$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft File: H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json) Hash identifier: A/HHjv+6fLgUIIPUrzTagGI59Oc03xE/E6P9SksPnxI= Subject key identifier: C9:FF:9D:93:7D:DC:EC:97:4C:2C:1D:2A:69:BE:AF:C7:1A:62:5E:81 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019E1EA37BD6247665B62DF35B72E8AAC292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft Manifest number: 167A Signing time: Wed 13 May 2026 00:01:30 +0000 Manifest this update: Wed 13 May 2026 00:01:30 +0000 Manifest next update: Thu 14 May 2026 00:01:30 +0000 Files and hashes: 1: 0cFmPlgtZFatvGsFJ_6fS1O8kQM.roa (hash: /B2VVRe5N6Un7aDXd5evcTUVemNrJ/4W8eXY2wnpu94=) 2: 1GWKutvP5wqE4NwHAG48iVSQ7PA.roa (hash: zqS2gc00NkqFjgmG9FJ6uA0+J1taXCi+tvVpRWDaifE=) 3: 3vwyO3W8Bh0zjBGqPTD-ZCPrVBE.roa (hash: 7TJhddJ8dfgM4Myf26icmLUk9o2uV/+aWcO5kEfM5+A=) 4: 891PtgTBNZC3a-YUGxtJoKTNd9Q.roa (hash: 8pLxt4vOUppE6as9sL8XWLpnhsDUpDNmeiVIIwF1HIQ=) 5: FEVud0L2kHOw5Ln1548JrqC5Q6w.roa (hash: sjR58RIZxFioAN/H+M9b6lxvvCukJWsznFLFyY4pR1M=) 6: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: dfGkVaHtarYyJi1vCw584ijRPR2hymjArF6MsgxGRWA=) 7: H2GH0N6BHFLGxcykoFv6zcUvV3U.roa (hash: mwIujdY9hafAxLMjhRo7Tumjv5kkNh8PdJkAoSsfwzg=) 8: ID0uSUS9YSfHNd3tbHUPCxezP7c.roa (hash: 5otoNJPeWt6BZ43Y3oQiN7LrNktvMHr+JIVRYTpLS2U=) 9: L-mOWHcg1ylWAEKsUC1Q7EkBDos.roa (hash: C7MelNSEzMNjj5NwSLZl7HFbk8+EnqV8THp51KyavaI=) 10: WDrGCEuL7zomVPzO5qOgkDOYYW8.roa (hash: Bq43pyJf1kGZbkrtrDRyCSZfh/w2s3N/titRpdx50Mk=) 11: _LjzQFp-RBvXVHPmX3DpbYIvGIk.roa (hash: UNlP0XNJK5YhJXXa04Z6EjYLUqHsqQb+BZnN1oQdL+M=) 12: an1Tdbj5z52i760TcgMy1zpUrg0.roa (hash: hyqa/bZq2B5838z18985E46JOI+C3vApH4rsbyeF/Nk=) 13: eTWMSBp3g-16UDje-DuW2V6MyZA.roa (hash: hPmex3YV052ex5E1T+0XcutmYptwXPGirLtYO5lS6nk=) 14: rtWFes-25RLRJLlkWAnOV9y_VDU.roa (hash: 3+EOMEdyyzgBn+xA9/R2u/F7BqlZVKKsbvRyIH5W+Bg=) 15: s8zryRYZWYIsQn_ONtQKxXurk28.roa (hash: N1huOpX/AGH+GVZvQgeYwmYcYRN5tn3PBeSEQanCoWM=) 16: vj81oHqBw2pAc-BDNlLiwVKERLE.roa (hash: P8A97Qm90xtFbJjDnSZwo5VP7wTH/pcEPPL3aOTXt/4=) 17: yIR2ykqDL3mm7OpbFLEIbA2EkFU.roa (hash: cduqrtFCtc6mNaM5tX4WTpvEqx6uRh6yFt4sNgSA/II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 00:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a3:7b:d6:24:76:65:b6:2d:f3:5b:72:e8:aa:c2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: May 13 00:01:30 2026 GMT Not After : May 14 00:01:30 2026 GMT Subject: CN=c9ff9d937ddcec974c2c1d2a69beafc71a625e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:66:85:06:75:8d:aa:0b:21:0c:b2:61:94: c7:6c:89:19:ba:c3:57:e4:2f:f7:75:ae:e4:a7:22: 01:43:ad:54:2f:8f:d8:cc:d5:d2:2f:fd:2a:47:96: fd:79:13:67:b3:13:dd:2d:f3:0e:e8:4a:3b:d0:22: 4c:bc:79:0c:d6:69:dd:e4:e9:ed:7b:40:73:c8:ab: 19:33:a1:a4:e9:a3:d9:a4:d4:74:0b:64:a9:8a:e5: 04:52:b4:ef:a1:f7:d9:a8:f9:40:6c:25:6c:1e:a2: 49:d1:41:0e:69:39:a5:52:ff:0a:55:b1:8b:45:37: 76:a3:54:f3:a5:0a:4e:b8:85:58:d3:ae:94:e3:d2: 13:52:bf:d3:94:e0:66:c7:e0:47:1b:20:3c:97:ae: 73:68:f0:33:06:07:07:62:b0:c6:56:a1:7e:d2:25: 79:a3:4c:2f:62:95:cb:5a:7b:3f:2a:b4:e1:b5:da: 23:5f:0b:5c:48:8b:74:03:43:ee:9a:31:8a:35:5b: fe:ba:9e:2d:2f:d4:00:ba:58:fd:8c:75:01:27:57: 42:9e:03:1a:20:e3:98:22:b6:87:60:c8:84:3b:59: e2:da:b2:e4:5c:9c:e7:b2:5b:bd:96:a0:97:78:c4: 67:36:91:27:80:f0:ed:5d:c0:25:6c:d3:c2:77:b1: 39:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FF:9D:93:7D:DC:EC:97:4C:2C:1D:2A:69:BE:AF:C7:1A:62:5E:81 X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:dd:8e:60:c0:f7:57:68:09:7c:f9:43:e6:be:42:bd:67:8c: 50:73:aa:54:89:c0:3d:31:37:c7:0b:a3:e7:05:4f:33:67:1d: 00:96:b0:21:d1:ef:fb:11:ef:bc:d7:3d:47:ae:9f:cf:19:43: e6:f6:9a:e6:24:20:2b:2b:63:60:f3:20:b7:b2:0d:1e:8c:95: 77:cf:24:0e:a8:b8:9a:92:1c:d7:75:2e:ed:fc:0e:4a:72:3e: d2:0c:1c:6c:f1:35:b4:d8:01:7e:2c:e0:46:8d:f8:13:19:67: 7b:40:0c:06:ae:c8:cc:e0:13:43:f1:6c:b9:aa:fc:71:19:38: 25:06:ad:47:5f:8b:33:3e:73:e0:63:c9:9c:cf:5c:d8:05:c7: 56:66:b6:69:31:3f:77:83:ad:5b:be:67:88:dc:2e:2e:23:90: eb:20:5a:7a:07:e1:cf:ba:df:81:bf:ab:ba:03:9a:5f:bc:02: 2c:ea:b4:59:e9:df:be:e3:6e:29:24:67:02:2b:e2:71:ed:01: d9:99:04:47:e5:9f:b3:2d:69:19:76:c4:f9:0a:bc:75:c2:15: 77:0e:88:0b:0a:5b:4b:13:d4:37:f8:31:a6:61:a9:27:5b:5a: 02:6a:ad:a5:85:81:73:07:ed:ff:79:e0:cc:0e:ec:03:96:db: 65:55:14:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eo3vWJHZlti3zW3LoqsKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwNTEzMDAwMTMwWhcNMjYwNTE0MDAwMTMwWjAzMTEwLwYDVQQD EyhjOWZmOWQ5MzdkZGNlYzk3NGMyYzFkMmE2OWJlYWZjNzFhNjI1ZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9hmhQZ1jaoLIQyyYZTHbIkZusNX 5C/3da7kpyIBQ61UL4/YzNXSL/0qR5b9eRNnsxPdLfMO6Eo70CJMvHkM1mnd5Ont e0BzyKsZM6Gk6aPZpNR0C2SpiuUEUrTvoffZqPlAbCVsHqJJ0UEOaTmlUv8KVbGL RTd2o1TzpQpOuIVY066U49ITUr/TlOBmx+BHGyA8l65zaPAzBgcHYrDGVqF+0iV5 o0wvYpXLWns/KrThtdojXwtcSIt0A0PumjGKNVv+up4tL9QAulj9jHUBJ1dCngMa IOOYIraHYMiEO1ni2rLkXJznslu9lqCXeMRnNpEngPDtXcAlbNPCd7E5FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMn/nZN93OyXTCwdKmm+r8caYl6BMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC92OYMD3 V2gJfPlD5r5CvWeMUHOqVInAPTE3xwuj5wVPM2cdAJawIdHv+xHvvNc9R66fzxlD 5vaa5iQgKytjYPMgt7INHoyVd88kDqi4mpIc13Uu7fwOSnI+0gwcbPE1tNgBfizg Ro34Exlne0AMBq7IzOATQ/Fsuar8cRk4JQatR1+LMz5z4GPJnM9c2AXHVma2aTE/ d4OtW75niNwuLiOQ6yBaegfhz7rfgb+rugOaX7wCLOq0WenfvuNuKSRnAivice0B 2ZkER+Wfsy1pGXbE+Qq8dcIVdw6ICwpbSxPUN/gxpmGpJ1taAmqtpYWBcwft/3ng zA7sA5bbZVUUhw== -----END CERTIFICATE-----Generated at Wed May 13 10:48:18 2026 by rpki-client