$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: 3tnCao23bO6YNjVeQEJQX9eCaEdyy6L3MlZOxcHQlaA= Subject key identifier: 20:13:B7:D9:42:FC:11:B5:47:55:C3:BD:56:6E:B8:A7:FC:DB:30:17 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019D26CCB616B875DC9B3497097F204865DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 18A4 Signing time: Wed 25 Mar 2026 21:00:43 +0000 Manifest this update: Wed 25 Mar 2026 21:00:43 +0000 Manifest next update: Thu 26 Mar 2026 21:00:43 +0000 Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=) 2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=) 3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=) 4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=) 5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=) 6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=) 7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: I/g5U2TFDhrJ912hMdzuhX1BScI9gSVUBTgtxAYfl54=) 8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=) 9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=) 10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=) 11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=) 12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=) 13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=) 14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=) 15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=) 16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=) 17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=) 18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=) 19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=) 20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=) 21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=) 22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=) 23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=) 24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=) 25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=) 26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=) 27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=) 28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=) 29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=) 30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=) 31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=) 32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=) 33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=) 34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=) 35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cc:b6:16:b8:75:dc:9b:34:97:09:7f:20:48:65:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Mar 25 21:00:43 2026 GMT Not After : Mar 26 21:00:43 2026 GMT Subject: CN=2013b7d942fc11b54755c3bd566eb8a7fcdb3017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a5:58:db:f5:7f:05:f5:87:04:23:bc:41:4f: c0:9e:b5:39:6d:ee:32:5a:9e:3c:4a:63:f8:14:e4: 79:f7:93:43:87:f7:0a:c7:d7:20:ab:ea:34:55:de: bc:e8:21:94:60:20:4c:89:0f:c7:fc:1e:75:52:26: dd:eb:88:24:67:c9:02:b0:6b:db:13:f6:d3:b3:4f: da:c9:58:b6:66:88:1b:0d:85:cc:46:8f:58:83:ec: f7:97:78:37:bb:dc:4d:09:45:2e:5a:bc:71:d5:05: 65:69:a5:c5:bf:d4:d6:6c:70:9f:a8:47:0e:65:54: 41:12:f5:e5:7f:aa:54:5f:b7:d0:73:32:93:72:8b: aa:34:16:2e:34:fb:1e:51:4c:56:0f:c4:a1:b3:8e: 9e:71:53:61:df:ec:c4:5b:95:55:77:bc:b4:c9:08: 7a:7b:bf:84:06:59:93:b8:63:03:49:7e:dc:65:7f: c4:96:49:84:6b:cf:1c:a9:f4:ee:96:c6:0a:11:22: 2b:42:ff:e5:a0:4d:a9:65:e6:32:b8:11:d9:67:d2: bc:0e:17:44:a5:b6:5f:75:07:09:ed:b8:17:f8:cb: 4e:e5:97:5d:2b:a1:07:34:14:79:fb:a8:24:0b:ca: 37:b0:e3:e0:24:be:ca:e4:c7:b5:ab:42:c9:bf:3b: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:13:B7:D9:42:FC:11:B5:47:55:C3:BD:56:6E:B8:A7:FC:DB:30:17 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:91:7d:78:4c:4a:0a:ba:a7:62:ad:d8:1b:c4:c7:2d:1f:92: ab:ef:21:ef:6e:39:f1:ed:1f:b3:2d:21:af:59:06:7e:ed:1f: a6:c4:f9:2b:07:a5:d7:46:38:cc:e1:a7:c8:48:ee:04:ca:ac: 23:61:c0:f1:91:67:f9:47:47:4b:67:34:43:ca:0b:6a:48:1f: f2:52:17:d8:9b:71:c6:b8:1b:90:b3:b1:36:6b:18:4a:cb:c8: 2d:d8:c0:26:85:17:59:3a:02:c5:92:fa:91:3d:e6:6e:04:03: d5:2a:a9:2c:91:12:ba:0f:f7:8f:3a:e5:b1:68:bb:c8:d3:53: 5e:1c:3f:21:51:ed:e5:78:42:b0:e4:5b:ac:e0:9a:38:5e:07: e1:8d:24:ef:1e:1a:7a:81:fb:c6:ee:ca:af:1d:c5:99:a0:cf: 6a:a1:e9:c3:90:32:2b:53:16:d3:1b:5f:1a:60:be:8d:4b:f1: ec:fd:fa:dd:5e:ea:d6:10:32:8e:f0:b9:da:7d:23:50:55:28: 73:18:46:b8:18:2b:f3:ab:a6:56:f6:1a:46:d5:e0:26:16:7a: 8d:a1:73:2d:30:b9:79:77:dc:98:4f:76:90:18:f1:de:2a:a6: 3f:02:91:e1:11:a5:77:10:0e:b5:0e:fb:95:4f:0a:98:43:87: 21:9a:4b:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzLYWuHXcmzSXCX8gSGXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMzI1MjEwMDQzWhcNMjYwMzI2MjEwMDQzWjAzMTEwLwYDVQQD EygyMDEzYjdkOTQyZmMxMWI1NDc1NWMzYmQ1NjZlYjhhN2ZjZGIzMDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6VY2/V/BfWHBCO8QU/AnrU5be4y Wp48SmP4FOR595NDh/cKx9cgq+o0Vd686CGUYCBMiQ/H/B51Uibd64gkZ8kCsGvb E/bTs0/ayVi2ZogbDYXMRo9Yg+z3l3g3u9xNCUUuWrxx1QVlaaXFv9TWbHCfqEcO ZVRBEvXlf6pUX7fQczKTcouqNBYuNPseUUxWD8Shs46ecVNh3+zEW5VVd7y0yQh6 e7+EBlmTuGMDSX7cZX/ElkmEa88cqfTulsYKESIrQv/loE2pZeYyuBHZZ9K8DhdE pbZfdQcJ7bgX+MtO5ZddK6EHNBR5+6gkC8o3sOPgJL7K5Me1q0LJvztUjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCATt9lC/BG1R1XDvVZuuKf82zAXMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJF9eExK CrqnYq3YG8THLR+Sq+8h72458e0fsy0hr1kGfu0fpsT5Kwel10Y4zOGnyEjuBMqs I2HA8ZFn+UdHS2c0Q8oLakgf8lIX2JtxxrgbkLOxNmsYSsvILdjAJoUXWToCxZL6 kT3mbgQD1SqpLJESug/3jzrlsWi7yNNTXhw/IVHt5XhCsORbrOCaOF4H4Y0k7x4a eoH7xu7Krx3FmaDPaqHpw5AyK1MW0xtfGmC+jUvx7P363V7q1hAyjvC52n0jUFUo cxhGuBgr86umVvYaRtXgJhZ6jaFzLTC5eXfcmE92kBjx3iqmPwKR4RGldxAOtQ77 lU8KmEOHIZpL0g== -----END CERTIFICATE-----Generated at Thu Mar 26 06:53:39 2026 by rpki-client