$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: J/EKdBDo2DFYKnodbjjymk6+PhGg8QM+U4SGiURu/Qs= Subject key identifier: AB:C0:8F:CA:E9:07:C1:ED:6B:A4:2D:F8:8A:B0:18:21:16:15:BD:1E Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019D26601E96D54C5308EF729930C6774E4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 18B3 Signing time: Wed 25 Mar 2026 19:02:06 +0000 Manifest this update: Wed 25 Mar 2026 19:02:06 +0000 Manifest next update: Thu 26 Mar 2026 19:02:06 +0000 Files and hashes: 1: 1-V84oobFXIlKZ3Dls5nBGbkUta8.roa (hash: Y6oUsmKL79cneGenSJvYXaOULigPUniMqNXXoxtkoQA=) 2: 1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa (hash: laO24ACjIVLZyTAa5hofsg3cM+gHDkRC5wH6+r7XTlw=) 3: 1WdFXv1Jg5APhjnipHcc4mLeqvg.roa (hash: IZKCSGM3fACKg/PrPaA+UZQwdKhIoEOq7r5L+j4pjTg=) 4: 2W2MCcTiOGzKibb9IktRwoV7t7w.roa (hash: 9hzbcjFutrF6fmKr1I+WiZpYh5ANj2nzThUtT9+uWLQ=) 5: 6ZzDjxgNYdOCdszBPZyujZWdIQU.roa (hash: 9UI3twwOpxPDECF8g7XXCOiJN8BzbbKSShDSCVBs94A=) 6: 8rKgBAJA8MJvfJn7wlRXaLSOltg.roa (hash: vKik0l+/uPuH0Z6X6US0ts7buVtMAj4tzTB6bbsDKWw=) 7: D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa (hash: 3brIsivCbhFviJ62ZCvrk45wXBqMSMZrnrXYGWBpVqI=) 8: Eq8JCzY_2xgrWNLuTFpKz8LyYYI.roa (hash: /lqPOANyW17qinqhiK8qfXDXg0mEzP1UjKBeGgxEB10=) 9: FMdvNunKljn8ofGnpjf1LZVHjq8.roa (hash: 8mvnTEy6JbB2XqN3FH0fr8TfsaVsZ+l1QCmyb/WMQRQ=) 10: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: JkWZrTyz9HBSw48t9tj16JKJ8NnRce6vTSyDsv3ITAg=) 11: LsDa6KTrverRW5gJHEDYsnUiWaA.roa (hash: kyRRzPpmtC/6cc1RLLOBnwLx4RCN3jXZIWgVX+OjOJY=) 12: OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa (hash: oyzTksz2QKSnafMS1kmCzYf1d4YWDMBQktGYceuURLI=) 13: XDU9UWSQ0e6UimvguU5iuXs0EOA.roa (hash: SCFRxNca9zUGzw86U8+KWNOZievAR3LE2W5GLXuSUcY=) 14: hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa (hash: b4EBco8NgahSA81khEE6SumwN6LoQGLW/RXHQz3fVtU=) 15: hc27-Du5AK-QSwEPPlUOrqZiXBk.asa (hash: NZwly8DKYsKefjnwC5ZEjbZE7IIJQUE4bCO5RCZXMKA=) 16: jl7QDhibiq_JOYv1vjDrL8Omz9o.roa (hash: JDmYOxWLUYSslhLzawMmaYVHDSzzt7UH8K2KDqbbLwo=) 17: rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa (hash: 6M2XOWFy53R21mcWbAHRpsAh3NRSx51bXy4kBppg9Z0=) 18: sY1Z0d4UP1k0MtMv6mu9PscYSIo.roa (hash: OEBAEu1SEBwrWfciVaKHy8l9XFDNXjoEFOCceQeIsnI=) 19: uC3zCk-SIOTP3v8kN8AvkOioJlk.roa (hash: t6NH48ochz8I1c27bkPFIEdPItgxlKo5FppJqJnPRh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:60:1e:96:d5:4c:53:08:ef:72:99:30:c6:77:4e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Mar 25 19:02:06 2026 GMT Not After : Mar 26 19:02:06 2026 GMT Subject: CN=abc08fcae907c1ed6ba42df88ab018211615bd1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:75:f3:87:86:cc:71:8b:e4:f5:0e:6d:81: cf:fc:ba:9d:a7:2d:aa:a4:dc:cc:9e:fb:e9:15:4a: 98:fc:69:ba:bb:61:76:8c:a4:34:ec:cf:9f:e9:b3: 9a:47:ab:3c:a4:da:43:98:15:48:a0:87:2b:94:a1: e1:c7:4e:a4:65:c8:5f:30:45:de:0c:29:0f:88:ec: e8:ba:1b:38:05:d7:b4:bb:61:35:f6:bc:6e:3f:9e: 2e:f5:e6:2c:a9:e2:e2:34:af:43:6d:a3:d8:c4:fe: ee:1c:c7:f3:bf:26:f4:f7:07:d1:fd:25:2d:97:a2: ac:e4:fc:4c:fb:d8:1d:98:11:76:72:68:a4:c6:41: e9:13:8d:85:c0:46:2c:aa:5d:9d:e5:b3:66:f0:a2: bd:2c:72:6b:37:58:a7:3e:d7:ec:6b:01:78:b7:ee: f9:ac:de:c3:8d:57:f6:e7:c4:36:f0:72:6b:5a:6a: 34:8f:82:32:53:9f:5e:df:a9:ee:a0:9f:29:7e:b9: 48:30:67:db:96:ee:38:80:b0:64:ee:84:69:6f:81: a9:10:eb:86:94:57:72:33:9e:fd:e6:2f:2b:33:19: 92:32:8b:b3:05:f5:31:86:e8:a6:80:74:80:e2:01: 7c:fd:21:ef:cc:81:34:8b:5f:c1:20:32:45:75:ef: 96:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C0:8F:CA:E9:07:C1:ED:6B:A4:2D:F8:8A:B0:18:21:16:15:BD:1E X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:63:3b:fe:a5:df:31:89:ee:27:51:4b:bb:27:bd:15:2a:92: 4c:0e:ab:c3:1c:6e:19:40:d9:6e:df:b6:b7:f1:c3:72:32:88: 78:15:02:68:ed:e8:7e:2a:ba:79:9e:7b:39:25:c6:9a:a5:03: 5b:6d:f3:bb:40:1a:89:77:e9:f4:d7:d3:61:76:e3:e9:95:ac: 77:f7:d0:86:ce:0f:26:88:17:5e:35:36:94:6b:64:4a:9c:c8: 9f:13:1a:01:5f:a7:76:9a:1b:90:6d:cf:24:01:38:4d:7b:49: 87:4a:97:99:7d:08:d5:50:e1:ea:1a:e6:12:b8:42:2f:72:56: 17:aa:8a:1a:0e:cf:75:35:e7:8b:6b:bf:9d:bc:1e:25:ab:20: bb:24:4f:86:23:ad:54:83:67:84:a3:a4:b1:87:76:97:c6:f2: b3:99:7a:5b:78:e4:cc:56:2a:48:6e:70:d7:84:6f:e5:84:fa: e4:41:de:96:85:73:f3:f2:22:f2:14:24:87:65:cc:8f:bd:69: f4:35:6c:5b:ba:fe:ba:fd:ff:7c:17:e4:4f:d9:08:c4:d9:95: 8a:3c:f7:f3:d7:d1:ff:e6:17:79:15:b8:bf:e0:d4:60:04:d2: 94:21:45:26:64:fc:ba:a0:aa:55:d4:08:fe:42:87:ab:55:83: 25:1f:5a:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mYB6W1UxTCO9ymTDGd05OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMzI1MTkwMjA2WhcNMjYwMzI2MTkwMjA2WjAzMTEwLwYDVQQD EyhhYmMwOGZjYWU5MDdjMWVkNmJhNDJkZjg4YWIwMTgyMTE2MTViZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgJ184eGzHGL5PUObYHP/Lqdpy2q pNzMnvvpFUqY/Gm6u2F2jKQ07M+f6bOaR6s8pNpDmBVIoIcrlKHhx06kZchfMEXe DCkPiOzouhs4Bde0u2E19rxuP54u9eYsqeLiNK9DbaPYxP7uHMfzvyb09wfR/SUt l6Ks5PxM+9gdmBF2cmikxkHpE42FwEYsql2d5bNm8KK9LHJrN1inPtfsawF4t+75 rN7DjVf258Q28HJrWmo0j4IyU59e36nuoJ8pfrlIMGfblu44gLBk7oRpb4GpEOuG lFdyM5795i8rMxmSMouzBfUxhuimgHSA4gF8/SHvzIE0i1/BIDJFde+W5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvAj8rpB8Hta6Qt+IqwGCEWFb0eMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2M7/qXf MYnuJ1FLuye9FSqSTA6rwxxuGUDZbt+2t/HDcjKIeBUCaO3ofiq6eZ57OSXGmqUD W23zu0AaiXfp9NfTYXbj6ZWsd/fQhs4PJogXXjU2lGtkSpzInxMaAV+ndpobkG3P JAE4TXtJh0qXmX0I1VDh6hrmErhCL3JWF6qKGg7PdTXni2u/nbweJasguyRPhiOt VINnhKOksYd2l8bys5l6W3jkzFYqSG5w14Rv5YT65EHeloVz8/Ii8hQkh2XMj71p 9DVsW7r+uv3/fBfkT9kIxNmVijz389fR/+YXeRW4v+DUYATSlCFFJmT8uqCqVdQI /kKHq1WDJR9aKw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:20:14 2026 by rpki-client