$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: A9ex8AnhMvLfLbsQB+6iwbrDg32Eq2kn9S5dYPMv1cU= Subject key identifier: DE:DA:A9:D5:B2:C7:68:9A:0E:77:88:53:9B:97:D8:5D:B4:7A:5A:1F Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 01A0D72770DDFF9BC19C789F7929424A351C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1A8B Signing time: Fri 25 Sep 2026 06:01:21 +0000 Manifest this update: Fri 25 Sep 2026 06:01:21 +0000 Manifest next update: Sat 26 Sep 2026 06:01:21 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: CyZB8kDZ8orCNuNqD0jP-3JDzQ0.roa (hash: AOydhySyRx86U77hRjFuCY7jHngtnWo+Y3ruaih4/CY=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: Mt+omrQpRS55411hb+BEplz23Yo9EA1PnreZaRVZ8Ww=) 7: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 8: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 9: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) 17: xBSI8ulhxzPaD1wXzIlWHkfrMZE.roa (hash: xMJ4qKB6RaQDJudqrf471CfMp7Ryx25C6wOirJMZqoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d7:27:70:dd:ff:9b:c1:9c:78:9f:79:29:42:4a:35:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Sep 25 06:01:21 2026 GMT Not After : Sep 26 06:01:21 2026 GMT Subject: CN=dedaa9d5b2c7689a0e7788539b97d85db47a5a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:95:08:9b:3b:f7:44:8f:cb:45:53:0d:55: 02:cc:bd:b4:98:55:17:87:79:de:85:c2:fa:5f:e5: 60:f4:26:e4:32:61:f7:b6:0b:35:0c:05:c2:24:f0: 01:76:38:79:fa:d6:a6:16:98:71:99:db:0d:68:3b: b2:bf:09:9f:12:d9:6b:7f:88:65:43:e7:9e:58:b9: 52:27:c6:0d:b8:24:d4:ec:ad:59:c8:eb:f7:90:e8: 84:c6:c3:1d:8c:7c:ff:b5:8d:2a:2e:e3:a5:43:1d: b2:22:50:b0:20:d9:e8:dc:f1:f0:10:94:0e:c8:3a: d4:90:15:d7:4b:21:85:af:31:08:6d:10:ae:0c:05: f1:ee:04:76:9d:b0:fc:2e:0a:17:09:04:f3:b4:bf: aa:56:0e:71:e1:e0:5e:21:35:19:63:59:be:b0:46: e7:30:a3:5f:95:b6:ac:29:32:80:51:4b:04:0f:5a: b3:f9:e4:90:eb:dd:5e:f7:d6:05:38:b7:7a:36:7a: df:36:60:c8:41:17:24:c5:37:6d:cf:0d:74:d3:8c: f6:33:89:b9:bd:f0:cd:a4:e6:c3:7d:8a:bf:3c:60: 3b:bd:4f:74:69:cf:36:b4:33:a8:a5:8a:6a:36:c8: 03:a0:d8:be:af:88:ef:5a:46:26:e7:c5:dd:ed:b6: ac:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DA:A9:D5:B2:C7:68:9A:0E:77:88:53:9B:97:D8:5D:B4:7A:5A:1F X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9f:89:c2:9a:c4:20:12:0f:04:04:cb:59:84:e1:8f:d6:90: 4a:f0:69:8c:c1:a2:65:81:27:f4:e5:d0:27:62:83:67:77:dd: 01:e7:b6:bf:78:2d:0b:f1:2f:44:1f:a6:d7:1b:f3:72:58:34: ce:93:d6:cc:cd:41:71:89:04:1e:36:9b:84:7a:a4:da:19:0f: 6f:cf:03:43:32:82:7f:f9:7a:09:ec:6e:6c:8e:e0:f1:9f:22: 64:6a:51:10:0f:8d:4a:4f:e6:60:8a:9f:b4:dd:45:f7:1e:93: 96:b7:8b:28:7a:4e:7f:99:af:54:14:59:73:2c:98:f4:95:35: b2:a8:67:71:d3:89:02:0c:86:b6:33:bb:9c:cd:77:f0:5c:58: f7:8e:e8:8b:2e:5e:3b:76:2d:fb:a4:c3:4b:55:82:7e:1b:ca: 7a:62:36:58:b8:46:d5:1c:17:95:b6:5b:fa:00:5b:27:26:2a: af:60:ed:bc:23:b2:10:42:ee:1c:c5:4e:fe:ac:6f:90:c8:fe: df:29:34:2d:23:41:3e:a0:42:25:0d:08:9f:2f:52:55:54:75: 8b:dd:fb:21:b6:c4:c5:ba:cf:84:f9:07:66:c1:ed:63:3b:48: 55:03:f0:42:db:58:d7:74:22:82:a3:6d:81:db:27:ab:81:32: de:a7:b2:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDXJ3Dd/5vBnHifeSlCSjUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwOTI1MDYwMTIxWhcNMjYwOTI2MDYwMTIxWjAzMTEwLwYDVQQD EyhkZWRhYTlkNWIyYzc2ODlhMGU3Nzg4NTM5Yjk3ZDg1ZGI0N2E1YTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBWVCJs790SPy0VTDVUCzL20mFUX h3nehcL6X+Vg9CbkMmH3tgs1DAXCJPABdjh5+tamFphxmdsNaDuyvwmfEtlrf4hl Q+eeWLlSJ8YNuCTU7K1ZyOv3kOiExsMdjHz/tY0qLuOlQx2yIlCwINno3PHwEJQO yDrUkBXXSyGFrzEIbRCuDAXx7gR2nbD8LgoXCQTztL+qVg5x4eBeITUZY1m+sEbn MKNflbasKTKAUUsED1qz+eSQ691e99YFOLd6NnrfNmDIQRckxTdtzw1004z2M4m5 vfDNpObDfYq/PGA7vU90ac82tDOopYpqNsgDoNi+r4jvWkYm58Xd7bashwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7aqdWyx2iaDneIU5uX2F20elofMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAp+JwprE IBIPBATLWYThj9aQSvBpjMGiZYEn9OXQJ2KDZ3fdAee2v3gtC/EvRB+m1xvzclg0 zpPWzM1BcYkEHjabhHqk2hkPb88DQzKCf/l6CexubI7g8Z8iZGpREA+NSk/mYIqf tN1F9x6TlreLKHpOf5mvVBRZcyyY9JU1sqhncdOJAgyGtjO7nM138FxY947oiy5e O3Yt+6TDS1WCfhvKemI2WLhG1RwXlbZb+gBbJyYqr2DtvCOyEELuHMVO/qxvkMj+ 3yk0LSNBPqBCJQ0Iny9SVVR1i937IbbExbrPhPkHZsHtYztIVQPwQttY13QigqNt gdsnq4Ey3qey8Q== -----END CERTIFICATE-----Generated at Fri Sep 25 10:53:57 2026 by rpki-client