$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: 5qJjGqODStPBzD+amShBf+JyeJ7pLMbQJeFFZXwkFbs= Subject key identifier: 93:B9:3A:5B:1A:B7:6B:D2:2E:9E:2E:D5:2C:C9:78:A4:0D:35:DA:4F Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019E1D900ABD554B3EF930CA667B4B8CFAAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 16CB Signing time: Tue 12 May 2026 19:00:39 +0000 Manifest this update: Tue 12 May 2026 19:00:39 +0000 Manifest next update: Wed 13 May 2026 19:00:39 +0000 Files and hashes: 1: 1u23_XHmiJhjqy9S76sw3BzP9Ww.roa (hash: qDjQXmy6brh3hQItl8JxTdLVuqnZ3WF2FKz/Ualn8KI=) 2: 4KkUHNuHp_WUlcLV7ZmT-IELGLs.roa (hash: X02pU+wDvS97rZ0D42UQvqF9JhNnpzwkrnlhuhnewxY=) 3: An-h4kooPrBUGMT-6Nj0QudqGKE.roa (hash: 4VG1kUHyYf9yb01HKQwY97RZCAJU3VqeDAxr07wG4w0=) 4: DKJJrcnX3RnXlCDTnb0QnF9ph1c.roa (hash: FBpHgtUQjl2CKc1kAMv5YEG4ocTTbuqpzf8/LW2ex4k=) 5: GOgAejJFsLbsIoSjyXa89DsOln0.roa (hash: n61wmUPLOUsceRZoHaDl1wjd6NYSJP+7XllQ62IBWVA=) 6: JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa (hash: J8o+5Ee3eNiQKRGdXJdghD9ZXv8Izb9VeieBzPJF1ak=) 7: L3AHD1nIaJn-Qkxqjxi4waU1okM.roa (hash: MqsTHnRn4vzlkUHWrFaXq9Uo9UAjzsK7URiYSvcgf8k=) 8: NY2MX1mgk76QbEK78KfRCv9HXlc.roa (hash: n052UQO+ldLs19+3y0B7Wj4/DIUQ0nHDh3aGl0cSB9U=) 9: NgMsux-odmw_2otfxo6fwQPz6nk.roa (hash: acZbMbI5ZnLhauOT05TvSrJPxsUogE9hJcD3gMOAgYQ=) 10: SUe4J3Et3KgT01K3Zx9sbKaSGM0.roa (hash: LwIG+mDSylEHKB/dZoPmrJsG/6vCNLIoKeokQAgcByE=) 11: XdIic6TtMnHLSFKPt0NIgYA3BZE.roa (hash: Hz8Dp4xvPL6d1SZb+xVGL2Fnk7Ii6zPdDdS2xRff/c8=) 12: bFtTO9kUoK7V5nLLHjzqVj2iOcU.roa (hash: jJC/VOkqkEwdX7ejcOTbfcTesLG6OI5LMSL4JFJb9Ek=) 13: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: HTVIACJSe2ziBw5rH9Ejv3akKJYj2qWFzibhMGM5Gj0=) 14: mDj4POXBo_BA8ao0TEZHTmOo46s.roa (hash: Y2b4Ei43NJZ9dDiKlYc7gN5osX878buWXGf115YzawI=) 15: nFYGg4ZIP1H9kzcY434jAerp2kU.roa (hash: Y/IgWysEh1nmKw0nLD81dJWu3QFpKM+9pnP+lyeoZXo=) 16: obFwaT_4MZtX-dKod3UGli-Mmuo.roa (hash: S1tcUGtkx7R83UYo2rACVKW3cgPV5XEnzrmsW37TA/Q=) 17: y2mTo6HHgH1hIKjXLEt22HvPvrw.roa (hash: YRXm/TWE2LnDq+SOmryX5rTG96P5ANXEnONR2xUrL80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:90:0a:bd:55:4b:3e:f9:30:ca:66:7b:4b:8c:fa:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: May 12 19:00:39 2026 GMT Not After : May 13 19:00:39 2026 GMT Subject: CN=93b93a5b1ab76bd22e9e2ed52cc978a40d35da4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bb:47:f3:65:62:0f:c8:2c:38:4b:e0:bc:04: 4e:08:9a:0d:09:3e:63:80:f2:3e:b0:4d:d1:6c:ed: 33:72:6b:32:fb:51:0a:07:d6:c0:f1:1a:ad:db:89: 19:ee:53:2f:a7:5f:cd:69:fb:05:cd:c9:e3:e5:fb: a1:81:5f:11:9d:c9:ec:7c:a7:7a:3f:98:7c:0f:ac: 74:ea:1f:90:f2:2d:42:35:05:2a:19:c6:3f:27:07: 48:06:50:33:84:2b:90:29:40:d0:dd:0b:64:52:e8: e8:11:75:73:f6:57:e0:61:6b:cd:97:d7:f9:98:12: 2c:65:41:89:2f:cf:3d:73:41:f4:c2:bc:ca:a1:ba: 4a:40:f2:08:76:d8:69:3c:95:0d:08:67:eb:1c:98: 14:bf:22:ab:d8:d8:66:98:ab:7f:04:09:5f:af:9b: a9:51:f4:5b:b3:7f:ea:6a:03:d7:a2:d6:64:57:6d: 12:02:29:56:20:3f:9c:a5:65:01:a7:d8:e8:aa:a6: c0:af:4d:7a:52:05:54:fa:c6:21:c5:ba:11:1f:c7: b8:90:10:6e:26:7d:8e:e3:6f:45:e3:e4:3b:2e:a0: 0d:b7:e8:e8:7d:62:41:16:c0:bf:45:89:41:c2:a1: 3e:99:ea:21:c2:c4:cb:d6:d9:6b:e8:d3:29:58:b6: 7e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B9:3A:5B:1A:B7:6B:D2:2E:9E:2E:D5:2C:C9:78:A4:0D:35:DA:4F X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f3:78:5c:cf:d1:65:53:57:52:c5:f2:c1:c7:60:db:8c:a5: da:a8:1e:63:1c:37:93:83:e6:01:49:ab:5c:74:ba:86:ac:05: d0:c3:5d:34:12:7e:27:5b:c0:7a:ca:e3:e7:fe:f4:ba:a0:63: 97:e8:c6:c6:51:4f:84:52:43:0c:c9:f0:5a:ff:a3:a0:18:43: 12:3d:ed:5b:2b:ed:cd:a0:f8:e9:8e:cb:ee:95:5d:4c:d2:c3: f6:7a:4e:a3:bf:7a:ad:80:4a:34:03:55:63:ca:e1:74:42:46: 37:07:4a:1d:cf:48:6f:bd:ad:8d:22:70:89:0a:9e:69:e5:05: e2:8a:52:48:3a:88:e1:06:1c:e4:08:48:d3:73:38:8f:17:11: 6f:f7:c0:fe:b8:e9:d3:f9:3f:ca:6f:33:ab:d5:3d:b6:e7:0f: 8f:15:f7:f6:47:f0:2c:94:16:38:45:a1:7d:88:c5:fc:27:1d: 91:46:ad:4a:27:74:9f:b2:4a:e8:88:bc:9d:23:94:5a:3e:8c: 7d:d6:69:26:1b:5f:3b:fc:39:0f:3c:12:e7:09:cc:5d:e4:5c: d4:49:9c:fb:36:31:a2:6a:dd:7a:84:c1:b9:1e:20:1e:c0:dd: b9:e1:96:2a:7d:b5:d7:ba:24:b7:b3:94:27:a3:99:e2:fd:cf: bd:db:f9:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dkAq9VUs++TDKZntLjPqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwNTEyMTkwMDM5WhcNMjYwNTEzMTkwMDM5WjAzMTEwLwYDVQQD Eyg5M2I5M2E1YjFhYjc2YmQyMmU5ZTJlZDUyY2M5NzhhNDBkMzVkYTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2btH82ViD8gsOEvgvAROCJoNCT5j gPI+sE3RbO0zcmsy+1EKB9bA8Rqt24kZ7lMvp1/NafsFzcnj5fuhgV8RncnsfKd6 P5h8D6x06h+Q8i1CNQUqGcY/JwdIBlAzhCuQKUDQ3QtkUujoEXVz9lfgYWvNl9f5 mBIsZUGJL889c0H0wrzKobpKQPIIdthpPJUNCGfrHJgUvyKr2NhmmKt/BAlfr5up UfRbs3/qagPXotZkV20SAilWID+cpWUBp9joqqbAr016UgVU+sYhxboRH8e4kBBu Jn2O429F4+Q7LqANt+jofWJBFsC/RYlBwqE+meohwsTL1tlr6NMpWLZ+wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJO5Olsat2vSLp4u1SzJeKQNNdpPMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPN4XM/R ZVNXUsXywcdg24yl2qgeYxw3k4PmAUmrXHS6hqwF0MNdNBJ+J1vAesrj5/70uqBj l+jGxlFPhFJDDMnwWv+joBhDEj3tWyvtzaD46Y7L7pVdTNLD9npOo796rYBKNANV Y8rhdEJGNwdKHc9Ib72tjSJwiQqeaeUF4opSSDqI4QYc5AhI03M4jxcRb/fA/rjp 0/k/ym8zq9U9tucPjxX39kfwLJQWOEWhfYjF/CcdkUatSid0n7JK6Ii8nSOUWj6M fdZpJhtfO/w5DzwS5wnMXeRc1Emc+zYxomrdeoTBuR4gHsDdueGWKn2117okt7OU J6OZ4v3Pvdv5ag== -----END CERTIFICATE-----Generated at Wed May 13 02:44:21 2026 by rpki-client