/h6ppR7vNTQgbeBPxJxAGT9Pw9eh0SrkD1QJdGhl1c/9N9eqBbNyW ZsPQLXvsh+brMzD9YNJnfl8gOzlQIvrz7k3f50+A+vGzFoG/uruLOoliFcZwdalL TxIQO20dIk7QjQ== -----END CERTIFICATE-----Generated at Sun Sep 20 17:41:58 2026 by rpki-client