$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: 1lQ9FnjEj5ddknR4X6Ak+x7ksQoKRYEM4f1DrqW8Ghw= Subject key identifier: 37:C2:73:06:8F:E0:5B:FE:58:FA:45:3D:05:07:58:22:18:53:6C:D8 Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 01A1DD26A5DE88ED1AE79F64B5791CED9E62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 18BD Signing time: Sun 15 Nov 2026 03:00:59 +0000 Manifest this update: Sun 15 Nov 2026 03:00:59 +0000 Manifest next update: Mon 16 Nov 2026 03:00:59 +0000 Files and hashes: 1: 1u23_XHmiJhjqy9S76sw3BzP9Ww.roa (hash: qDjQXmy6brh3hQItl8JxTdLVuqnZ3WF2FKz/Ualn8KI=) 2: 4KkUHNuHp_WUlcLV7ZmT-IELGLs.roa (hash: X02pU+wDvS97rZ0D42UQvqF9JhNnpzwkrnlhuhnewxY=) 3: An-h4kooPrBUGMT-6Nj0QudqGKE.roa (hash: 4VG1kUHyYf9yb01HKQwY97RZCAJU3VqeDAxr07wG4w0=) 4: DKJJrcnX3RnXlCDTnb0QnF9ph1c.roa (hash: FBpHgtUQjl2CKc1kAMv5YEG4ocTTbuqpzf8/LW2ex4k=) 5: GOgAejJFsLbsIoSjyXa89DsOln0.roa (hash: n61wmUPLOUsceRZoHaDl1wjd6NYSJP+7XllQ62IBWVA=) 6: Iz-RnZB4CPBnQJYhfp0OAhLrcMM.roa (hash: FaucEzJxlOy2Yut4nsgevP064GyqmURdESpVYmPVMZw=) 7: JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa (hash: J8o+5Ee3eNiQKRGdXJdghD9ZXv8Izb9VeieBzPJF1ak=) 8: L3AHD1nIaJn-Qkxqjxi4waU1okM.roa (hash: MqsTHnRn4vzlkUHWrFaXq9Uo9UAjzsK7URiYSvcgf8k=) 9: NY2MX1mgk76QbEK78KfRCv9HXlc.roa (hash: n052UQO+ldLs19+3y0B7Wj4/DIUQ0nHDh3aGl0cSB9U=) 10: NgMsux-odmw_2otfxo6fwQPz6nk.roa (hash: acZbMbI5ZnLhauOT05TvSrJPxsUogE9hJcD3gMOAgYQ=) 11: bFtTO9kUoK7V5nLLHjzqVj2iOcU.roa (hash: jJC/VOkqkEwdX7ejcOTbfcTesLG6OI5LMSL4JFJb9Ek=) 12: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: jjHMgmJFN0aNefcam/EAU9UWBsABD2ASqXwcgvDNj88=) 13: nFYGg4ZIP1H9kzcY434jAerp2kU.roa (hash: Y/IgWysEh1nmKw0nLD81dJWu3QFpKM+9pnP+lyeoZXo=) 14: obFwaT_4MZtX-dKod3UGli-Mmuo.roa (hash: S1tcUGtkx7R83UYo2rACVKW3cgPV5XEnzrmsW37TA/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dd:26:a5:de:88:ed:1a:e7:9f:64:b5:79:1c:ed:9e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Nov 15 03:00:59 2026 GMT Not After : Nov 16 03:00:59 2026 GMT Subject: CN=37c273068fe05bfe58fa453d0507582218536cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:bf:ae:33:9e:39:e2:64:42:83:2a:a9:98: 9b:54:85:dd:e4:11:d6:2f:b3:e6:4e:c8:79:56:4b: 9a:61:7c:09:6b:0a:33:b8:2e:e9:62:dc:24:7f:f9: 25:76:dd:04:00:fb:72:88:b8:12:d1:1f:64:36:43: 28:4c:87:70:f5:09:73:86:0c:dd:5e:7b:36:b9:ae: b9:0b:93:6c:a8:99:28:8f:18:b5:a0:be:b2:58:81: 2a:66:df:f6:43:19:87:55:14:93:a6:e4:68:a1:c3: ed:75:95:b9:83:02:d2:82:72:b3:45:43:7b:8b:c5: ce:49:3f:c8:35:7d:33:dc:54:03:4f:a5:ac:ad:7f: 57:35:5b:c2:d3:99:85:c4:da:a4:a0:63:5c:6c:04: ec:81:66:39:f6:4d:50:7e:25:a6:39:aa:a3:0e:e5: 01:6c:ed:23:18:9f:4f:ec:5d:80:ce:70:71:00:3b: 9e:e9:79:23:6c:c3:ed:92:2c:42:5d:29:f3:84:29: 48:a2:1a:e4:6a:a1:be:70:77:b9:77:87:f5:fb:01: 45:aa:e9:61:08:ee:fd:46:ea:51:fd:b0:f4:29:0b: d2:d7:b3:45:95:b4:e4:7c:ab:20:a0:78:d5:69:57: cd:3b:88:e6:6c:8d:d3:64:cb:39:3d:e1:af:d6:cf: 99:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C2:73:06:8F:E0:5B:FE:58:FA:45:3D:05:07:58:22:18:53:6C:D8 X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:00:04:96:98:4c:d1:64:25:33:ab:29:c9:1f:2e:15:1f:a7: 06:bb:f2:aa:20:cd:75:9e:05:19:31:ac:04:af:5a:bf:d6:01: ec:19:f3:71:46:03:9f:f3:34:a1:a2:70:e7:e2:01:d9:1e:b2: 41:94:9b:3a:5a:cc:9b:6f:c3:82:8d:c4:48:a6:c4:e3:c1:e7: 1e:e8:b9:d3:51:67:34:e3:6b:a3:83:03:87:fd:06:7f:52:93: d9:12:b1:60:20:96:4c:8a:18:c0:8a:16:e2:de:e7:76:51:61: cb:1d:e6:a6:49:0b:5f:2e:ea:e4:09:8d:37:8a:17:97:4e:e5: 26:08:5a:d2:cf:a4:18:d5:43:a6:05:d8:6d:16:bb:84:a8:c1: 53:60:a6:ce:70:4b:cd:81:f3:11:e2:a1:8e:38:77:14:dc:24: da:2a:69:ec:4e:b5:21:d6:34:c5:b9:b2:13:d0:2b:d3:db:96: 3f:2c:c6:b9:6c:f9:ba:e9:fb:4f:e4:3a:f6:b5:6c:dd:32:1a: 67:c4:17:fc:f5:a7:42:8d:a2:dd:18:9f:e8:cc:15:e9:3b:b0: 55:6c:07:1b:03:a7:7c:f8:eb:b4:83:3a:d9:2c:de:95:32:db: 38:28:2a:ec:fe:b0:65:03:49:a3:91:bb:7c:04:7a:a3:be:7f: ef:6d:ff:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHdJqXeiO0a559ktXkc7Z5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYxMTE1MDMwMDU5WhcNMjYxMTE2MDMwMDU5WjAzMTEwLwYDVQQD EygzN2MyNzMwNjhmZTA1YmZlNThmYTQ1M2QwNTA3NTgyMjE4NTM2Y2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7S/rjOeOeJkQoMqqZibVIXd5BHW L7PmTsh5VkuaYXwJawozuC7pYtwkf/kldt0EAPtyiLgS0R9kNkMoTIdw9Qlzhgzd Xns2ua65C5NsqJkojxi1oL6yWIEqZt/2QxmHVRSTpuRoocPtdZW5gwLSgnKzRUN7 i8XOST/INX0z3FQDT6WsrX9XNVvC05mFxNqkoGNcbATsgWY59k1QfiWmOaqjDuUB bO0jGJ9P7F2AznBxADue6XkjbMPtkixCXSnzhClIohrkaqG+cHe5d4f1+wFFqulh CO79RupR/bD0KQvS17NFlbTkfKsgoHjVaVfNO4jmbI3TZMs5PeGv1s+ZfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfCcwaP4Fv+WPpFPQUHWCIYU2zYMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAAElphM 0WQlM6spyR8uFR+nBrvyqiDNdZ4FGTGsBK9av9YB7BnzcUYDn/M0oaJw5+IB2R6y QZSbOlrMm2/Dgo3ESKbE48HnHui501FnNONro4MDh/0Gf1KT2RKxYCCWTIoYwIoW 4t7ndlFhyx3mpkkLXy7q5AmNN4oXl07lJgha0s+kGNVDpgXYbRa7hKjBU2CmznBL zYHzEeKhjjh3FNwk2ipp7E61IdY0xbmyE9Ar09uWPyzGuWz5uun7T+Q69rVs3TIa Z8QX/PWnQo2i3Rif6MwV6TuwVWwHGwOnfPjrtIM62SzelTLbOCgq7P6wZQNJo5G7 fAR6o75/723/iA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:00:57 2026 by rpki-client