$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft File: H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json) Hash identifier: 3v7FvNFClWKivhNx50o07yZd8W9035hw9vPLuiilogI= Subject key identifier: 03:55:17:78:BA:D5:D3:10:55:E5:44:9A:3B:75:E4:A6:5C:5F:C5:8E Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 01A0DC172C6E644513D17303E279E80B5867 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft Manifest number: 17E9 Signing time: Sat 26 Sep 2026 05:01:41 +0000 Manifest this update: Sat 26 Sep 2026 05:01:41 +0000 Manifest next update: Sun 27 Sep 2026 05:01:41 +0000 Files and hashes: 1: 0cFmPlgtZFatvGsFJ_6fS1O8kQM.roa (hash: /B2VVRe5N6Un7aDXd5evcTUVemNrJ/4W8eXY2wnpu94=) 2: 1GWKutvP5wqE4NwHAG48iVSQ7PA.roa (hash: zqS2gc00NkqFjgmG9FJ6uA0+J1taXCi+tvVpRWDaifE=) 3: 3vwyO3W8Bh0zjBGqPTD-ZCPrVBE.roa (hash: 7TJhddJ8dfgM4Myf26icmLUk9o2uV/+aWcO5kEfM5+A=) 4: 891PtgTBNZC3a-YUGxtJoKTNd9Q.roa (hash: 8pLxt4vOUppE6as9sL8XWLpnhsDUpDNmeiVIIwF1HIQ=) 5: C4t8uD-1l6v2-L1moY5dn94kwTY.roa (hash: zib44M6VzUYLgG5eXpBjODdbBkEaiX8tbBqBRJN5cjE=) 6: FEVud0L2kHOw5Ln1548JrqC5Q6w.roa (hash: sjR58RIZxFioAN/H+M9b6lxvvCukJWsznFLFyY4pR1M=) 7: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: uTEX288CwO8xgoBj/aGsrTFvvhwEBVbkKUv+7d8ux9s=) 8: H2GH0N6BHFLGxcykoFv6zcUvV3U.roa (hash: mwIujdY9hafAxLMjhRo7Tumjv5kkNh8PdJkAoSsfwzg=) 9: ID0uSUS9YSfHNd3tbHUPCxezP7c.roa (hash: 5otoNJPeWt6BZ43Y3oQiN7LrNktvMHr+JIVRYTpLS2U=) 10: IH7r6TlVfU45qKQI2R1NC9H-FqE.roa (hash: GtnbJaxyWwA621fhkdaRd3CACzs39iPVRXqRT4Cekjc=) 11: IrmRlXZkUU-WpNHDXk5UVzU9fbE.roa (hash: Ys0IXZEm55UjwC+NVaugdT1snG6yPNB7JuUQ3nHsC00=) 12: L-mOWHcg1ylWAEKsUC1Q7EkBDos.roa (hash: C7MelNSEzMNjj5NwSLZl7HFbk8+EnqV8THp51KyavaI=) 13: _LjzQFp-RBvXVHPmX3DpbYIvGIk.roa (hash: UNlP0XNJK5YhJXXa04Z6EjYLUqHsqQb+BZnN1oQdL+M=) 14: fdiVcNZncZrGngmrusZDNbGcw2A.roa (hash: C9II/NbNWaLq0vmfzeX9U0AgMZnpITv9ShotkhyrUhk=) 15: jIq8fBg_UvQq7GHwf194V2CFjVk.roa (hash: 4yuTp4dAvljMHulD7lLq9ormb36G2bWql36aX4FTBXw=) 16: rtWFes-25RLRJLlkWAnOV9y_VDU.roa (hash: 3+EOMEdyyzgBn+xA9/R2u/F7BqlZVKKsbvRyIH5W+Bg=) 17: s8zryRYZWYIsQn_ONtQKxXurk28.roa (hash: N1huOpX/AGH+GVZvQgeYwmYcYRN5tn3PBeSEQanCoWM=) 18: vj81oHqBw2pAc-BDNlLiwVKERLE.roa (hash: P8A97Qm90xtFbJjDnSZwo5VP7wTH/pcEPPL3aOTXt/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dc:17:2c:6e:64:45:13:d1:73:03:e2:79:e8:0b:58:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Sep 26 05:01:41 2026 GMT Not After : Sep 27 05:01:41 2026 GMT Subject: CN=03551778bad5d31055e5449a3b75e4a65c5fc58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:b0:73:ba:3d:5d:25:87:8e:48:ba:05:16: 2f:a0:af:94:5b:50:98:cd:14:7f:fb:9e:d2:fa:cc: 37:de:6d:62:3b:22:2a:82:21:8b:d5:d3:77:2b:57: 9d:01:36:41:3e:fa:ae:02:e5:4e:d1:a3:8b:9e:f3: 01:eb:5c:cc:1a:74:86:60:c2:af:70:80:b0:ff:ee: 05:43:bf:c4:ae:ee:95:68:29:e7:4a:76:07:40:f7: 31:cc:27:cb:10:25:1f:e2:5d:0f:18:98:c9:64:5a: 44:f4:3e:b3:01:6a:26:a0:47:25:c6:0a:bd:f3:7a: 8d:3d:de:2f:3d:ae:a4:d9:98:35:f7:5b:f3:ae:69: 6e:89:df:28:7a:4f:2e:f2:7c:fd:cb:ab:10:68:9e: d8:08:66:e9:15:73:2f:1b:24:62:91:7c:14:97:aa: 5f:db:fd:34:5d:0f:7f:38:95:e3:72:22:71:aa:06: 3d:30:77:9b:d2:dd:ca:04:01:07:22:99:65:67:d0: 42:e2:05:8e:2b:48:99:ed:75:55:af:21:4a:9a:13: 67:0a:4c:81:a3:2b:1c:3a:d4:d8:73:23:5c:06:94: 6b:39:99:a5:51:88:17:69:c1:ac:0d:b5:a7:0a:fb: 93:68:5f:14:6d:b4:c3:a3:b3:49:6d:ab:45:05:40: e0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:55:17:78:BA:D5:D3:10:55:E5:44:9A:3B:75:E4:A6:5C:5F:C5:8E X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cf:e8:4a:6d:9a:4c:92:63:49:b9:33:d3:a3:00:df:15:22: 14:43:b3:1e:e7:35:a2:2c:4a:68:e6:6c:c0:2b:8b:cd:4a:d4: 6a:7c:2c:dc:3c:06:f9:33:c6:8a:9f:66:73:79:4c:0d:4a:14: f9:f4:81:48:f2:63:c7:7b:e8:38:f8:14:30:43:15:ef:3e:79: 88:3f:fe:73:70:e1:4c:1e:e3:54:3d:86:31:8c:2c:2d:28:c8: 5b:ca:bc:ea:9e:51:05:a7:b9:fd:56:bc:c7:6f:79:cc:ce:56: e9:96:d8:a7:b2:f4:cb:c1:30:bd:43:4e:ae:00:9b:ff:43:4c: 58:cd:28:b0:26:6d:b1:58:78:ef:cd:b3:d4:32:8e:b0:79:6f: d6:9e:70:51:fb:4f:fe:09:60:93:02:f8:7c:b1:ab:23:42:27: 13:86:de:84:72:ad:d3:d9:d4:73:b7:b2:ff:5e:ad:9f:c2:03: 57:a3:99:e3:77:df:24:ef:af:59:18:0f:1b:90:d8:21:8e:fb: ac:70:e4:b4:bd:57:fd:78:c5:77:74:f7:ba:10:be:b3:7d:1c: 67:e9:b6:1a:1c:e1:dd:72:17:0f:56:f2:88:44:7d:33:81:f4: 45:af:3e:e0:99:ff:7c:bc:4d:e3:4b:5d:29:69:4a:3a:31:75: 96:a8:c6:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDcFyxuZEUT0XMD4nnoC1hnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwOTI2MDUwMTQxWhcNMjYwOTI3MDUwMTQxWjAzMTEwLwYDVQQD EygwMzU1MTc3OGJhZDVkMzEwNTVlNTQ0OWEzYjc1ZTRhNjVjNWZjNThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMuwc7o9XSWHjki6BRYvoK+UW1CY zRR/+57S+sw33m1iOyIqgiGL1dN3K1edATZBPvquAuVO0aOLnvMB61zMGnSGYMKv cICw/+4FQ7/Eru6VaCnnSnYHQPcxzCfLECUf4l0PGJjJZFpE9D6zAWomoEclxgq9 83qNPd4vPa6k2Zg191vzrmluid8oek8u8nz9y6sQaJ7YCGbpFXMvGyRikXwUl6pf 2/00XQ9/OJXjciJxqgY9MHeb0t3KBAEHIpllZ9BC4gWOK0iZ7XVVryFKmhNnCkyB oyscOtTYcyNcBpRrOZmlUYgXacGsDbWnCvuTaF8UbbTDo7NJbatFBUDg5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANVF3i61dMQVeVEmjt15KZcX8WOMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUM/oSm2a TJJjSbkz06MA3xUiFEOzHuc1oixKaOZswCuLzUrUanws3DwG+TPGip9mc3lMDUoU +fSBSPJjx3voOPgUMEMV7z55iD/+c3DhTB7jVD2GMYwsLSjIW8q86p5RBae5/Va8 x295zM5W6ZbYp7L0y8EwvUNOrgCb/0NMWM0osCZtsVh4782z1DKOsHlv1p5wUftP /glgkwL4fLGrI0InE4behHKt09nUc7ey/16tn8IDV6OZ43ffJO+vWRgPG5DYIY77 rHDktL1X/XjFd3T3uhC+s30cZ+m2Ghzh3XIXD1byiER9M4H0Ra8+4Jn/fLxN40td KWlKOjF1lqjGYQ== -----END CERTIFICATE-----Generated at Sat Sep 26 07:32:57 2026 by rpki-client