$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: NffQFYt5USvNXdIN/MuyAx0CbXef7wi/vKmvhwJkME4= Subject key identifier: 01:54:B2:29:31:2C:BD:08:37:14:62:8F:A6:F6:5E:7F:51:1C:AF:52 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019F9090E26BA8DAEC91B2E8D90A51736D79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 19FB Signing time: Thu 23 Jul 2026 20:00:41 +0000 Manifest this update: Thu 23 Jul 2026 20:00:41 +0000 Manifest next update: Fri 24 Jul 2026 20:00:41 +0000 Files and hashes: 1: 1-V84oobFXIlKZ3Dls5nBGbkUta8.roa (hash: Y6oUsmKL79cneGenSJvYXaOULigPUniMqNXXoxtkoQA=) 2: 1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa (hash: laO24ACjIVLZyTAa5hofsg3cM+gHDkRC5wH6+r7XTlw=) 3: 6ZzDjxgNYdOCdszBPZyujZWdIQU.roa (hash: 9UI3twwOpxPDECF8g7XXCOiJN8BzbbKSShDSCVBs94A=) 4: D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa (hash: 3brIsivCbhFviJ62ZCvrk45wXBqMSMZrnrXYGWBpVqI=) 5: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: LRt9XCrdvHtgfdF9y09u9KGaCeQ2dQZas4aJPzOByIg=) 6: KW3ruKOhj6JKZMq89hnmHfD2ogg.roa (hash: 0KDaehG1BpLDekFmNyw0N8o8oxyUdxrGz4gLnB27NL0=) 7: LsDa6KTrverRW5gJHEDYsnUiWaA.roa (hash: kyRRzPpmtC/6cc1RLLOBnwLx4RCN3jXZIWgVX+OjOJY=) 8: Muj2FNE8Gldd8yzrKLebS3hsgG8.roa (hash: Rd6lCWkMq66do726k8up+6ZsrZZs2AV3lPweaatdunQ=) 9: OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa (hash: oyzTksz2QKSnafMS1kmCzYf1d4YWDMBQktGYceuURLI=) 10: UE5lqxub4HZyPzOaFIeY1MynbOM.roa (hash: G/5g2S7073n0P8fSJcz9JyRKGI6p6NHbjV1Y/gWxHho=) 11: XDU9UWSQ0e6UimvguU5iuXs0EOA.roa (hash: SCFRxNca9zUGzw86U8+KWNOZievAR3LE2W5GLXuSUcY=) 12: _qJbebTlrOvrXIQLM28_mZtacRY.roa (hash: BqUn6UdSWnNCo8IEu4itHIeonT1vIDue6NclshrDycA=) 13: alGSwZHSSCpAccCBagcTq9bqwyw.roa (hash: fzVkyZSqjoQHUDJLYXUGjJT2SiJfOcRf//sEEMSWvpA=) 14: hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa (hash: b4EBco8NgahSA81khEE6SumwN6LoQGLW/RXHQz3fVtU=) 15: hc27-Du5AK-QSwEPPlUOrqZiXBk.asa (hash: NZwly8DKYsKefjnwC5ZEjbZE7IIJQUE4bCO5RCZXMKA=) 16: kF__trkxnSoai5YPHEuion9F5-M.roa (hash: tWmn9E+rdr18LE8axfsyGzfbkAEBv9XZf3xK1lkaYrs=) 17: rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa (hash: 6M2XOWFy53R21mcWbAHRpsAh3NRSx51bXy4kBppg9Z0=) 18: uC3zCk-SIOTP3v8kN8AvkOioJlk.roa (hash: t6NH48ochz8I1c27bkPFIEdPItgxlKo5FppJqJnPRh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:90:e2:6b:a8:da:ec:91:b2:e8:d9:0a:51:73:6d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jul 23 20:00:41 2026 GMT Not After : Jul 24 20:00:41 2026 GMT Subject: CN=0154b229312cbd083714628fa6f65e7f511caf52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:02:d6:b3:fb:2e:2a:55:cb:44:97:47:aa:62: 5b:fe:26:24:e2:c0:c1:64:fb:7c:b5:d4:d5:28:43: c3:e2:4c:d9:a2:d5:8f:27:85:55:f3:de:d1:94:d5: 10:3d:3e:d4:75:5e:7f:05:fe:75:25:bc:b2:77:35: b7:ac:c5:aa:e1:14:12:11:53:bc:5a:98:e9:25:ae: e8:00:14:6b:fd:ec:0f:0a:1c:ce:30:32:78:90:29: 7f:1e:32:24:b3:9a:47:77:2a:5a:89:ce:31:6b:51: f3:25:22:68:29:21:fb:93:89:e8:71:bc:16:a5:ff: d3:40:c0:bd:ab:06:a8:67:0d:14:81:8e:1d:1b:24: 11:7e:ae:97:53:8a:86:a9:5f:cb:c4:8b:b2:fc:ba: 88:af:64:cf:e3:7e:e4:d5:06:25:50:94:18:cd:a1: bc:ba:d3:77:e5:ce:c0:d6:1b:53:85:c5:39:f2:19: ad:b2:65:fb:69:a8:2c:b2:a1:72:17:4d:8c:fc:00: 0c:b8:9e:fc:a8:58:d2:5f:db:ed:08:c9:4c:cc:ab: 2a:d1:00:9c:f5:c8:60:4d:6d:11:9b:e0:9b:fb:a4: 2c:64:be:ad:a0:27:3c:cb:e0:fa:5f:42:22:a0:09: 92:b1:59:43:31:43:eb:91:08:bf:f1:55:b5:60:fe: ae:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:54:B2:29:31:2C:BD:08:37:14:62:8F:A6:F6:5E:7F:51:1C:AF:52 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:5c:10:b1:82:d1:51:00:d4:70:f5:a8:7d:df:29:24:1a:59: 42:e8:12:2a:fe:5e:02:87:00:8d:f2:27:f4:84:e7:e7:ca:ab: 4b:ad:18:55:f8:41:f0:be:8b:f8:d8:72:55:8a:74:53:a9:64: d9:bf:df:16:d2:85:15:7b:34:75:71:80:90:6f:bb:ec:a8:b7: 76:2a:af:d7:fe:e2:aa:df:c8:10:b6:07:89:3a:97:8a:37:f7: 3c:eb:b3:7c:b3:da:38:9a:16:a0:fa:59:8e:33:11:0d:c1:4c: f8:d8:76:d7:40:57:4b:ae:e3:bd:61:a1:ed:7f:ca:11:8d:e7: 32:76:35:ec:40:3f:57:f5:52:62:90:19:d4:aa:f5:67:c8:43: 91:82:59:f9:b7:4c:d4:ea:a6:2b:1d:eb:5c:7b:d2:55:9d:66: a8:64:2e:eb:61:47:81:d9:95:65:39:45:5b:47:11:32:14:9a: 4c:38:7e:98:b9:10:9c:3b:f6:3d:21:4f:9d:e8:3f:d0:17:14: 34:c0:42:a8:38:b6:f9:93:aa:64:59:ae:74:23:eb:fb:e6:90: a5:cc:dc:4a:d9:74:c3:2d:79:90:7f:be:97:81:1b:65:37:fd: b9:f8:d9:c9:39:d4:0e:d2:49:3e:08:39:58:3d:b1:2a:af:f1: 36:8e:c5:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QkOJrqNrskbLo2QpRc215MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwNzIzMjAwMDQxWhcNMjYwNzI0MjAwMDQxWjAzMTEwLwYDVQQD EygwMTU0YjIyOTMxMmNiZDA4MzcxNDYyOGZhNmY2NWU3ZjUxMWNhZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgLWs/suKlXLRJdHqmJb/iYk4sDB ZPt8tdTVKEPD4kzZotWPJ4VV897RlNUQPT7UdV5/Bf51JbyydzW3rMWq4RQSEVO8 WpjpJa7oABRr/ewPChzOMDJ4kCl/HjIks5pHdypaic4xa1HzJSJoKSH7k4nocbwW pf/TQMC9qwaoZw0UgY4dGyQRfq6XU4qGqV/LxIuy/LqIr2TP437k1QYlUJQYzaG8 utN35c7A1htThcU58hmtsmX7aagssqFyF02M/AAMuJ78qFjSX9vtCMlMzKsq0QCc 9chgTW0Rm+Cb+6QsZL6toCc8y+D6X0IioAmSsVlDMUPrkQi/8VW1YP6uLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFUsikxLL0INxRij6b2Xn9RHK9SMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFwQsYLR UQDUcPWofd8pJBpZQugSKv5eAocAjfIn9ITn58qrS60YVfhB8L6L+NhyVYp0U6lk 2b/fFtKFFXs0dXGAkG+77Ki3diqv1/7iqt/IELYHiTqXijf3POuzfLPaOJoWoPpZ jjMRDcFM+Nh210BXS67jvWGh7X/KEY3nMnY17EA/V/VSYpAZ1Kr1Z8hDkYJZ+bdM 1OqmKx3rXHvSVZ1mqGQu62FHgdmVZTlFW0cRMhSaTDh+mLkQnDv2PSFPneg/0BcU NMBCqDi2+ZOqZFmudCPr++aQpczcStl0wy15kH++l4EbZTf9ufjZyTnUDtJJPgg5 WD2xKq/xNo7FGg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:36:01 2026 by rpki-client