$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: TSxstkmAfEASKK+eyiUq4g54ZPE36QyUowMjW96HqZQ= Subject key identifier: 48:04:D9:44:B5:16:0D:DC:D4:AC:C4:44:57:5A:44:FF:94:3B:A8:CE Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019FA9E2B91CFABF87E0281B429E0E556DA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 17E3 Signing time: Tue 28 Jul 2026 18:00:35 +0000 Manifest this update: Tue 28 Jul 2026 18:00:35 +0000 Manifest next update: Wed 29 Jul 2026 18:00:35 +0000 Files and hashes: 1: 1-bwPNRa4hIuOmCXigFym4QuSvEg.roa (hash: T8k2dmI9vUTRjZrs4X4YE5xctVuURXzRhcAJw5O14+A=) 2: 67cb4CVEd93Kal1WB78eaZaXMaQ.roa (hash: ZcMr0wkok+GwKeLBJ19lhnn1dS3XMFc3UKTI/fu+EjQ=) 3: 9D8zRooL7GIRssyQDERj2pjLTEg.roa (hash: ou/519X40RGEgsg6xFxzjP5mJ508RHz7Yy+VOx34VIY=) 4: AEHvPX3VoVo4sodyxxf_DiRnFFY.roa (hash: KS6uW53GHyfiX0chDSvonFb0kqW/+nyuaNMKCFyPh9o=) 5: FjN1hqKmZUsC4Mg7aPBr_QLVSOM.roa (hash: tg987J0i644Z+rDUbSmguymeU+9jrpbhpfN7TJ7twhQ=) 6: GsdwkRswQwsiHVAvjxgs3y-ljcU.roa (hash: 8aBionJxUsPqiMFKG+K1+zKOrICiST94ZOL/Hw+ANhs=) 7: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: K91JOKJZ3XGdqX4Ft0n3tEi0OLavM4K5zn7HJvNqs/s=) 8: IS6qF60yni3ANNewV2jVanIr_SI.roa (hash: tCAUs+RgDDZ80GGfWxjoCo2EBKIL9gwwksfLpYF1d+Q=) 9: J3IUrppUQEJ9AlNcJD-MFxypKxI.roa (hash: uezq13xnHYoK43g5cZL4HFTwsYHZzWtKo0PDmpYGYzc=) 10: JWQS_G0UFZx3QuPZOTGxg1qvEz4.roa (hash: EY/6Bg0MTFnpdKXxUkbSSCAlhGDkkCzuChVoiMDOUcE=) 11: M4yvFOCrNQYrMEvHUynTCH1sRYg.roa (hash: AUJ02SjlaCnhsHTiNOzqXyVE53GehhBlvRs76nGe1NA=) 12: OYlH95cJwavdZvWPD2OKDHAiTLc.roa (hash: BWL9nE74GQlUmW8EmNYK3RjJ9VZYHqxaunAVG9GH6bg=) 13: ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa (hash: rjgdc1W6vPpG3uPNkDBN/qtt12z0N51cOglFEFDyoWY=) 14: SSwmkO4bAa3Cf5CCG9FUvkP7lr0.roa (hash: Ha81Wfoc35Apd2MzoqOASambEnENvmJSJQLlpgCS2Bc=) 15: StqYfznXE-QPiA-TOmLGA4FrAS8.roa (hash: h5TKEuBn2q4c0zbHABA+TvU5nsvIwHYwDNRGaJto+e8=) 16: Tv21UJ7ytJOyOPKpUbJcsfcz7lg.roa (hash: R5S9kl+hHU1Moq3UfwZ59OY1nQwhi4UuliZUdnWHawA=) 17: YDHAFS5NL3nYDPhy4OA73C3z01M.roa (hash: G6APuYyI4RlimuK+4VqWE8moDRuBp8AeV+DrddKsYsY=) 18: _tIJodTF0tjZ2BRpzO06esyTMcc.roa (hash: klg/XfnwGn0Trf6tOz+sC9FOx5B+7q/m4bYYCvOzprs=) 19: bE94TCIYTfIl9kzaHRXzNiQoftE.roa (hash: 4j0TvOQTsGRxrK5ktDw/14Kxmma5Wvzi7ywS8WE8N44=) 20: c_cWOPcEQMft8Aer9o0bFFTuzpw.roa (hash: 3Xhi5i/L7JVUSZVPSdHXaHOfLiEna+V7BTZ9aCjfTKo=) 21: i_CapsG6EXIlo7hs2M2bjbUXRbE.roa (hash: +sXOWob0idLEKLvec5gYyEKYRnesgUnVyZvyzvC+SkU=) 22: jzn_75xItj3KyIJmhhPYTg2Y6PQ.roa (hash: ieKy1kXYNMahlm9LrSc0LnStC9m9sUgw5teAYjTCgaU=) 23: lGKAv74gYmGH37A1DRbh0Rl9bx4.roa (hash: E14cPJbJ1TEA8BquVRSARSC5FdHT+0thzYkCOpdQdEk=) 24: libApNypfBDQd2xwXgzAI8hwEYs.roa (hash: 85uC1OhXAH8nIsIB5OKlWaHMqc+2tP9WlO+RfiiV8sU=) 25: m1yBz4RNqu4HwIJUFHN9eMdiX7Y.roa (hash: BDic+DDp9D84u0MlugmEZf/EDqOwVo1Ck4FCtwm/eIw=) 26: oKhpIH_BWd5Noqx6eV2DySEcGb0.roa (hash: N7FlWOqyJoex6ZmwsucsTTYLs5nNX4sZKRbn/6c/tug=) 27: pMQVecamDodQSmBw-UmLqkRzTyk.roa (hash: EmfM/FtUUlT/f5+MPBX6UPv6rg0dkI+I1HJgurEQFXU=) 28: pbnN9srlyaf0BgeZnbG7vJQQcDg.roa (hash: W564THz4iqZL14hlu/uRhAEJ9fbzZM3yuaKczKwNTLE=) 29: trnZsePT4aG-KTCZxjcSxSR1ufY.roa (hash: /5+dzAAN+A0ooVs+3qzdB6EtpFGea8R5ILZY8ARUEc8=) 30: uEdKtSEqLX5Iz_4fkxgMbr53LUE.roa (hash: dz0TqFesDk6dPWKdMZqZb11QZzW0a5NzIkgvjFU9Kbs=) 31: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (hash: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=) 32: w7z-BZ3rqNQrFmRHttbnDiZ4_pc.roa (hash: Oi5pXvAB+JPYM6z0KbwrvUVqx+IEISCt2YPJDDcKR6M=) 33: wyKENznEjqoTOu0kPDQ-ja6IOA0.roa (hash: XADEeG1QubSOLS5X6zAA6TQkPOdRj7Y6STFASKP2PIo=) 34: xUZt8DNQHiBefNBi4Ert7_QLSEI.roa (hash: oWYA1BCVHJtygn7rZSGc6Cdmnr0lvqfDo1gxsViQABk=) 35: yILg3Hndq5JGOi0ESwh1jw7vK90.roa (hash: s4Kkslyzo5Htl0fCNn5xAtDK8phfonhKQ/TLfEr43FA=) 36: zT9J5b2waWVY1frWgok6rDhDEkA.roa (hash: kG62AdWQmKbNQrIhDYZwVRIR364hCu8diTI8HvtbVqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e2:b9:1c:fa:bf:87:e0:28:1b:42:9e:0e:55:6d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jul 28 18:00:35 2026 GMT Not After : Jul 29 18:00:35 2026 GMT Subject: CN=4804d944b5160ddcd4acc444575a44ff943ba8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:f1:55:2e:c5:33:ba:8e:ea:a1:ac:57:25: 61:17:f5:81:06:0e:a3:87:ee:37:61:c1:b2:4c:94: f6:3e:b6:a7:ca:a4:39:1a:80:40:4d:94:1d:dd:a9: a0:1c:78:a4:1f:5e:38:76:71:71:4b:e9:ac:ce:25: bb:46:17:a8:38:a0:86:2c:dc:85:10:23:52:06:49: fd:28:8f:cc:91:a8:c8:dd:19:9f:2f:c7:25:4e:7a: e9:67:e9:d0:ff:2c:5d:43:1e:29:ec:56:52:b4:68: b7:f5:e9:f9:67:58:76:7f:0c:46:9d:78:f7:2c:7c: ca:f3:1f:af:8a:9d:50:dc:57:25:c5:2f:3e:3d:9b: 13:0c:25:75:01:42:93:09:3f:93:bc:bc:b4:2f:1c: f3:ca:7a:b2:80:ba:f4:d1:0d:18:15:b7:5f:b6:45: d9:3b:be:5d:54:1c:1e:5e:f1:c8:f8:59:53:b3:8f: d6:20:53:27:16:60:3b:e3:fb:21:27:6f:79:78:39: 84:bd:a0:b2:95:e8:2a:f9:ca:c3:c6:1b:c5:da:a0: cf:7b:4a:eb:9a:85:00:e3:f3:c3:b4:48:68:6a:d5: 8d:b1:c6:f3:f3:6e:85:fb:52:21:d0:0e:0b:de:6b: d9:be:bf:62:38:3a:30:64:9b:46:93:b7:aa:cc:74: 60:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:04:D9:44:B5:16:0D:DC:D4:AC:C4:44:57:5A:44:FF:94:3B:A8:CE X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b7:02:20:a9:69:6a:20:ab:28:a7:c0:63:33:3e:7d:a6:08: be:d8:34:26:a4:23:79:d6:01:c0:26:8b:86:63:fa:4b:d2:53: a3:64:a3:33:96:4c:f6:69:ab:44:46:44:07:62:bc:c7:7c:51: 2c:e4:3f:23:05:9a:21:a8:9a:ca:78:27:00:d7:77:4c:50:68: 6e:90:dc:df:79:0a:35:f2:0b:ec:24:42:09:c0:f9:ab:2f:56: 65:3c:db:3e:7c:b3:5d:57:65:dc:80:21:7c:b0:dd:07:22:13: f6:f3:6a:98:8f:7b:84:0d:c5:81:72:76:43:a2:19:2b:94:f6: 31:a4:de:51:78:13:60:db:a1:18:99:61:39:b4:88:8d:ee:9f: aa:16:11:ef:5b:eb:43:15:19:59:5e:7f:98:02:d8:64:e1:d4: 79:e8:6c:34:fb:b6:e4:0a:26:01:ac:74:42:e2:5b:77:51:e9: 57:38:9e:22:20:8c:fd:85:81:eb:cd:87:69:c0:39:28:10:7d: 7a:40:39:80:f0:07:3f:ae:2b:ff:41:e4:7e:b7:3d:5b:88:80: 79:e6:7e:c2:cc:76:0d:ea:60:98:bb:2d:a0:14:7f:6b:32:fa: b0:09:36:d2:92:82:5a:bb:9c:07:ef:9a:22:0f:62:11:f8:11: 2a:9d:86:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4rkc+r+H4CgbQp4OVW2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwNzI4MTgwMDM1WhcNMjYwNzI5MTgwMDM1WjAzMTEwLwYDVQQD Eyg0ODA0ZDk0NGI1MTYwZGRjZDRhY2M0NDQ1NzVhNDRmZjk0M2JhOGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF/xVS7FM7qO6qGsVyVhF/WBBg6j h+43YcGyTJT2PranyqQ5GoBATZQd3amgHHikH144dnFxS+msziW7RheoOKCGLNyF ECNSBkn9KI/MkajI3RmfL8clTnrpZ+nQ/yxdQx4p7FZStGi39en5Z1h2fwxGnXj3 LHzK8x+vip1Q3FclxS8+PZsTDCV1AUKTCT+TvLy0LxzzynqygLr00Q0YFbdftkXZ O75dVBweXvHI+FlTs4/WIFMnFmA74/shJ295eDmEvaCylegq+crDxhvF2qDPe0rr moUA4/PDtEhoatWNscbz826F+1Ih0A4L3mvZvr9iODowZJtGk7eqzHRgDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgE2US1Fg3c1KzERFdaRP+UO6jOMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALcCIKlp aiCrKKfAYzM+faYIvtg0JqQjedYBwCaLhmP6S9JTo2SjM5ZM9mmrREZEB2K8x3xR LOQ/IwWaIaiayngnANd3TFBobpDc33kKNfIL7CRCCcD5qy9WZTzbPnyzXVdl3IAh fLDdByIT9vNqmI97hA3FgXJ2Q6IZK5T2MaTeUXgTYNuhGJlhObSIje6fqhYR71vr QxUZWV5/mALYZOHUeehsNPu25AomAax0QuJbd1HpVzieIiCM/YWB682HacA5KBB9 ekA5gPAHP64r/0Hkfrc9W4iAeeZ+wsx2DepgmLstoBR/azL6sAk20pKCWrucB++a Ig9iEfgRKp2GEw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:17:35 2026 by rpki-client