$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json) Hash identifier: oYjiPZf3WihOSv86mTeSzqg7DQ3Rbf7fvg+sHC/ZXWQ= Subject key identifier: 51:4E:C2:F6:5A:4E:C7:7C:97:C3:80:A7:A2:FB:34:18:38:B9:2D:8B Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 01A0C520AD5F5085A0B3803FE743258AE372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft Manifest number: 1A91 Signing time: Mon 21 Sep 2026 18:00:48 +0000 Manifest this update: Mon 21 Sep 2026 18:00:48 +0000 Manifest next update: Tue 22 Sep 2026 18:00:48 +0000 Files and hashes: 1: 1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa (hash: Fu35/+YQg8Zu+dlavAtKg8JaD90oFzzH1onpdQ5Y6oY=) 2: 6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa (hash: 8GvbG6s3RPwfopIs9XgARrrF1rjC6XY19ETpAszLP8I=) 3: 9j9Cr3fnwmgjqkXx14urDbJasp0.roa (hash: KW0VD6lDdNbgIp4ZsL2MGrtyxm+1LW6cNcgokA6BqI8=) 4: D97R0f6wcJeezq7lLgqmu7BA_nc.roa (hash: A+f6qmQCetOSAsJLLeyROkHkp5iv9hWhVN2aKLzqLTE=) 5: FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa (hash: htFUuvTJdlK2gOgKs0gKKqW+9jnUAHhAceSH0KAekak=) 6: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: lDuchl1x0K+2WAt5mWlp+ys6S7in+o6sEVhDTefFWN4=) 7: K7e0_WclzsRxbDgQl0m2GyC0awM.roa (hash: vQbkQa9JX2Q86b4F0AezEHB0GMnTiQRSgXLPAgphUxE=) 8: LL4asLDw3271RX0UzOrcd8UQePQ.roa (hash: g9EWeVbWKxalUxSKi4YGS0KlwOF+b+mjphC2cg6OVVo=) 9: M2737Kt-OKT4cwZg4viZL0ezWHk.roa (hash: Xgsds8L8YcUZbYe9UXVPzU1lKNJSTQTeXad2hhRxl9I=) 10: MBkrOOhdhon2PhUZJgtjDAd8tOU.roa (hash: hW4AmvxmksvcWmVBpumWyTnm5KximR6PbhMb2CKistg=) 11: N3UnlwMOiCPor8fOEr__gAYIrSM.roa (hash: x/pwXlflb9SsnKG7wuuULMx75zKgSUqP9QAnUFoqRhs=) 12: NipgiA7nWo95KVHsFSO0BGsePIE.roa (hash: G+j2PLZUQhdVgxq/HyRkEd9NcDIecek/OBFAXQhHzkc=) 13: O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa (hash: HTqDYC1nRE3LkJmUy9M4M3I587kOWgHXriuwbMluE8E=) 14: RipkiCpTN4mFL2FF9zHdpp9YCjk.roa (hash: OnPLwFbKkZSd7QY8QBHcfUOy4okcvY1rfsmoZKGmWi8=) 15: T1F3qk8LhawCDk9nTAf4naoGRg8.roa (hash: aQgPYoClwrq8NkswlVpVaf501J/wYiiEJsgo08XzB5k=) 16: Toi74ngMk8iMkETT7QmeelInLio.roa (hash: cdnyZv5QV1TwjMBRgbJCcQqcC2938hSblX1iGXnlsPg=) 17: YFhff6PieA-0R_-D6roOZogSJYw.roa (hash: uq54FImU4X4n4Q5wAXCqz42QpkCkIhO0GgHxJfUTPP8=) 18: aKfQ-5lMgYP0JI0A9n1qEYkxhDQ.roa (hash: r2Wo2GFq531NFIKM8VlPd5aTqIW84E3DIi1eqRZI5bQ=) 19: aPlZnQWtj-q04HWeqXabAKMT6h4.roa (hash: qMB7kiStIsp5/ItJSnoaHMSnB7QpqZcmeaPW1lPudSI=) 20: b3x9MgXvL3PTr4don27jJ7KcZ-U.roa (hash: og0sUIx4pVJgJgZExjSAsHZvgWsvBSypO6sOjz57nD0=) 21: cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa (hash: wujKocfHMBpZH00dc6pNcl9yD87nGXF+SDw9jaWJwcU=) 22: fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa (hash: Qirqc0W+Lqc03wM+xcAN53u2usp9+4O2S+/ddNQhy1w=) 23: imL0Bv9oNo72HfaP6hi7wxQ6gP4.roa (hash: khbN/ig9hlglazApKQX+gYGTDa2dWuU+YgpXL3Ov0Cg=) 24: kxJnezzNDEUiqIwrMrS9hJJJeag.roa (hash: zz7Ieb04C6jhC5Jd17Xzul9nQQzF2s391XrM6eqtYg8=) 25: lyUxPH3p1gyRR8v9TM54AekVNQY.roa (hash: P4j9D2TQV05hcP6DYizsgQ0f8usXVytikc5NgAea7u8=) 26: oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa (hash: oHOFp9TL81c7KtMVFWQ9DGRuGttBJhr1ayJ1ZSxs8Lw=) 27: p9QObIf1OeGL35dA6XPq_krw2hU.roa (hash: j+Grnpqo/obd2JzfzoB1ui5FPqoBL910Sxe8EfKjVvM=) 28: rSklrKM9yUBRtmcTZ3JrpV-pbF8.roa (hash: IeInj6Ips0Ggz3WNulyuE5o9Jct1XuzppTnW6FpL1E0=) 29: sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa (hash: opJzNV6FEUtzmIuV3nD2tt4j7hDOk/PqNpj2ykTZfgU=) 30: tCNeV_J6VU-7Bj-OfpuXhHy2kfE.roa (hash: fDyZCQSZKGYKwS6K6RL9aN00NMCUW0dVIOA3MqfvcuM=) 31: xc_O8fJNKB9MZ99docy925NUS6M.roa (hash: YAI+l3E+qbq82kgBXviylGXScO5+u/jTMIel+5Z3CL0=) 32: xzpWx6VUIpGcmh-1iUpPlYZppMU.roa (hash: UNWYOyMIvw/ynQuOswCka5zDXJh3HAZAPdJ+HWke4dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:20:ad:5f:50:85:a0:b3:80:3f:e7:43:25:8a:e3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Sep 21 18:00:48 2026 GMT Not After : Sep 22 18:00:48 2026 GMT Subject: CN=514ec2f65a4ec77c97c380a7a2fb341838b92d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:2f:22:95:57:ca:7a:a4:5c:f3:54:d8:96: 7b:26:13:5c:21:57:5b:cd:34:4b:f1:b0:a2:50:5c: df:fa:53:c6:fe:54:b7:e4:76:62:99:32:a8:10:8b: 56:38:99:3a:52:2b:eb:f0:6a:4a:06:c6:13:ce:81: d2:46:d1:c3:2b:d5:46:66:a7:a6:eb:ef:14:61:67: fc:70:6f:89:33:bb:bc:14:65:48:d7:00:91:9b:fe: d4:b2:24:6e:2c:91:16:2e:a7:96:04:1b:2d:e2:61: 46:2c:24:81:fd:80:da:78:d9:57:8f:54:ff:da:eb: 8f:bb:bd:26:cb:a3:da:ba:be:44:08:c2:6c:8e:43: ea:76:1a:8d:e4:88:4a:6f:26:72:c6:c3:0a:0f:e4: 76:14:ab:5b:d7:84:02:c4:91:6b:4e:07:a1:21:71: 34:bc:4d:d9:8d:14:13:9b:d0:55:71:90:79:54:ad: a9:f4:0d:b3:8d:ed:e0:12:62:4c:87:6e:0b:bc:df: bb:e3:19:8d:a2:12:82:0d:be:ea:a3:2e:39:e1:d9: d9:9f:de:2c:e7:0d:02:58:7d:60:40:8f:99:70:9e: cb:7e:db:5f:8f:6a:48:19:1f:27:4a:be:40:26:06: 57:c0:d2:03:98:07:1e:76:c0:13:f7:93:82:93:b4: 40:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4E:C2:F6:5A:4E:C7:7C:97:C3:80:A7:A2:FB:34:18:38:B9:2D:8B X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f7:09:33:df:6e:2f:38:be:2c:33:ae:fe:35:57:a2:78:7b: d1:7a:0d:b5:47:f5:74:ed:98:7d:0a:e5:f1:ae:5a:4c:60:68: aa:e7:ad:f8:70:05:43:7b:d6:80:8e:87:1a:b4:a5:a6:5c:8c: 68:1d:6b:64:a2:fd:19:60:fd:37:e7:7f:e0:d7:37:ab:20:90: bb:5b:66:21:88:3e:75:5c:df:20:e8:a6:6f:1d:d5:37:3d:1a: 1c:53:7d:3b:2d:38:27:c3:b9:08:12:30:44:04:3c:65:b2:54: 75:91:6f:d4:2c:aa:08:62:f8:b5:d1:cb:5d:0a:39:f4:7c:93: c6:26:e5:d2:1f:e7:ed:66:0f:12:8d:e5:b5:8b:21:d7:9c:63: 54:c2:0a:b1:12:76:05:8e:05:89:67:31:78:ca:da:fe:ac:26: 2d:66:c9:92:5f:4e:62:a1:66:66:57:41:cd:31:ff:d7:18:30: 47:43:9f:2a:59:5e:27:ca:cd:9d:d1:35:24:dc:b7:53:2d:b8: cd:c2:b7:ad:45:66:26:9f:8c:d6:d3:e4:d1:ca:64:f5:ea:e8: 4e:7d:c5:ad:e3:aa:2b:2f:68:78:ed:c7:58:78:2a:13:15:18: c8:89:c3:04:fc:65:9c:b1:bb:23:1f:d2:9b:f8:91:ff:78:9c: 7a:fb:c5:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFIK1fUIWgs4A/50MliuNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwOTIxMTgwMDQ4WhcNMjYwOTIyMTgwMDQ4WjAzMTEwLwYDVQQD Eyg1MTRlYzJmNjVhNGVjNzdjOTdjMzgwYTdhMmZiMzQxODM4YjkyZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqkvIpVXynqkXPNU2JZ7JhNcIVdb zTRL8bCiUFzf+lPG/lS35HZimTKoEItWOJk6Uivr8GpKBsYTzoHSRtHDK9VGZqem 6+8UYWf8cG+JM7u8FGVI1wCRm/7UsiRuLJEWLqeWBBst4mFGLCSB/YDaeNlXj1T/ 2uuPu70my6Paur5ECMJsjkPqdhqN5IhKbyZyxsMKD+R2FKtb14QCxJFrTgehIXE0 vE3ZjRQTm9BVcZB5VK2p9A2zje3gEmJMh24LvN+74xmNohKCDb7qoy454dnZn94s 5w0CWH1gQI+ZcJ7Lfttfj2pIGR8nSr5AJgZXwNIDmAcedsAT95OCk7RA9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFOwvZaTsd8l8OAp6L7NBg4uS2LMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/cJM99u Lzi+LDOu/jVXonh70XoNtUf1dO2YfQrl8a5aTGBoquet+HAFQ3vWgI6HGrSlplyM aB1rZKL9GWD9N+d/4Nc3qyCQu1tmIYg+dVzfIOimbx3VNz0aHFN9Oy04J8O5CBIw RAQ8ZbJUdZFv1CyqCGL4tdHLXQo59HyTxibl0h/n7WYPEo3ltYsh15xjVMIKsRJ2 BY4FiWcxeMra/qwmLWbJkl9OYqFmZldBzTH/1xgwR0OfKlleJ8rNndE1JNy3Uy24 zcK3rUVmJp+M1tPk0cpk9eroTn3FreOqKy9oeO3HWHgqExUYyInDBPxlnLG7Ix/S m/iR/3icevvFyw== -----END CERTIFICATE-----Generated at Tue Sep 22 00:06:19 2026 by rpki-client