$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: Jcalwppk6xT+OvVvI3TE0smaPrEWgV13c4FEs5vfFp8= Subject key identifier: 40:C4:BE:3E:24:8D:2D:73:6D:A2:6D:8D:28:15:1A:85:5D:66:71:6B Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019E1CB4D521ABBB0D6223F894149C31AE78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 1935 Signing time: Tue 12 May 2026 15:01:13 +0000 Manifest this update: Tue 12 May 2026 15:01:13 +0000 Manifest next update: Wed 13 May 2026 15:01:13 +0000 Files and hashes: 1: 1-V84oobFXIlKZ3Dls5nBGbkUta8.roa (hash: Y6oUsmKL79cneGenSJvYXaOULigPUniMqNXXoxtkoQA=) 2: 1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa (hash: laO24ACjIVLZyTAa5hofsg3cM+gHDkRC5wH6+r7XTlw=) 3: 2W2MCcTiOGzKibb9IktRwoV7t7w.roa (hash: 9hzbcjFutrF6fmKr1I+WiZpYh5ANj2nzThUtT9+uWLQ=) 4: 6ZzDjxgNYdOCdszBPZyujZWdIQU.roa (hash: 9UI3twwOpxPDECF8g7XXCOiJN8BzbbKSShDSCVBs94A=) 5: D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa (hash: 3brIsivCbhFviJ62ZCvrk45wXBqMSMZrnrXYGWBpVqI=) 6: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: JBhJjxjsYeUcLbG5nw5M665bMAhovIaPBfGaU4V+n8I=) 7: LsDa6KTrverRW5gJHEDYsnUiWaA.roa (hash: kyRRzPpmtC/6cc1RLLOBnwLx4RCN3jXZIWgVX+OjOJY=) 8: OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa (hash: oyzTksz2QKSnafMS1kmCzYf1d4YWDMBQktGYceuURLI=) 9: XDU9UWSQ0e6UimvguU5iuXs0EOA.roa (hash: SCFRxNca9zUGzw86U8+KWNOZievAR3LE2W5GLXuSUcY=) 10: dfGhr_QpC7PXnSoC1F37CSecH5I.roa (hash: YCVMunTjeNWDVxvbJDfGX3ZIWgOmoISgA4k5wcOQnHk=) 11: hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa (hash: b4EBco8NgahSA81khEE6SumwN6LoQGLW/RXHQz3fVtU=) 12: hc27-Du5AK-QSwEPPlUOrqZiXBk.asa (hash: NZwly8DKYsKefjnwC5ZEjbZE7IIJQUE4bCO5RCZXMKA=) 13: jl7QDhibiq_JOYv1vjDrL8Omz9o.roa (hash: JDmYOxWLUYSslhLzawMmaYVHDSzzt7UH8K2KDqbbLwo=) 14: rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa (hash: 6M2XOWFy53R21mcWbAHRpsAh3NRSx51bXy4kBppg9Z0=) 15: uC3zCk-SIOTP3v8kN8AvkOioJlk.roa (hash: t6NH48ochz8I1c27bkPFIEdPItgxlKo5FppJqJnPRh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:b4:d5:21:ab:bb:0d:62:23:f8:94:14:9c:31:ae:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: May 12 15:01:13 2026 GMT Not After : May 13 15:01:13 2026 GMT Subject: CN=40c4be3e248d2d736da26d8d28151a855d66716b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:79:fc:a0:55:19:82:a9:78:17:70:d6:dc:e7: 62:38:f4:68:18:f8:ef:dd:19:f7:84:a7:e5:5a:99: f0:53:d6:0d:41:5d:e8:27:69:8b:65:5b:f3:c9:1a: e3:ce:38:8f:fd:c1:bc:4a:61:43:88:d1:d3:ac:e5: 3e:54:cd:e3:32:7d:d5:4c:63:bc:8f:f3:e3:dc:9d: c8:ee:e8:ea:15:e8:b4:7f:57:b0:ca:60:4d:a1:83: fd:7b:10:d5:fd:e7:01:0d:ce:af:e0:89:94:47:a3: f0:b8:fa:bb:36:9c:22:41:25:07:7e:b2:d7:c7:af: ca:6d:ea:32:7d:70:c9:41:4e:47:f4:9b:f0:3c:6c: e5:3b:d1:85:9b:f0:a4:b2:ca:f6:73:e6:1f:4b:dd: 05:8d:47:df:64:1a:e3:d6:0f:63:26:88:f3:4a:88: 90:76:9c:dc:04:a0:91:d6:be:df:8c:64:ba:8c:ac: 5d:fd:96:13:19:b8:2a:1b:65:41:be:14:0b:e9:69: 14:09:98:3e:16:8d:e2:86:02:99:0c:6e:1d:fb:19: d8:52:cf:a1:0c:b6:27:e4:69:72:70:36:be:a7:6b: ed:71:89:c7:94:ff:15:ee:17:28:e4:c3:c0:e5:f4: 40:01:0f:88:5e:44:d1:8e:5e:5f:34:a5:12:e6:83: 2f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C4:BE:3E:24:8D:2D:73:6D:A2:6D:8D:28:15:1A:85:5D:66:71:6B X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:65:10:91:4a:e0:77:8c:5f:6a:e1:53:d4:d5:17:09:13:cf: e0:9d:99:5d:f2:a2:4e:d1:97:ce:02:76:43:33:6e:c0:c2:c3: eb:ca:9e:57:01:a7:0d:f0:27:e7:6f:06:63:d1:0f:b8:5a:1b: 82:e2:44:27:5d:ac:81:b7:a0:9f:34:f5:ca:2a:99:4b:59:d7: 85:7c:e9:6a:a6:a0:39:56:59:fe:76:da:50:a5:65:b3:a3:4a: 7a:7f:c0:48:a0:c8:e6:6f:c9:3a:60:24:8f:ad:80:4b:62:2c: 26:92:5b:9e:f8:f0:47:ad:d5:5f:b3:1c:17:a6:67:00:5f:01: 80:2d:84:07:ff:1e:a5:74:a2:29:37:27:02:b7:62:e0:75:3d: c7:7b:a8:9e:44:09:0e:65:3f:77:27:ed:94:01:93:80:47:fd: c2:a8:cf:41:26:ae:88:d1:a4:88:02:ca:60:9f:6a:43:40:53: c9:9e:46:69:fd:88:e1:09:f5:33:29:60:c2:b2:ef:f4:2d:51: 16:88:50:f5:04:f7:c7:1f:da:af:ac:5f:f2:ca:44:84:3f:7e: 8e:61:d0:3c:a0:01:65:bd:fc:c6:1a:8d:17:e2:be:57:bb:00: 49:15:81:73:b5:db:fe:d7:38:87:1b:f8:60:79:bf:f6:bb:ae: d7:d1:e8:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ctNUhq7sNYiP4lBScMa54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwNTEyMTUwMTEzWhcNMjYwNTEzMTUwMTEzWjAzMTEwLwYDVQQD Eyg0MGM0YmUzZTI0OGQyZDczNmRhMjZkOGQyODE1MWE4NTVkNjY3MTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xn8oFUZgql4F3DW3OdiOPRoGPjv 3Rn3hKflWpnwU9YNQV3oJ2mLZVvzyRrjzjiP/cG8SmFDiNHTrOU+VM3jMn3VTGO8 j/Pj3J3I7ujqFei0f1ewymBNoYP9exDV/ecBDc6v4ImUR6PwuPq7NpwiQSUHfrLX x6/KbeoyfXDJQU5H9JvwPGzlO9GFm/Ckssr2c+YfS90FjUffZBrj1g9jJojzSoiQ dpzcBKCR1r7fjGS6jKxd/ZYTGbgqG2VBvhQL6WkUCZg+Fo3ihgKZDG4d+xnYUs+h DLYn5GlycDa+p2vtcYnHlP8V7hco5MPA5fRAAQ+IXkTRjl5fNKUS5oMvBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDEvj4kjS1zbaJtjSgVGoVdZnFrMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2UQkUrg d4xfauFT1NUXCRPP4J2ZXfKiTtGXzgJ2QzNuwMLD68qeVwGnDfAn528GY9EPuFob guJEJ12sgbegnzT1yiqZS1nXhXzpaqagOVZZ/nbaUKVls6NKen/ASKDI5m/JOmAk j62AS2IsJpJbnvjwR63VX7McF6ZnAF8BgC2EB/8epXSiKTcnArdi4HU9x3uonkQJ DmU/dyftlAGTgEf9wqjPQSauiNGkiALKYJ9qQ0BTyZ5Gaf2I4Qn1MylgwrLv9C1R FohQ9QT3xx/ar6xf8spEhD9+jmHQPKABZb38xhqNF+K+V7sASRWBc7Xb/tc4hxv4 YHm/9ruu19HohQ== -----END CERTIFICATE-----Generated at Wed May 13 01:42:44 2026 by rpki-client