
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
File: hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json)
Hash identifier: z+xLWjPzeFGOuVQvEzsyuJHw5ZZzmE2Gq4skYTwthE4=
Subject key identifier: CE:7E:D1:6C:D0:1D:F5:B7:7E:11:1A:32:6A:AF:26:64:0E:51:9C:58
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019D26CD81C09955D2BDD3A81041929C305B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
Manifest number: 1105
Signing time: Wed 25 Mar 2026 21:01:35 +0000
Manifest this update: Wed 25 Mar 2026 21:01:35 +0000
Manifest next update: Thu 26 Mar 2026 21:01:35 +0000
Files and hashes: 1: 0ew4m4ItSCVepyc29nNm9tAEIKM.roa (hash: qJf794gHKOzylfCxvXi/18OeXDgu/UQKuPAemY2FauU=)
2: 5H1OpW-AycH1O-bkgqM8Yvh65T0.roa (hash: d9gll8e31C0axgcql2tfiqAMsE0s3zsOdBZT3TwLDh4=)
3: 8OnV91N_zqcbSEf40E1ouE7GeJs.roa (hash: m6ppgYlMTCPYh8z67jY4eoshyn8bp37m9v5Ohrm1dI0=)
4: 8m9QB0xxAdt_pSiqIqhqIa4gs74.roa (hash: v+nE2XaufnNZvnaDV9lRk6ql9G4VsMoO6PsRrFqD1OI=)
5: 912ggk5y8hlaC5Oq1RcqiznaZVo.roa (hash: DjODdr6zI59Yx4ri8xsDh4PbCcxOZi8hGkYTMA91hDs=)
6: 9PjE-FT5x3lfbDy22uURpGtuaH8.roa (hash: Qc8PbJ+121WDG0jcNdRI6MTD3GMXfVRF32u77QXsW1U=)
7: 9kJoijXp_W2x-CNIVGU2gTyIHu4.roa (hash: g/JnEpQSh0oe6cxDrcijYpkgjg+0UyJYEEJmxmRejxg=)
8: BWPseGVRi3l-zfC0baLeQvt8npw.roa (hash: S5E2qZZQYizqFQAAmmLpDPTTQwoCIm+hzIsTiWyQI/w=)
9: DD_WAIXT_d5Bi71Wp0F-YRqzAeY.roa (hash: TgYS7RvooVLjNCbehPFvkEOoQsy+7O0+z7H9lT2pLEo=)
10: Dz_xAtS_XW35D61yLERn3HqqTl4.roa (hash: tE44UbfHA1S8bb6yZPuiKFoXcbPWrwD3Vwt3MEGtAV8=)
11: Gsfb6uv4z_URV5ma9bYq5LLFSbM.roa (hash: 3RHPyWH6kpXSP5rfHQPf6P61NWqvSrxvQJZ4KT7Fy8g=)
12: KIQE_PA6qlqnsqTuVdgXvQjK-I0.roa (hash: s0iOSLMdSnE0XfkwKLxNI9H4430lKBoEen6MwmkygC8=)
13: KyZkiVRwovZC3LrfusqaW75r1Kk.roa (hash: Lb1GKS5ZorjNu583mkwjyw6Qxq2DeQxnAy7pzrOkcOM=)
14: MScYZfLkEgj9xUczQoShHi7if34.roa (hash: Lr5ikl0tvlQII709pYQ4cZ3QlbMQlLSyyT0QS99VL8g=)
15: NZhAdOiHD1zio5nnxiLQXypL-04.roa (hash: cXPsSX6LaAvczX/mV2tPPsm8l4OjqgM1mQ6UY42I7C0=)
16: N_ca2HsoUWR8ka9Wna1fPqfbHr4.roa (hash: byrWfo1ZH5Y1FyKu4vOI/ViN8X+7h1tAmf+YhOXuZ/k=)
17: PlTPJtrSm59MicMXGc0T5QFobVk.roa (hash: vxokb71Ck6MbAwg9eWOIXGy43vgQiWwgqzqyuy/N+p8=)
18: QS2YfmJsmgaN4NK2AXvh-V9gXVA.roa (hash: 5ZLCC0mXDbdajebs22UeArfWPlsHeHgp/0frCCZOu78=)
19: RTDS83BZPr8GOwxlBuZwrgifhpE.roa (hash: dlJ9uDPjVjDJVz0OiQ96/4glzXs5xczVqBOYnJ5HiV4=)
20: RbJmDHOG8CdfIUm4-yXshwbt3fU.roa (hash: 8rpXsYWlJfCS6Vck7t+jkmI8ojM9CDZBlR9NO0Um754=)
21: VlqgFVIoOR9-G2wJsL8MxPVQAWA.roa (hash: dAKmS3ffO585YXonTbK1C2xZs3hm3oFut9oOO9E3T3s=)
22: WLvpNSFQRhdWZaC9I_Ah1bgcC0I.roa (hash: PDyeHlRCszFX07KKXj3dedhf6EgMf4av9amiMdMXQ3U=)
23: WZoyBnIXCqlmZJg2fvZL07WZ-cM.roa (hash: YcgwHssC0IerMr07yjE5xNvbp7mTIbDmtcrXLuP8XiQ=)
24: YvQ0mb9xL1me3FE2T2kfrR62qHw.roa (hash: YA4zjb2nMxYTedW1G+JpN82HAbrqmEFmZX4LL6ddxjo=)
25: ZmguPJp1dEDwuB2JzJkq0iBU2V4.roa (hash: 1R1ZTE25yybbWHQtxGwRissKmJ1D8mZszAklbSjRDLM=)
26: ae2K9tmAIRZd8cJcNm_F_NfRfI4.roa (hash: oNt4Xcrn0Ecxv4Mw9KGJgnzzWpMIqz/MDYN4HT/YRYk=)
27: c6g_6JWDI0TpK9FkSzU9JLcTYFc.roa (hash: xfIMp+34y6MSA9eYmpp36aGhUYMtBbTbqNw42uiP6Hc=)
28: d5r0W7DTPQ3gTqs_-NBseisWlCo.roa (hash: d47i9og2b8C2O7tuxenulALhI1Vd+GOyXorTmCH8MG8=)
29: g3ftKCOekd6MZAoyD7J4SL4FblQ.roa (hash: s+hLkIL+pR6iQslHmvl1kgMv8MT83YoyoUr7i6yvI1M=)
30: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: Wg6Z/PWNaGK55iaoI4gUdE6LMGV9J3M4Z3reT6wFtQQ=)
31: kOeStUr-S36PPYxRvN7P5tKOJwg.roa (hash: JYGGn+yiElMOBrVTl8GeU6lToRXH7Upj5oy8AgfmV7c=)
32: kvMWdnWiB8O4z6UGidzk9YiNNds.roa (hash: qQo2451yWLYIM5XcxKIaEg78mQdIPydPLkoRnJCOxSg=)
33: lHYwXThCBP7FlBWtS7W6i19LI5U.roa (hash: U/OGFWU5CJfOEtNnO7YwqzY/UYqJfO4+HxhHERKhfbc=)
34: lZ1qvLI02CD8UXhaq52LvdNAKcY.roa (hash: /Ub1OWh7+9Ly/PwiA4DBQeFni2XC79IYKxPRK7AiJsc=)
35: mei8xgH0X4b3oYs1JzOkVwZUqgE.roa (hash: 6r1vzQ4PHdBXGDQPN9IegVfc1dZJl95MXIt8jdby3Ao=)
36: mxRDtABpFcklfSsg3aqlEhdyVAo.roa (hash: +8omy9Xwwaces0V4gWLaq7H+IkKX2MYQDc4o2Yp+Bmc=)
37: pAIBYyl03DB7XvIHrbS3QzCtJmw.roa (hash: GQ6FPXE4A+w0U7jvziiqaUGlGRv8mE2hgF7AEFVUJmU=)
38: rnIbzC-rnzZRuZ0gE9Ol9qXNpB8.roa (hash: yNGtVyB4AnZrAbIlabLdkD82cw/2NFn/z89D1weqzjo=)
39: tFdZOVm-PrcIf_Tv6ZA86VKLE0A.roa (hash: f+mSSCLTTZwRD7r4dreo2vc8CPrb2fYZFXUXgRgCL9E=)
40: uWjzpGpmdiGDuOP3RuF3k0JpRzI.roa (hash: feZaV8ykSWDhxYFCGXR1xId5z2ls9ece6Z9cvczsEoE=)
41: xHusoPKod-9ku7rZw8cealGeT28.roa (hash: 7YrQt4ZeBYedxpBakuCTTQk0fE7OEPDPBMWW4QTkzWo=)
42: xZ2nAeLyC0ezaqseLjJkV22U5mE.roa (hash: oxTigerjyhGYgfgpErnFxoqmId6FySfGh3aATIsx2pc=)
43: zDk64z6NkHXx103b_DDKnk_Pj-c.roa (hash: 8SAIBtw8DhrZJ/a4ePIKes3vCLUWaDEFEnhQa263Bg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:81:c0:99:55:d2:bd:d3:a8:10:41:92:9c:30:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Mar 25 21:01:35 2026 GMT
Not After : Mar 26 21:01:35 2026 GMT
Subject: CN=ce7ed16cd01df5b77e111a326aaf26640e519c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:8a:71:e1:c7:bc:19:6a:a4:94:62:c9:91:
e7:32:7b:00:cc:0d:39:24:ed:b3:7a:cd:83:f7:b4:
2a:1d:a0:a8:d1:6a:27:e5:19:10:82:e2:93:1c:34:
6b:c1:9a:f4:c1:4d:3a:9e:d6:18:81:00:85:f2:01:
19:d1:86:92:06:b8:d2:9d:91:d7:75:53:01:42:af:
aa:ca:d4:90:2f:d0:71:42:4a:34:1e:5e:84:c8:b4:
12:03:d1:d6:09:dd:8e:cd:bc:31:7d:0a:a7:bf:27:
74:a4:09:29:de:fb:c1:05:6d:bb:9d:54:db:ee:c4:
ab:da:8f:60:95:db:e7:14:d6:20:d1:51:a7:be:d1:
bd:7f:ce:57:1e:a4:23:08:fc:8a:c8:be:17:34:ab:
17:72:6d:1b:3a:95:85:5c:25:c3:b4:d3:18:91:a8:
c2:85:f9:aa:1e:c7:c3:88:b8:03:9b:49:2f:18:0b:
40:90:71:40:e2:e5:29:d9:76:d3:fc:6e:ad:50:e6:
a3:f6:5b:f8:67:35:fd:de:66:ac:88:09:13:ee:b4:
5e:25:ff:61:36:c7:bd:fa:9c:68:34:33:af:17:3b:
fe:0b:07:96:c8:63:b6:05:e6:5b:6d:fc:4f:a4:e1:
e5:fa:88:78:99:e1:95:c9:72:9a:b0:45:96:19:80:
2c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7E:D1:6C:D0:1D:F5:B7:7E:11:1A:32:6A:AF:26:64:0E:51:9C:58
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:80:c2:cb:3e:ee:00:11:05:04:63:2a:65:71:84:c5:f1:6e:
d3:65:f1:1b:42:17:e9:9a:2f:84:9d:ba:8f:14:ff:ef:dc:c5:
cc:1d:84:7b:46:37:0c:0b:3f:ab:ef:8d:a0:2a:ba:e4:a7:16:
76:37:f1:f6:b2:17:16:11:12:91:60:c8:8b:74:1f:65:a5:4c:
0d:9d:16:d4:e7:45:b7:05:23:35:1c:86:bd:27:1a:ad:18:62:
c7:db:ca:63:cd:6c:df:85:20:91:e8:9c:76:ea:b4:6a:1e:b2:
34:3d:a1:bd:ea:13:d6:fd:fb:3a:c8:63:ac:2d:58:a0:53:65:
71:20:04:a5:a0:ab:91:96:a0:91:c6:ad:27:ce:c7:4a:39:d3:
35:bb:2b:35:a4:0c:e3:11:d7:3e:89:99:f9:e0:de:b8:ec:d6:
c7:1b:2a:fb:ce:21:bd:cf:c1:2f:28:20:9e:45:ab:1a:75:f6:
36:3a:f1:58:99:38:09:89:46:74:00:ba:fb:c5:f3:0e:14:03:
0b:a1:4a:fe:d4:2c:90:f0:61:40:43:94:cc:4c:9a:49:82:99:
88:79:4f:c8:25:d9:47:60:b3:1e:05:71:64:0c:63:e3:d2:21:
97:1b:00:62:89:c7:76:13:22:06:9f:2b:2f:43:0d:d8:1d:3a:
69:bd:6d:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzYHAmVXSvdOoEEGSnDBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjYwMzI1MjEwMTM1WhcNMjYwMzI2MjEwMTM1WjAzMTEwLwYDVQQD
EyhjZTdlZDE2Y2QwMWRmNWI3N2UxMTFhMzI2YWFmMjY2NDBlNTE5YzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rGKceHHvBlqpJRiyZHnMnsAzA05
JO2zes2D97QqHaCo0Won5RkQguKTHDRrwZr0wU06ntYYgQCF8gEZ0YaSBrjSnZHX
dVMBQq+qytSQL9BxQko0Hl6EyLQSA9HWCd2OzbwxfQqnvyd0pAkp3vvBBW27nVTb
7sSr2o9gldvnFNYg0VGnvtG9f85XHqQjCPyKyL4XNKsXcm0bOpWFXCXDtNMYkajC
hfmqHsfDiLgDm0kvGAtAkHFA4uUp2XbT/G6tUOaj9lv4ZzX93masiAkT7rReJf9h
Nse9+pxoNDOvFzv+CweWyGO2BeZbbfxPpOHl+oh4meGVyXKasEWWGYAsOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5+0WzQHfW3fhEaMmqvJmQOUZxYMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoDCyz7u
ABEFBGMqZXGExfFu02XxG0IX6ZovhJ26jxT/79zFzB2Ee0Y3DAs/q++NoCq65KcW
djfx9rIXFhESkWDIi3QfZaVMDZ0W1OdFtwUjNRyGvScarRhix9vKY81s34Ugkeic
duq0ah6yND2hveoT1v37OshjrC1YoFNlcSAEpaCrkZagkcatJ87HSjnTNbsrNaQM
4xHXPomZ+eDeuOzWxxsq+84hvc/BLyggnkWrGnX2NjrxWJk4CYlGdAC6+8XzDhQD
C6FK/tQskPBhQEOUzEyaSYKZiHlPyCXZR2CzHgVxZAxj49IhlxsAYonHdhMiBp8r
L0MN2B06ab1tEA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:23 2026 by rpki-client