$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json) Hash identifier: zhE5jNhavcoTsU2GSIJwvP8ZEkW/AW5L1iQ3GNzsQ74= Subject key identifier: 17:F5:6E:6B:9D:B7:68:FC:23:94:22:81:8F:A4:C6:2A:60:EA:B6:D2 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019D99CFBF463ADCBE2515ECC91419691D0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft Manifest number: 18EB Signing time: Fri 17 Apr 2026 05:00:22 +0000 Manifest this update: Fri 17 Apr 2026 05:00:22 +0000 Manifest next update: Sat 18 Apr 2026 05:00:22 +0000 Files and hashes: 1: 1-kUP60QrhWAtAgy7hcGLRqDMZs0.roa (hash: Fu35/+YQg8Zu+dlavAtKg8JaD90oFzzH1onpdQ5Y6oY=) 2: 6Ov23BLHXZEo_g6Qvsh9lD8PAKA.roa (hash: 8GvbG6s3RPwfopIs9XgARrrF1rjC6XY19ETpAszLP8I=) 3: 9j9Cr3fnwmgjqkXx14urDbJasp0.roa (hash: KW0VD6lDdNbgIp4ZsL2MGrtyxm+1LW6cNcgokA6BqI8=) 4: FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa (hash: htFUuvTJdlK2gOgKs0gKKqW+9jnUAHhAceSH0KAekak=) 5: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: K7WWzX4Z8LiqMxcU5fm7sdfPXDoYtDfOTvcAuDgYDPI=) 6: K7e0_WclzsRxbDgQl0m2GyC0awM.roa (hash: vQbkQa9JX2Q86b4F0AezEHB0GMnTiQRSgXLPAgphUxE=) 7: LL4asLDw3271RX0UzOrcd8UQePQ.roa (hash: g9EWeVbWKxalUxSKi4YGS0KlwOF+b+mjphC2cg6OVVo=) 8: M2737Kt-OKT4cwZg4viZL0ezWHk.roa (hash: Xgsds8L8YcUZbYe9UXVPzU1lKNJSTQTeXad2hhRxl9I=) 9: MBkrOOhdhon2PhUZJgtjDAd8tOU.roa (hash: hW4AmvxmksvcWmVBpumWyTnm5KximR6PbhMb2CKistg=) 10: N3UnlwMOiCPor8fOEr__gAYIrSM.roa (hash: x/pwXlflb9SsnKG7wuuULMx75zKgSUqP9QAnUFoqRhs=) 11: NipgiA7nWo95KVHsFSO0BGsePIE.roa (hash: G+j2PLZUQhdVgxq/HyRkEd9NcDIecek/OBFAXQhHzkc=) 12: O7FrqaG5VsQ5KFOKmcfOEc5P57g.roa (hash: HTqDYC1nRE3LkJmUy9M4M3I587kOWgHXriuwbMluE8E=) 13: RipkiCpTN4mFL2FF9zHdpp9YCjk.roa (hash: OnPLwFbKkZSd7QY8QBHcfUOy4okcvY1rfsmoZKGmWi8=) 14: T1F3qk8LhawCDk9nTAf4naoGRg8.roa (hash: aQgPYoClwrq8NkswlVpVaf501J/wYiiEJsgo08XzB5k=) 15: Toi74ngMk8iMkETT7QmeelInLio.roa (hash: cdnyZv5QV1TwjMBRgbJCcQqcC2938hSblX1iGXnlsPg=) 16: W522yPrkm1ETf534dyGiRFmcWcU.roa (hash: ciBX1xa4glvJ/scnztG/cwNIztp6J0jz4XLKjig6bnM=) 17: YFhff6PieA-0R_-D6roOZogSJYw.roa (hash: uq54FImU4X4n4Q5wAXCqz42QpkCkIhO0GgHxJfUTPP8=) 18: aKfQ-5lMgYP0JI0A9n1qEYkxhDQ.roa (hash: r2Wo2GFq531NFIKM8VlPd5aTqIW84E3DIi1eqRZI5bQ=) 19: aPlZnQWtj-q04HWeqXabAKMT6h4.roa (hash: qMB7kiStIsp5/ItJSnoaHMSnB7QpqZcmeaPW1lPudSI=) 20: b3x9MgXvL3PTr4don27jJ7KcZ-U.roa (hash: og0sUIx4pVJgJgZExjSAsHZvgWsvBSypO6sOjz57nD0=) 21: cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa (hash: wujKocfHMBpZH00dc6pNcl9yD87nGXF+SDw9jaWJwcU=) 22: fmNBy9Cj0U-HEAkPtnbUg0eIT-A.roa (hash: Qirqc0W+Lqc03wM+xcAN53u2usp9+4O2S+/ddNQhy1w=) 23: jWoRYR9vyoo8wUHVWZfj1tYbQ0c.roa (hash: ki7rn/TPVckAv9oDK5QbYG54npDkl0kTyH1HzO1vxxw=) 24: kxJnezzNDEUiqIwrMrS9hJJJeag.roa (hash: zz7Ieb04C6jhC5Jd17Xzul9nQQzF2s391XrM6eqtYg8=) 25: lyUxPH3p1gyRR8v9TM54AekVNQY.roa (hash: P4j9D2TQV05hcP6DYizsgQ0f8usXVytikc5NgAea7u8=) 26: oy3fD75BcrDNS6I3ezq0y8VLuRQ.roa (hash: oHOFp9TL81c7KtMVFWQ9DGRuGttBJhr1ayJ1ZSxs8Lw=) 27: p9QObIf1OeGL35dA6XPq_krw2hU.roa (hash: j+Grnpqo/obd2JzfzoB1ui5FPqoBL910Sxe8EfKjVvM=) 28: sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa (hash: opJzNV6FEUtzmIuV3nD2tt4j7hDOk/PqNpj2ykTZfgU=) 29: xc_O8fJNKB9MZ99docy925NUS6M.roa (hash: YAI+l3E+qbq82kgBXviylGXScO5+u/jTMIel+5Z3CL0=) 30: xzpWx6VUIpGcmh-1iUpPlYZppMU.roa (hash: UNWYOyMIvw/ynQuOswCka5zDXJh3HAZAPdJ+HWke4dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 05:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:cf:bf:46:3a:dc:be:25:15:ec:c9:14:19:69:1d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Apr 17 05:00:22 2026 GMT Not After : Apr 18 05:00:22 2026 GMT Subject: CN=17f56e6b9db768fc239422818fa4c62a60eab6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:74:9b:d7:94:3d:83:52:a5:36:b4:82:8f:43: 60:43:3b:f7:83:04:04:cd:67:d4:6e:be:24:de:a2: 8e:a3:eb:a8:80:5f:b7:19:8c:0d:c5:48:97:44:69: 65:5a:83:5d:ee:3e:0c:c5:60:e0:90:7a:e5:77:ff: 3e:6d:c0:09:c3:0b:85:12:97:f9:65:a1:23:48:76: cf:a2:12:e7:4a:23:3e:39:44:34:75:c1:4c:1b:c2: a1:d9:d0:33:da:de:d6:11:4c:3d:5d:a7:03:41:3b: ee:60:ca:61:3c:ae:0b:fc:26:72:6f:71:76:7e:4e: a8:61:ca:55:2e:00:93:74:3f:05:6d:6c:27:50:08: da:cd:ca:8b:d3:2f:90:ed:07:37:54:d5:81:c8:f7: c3:85:1c:b9:27:67:40:67:34:b9:0a:ca:64:37:02: c1:d1:32:d2:df:50:48:af:86:27:c5:9d:09:93:d5: ce:e1:ef:b7:45:1e:6e:ae:47:d8:5b:1c:d1:57:9d: 61:88:74:db:50:0a:e8:bb:70:ff:f0:7b:0a:32:3e: c5:18:92:21:f3:65:d3:51:ea:cb:1b:3a:e6:cd:23: e5:2b:a5:26:1f:54:07:cd:ed:53:a3:39:05:4d:cc: 5d:d4:f6:a1:26:90:6a:d7:2b:90:0c:02:dc:1b:20: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F5:6E:6B:9D:B7:68:FC:23:94:22:81:8F:A4:C6:2A:60:EA:B6:D2 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ef:39:6d:b0:05:b2:72:75:81:a2:bd:1c:0a:47:53:5b:2c: ca:cf:6c:25:d5:6c:bd:e1:8f:c0:4e:3b:2b:36:32:c4:9b:ef: 91:1d:82:2b:e8:ea:39:6b:f6:72:91:26:41:18:b6:f1:f6:31: 35:6d:54:1e:a9:55:19:46:ae:59:9e:06:54:b5:1f:3e:43:5f: 1d:b3:a2:7e:bd:c1:6e:cf:e9:94:55:ea:ba:04:66:2d:25:d3: 58:c7:be:1d:39:39:71:f7:3d:0f:08:08:58:fb:92:3f:02:89: 43:e8:78:08:08:4a:14:f1:2b:35:48:bd:6b:a5:b7:22:0e:0c: 22:36:85:2c:45:36:c6:94:77:3e:78:3b:45:a0:e0:bd:63:3a: 9b:59:d3:a7:00:03:38:cc:3e:f5:31:27:9c:67:c7:26:7a:b4: c3:c7:1b:51:dd:1c:50:03:d9:82:a5:9b:dc:2b:1a:e4:06:df: 02:65:58:d8:72:d6:5d:ee:b2:7f:45:d1:8e:6c:a0:2e:3c:d8: 0a:84:5a:9f:fe:8d:01:c2:67:f6:2c:1b:47:0f:c4:03:ed:d2: dc:34:b1:cf:d6:88:0e:4b:40:e6:0b:b9:3f:c6:c3:dc:db:92: a4:ff:35:c3:3e:ab:d7:4c:23:81:6e:86:9f:b7:68:01:55:a2: fa:ad:dd:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Zz79GOty+JRXsyRQZaR0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwNDE3MDUwMDIyWhcNMjYwNDE4MDUwMDIyWjAzMTEwLwYDVQQD EygxN2Y1NmU2YjlkYjc2OGZjMjM5NDIyODE4ZmE0YzYyYTYwZWFiNmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonSb15Q9g1KlNrSCj0NgQzv3gwQE zWfUbr4k3qKOo+uogF+3GYwNxUiXRGllWoNd7j4MxWDgkHrld/8+bcAJwwuFEpf5 ZaEjSHbPohLnSiM+OUQ0dcFMG8Kh2dAz2t7WEUw9XacDQTvuYMphPK4L/CZyb3F2 fk6oYcpVLgCTdD8FbWwnUAjazcqL0y+Q7Qc3VNWByPfDhRy5J2dAZzS5CspkNwLB 0TLS31BIr4YnxZ0Jk9XO4e+3RR5urkfYWxzRV51hiHTbUArou3D/8HsKMj7FGJIh 82XTUerLGzrmzSPlK6UmH1QHze1TozkFTcxd1PahJpBq1yuQDALcGyBNZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf1bmudt2j8I5QigY+kxipg6rbSMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+85bbAF snJ1gaK9HApHU1ssys9sJdVsveGPwE47KzYyxJvvkR2CK+jqOWv2cpEmQRi28fYx NW1UHqlVGUauWZ4GVLUfPkNfHbOifr3Bbs/plFXqugRmLSXTWMe+HTk5cfc9DwgI WPuSPwKJQ+h4CAhKFPErNUi9a6W3Ig4MIjaFLEU2xpR3Png7RaDgvWM6m1nTpwAD OMw+9TEnnGfHJnq0w8cbUd0cUAPZgqWb3Csa5AbfAmVY2HLWXe6yf0XRjmygLjzY CoRan/6NAcJn9iwbRw/EA+3S3DSxz9aIDktA5gu5P8bD3NuSpP81wz6r10wjgW6G n7doAVWi+q3d2g== -----END CERTIFICATE-----Generated at Fri Apr 17 10:36:28 2026 by rpki-client