$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: KRySRNCzLCIRMesOcJ89XMRicSj0tHQ41YXI3Ny2p4g= Subject key identifier: 51:BB:50:0D:8D:70:26:E6:0E:53:A5:BB:2A:14:29:D8:04:93:77:16 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 01A0D2009B05ACAB0BCA603DAB62F9CB03E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 1AA3 Signing time: Thu 24 Sep 2026 06:00:50 +0000 Manifest this update: Thu 24 Sep 2026 06:00:50 +0000 Manifest next update: Fri 25 Sep 2026 06:00:50 +0000 Files and hashes: 1: 1-V84oobFXIlKZ3Dls5nBGbkUta8.roa (hash: Y6oUsmKL79cneGenSJvYXaOULigPUniMqNXXoxtkoQA=) 2: 1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa (hash: laO24ACjIVLZyTAa5hofsg3cM+gHDkRC5wH6+r7XTlw=) 3: 20xMr4UkTc7mDjSXUAQ2OIVEdaA.roa (hash: lYcXkOJMvyy3d7VAmjTtLuavcH5/RrOQ9RjLW9dvSVc=) 4: 6ZzDjxgNYdOCdszBPZyujZWdIQU.roa (hash: 9UI3twwOpxPDECF8g7XXCOiJN8BzbbKSShDSCVBs94A=) 5: 97B4Sc_XubtL_lW7OfZysQqsOs4.roa (hash: s6SnzQICC+87j3qQ2YxLoHSbPtUJDNl+2RyFPIbB7qI=) 6: D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa (hash: 3brIsivCbhFviJ62ZCvrk45wXBqMSMZrnrXYGWBpVqI=) 7: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: BafTAEk975Ab83FdLZBVugY8iC0YQU4h0IwJae+HXJQ=) 8: KW3ruKOhj6JKZMq89hnmHfD2ogg.roa (hash: 0KDaehG1BpLDekFmNyw0N8o8oxyUdxrGz4gLnB27NL0=) 9: LsDa6KTrverRW5gJHEDYsnUiWaA.roa (hash: kyRRzPpmtC/6cc1RLLOBnwLx4RCN3jXZIWgVX+OjOJY=) 10: Muj2FNE8Gldd8yzrKLebS3hsgG8.roa (hash: Rd6lCWkMq66do726k8up+6ZsrZZs2AV3lPweaatdunQ=) 11: OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa (hash: oyzTksz2QKSnafMS1kmCzYf1d4YWDMBQktGYceuURLI=) 12: UE5lqxub4HZyPzOaFIeY1MynbOM.roa (hash: G/5g2S7073n0P8fSJcz9JyRKGI6p6NHbjV1Y/gWxHho=) 13: XDU9UWSQ0e6UimvguU5iuXs0EOA.roa (hash: SCFRxNca9zUGzw86U8+KWNOZievAR3LE2W5GLXuSUcY=) 14: _qJbebTlrOvrXIQLM28_mZtacRY.roa (hash: BqUn6UdSWnNCo8IEu4itHIeonT1vIDue6NclshrDycA=) 15: hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa (hash: b4EBco8NgahSA81khEE6SumwN6LoQGLW/RXHQz3fVtU=) 16: hc27-Du5AK-QSwEPPlUOrqZiXBk.asa (hash: NZwly8DKYsKefjnwC5ZEjbZE7IIJQUE4bCO5RCZXMKA=) 17: kF__trkxnSoai5YPHEuion9F5-M.roa (hash: tWmn9E+rdr18LE8axfsyGzfbkAEBv9XZf3xK1lkaYrs=) 18: rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa (hash: 6M2XOWFy53R21mcWbAHRpsAh3NRSx51bXy4kBppg9Z0=) 19: uC3zCk-SIOTP3v8kN8AvkOioJlk.roa (hash: t6NH48ochz8I1c27bkPFIEdPItgxlKo5FppJqJnPRh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:00:9b:05:ac:ab:0b:ca:60:3d:ab:62:f9:cb:03:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Sep 24 06:00:50 2026 GMT Not After : Sep 25 06:00:50 2026 GMT Subject: CN=51bb500d8d7026e60e53a5bb2a1429d804937716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:c4:00:63:d0:2a:5e:30:a2:04:27:66:f5: f7:42:24:0f:0f:c3:57:b9:8c:6c:96:0f:f8:15:00: 6f:94:68:1e:60:01:29:8f:91:67:5e:91:55:6d:b8: d2:df:b5:5a:f8:2a:48:01:4f:dd:1a:dc:19:89:18: e2:41:a0:6a:34:94:14:85:3e:58:ed:5f:57:48:9a: b6:a7:0e:9d:ba:bf:e8:c3:ec:31:e1:66:e1:28:49: 58:a0:7d:08:4c:51:63:c3:99:b8:a7:af:0f:00:df: de:ec:c3:7f:0e:a1:ec:57:b0:0c:95:cc:8f:5a:df: c5:5b:26:d4:c5:45:14:08:16:db:4b:fb:b5:5a:d8: da:32:0a:8a:b6:96:53:2f:81:f7:be:07:50:01:72: d0:be:e5:bb:43:5d:e5:97:45:e5:82:22:3b:66:3b: f7:d0:28:14:ab:ad:d1:20:5d:a4:09:63:d3:94:5e: bf:c3:1a:36:02:6c:06:c6:04:49:c2:3a:3d:dd:f3: 51:a9:1c:43:b3:9d:da:6c:dd:2e:7d:99:66:a5:90: d5:a1:dc:45:5d:4a:09:ae:f6:e9:18:aa:e2:1e:11: 20:46:15:aa:7b:06:ad:22:b0:d3:73:02:3f:db:b1: 72:7d:32:14:64:dc:1d:6e:53:94:fd:b0:2e:00:84: 23:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BB:50:0D:8D:70:26:E6:0E:53:A5:BB:2A:14:29:D8:04:93:77:16 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:65:24:e4:8f:bc:c1:65:d3:a5:89:c3:16:f0:7c:ec:fc:4d: d7:51:5d:87:22:83:65:91:09:36:bf:ae:c3:da:ec:b4:dc:df: 17:60:de:ac:57:8c:f4:45:c1:65:f2:cc:4a:0e:3e:5e:9a:9d: 47:fb:32:47:fe:67:a1:6a:b9:bb:39:86:73:4f:01:80:b3:b0: 78:8b:68:53:03:77:30:f7:d7:f8:67:23:17:ee:a0:2a:2a:73: 0e:1b:a3:86:7d:f8:47:bc:44:26:40:f6:b9:03:91:f4:92:09: a7:b9:66:29:69:b6:a3:54:fd:a4:9c:8c:5c:ea:12:c0:91:83: 0e:93:5f:67:b6:01:56:7a:4f:f1:33:e7:af:78:d7:97:8c:71: 3f:bb:5b:a0:39:58:0c:f0:8a:b4:84:58:f2:e2:3f:a4:32:ae: 4d:83:ea:36:6e:92:85:b8:9a:45:23:4e:7a:9c:d8:5f:51:04: a6:f3:56:89:7f:0d:89:70:b4:77:eb:ec:53:23:c2:1b:33:e1: fd:24:a9:dc:f6:9d:fa:7f:47:73:10:1e:fc:79:39:2d:74:9f: 7a:99:8c:78:cc:88:0a:e9:b3:97:66:54:a2:9d:22:df:67:08: 0e:d6:a0:56:65:87:0b:47:38:e5:b5:29:2b:27:f7:4c:ae:62: 32:6f:0c:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDSAJsFrKsLymA9q2L5ywPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwOTI0MDYwMDUwWhcNMjYwOTI1MDYwMDUwWjAzMTEwLwYDVQQD Eyg1MWJiNTAwZDhkNzAyNmU2MGU1M2E1YmIyYTE0MjlkODA0OTM3NzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAnEAGPQKl4wogQnZvX3QiQPD8NX uYxslg/4FQBvlGgeYAEpj5FnXpFVbbjS37Va+CpIAU/dGtwZiRjiQaBqNJQUhT5Y 7V9XSJq2pw6dur/ow+wx4WbhKElYoH0ITFFjw5m4p68PAN/e7MN/DqHsV7AMlcyP Wt/FWybUxUUUCBbbS/u1WtjaMgqKtpZTL4H3vgdQAXLQvuW7Q13ll0XlgiI7Zjv3 0CgUq63RIF2kCWPTlF6/wxo2AmwGxgRJwjo93fNRqRxDs53abN0ufZlmpZDVodxF XUoJrvbpGKriHhEgRhWqewatIrDTcwI/27FyfTIUZNwdblOU/bAuAIQjWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFG7UA2NcCbmDlOluyoUKdgEk3cWMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemUk5I+8 wWXTpYnDFvB87PxN11FdhyKDZZEJNr+uw9rstNzfF2DerFeM9EXBZfLMSg4+Xpqd R/syR/5noWq5uzmGc08BgLOweItoUwN3MPfX+GcjF+6gKipzDhujhn34R7xEJkD2 uQOR9JIJp7lmKWm2o1T9pJyMXOoSwJGDDpNfZ7YBVnpP8TPnr3jXl4xxP7tboDlY DPCKtIRY8uI/pDKuTYPqNm6ShbiaRSNOepzYX1EEpvNWiX8NiXC0d+vsUyPCGzPh /SSp3Pad+n9HcxAe/Hk5LXSfepmMeMyICumzl2ZUop0i32cIDtagVmWHC0c45bUp Kyf3TK5iMm8MHA== -----END CERTIFICATE-----Generated at Thu Sep 24 10:24:03 2026 by rpki-client