$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: GhDzFILYnKgjIV0SrdMVQGMuji+i6bC+af8Nl3LE30g= Subject key identifier: 39:81:29:4E:90:58:F0:93:7D:1F:31:18:28:8F:07:75:F9:9A:AF:FD Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019D27A8B0AD619CA0317E0C92FA7FED4C98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 18A2 Signing time: Thu 26 Mar 2026 01:00:59 +0000 Manifest this update: Thu 26 Mar 2026 01:00:59 +0000 Manifest next update: Fri 27 Mar 2026 01:00:59 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: 82/9MRE+3ePkgtUrMVU/n1Sxcye9DNosbjzEi27slMw=) 6: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 7: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 8: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 9: TdMbLOSHOW5Od2MPBqFS6Pw8TSY.roa (hash: wSA7n34Q3CSKY3OiMDAvE3mXUvYqFJEZqY3Hqxwarms=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:a8:b0:ad:61:9c:a0:31:7e:0c:92:fa:7f:ed:4c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Mar 26 01:00:59 2026 GMT Not After : Mar 27 01:00:59 2026 GMT Subject: CN=3981294e9058f0937d1f3118288f0775f99aaffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6d:0c:aa:02:ba:16:f1:d8:89:ec:29:57:01: a7:da:ba:34:60:66:19:88:b8:04:8e:24:e5:06:02: 5e:86:6c:bf:af:96:3a:8f:40:ae:fa:fa:74:08:ab: 53:59:85:a8:96:36:b6:52:6c:d3:eb:14:40:26:8c: 92:1c:f3:09:49:6e:57:d2:86:cb:26:44:93:df:f4: 84:09:28:eb:8e:ef:77:8d:bf:c6:c6:1e:35:0f:c4: 55:e4:1f:4e:72:9a:33:40:44:62:da:90:1d:2e:63: b9:da:a1:f0:26:a7:fe:7d:5e:b4:42:ea:1d:41:3b: 51:25:39:84:b4:d5:14:1d:7c:92:1f:7c:a6:76:c5: d1:ef:1b:2f:32:ec:ff:88:e5:be:bb:2b:3a:3a:5a: 8b:68:d9:96:c4:cc:df:5d:b1:9f:a4:ab:85:55:15: e8:92:77:6c:7d:a5:5c:81:f0:11:0d:b7:13:f2:09: 5e:4e:5e:e3:94:39:bd:b4:90:e5:43:7d:eb:40:66: a4:ff:55:34:df:87:34:75:3f:f0:32:98:37:74:2e: 20:0e:14:3a:e4:43:ff:be:3a:a2:e2:b2:30:ec:d7: 8b:7f:4c:70:49:c1:82:c2:ac:98:fb:b6:26:46:1c: 3b:ba:f7:37:fe:db:f8:22:20:28:fc:ee:8d:33:61: 15:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:81:29:4E:90:58:F0:93:7D:1F:31:18:28:8F:07:75:F9:9A:AF:FD X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:aa:23:bb:3d:8f:8b:27:fe:96:a4:95:70:f9:9e:ac:e4:e5: ed:f7:29:5a:8a:e2:e6:f2:3b:7d:af:8f:82:c8:b0:1f:10:7d: 7d:33:06:b9:07:08:49:ea:d4:03:6f:8b:2f:82:1c:71:03:76: 93:37:ff:f8:3e:df:89:0d:d0:a2:73:a6:80:04:48:87:32:a9: 48:3b:34:13:fc:23:f8:d2:8e:8b:2d:6a:e8:36:85:b1:59:51: ce:48:dc:3f:05:4f:81:31:89:16:cd:a7:de:11:70:39:08:8e: cf:65:bf:6a:16:83:ae:61:3b:95:c7:ac:3c:55:8b:69:40:3c: fd:31:66:3c:05:60:35:fa:5c:10:61:9a:a7:aa:ed:7f:b7:60: 83:dc:fd:74:0d:f9:74:c9:ac:1b:35:6d:a8:de:c2:07:b8:9b: d0:23:fb:fc:14:d3:79:a7:63:f7:69:cf:a0:93:cd:f6:28:91: dc:50:f5:3c:66:35:ae:f1:42:6e:98:e6:ca:f7:e8:69:e2:ed: e0:34:ff:57:66:d0:57:90:b9:c6:7a:01:1d:06:3f:71:8b:98: 13:fd:95:43:c5:77:ff:1d:87:3f:96:58:75:84:3f:6e:ca:74: df:d1:91:a9:85:8b:71:9d:ff:9f:71:7a:36:a8:8f:f1:62:4a: e3:76:45:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nqLCtYZygMX4Mkvp/7UyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwMzI2MDEwMDU5WhcNMjYwMzI3MDEwMDU5WjAzMTEwLwYDVQQD EygzOTgxMjk0ZTkwNThmMDkzN2QxZjMxMTgyODhmMDc3NWY5OWFhZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp20MqgK6FvHYiewpVwGn2ro0YGYZ iLgEjiTlBgJehmy/r5Y6j0Cu+vp0CKtTWYWolja2UmzT6xRAJoySHPMJSW5X0obL JkST3/SECSjrju93jb/Gxh41D8RV5B9OcpozQERi2pAdLmO52qHwJqf+fV60Quod QTtRJTmEtNUUHXySH3ymdsXR7xsvMuz/iOW+uys6OlqLaNmWxMzfXbGfpKuFVRXo kndsfaVcgfARDbcT8gleTl7jlDm9tJDlQ33rQGak/1U034c0dT/wMpg3dC4gDhQ6 5EP/vjqi4rIw7NeLf0xwScGCwqyY+7YmRhw7uvc3/tv4IiAo/O6NM2EVtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmBKU6QWPCTfR8xGCiPB3X5mq/9MB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaojuz2P iyf+lqSVcPmerOTl7fcpWori5vI7fa+PgsiwHxB9fTMGuQcISerUA2+LL4IccQN2 kzf/+D7fiQ3QonOmgARIhzKpSDs0E/wj+NKOiy1q6DaFsVlRzkjcPwVPgTGJFs2n 3hFwOQiOz2W/ahaDrmE7lcesPFWLaUA8/TFmPAVgNfpcEGGap6rtf7dgg9z9dA35 dMmsGzVtqN7CB7ib0CP7/BTTeadj92nPoJPN9iiR3FD1PGY1rvFCbpjmyvfoaeLt 4DT/V2bQV5C5xnoBHQY/cYuYE/2VQ8V3/x2HP5ZYdYQ/bsp039GRqYWLcZ3/n3F6 NqiP8WJK43ZFYQ== -----END CERTIFICATE-----Generated at Thu Mar 26 06:59:26 2026 by rpki-client