$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: kp+zdNbvWcVRQwxHRQKwwND3OvQnx2jbk+et74KQuf0= Subject key identifier: 17:FF:82:BE:95:C5:78:12:65:F8:7E:8E:E9:09:D0:72:BF:05:E1:89 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019EBF23AC08B31005C730FB70997852DC43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1988 Signing time: Sat 13 Jun 2026 04:00:46 +0000 Manifest this update: Sat 13 Jun 2026 04:00:46 +0000 Manifest next update: Sun 14 Jun 2026 04:00:46 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 6: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 7: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 8: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 9: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 10: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 11: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 12: Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa (hash: VfijZBef7xJk1wzgvIwnq71YHQKXU+yJECoJTQRx0kE=) 13: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 14: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 15: X592uwt05oAZ6VZIQO9SpZfw_gI.roa (hash: 0RauDiHKBdaL0HxQQv2plSQtZnF5VRoiRUDqPfG3Cqs=) 16: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: ayVbykJLZPPlAl2ej9PgakCf4g9AcuKHK4o3bqF+lo8=) 17: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 18: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:23:ac:08:b3:10:05:c7:30:fb:70:99:78:52:dc:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jun 13 04:00:46 2026 GMT Not After : Jun 14 04:00:46 2026 GMT Subject: CN=17ff82be95c5781265f87e8ee909d072bf05e189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:61:7c:dd:7e:7c:cd:1f:e6:9d:83:e7:da:8a: ea:8e:61:55:09:e6:35:1f:09:61:06:3b:f9:3f:20: 0e:1c:27:b5:cb:05:21:2f:86:fd:ba:c5:29:b1:59: 5f:97:ac:90:33:c1:ad:bd:1e:22:bb:c4:39:57:5e: eb:11:ed:1d:40:98:53:44:1b:12:2b:e7:22:11:46: 38:3b:b1:c4:a0:ef:0b:76:85:1a:0e:05:5c:06:92: 92:14:29:87:60:b4:87:31:4d:e7:5e:fc:ab:6d:86: 91:a0:27:6f:89:a5:0d:cd:f9:d5:f9:d2:03:f0:eb: bb:0b:6d:d5:cb:68:2b:18:2e:fa:a2:1c:42:e4:d3: 26:52:32:07:e7:68:54:25:30:7b:f7:8d:28:79:1e: 30:fd:a8:25:af:52:a8:9e:cd:84:34:d6:89:68:2f: ba:10:32:58:22:67:66:12:54:f2:04:c3:84:7b:ae: 69:40:36:89:5e:51:e8:f3:d8:ac:e6:f7:ff:4e:a3: 1f:03:3d:ef:be:9e:7b:f2:97:10:ef:68:30:4a:8a: 0a:1f:90:55:30:ae:3b:fb:ea:40:4c:b1:ab:d3:d6: 33:33:c9:ad:71:47:7e:18:99:a5:61:99:b7:46:3f: 87:16:ac:46:73:23:29:8c:c7:48:4e:ca:0b:35:85: d0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FF:82:BE:95:C5:78:12:65:F8:7E:8E:E9:09:D0:72:BF:05:E1:89 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:36:a5:bf:d2:38:21:0d:67:87:76:2a:0f:49:10:ff:e5:26: ce:d6:41:da:83:3c:68:5b:a4:b3:6b:52:82:52:c8:b1:44:10: 4f:69:c5:2e:0c:fb:57:5f:66:7d:3a:92:4e:f2:96:0b:d9:40: e9:63:26:4c:57:53:8a:3f:1a:6d:23:f7:7f:3d:11:15:1f:6c: 8a:27:51:5f:17:f9:b3:54:44:f8:35:d0:53:8d:9c:4d:bd:29: 1f:53:70:68:20:77:1d:3b:ab:35:86:91:7f:bd:5c:16:1e:2f: 46:e6:1d:08:89:7c:a3:c6:95:a2:41:16:e2:6a:1a:c6:c5:94: 19:fe:17:f5:fd:9f:11:4e:e6:25:80:76:3e:7e:10:a8:73:04: f6:9d:36:3d:18:15:52:f9:60:66:ef:1a:f6:8d:f5:22:fd:a8: 3b:f5:fc:04:da:78:9e:36:7d:89:23:9a:c6:93:81:89:e7:fc: 0b:6b:eb:73:e5:1f:e6:54:04:c0:03:8f:ed:8d:86:fe:a6:0d: 83:5b:dd:cf:a5:d6:4f:cb:8f:c5:f9:42:03:c8:00:1b:76:3a: 62:78:ee:53:bd:aa:a6:6c:f9:04:54:f3:c3:46:22:45:f4:8f: d0:e7:26:b0:be:79:d7:34:19:6c:eb:86:cb:03:fc:a5:06:00: e2:de:d3:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/I6wIsxAFxzD7cJl4UtxDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwNjEzMDQwMDQ2WhcNMjYwNjE0MDQwMDQ2WjAzMTEwLwYDVQQD EygxN2ZmODJiZTk1YzU3ODEyNjVmODdlOGVlOTA5ZDA3MmJmMDVlMTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmF83X58zR/mnYPn2orqjmFVCeY1 HwlhBjv5PyAOHCe1ywUhL4b9usUpsVlfl6yQM8GtvR4iu8Q5V17rEe0dQJhTRBsS K+ciEUY4O7HEoO8LdoUaDgVcBpKSFCmHYLSHMU3nXvyrbYaRoCdviaUNzfnV+dID 8Ou7C23Vy2grGC76ohxC5NMmUjIH52hUJTB7940oeR4w/aglr1Kons2ENNaJaC+6 EDJYImdmElTyBMOEe65pQDaJXlHo89is5vf/TqMfAz3vvp578pcQ72gwSooKH5BV MK47++pATLGr09YzM8mtcUd+GJmlYZm3Rj+HFqxGcyMpjMdITsoLNYXQXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf/gr6VxXgSZfh+jukJ0HK/BeGJMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDalv9I4 IQ1nh3YqD0kQ/+UmztZB2oM8aFuks2tSglLIsUQQT2nFLgz7V19mfTqSTvKWC9lA 6WMmTFdTij8abSP3fz0RFR9siidRXxf5s1RE+DXQU42cTb0pH1NwaCB3HTurNYaR f71cFh4vRuYdCIl8o8aVokEW4moaxsWUGf4X9f2fEU7mJYB2Pn4QqHME9p02PRgV UvlgZu8a9o31Iv2oO/X8BNp4njZ9iSOaxpOBief8C2vrc+Uf5lQEwAOP7Y2G/qYN g1vdz6XWT8uPxflCA8gAG3Y6YnjuU72qpmz5BFTzw0YiRfSP0OcmsL551zQZbOuG ywP8pQYA4t7Tlg== -----END CERTIFICATE-----Generated at Sat Jun 13 10:05:58 2026 by rpki-client