$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: fF5Q8vkwmOyItoLDUfSy/J4erUhZVowK1u4doJ3yA9g= Subject key identifier: 9C:67:32:86:20:76:30:31:41:CA:7E:9B:88:40:FF:54:0C:87:48:BE Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 01A1DA93F9B90690E71A2C9E6FA38C15FC6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 1B2C Signing time: Sat 14 Nov 2026 15:01:32 +0000 Manifest this update: Sat 14 Nov 2026 15:01:32 +0000 Manifest next update: Sun 15 Nov 2026 15:01:32 +0000 Files and hashes: 1: 1-V84oobFXIlKZ3Dls5nBGbkUta8.roa (hash: Y6oUsmKL79cneGenSJvYXaOULigPUniMqNXXoxtkoQA=) 2: 1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa (hash: laO24ACjIVLZyTAa5hofsg3cM+gHDkRC5wH6+r7XTlw=) 3: 20xMr4UkTc7mDjSXUAQ2OIVEdaA.roa (hash: lYcXkOJMvyy3d7VAmjTtLuavcH5/RrOQ9RjLW9dvSVc=) 4: 6ZzDjxgNYdOCdszBPZyujZWdIQU.roa (hash: 9UI3twwOpxPDECF8g7XXCOiJN8BzbbKSShDSCVBs94A=) 5: 97B4Sc_XubtL_lW7OfZysQqsOs4.roa (hash: s6SnzQICC+87j3qQ2YxLoHSbPtUJDNl+2RyFPIbB7qI=) 6: D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa (hash: 3brIsivCbhFviJ62ZCvrk45wXBqMSMZrnrXYGWBpVqI=) 7: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: uafCzBklsycR8MVH4Yjja8OVOo+0FCFObFGlv35AWrs=) 8: KW3ruKOhj6JKZMq89hnmHfD2ogg.roa (hash: 0KDaehG1BpLDekFmNyw0N8o8oxyUdxrGz4gLnB27NL0=) 9: LsDa6KTrverRW5gJHEDYsnUiWaA.roa (hash: kyRRzPpmtC/6cc1RLLOBnwLx4RCN3jXZIWgVX+OjOJY=) 10: Muj2FNE8Gldd8yzrKLebS3hsgG8.roa (hash: Rd6lCWkMq66do726k8up+6ZsrZZs2AV3lPweaatdunQ=) 11: OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa (hash: oyzTksz2QKSnafMS1kmCzYf1d4YWDMBQktGYceuURLI=) 12: UE5lqxub4HZyPzOaFIeY1MynbOM.roa (hash: G/5g2S7073n0P8fSJcz9JyRKGI6p6NHbjV1Y/gWxHho=) 13: XDU9UWSQ0e6UimvguU5iuXs0EOA.roa (hash: SCFRxNca9zUGzw86U8+KWNOZievAR3LE2W5GLXuSUcY=) 14: _qJbebTlrOvrXIQLM28_mZtacRY.roa (hash: BqUn6UdSWnNCo8IEu4itHIeonT1vIDue6NclshrDycA=) 15: hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa (hash: b4EBco8NgahSA81khEE6SumwN6LoQGLW/RXHQz3fVtU=) 16: hc27-Du5AK-QSwEPPlUOrqZiXBk.asa (hash: NZwly8DKYsKefjnwC5ZEjbZE7IIJQUE4bCO5RCZXMKA=) 17: kF__trkxnSoai5YPHEuion9F5-M.roa (hash: tWmn9E+rdr18LE8axfsyGzfbkAEBv9XZf3xK1lkaYrs=) 18: rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa (hash: 6M2XOWFy53R21mcWbAHRpsAh3NRSx51bXy4kBppg9Z0=) 19: uC3zCk-SIOTP3v8kN8AvkOioJlk.roa (hash: t6NH48ochz8I1c27bkPFIEdPItgxlKo5FppJqJnPRh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 10:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:93:f9:b9:06:90:e7:1a:2c:9e:6f:a3:8c:15:fc:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Nov 14 15:01:32 2026 GMT Not After : Nov 15 15:01:32 2026 GMT Subject: CN=9c6732862076303141ca7e9b8840ff540c8748be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:09:34:a4:d7:cd:58:7e:4d:5e:07:20:c9:8b: d9:a6:45:43:16:2a:82:0d:09:6b:64:79:ed:04:c6: c4:72:ef:c4:a8:ae:0a:cd:d5:31:fd:31:f8:3e:c9: d1:1b:fc:1a:5d:a2:8c:dd:d0:c1:3d:f1:0d:b6:5f: 96:50:68:25:a8:5e:26:bd:5c:d8:97:25:1a:e2:18: 9e:14:7c:71:89:70:e2:87:95:15:12:29:8b:7f:c4: 20:9d:f3:59:60:62:60:a1:2b:2d:12:3d:6b:42:2a: b2:98:0c:f2:6c:57:11:cb:12:e6:18:e7:52:0c:b7: 59:33:7f:c1:94:db:f0:2e:89:d5:5c:2b:d2:71:06: 0e:a1:46:28:31:60:83:20:0f:62:d5:99:4a:94:56: 49:95:0f:cb:bf:29:14:37:c6:07:d6:7e:62:d6:f6: 14:85:8a:19:b1:db:1f:28:ed:00:21:83:b6:ca:42: 94:d3:62:aa:b7:b4:a7:c2:16:fb:68:38:81:18:49: 30:85:28:40:c8:52:c4:90:a1:56:66:2b:a0:fc:b0: cb:73:4a:78:82:24:f3:65:51:c3:4c:54:b4:f5:51: 89:3f:ad:8b:36:6d:86:a8:99:0b:75:6a:19:15:21: 87:ba:51:d8:ed:28:2e:7d:67:00:e2:3e:df:a0:c3: dc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:67:32:86:20:76:30:31:41:CA:7E:9B:88:40:FF:54:0C:87:48:BE X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:4e:8f:1a:44:54:a1:55:ab:0f:eb:ef:26:33:aa:8a:e3:20: 89:71:57:d6:89:75:ec:28:ca:6f:f7:32:9e:f5:1b:61:ff:fb: 4f:ab:55:77:7a:a8:fa:52:20:87:af:82:59:53:ed:37:97:0d: 96:8c:75:d5:ce:36:97:d1:dc:f9:f5:50:34:05:f1:ba:4e:38: 24:17:bd:84:10:14:a8:b1:8d:14:4b:8b:94:e9:85:45:3b:dc: 2e:81:a3:67:50:61:87:4e:fe:d7:c9:55:3e:81:64:49:72:35: 54:d3:69:4b:f5:4e:da:6e:0f:51:f9:50:ed:8e:22:98:4a:57: ea:a5:68:b0:4d:cb:67:9f:3c:4b:d6:87:2a:a5:53:1b:cf:6e: b3:39:6a:56:d7:8b:8f:08:8b:66:5d:45:5c:cd:44:76:b8:ea: 98:43:ab:2b:51:d2:f6:2f:41:92:df:4b:61:96:5b:95:5f:7a: 0c:8b:aa:d3:71:30:70:c0:7d:f4:46:5b:24:93:bd:64:3f:60: d2:ea:a0:45:96:57:d8:6b:ca:a4:93:5d:65:76:6c:b7:c7:07: d6:bb:79:fb:4c:73:5c:83:55:ce:7b:f8:04:8d:81:c6:3e:94: e9:7d:4e:1b:88:3f:ef:70:44:c9:d0:28:52:03:0b:61:53:87: 4c:a2:54:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHak/m5BpDnGiyeb6OMFfxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYxMTE0MTUwMTMyWhcNMjYxMTE1MTUwMTMyWjAzMTEwLwYDVQQD Eyg5YzY3MzI4NjIwNzYzMDMxNDFjYTdlOWI4ODQwZmY1NDBjODc0OGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qk0pNfNWH5NXgcgyYvZpkVDFiqC DQlrZHntBMbEcu/EqK4KzdUx/TH4PsnRG/waXaKM3dDBPfENtl+WUGglqF4mvVzY lyUa4hieFHxxiXDih5UVEimLf8QgnfNZYGJgoSstEj1rQiqymAzybFcRyxLmGOdS DLdZM3/BlNvwLonVXCvScQYOoUYoMWCDIA9i1ZlKlFZJlQ/LvykUN8YH1n5i1vYU hYoZsdsfKO0AIYO2ykKU02Kqt7Snwhb7aDiBGEkwhShAyFLEkKFWZiug/LDLc0p4 giTzZVHDTFS09VGJP62LNm2GqJkLdWoZFSGHulHY7SgufWcA4j7foMPcPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxnMoYgdjAxQcp+m4hA/1QMh0i+MB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA06PGkRU oVWrD+vvJjOqiuMgiXFX1ol17CjKb/cynvUbYf/7T6tVd3qo+lIgh6+CWVPtN5cN lox11c42l9Hc+fVQNAXxuk44JBe9hBAUqLGNFEuLlOmFRTvcLoGjZ1Bhh07+18lV PoFkSXI1VNNpS/VO2m4PUflQ7Y4imEpX6qVosE3LZ588S9aHKqVTG89uszlqVteL jwiLZl1FXM1EdrjqmEOrK1HS9i9Bkt9LYZZblV96DIuq03EwcMB99EZbJJO9ZD9g 0uqgRZZX2GvKpJNdZXZst8cH1rt5+0xzXINVznv4BI2Bxj6U6X1OG4g/73BEydAo UgMLYVOHTKJUOQ== -----END CERTIFICATE-----Generated at Sat Nov 14 20:54:18 2026 by rpki-client