$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: nrBpIsTgQjISpSjZpAH1cXmu4klSd2/jbjAc2pk2vTI= Subject key identifier: F8:B6:FC:8D:2C:67:10:71:11:AE:6A:7F:87:31:BD:D7:19:B0:E1:5C Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 01A0D34A4D25610B21FF56C9869B3752C2BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 1A8B Signing time: Thu 24 Sep 2026 12:00:56 +0000 Manifest this update: Thu 24 Sep 2026 12:00:56 +0000 Manifest next update: Fri 25 Sep 2026 12:00:56 +0000 Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=) 2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=) 3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=) 4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=) 5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=) 6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=) 7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: dmpYk0x8oMbNyvR62abHGa/KcBOXOwkfCFpxjvQkHxw=) 8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=) 9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=) 10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=) 11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=) 12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=) 13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=) 14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=) 15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=) 16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=) 17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=) 18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=) 19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=) 20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=) 21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=) 22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=) 23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=) 24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=) 25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=) 26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=) 27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=) 28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=) 29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=) 30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=) 31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=) 32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=) 33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=) 34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=) 35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d3:4a:4d:25:61:0b:21:ff:56:c9:86:9b:37:52:c2:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Sep 24 12:00:56 2026 GMT Not After : Sep 25 12:00:56 2026 GMT Subject: CN=f8b6fc8d2c67107111ae6a7f8731bdd719b0e15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:59:ae:41:06:6f:bb:d8:94:4c:aa:12:41:5f: 07:3c:59:d5:11:ea:77:c3:5a:15:43:76:9a:cb:d6: 3a:59:c0:c1:9a:d8:b5:44:0c:5a:7e:83:bc:97:94: c7:5a:b5:63:d1:b8:08:5e:8e:9d:2a:bb:fe:3d:11: e0:39:34:72:ae:23:e9:c0:81:3e:9e:0d:e0:aa:86: e4:47:3d:29:eb:fa:8c:ab:00:4a:f3:c8:a0:64:12: b3:5e:69:9a:0d:e9:45:2a:3d:71:37:b5:03:f9:66: 6a:bd:43:03:1d:69:0a:65:5c:ae:cf:ec:04:56:55: e9:73:82:ac:53:be:e8:63:6d:da:8e:39:1c:fb:3f: a0:d4:1b:ad:16:83:c5:08:b9:76:3c:66:11:2a:f7: 82:36:3b:73:70:9d:31:dc:41:58:96:ad:75:c1:2d: 99:f7:41:a2:58:01:17:09:dc:d2:d7:64:30:b0:c8: ec:88:0a:ec:6f:aa:17:77:f9:42:be:61:24:3d:69: 2b:4c:48:6b:06:f2:84:a2:13:27:92:36:76:b7:ee: 1c:f2:d3:06:4b:ed:55:a5:5e:6b:47:75:a5:29:d7: 4e:83:b6:f1:50:d8:4d:8f:8b:15:20:a5:02:e8:3d: 82:87:c0:da:8a:f7:7f:6e:61:98:ca:e8:1c:64:c9: 20:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B6:FC:8D:2C:67:10:71:11:AE:6A:7F:87:31:BD:D7:19:B0:E1:5C X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b8:c5:78:c1:df:b5:95:42:40:09:b7:6e:e4:1a:e2:b3:cc: 22:d9:27:7c:1b:1e:24:14:c2:42:e6:1b:c4:52:84:d1:0e:00: 13:a0:3e:f1:e5:eb:bf:eb:ed:0f:bc:1c:a3:a1:67:c1:56:d4: c9:25:bd:7d:b5:c3:1f:c3:d7:91:08:2c:81:52:d3:c2:95:b0: ef:d0:a3:84:71:7a:13:f0:ab:aa:59:f9:cc:05:c0:72:69:32: bf:6d:60:f5:2d:cf:31:88:c1:f9:f2:27:72:7c:2c:e7:7f:1b: 50:9d:34:19:88:7c:fc:74:9d:c5:1c:84:62:3b:65:b2:64:dd: bf:c5:22:9e:d2:65:44:27:08:6b:f9:e8:63:6f:66:80:89:83: c7:ee:82:57:fc:e2:07:59:36:4c:fa:c9:03:fd:63:c1:37:32: 62:60:d9:be:3d:85:87:04:a0:8d:34:bc:28:19:be:e6:2e:f8: 98:dd:31:d9:9b:f5:f0:27:19:15:f0:63:1a:80:8d:fa:1c:d0: ed:94:9a:78:c1:28:5d:fb:5e:38:a6:0e:99:6a:21:54:eb:4c: b6:c6:bf:6a:7a:45:05:68:ce:1b:40:aa:2d:9c:48:68:81:b7: 5e:07:72:66:e7:7e:0a:a1:55:4c:11:a7:5a:53:8d:75:9d:f4: 5f:ef:e3:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDTSk0lYQsh/1bJhps3UsK9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwOTI0MTIwMDU2WhcNMjYwOTI1MTIwMDU2WjAzMTEwLwYDVQQD EyhmOGI2ZmM4ZDJjNjcxMDcxMTFhZTZhN2Y4NzMxYmRkNzE5YjBlMTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFmuQQZvu9iUTKoSQV8HPFnVEep3 w1oVQ3aay9Y6WcDBmti1RAxafoO8l5THWrVj0bgIXo6dKrv+PRHgOTRyriPpwIE+ ng3gqobkRz0p6/qMqwBK88igZBKzXmmaDelFKj1xN7UD+WZqvUMDHWkKZVyuz+wE VlXpc4KsU77oY23ajjkc+z+g1ButFoPFCLl2PGYRKveCNjtzcJ0x3EFYlq11wS2Z 90GiWAEXCdzS12QwsMjsiArsb6oXd/lCvmEkPWkrTEhrBvKEohMnkjZ2t+4c8tMG S+1VpV5rR3WlKddOg7bxUNhNj4sVIKUC6D2Ch8Daivd/bmGYyugcZMkg2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPi2/I0sZxBxEa5qf4cxvdcZsOFcMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7jFeMHf tZVCQAm3buQa4rPMItknfBseJBTCQuYbxFKE0Q4AE6A+8eXrv+vtD7wco6FnwVbU ySW9fbXDH8PXkQgsgVLTwpWw79CjhHF6E/Crqln5zAXAcmkyv21g9S3PMYjB+fIn cnws538bUJ00GYh8/HSdxRyEYjtlsmTdv8UintJlRCcIa/noY29mgImDx+6CV/zi B1k2TPrJA/1jwTcyYmDZvj2FhwSgjTS8KBm+5i74mN0x2Zv18CcZFfBjGoCN+hzQ 7ZSaeMEoXfteOKYOmWohVOtMtsa/anpFBWjOG0CqLZxIaIG3XgdyZud+CqFVTBGn WlONdZ30X+/jOg== -----END CERTIFICATE-----Generated at Thu Sep 24 18:13:38 2026 by rpki-client