$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: Em/8Cp292zLYaLCQSeWCSzoH4SOLIQr/ocaxO+idi0s= Subject key identifier: 0A:57:1D:C0:87:D4:DE:28:1B:73:38:D4:98:EB:3B:A3:87:FF:0F:88 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019EC112220D069D3DF7776FC4C39F74D791 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1989 Signing time: Sat 13 Jun 2026 13:00:51 +0000 Manifest this update: Sat 13 Jun 2026 13:00:51 +0000 Manifest next update: Sun 14 Jun 2026 13:00:51 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 6: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 7: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 8: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 9: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 10: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 11: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 12: Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa (hash: VfijZBef7xJk1wzgvIwnq71YHQKXU+yJECoJTQRx0kE=) 13: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 14: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 15: X592uwt05oAZ6VZIQO9SpZfw_gI.roa (hash: 0RauDiHKBdaL0HxQQv2plSQtZnF5VRoiRUDqPfG3Cqs=) 16: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: 9QsTiSFPWnirWgXn4uTM2QU7SQd66LlI9wtF+1gqWjs=) 17: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 18: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c1:12:22:0d:06:9d:3d:f7:77:6f:c4:c3:9f:74:d7:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jun 13 13:00:51 2026 GMT Not After : Jun 14 13:00:51 2026 GMT Subject: CN=0a571dc087d4de281b7338d498eb3ba387ff0f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:b5:fe:f0:90:1b:dd:d2:d2:97:9d:a9:2c: cb:30:18:5d:09:99:a0:b0:0f:ef:6d:59:0c:c5:9d: e7:3e:42:25:f6:61:e4:9c:a6:90:c7:1d:db:df:6b: c4:5d:2d:4a:90:c3:46:28:81:f9:04:fa:4a:eb:72: 74:73:72:bc:d2:b5:80:97:f1:45:aa:7f:fc:ba:94: 2f:dc:92:e8:65:ff:6d:fc:c0:09:73:4c:71:32:b9: a9:1c:0a:99:17:ce:c7:aa:b4:3c:15:a8:ea:cb:8b: d8:5b:86:fe:d3:38:66:28:56:9b:ac:28:c6:fa:7f: 9a:52:15:26:62:d9:60:15:dd:c1:4d:8e:4e:d8:50: a5:15:3c:63:57:20:df:6e:31:37:d4:77:cf:7b:0c: ea:0e:ce:28:c1:88:96:49:81:5e:8a:4c:f1:f2:4a: bc:80:54:a7:13:a9:37:19:87:a9:04:86:c9:b3:bb: 5b:24:36:8f:75:06:65:28:67:27:81:85:05:64:f0: 04:b1:27:d6:66:4a:61:a1:41:d6:ec:9a:2b:42:9c: 51:dd:1a:04:4b:0e:a7:e7:6b:3f:0c:af:2c:85:9d: 90:d2:f6:bc:e8:55:62:9d:20:80:e1:3c:0c:57:f6: 43:55:20:3a:40:97:67:d3:a4:76:65:cf:87:d3:78: f9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:57:1D:C0:87:D4:DE:28:1B:73:38:D4:98:EB:3B:A3:87:FF:0F:88 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b4:63:c0:83:6c:e3:ab:25:9e:91:18:6b:cb:6f:92:e9:77: e3:de:01:e3:3a:cc:57:9e:cb:90:d7:4e:a1:5e:06:1f:e8:65: e7:9c:89:25:ea:be:bf:1a:07:9a:1b:c8:aa:46:76:fc:06:78: 1f:b7:49:33:e7:46:96:b2:ec:4a:1c:7f:03:89:9b:8d:db:6b: b1:6b:66:92:77:28:38:b9:7b:98:7b:e6:52:a6:c9:2d:39:d2: 9a:a7:6a:ac:f6:f6:6f:ce:1d:ed:f2:4d:78:5a:df:0a:96:42: 00:22:d4:8d:3c:8b:f6:b7:87:c7:a2:9e:79:43:91:e8:6c:da: 96:20:97:20:c2:28:93:be:d5:33:3d:04:6c:9e:ab:db:42:c0: 73:bc:df:a9:a8:ff:8b:c9:a1:2b:fd:87:d4:28:fd:96:11:f1: 3c:23:1e:e6:28:69:23:90:1e:73:ba:ed:7a:a7:4d:91:65:4a: 4b:14:ce:a4:66:ee:66:17:89:52:37:bf:32:35:ee:3e:ff:8f: 81:31:2e:4f:e7:a3:e9:27:be:81:cd:fb:b9:fa:65:29:6b:be: e6:91:9c:e5:39:81:ca:63:14:bc:dd:e6:19:47:83:05:38:65: 6f:9d:d1:2c:23:81:d9:45:e0:cf:65:46:40:9c:7d:1d:54:70: d0:65:cd:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7BEiINBp0993dvxMOfdNeRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwNjEzMTMwMDUxWhcNMjYwNjE0MTMwMDUxWjAzMTEwLwYDVQQD EygwYTU3MWRjMDg3ZDRkZTI4MWI3MzM4ZDQ5OGViM2JhMzg3ZmYwZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvC1/vCQG93S0pedqSzLMBhdCZmg sA/vbVkMxZ3nPkIl9mHknKaQxx3b32vEXS1KkMNGKIH5BPpK63J0c3K80rWAl/FF qn/8upQv3JLoZf9t/MAJc0xxMrmpHAqZF87HqrQ8Fajqy4vYW4b+0zhmKFabrCjG +n+aUhUmYtlgFd3BTY5O2FClFTxjVyDfbjE31HfPewzqDs4owYiWSYFeikzx8kq8 gFSnE6k3GYepBIbJs7tbJDaPdQZlKGcngYUFZPAEsSfWZkphoUHW7JorQpxR3RoE Sw6n52s/DK8shZ2Q0va86FVinSCA4TwMV/ZDVSA6QJdn06R2Zc+H03j5gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApXHcCH1N4oG3M41JjrO6OH/w+IMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLRjwINs 46slnpEYa8tvkul3494B4zrMV57LkNdOoV4GH+hl55yJJeq+vxoHmhvIqkZ2/AZ4 H7dJM+dGlrLsShx/A4mbjdtrsWtmkncoOLl7mHvmUqbJLTnSmqdqrPb2b84d7fJN eFrfCpZCACLUjTyL9reHx6KeeUOR6GzaliCXIMIok77VMz0EbJ6r20LAc7zfqaj/ i8mhK/2H1Cj9lhHxPCMe5ihpI5Aec7rteqdNkWVKSxTOpGbuZheJUje/MjXuPv+P gTEuT+ej6Se+gc37ufplKWu+5pGc5TmBymMUvN3mGUeDBThlb53RLCOB2UXgz2VG QJx9HVRw0GXNMA== -----END CERTIFICATE-----Generated at Sat Jun 13 15:26:09 2026 by rpki-client