$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft File: H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json) Hash identifier: C/hGOWJADMno6PhEvYceKFXA6vm3MA4yIoGLAAmPL9E= Subject key identifier: 9F:5A:15:D9:0F:38:5B:15:07:E0:FC:E1:35:BA:3C:16:71:DF:43:62 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019D29612257999751562ED47D26D5BF0ADA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft Manifest number: 15FB Signing time: Thu 26 Mar 2026 09:02:04 +0000 Manifest this update: Thu 26 Mar 2026 09:02:04 +0000 Manifest next update: Fri 27 Mar 2026 09:02:04 +0000 Files and hashes: 1: 0cFmPlgtZFatvGsFJ_6fS1O8kQM.roa (hash: /B2VVRe5N6Un7aDXd5evcTUVemNrJ/4W8eXY2wnpu94=) 2: 1GWKutvP5wqE4NwHAG48iVSQ7PA.roa (hash: zqS2gc00NkqFjgmG9FJ6uA0+J1taXCi+tvVpRWDaifE=) 3: 3vwyO3W8Bh0zjBGqPTD-ZCPrVBE.roa (hash: 7TJhddJ8dfgM4Myf26icmLUk9o2uV/+aWcO5kEfM5+A=) 4: 891PtgTBNZC3a-YUGxtJoKTNd9Q.roa (hash: 8pLxt4vOUppE6as9sL8XWLpnhsDUpDNmeiVIIwF1HIQ=) 5: FEVud0L2kHOw5Ln1548JrqC5Q6w.roa (hash: sjR58RIZxFioAN/H+M9b6lxvvCukJWsznFLFyY4pR1M=) 6: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: rKWlPJsDEjAaRWzqh/TsEKt3JKZtr4hZ1Da9/BB6tHE=) 7: H2GH0N6BHFLGxcykoFv6zcUvV3U.roa (hash: mwIujdY9hafAxLMjhRo7Tumjv5kkNh8PdJkAoSsfwzg=) 8: ID0uSUS9YSfHNd3tbHUPCxezP7c.roa (hash: 5otoNJPeWt6BZ43Y3oQiN7LrNktvMHr+JIVRYTpLS2U=) 9: L-mOWHcg1ylWAEKsUC1Q7EkBDos.roa (hash: C7MelNSEzMNjj5NwSLZl7HFbk8+EnqV8THp51KyavaI=) 10: WDrGCEuL7zomVPzO5qOgkDOYYW8.roa (hash: Bq43pyJf1kGZbkrtrDRyCSZfh/w2s3N/titRpdx50Mk=) 11: _LjzQFp-RBvXVHPmX3DpbYIvGIk.roa (hash: UNlP0XNJK5YhJXXa04Z6EjYLUqHsqQb+BZnN1oQdL+M=) 12: an1Tdbj5z52i760TcgMy1zpUrg0.roa (hash: hyqa/bZq2B5838z18985E46JOI+C3vApH4rsbyeF/Nk=) 13: eTWMSBp3g-16UDje-DuW2V6MyZA.roa (hash: hPmex3YV052ex5E1T+0XcutmYptwXPGirLtYO5lS6nk=) 14: rtWFes-25RLRJLlkWAnOV9y_VDU.roa (hash: 3+EOMEdyyzgBn+xA9/R2u/F7BqlZVKKsbvRyIH5W+Bg=) 15: s8zryRYZWYIsQn_ONtQKxXurk28.roa (hash: N1huOpX/AGH+GVZvQgeYwmYcYRN5tn3PBeSEQanCoWM=) 16: vj81oHqBw2pAc-BDNlLiwVKERLE.roa (hash: P8A97Qm90xtFbJjDnSZwo5VP7wTH/pcEPPL3aOTXt/4=) 17: yIR2ykqDL3mm7OpbFLEIbA2EkFU.roa (hash: cduqrtFCtc6mNaM5tX4WTpvEqx6uRh6yFt4sNgSA/II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:61:22:57:99:97:51:56:2e:d4:7d:26:d5:bf:0a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Mar 26 09:02:04 2026 GMT Not After : Mar 27 09:02:04 2026 GMT Subject: CN=9f5a15d90f385b1507e0fce135ba3c1671df4362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:67:86:b3:30:7b:45:1f:bb:0c:f4:6a:71:8b: b2:b5:bb:28:c6:79:bb:b7:c2:fb:c6:b2:c4:aa:a6: 6d:38:c2:8e:f1:72:42:d6:dc:a4:56:54:9e:4e:07: f4:aa:c5:22:81:f7:21:05:17:c4:59:78:41:d2:6b: 39:24:80:f0:73:bc:1b:ac:f5:00:f7:f7:5e:97:62: c9:a9:18:50:68:89:83:b8:a9:f6:33:8c:0f:e4:87: 21:49:e9:a2:d0:ff:96:1b:18:df:56:43:91:98:f5: 1a:ef:2f:91:a1:1e:21:e5:01:30:1d:fc:e7:db:fb: ff:bb:bc:66:d1:38:7e:bd:43:3c:b2:d6:15:f3:2e: 8e:f9:fb:f5:57:2a:be:97:48:18:5c:09:6f:d9:f0: d2:02:ac:8c:93:70:b1:d9:0c:9b:0a:d4:05:13:27: 20:c5:53:cc:eb:67:4b:c9:ec:62:a7:68:c4:8d:71: 76:51:5e:90:ba:ad:04:f8:63:46:f2:e4:c5:6a:7e: e6:70:1b:0d:13:4a:ed:1c:1b:59:08:29:7f:9c:43: 80:9e:80:ce:9a:f3:87:f6:8b:4f:19:98:78:95:89: 52:7b:d1:d7:65:18:61:20:e9:b9:56:40:1f:b5:0c: 76:d6:36:d8:04:7f:d2:01:7e:26:b5:5e:b7:d6:54: a8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5A:15:D9:0F:38:5B:15:07:E0:FC:E1:35:BA:3C:16:71:DF:43:62 X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ea:d3:e8:c8:23:e9:2f:92:7d:d5:79:81:b2:e9:91:01:c0: dc:22:e3:35:0d:d3:b7:a9:95:37:c8:5b:8d:50:eb:1f:67:aa: f9:d0:09:41:78:0e:3a:66:ee:ac:41:84:fc:fb:6c:5b:73:c6: 26:7e:20:31:be:f9:0f:3b:9e:a5:14:89:ec:74:0b:a1:f3:ac: b9:a3:53:52:1f:5b:83:d9:4e:37:bf:77:f2:27:08:6c:c5:9b: 62:fd:36:dc:d0:ac:50:6c:eb:ff:eb:71:6c:86:c4:b2:ac:f4: 13:cf:8d:c0:92:86:6e:99:7c:3b:9e:fc:28:78:5e:a5:82:bd: 5a:56:22:07:d1:1f:6d:c8:bb:90:f3:f1:47:bf:c4:63:54:b2: b0:d4:4a:5d:97:a9:53:88:62:66:9b:9c:02:1f:d4:b6:9a:e0: 97:be:aa:b0:23:48:85:a7:71:d9:16:2e:94:c8:5b:e6:94:c7: b9:a5:35:2f:18:e8:8c:d6:22:1f:e1:7d:d8:65:d5:e3:4e:04: e3:de:01:b8:df:2d:f4:9e:2d:89:b8:6b:a6:ef:a9:04:56:46: ff:83:d6:8b:f2:b4:4c:9e:e7:74:7a:f6:1b:b2:17:d9:55:26: fc:f9:96:2d:53:a6:a7:11:2a:28:67:20:4e:4f:38:b7:3b:65: 1d:1f:65:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pYSJXmZdRVi7UfSbVvwraMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwMzI2MDkwMjA0WhcNMjYwMzI3MDkwMjA0WjAzMTEwLwYDVQQD Eyg5ZjVhMTVkOTBmMzg1YjE1MDdlMGZjZTEzNWJhM2MxNjcxZGY0MzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomeGszB7RR+7DPRqcYuytbsoxnm7 t8L7xrLEqqZtOMKO8XJC1tykVlSeTgf0qsUigfchBRfEWXhB0ms5JIDwc7wbrPUA 9/del2LJqRhQaImDuKn2M4wP5IchSemi0P+WGxjfVkORmPUa7y+RoR4h5QEwHfzn 2/v/u7xm0Th+vUM8stYV8y6O+fv1Vyq+l0gYXAlv2fDSAqyMk3Cx2QybCtQFEycg xVPM62dLyexip2jEjXF2UV6Quq0E+GNG8uTFan7mcBsNE0rtHBtZCCl/nEOAnoDO mvOH9otPGZh4lYlSe9HXZRhhIOm5VkAftQx21jbYBH/SAX4mtV631lSo2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9aFdkPOFsVB+D84TW6PBZx30NiMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOrT6Mgj 6S+SfdV5gbLpkQHA3CLjNQ3Tt6mVN8hbjVDrH2eq+dAJQXgOOmburEGE/PtsW3PG Jn4gMb75DzuepRSJ7HQLofOsuaNTUh9bg9lON7938icIbMWbYv023NCsUGzr/+tx bIbEsqz0E8+NwJKGbpl8O578KHhepYK9WlYiB9Efbci7kPPxR7/EY1SysNRKXZep U4hiZpucAh/Utprgl76qsCNIhadx2RYulMhb5pTHuaU1LxjojNYiH+F92GXV404E 494BuN8t9J4tibhrpu+pBFZG/4PWi/K0TJ7ndHr2G7IX2VUm/PmWLVOmpxEqKGcg Tk84tztlHR9laQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:38:42 2026 by rpki-client