$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: 93b+/VNCQfmQ/p4VYTt+9rgojo6TibRZzADf8M3uang= Subject key identifier: E3:8E:E3:68:03:34:EF:04:63:69:D6:43:84:9C:D8:D9:F1:08:EE:32 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019CABD9E96C6888651BF2335BF333E13B13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1874 Signing time: Mon 02 Mar 2026 00:01:50 +0000 Manifest this update: Mon 02 Mar 2026 00:01:50 +0000 Manifest next update: Tue 03 Mar 2026 00:01:50 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 6: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 7: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 8: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 9: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 10: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 11: OqIocgnak9yhJpreiE6Mi6z6xSU.roa (hash: Rwov355LSNytrdcR+XWNcMvCnOqJKqNHapmX2SP3tWA=) 12: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 13: Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa (hash: VfijZBef7xJk1wzgvIwnq71YHQKXU+yJECoJTQRx0kE=) 14: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 15: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 16: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: yEzbOGR+2RmFoKacUWkGhq6tNFxzA7dZB/jfJraTBRM=) 17: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 18: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:d9:e9:6c:68:88:65:1b:f2:33:5b:f3:33:e1:3b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Mar 2 00:01:50 2026 GMT Not After : Mar 3 00:01:50 2026 GMT Subject: CN=e38ee3680334ef046369d643849cd8d9f108ee32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:12:fd:f3:cc:fe:4c:48:b2:61:ad:26:bf:15: 71:08:6f:d5:0c:f1:f9:65:06:53:39:80:cd:f0:e0: 2a:d0:36:cd:22:ae:3f:fe:1b:26:24:96:a1:d7:09: c2:ab:ac:d7:85:d1:89:cc:ec:59:f6:98:18:3d:10: ae:25:7e:e4:23:60:66:1b:4a:ca:1a:50:dc:e2:bb: f3:1a:54:aa:44:71:7b:0c:90:13:73:41:81:25:57: b5:fe:06:4a:b4:57:07:c5:a1:27:fe:fb:b9:32:ad: c6:ca:82:4c:58:65:d5:59:41:0b:d0:0b:61:df:d0: 2a:cc:44:d2:51:72:8e:ba:07:57:5b:35:fa:ec:3c: 25:ab:2d:bd:7e:a0:cf:1a:10:83:00:25:f5:27:9c: 4e:e8:28:9f:90:d3:e7:fa:99:e0:a3:3b:b9:8d:c3: f0:c8:9f:e3:5f:e1:b1:d3:d4:3d:6c:e8:9a:2d:47: 0a:07:8d:3d:90:d6:68:4c:a4:42:fa:69:db:19:39: fc:d6:30:05:d5:22:7e:ea:87:3c:ca:d0:01:db:17: 32:9b:d4:d8:03:5e:84:1f:14:71:54:29:b7:1e:a0: 15:79:0e:6b:2d:85:50:d9:0a:b1:b2:52:f9:6b:aa: 6a:53:42:2f:93:39:1a:7c:6e:14:62:ea:67:a6:8a: 86:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8E:E3:68:03:34:EF:04:63:69:D6:43:84:9C:D8:D9:F1:08:EE:32 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:2e:5d:41:5a:0e:47:e5:55:9a:d2:d5:e7:43:7a:15:d1:29: 48:e7:95:34:6c:9e:d4:78:64:3f:36:06:9c:a0:59:f0:c6:dd: bf:ac:71:6c:83:09:f9:49:a8:c0:e3:ec:82:af:7c:63:13:cb: 31:98:4f:6c:a3:1b:c4:a4:b1:77:3f:dd:81:8a:35:34:b5:ad: 35:fb:db:33:02:1c:51:99:63:03:5b:3e:45:8a:78:64:26:71: ad:ac:4d:b2:cb:ea:d2:37:e2:dd:74:57:89:31:43:88:fb:b9: 78:bf:9f:be:54:9d:8f:6a:f8:08:96:77:cb:ea:d9:46:5a:af: 24:6c:38:b3:ee:d7:52:d0:ec:fb:3d:3f:c8:b8:f4:2c:fd:a2: c4:3d:8c:6e:11:2e:fc:a5:96:c8:3d:93:c4:9e:94:48:5e:f5: 2d:3a:54:0d:f8:8a:b4:2a:ae:5e:29:f4:05:11:84:65:05:82: 3a:ef:4d:1d:a5:57:d6:56:cf:56:27:a6:e4:cf:24:da:ce:59: 11:d2:6b:07:91:ab:7e:76:22:c5:d7:42:f9:49:3d:8b:96:62: f3:44:db:a6:20:91:fb:ea:0a:5b:a7:e2:e4:38:6c:ed:88:62: f1:3a:bd:6f:03:ec:c3:ae:e8:4c:8b:e3:74:a0:00:f9:c2:7b: c0:a9:c7:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyr2elsaIhlG/IzW/Mz4TsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwMzAyMDAwMTUwWhcNMjYwMzAzMDAwMTUwWjAzMTEwLwYDVQQD EyhlMzhlZTM2ODAzMzRlZjA0NjM2OWQ2NDM4NDljZDhkOWYxMDhlZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hL988z+TEiyYa0mvxVxCG/VDPH5 ZQZTOYDN8OAq0DbNIq4//hsmJJah1wnCq6zXhdGJzOxZ9pgYPRCuJX7kI2BmG0rK GlDc4rvzGlSqRHF7DJATc0GBJVe1/gZKtFcHxaEn/vu5Mq3GyoJMWGXVWUEL0Ath 39AqzETSUXKOugdXWzX67Dwlqy29fqDPGhCDACX1J5xO6CifkNPn+pngozu5jcPw yJ/jX+Gx09Q9bOiaLUcKB409kNZoTKRC+mnbGTn81jAF1SJ+6oc8ytAB2xcym9TY A16EHxRxVCm3HqAVeQ5rLYVQ2QqxslL5a6pqU0IvkzkafG4UYupnpoqGRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOO42gDNO8EY2nWQ4Sc2NnxCO4yMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVi5dQVoO R+VVmtLV50N6FdEpSOeVNGye1HhkPzYGnKBZ8Mbdv6xxbIMJ+UmowOPsgq98YxPL MZhPbKMbxKSxdz/dgYo1NLWtNfvbMwIcUZljA1s+RYp4ZCZxraxNssvq0jfi3XRX iTFDiPu5eL+fvlSdj2r4CJZ3y+rZRlqvJGw4s+7XUtDs+z0/yLj0LP2ixD2MbhEu /KWWyD2TxJ6USF71LTpUDfiKtCquXin0BRGEZQWCOu9NHaVX1lbPViem5M8k2s5Z EdJrB5GrfnYixddC+Uk9i5Zi80TbpiCR++oKW6fi5Dhs7Yhi8Tq9bwPsw67oTIvj dKAA+cJ7wKnHcw== -----END CERTIFICATE-----Generated at Mon Mar 2 09:19:18 2026 by rpki-client