$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json) Hash identifier: eWjVsjhFCNsZw1NcrV+ydYa0AOVdZCV1TnjxjJRTafI= Subject key identifier: BC:E5:08:3F:92:EB:1C:5A:BD:4D:68:EA:DB:1F:B5:85:EE:00:51:E9 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019E1C239F65FFE04B70271D249F98DF4E87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft Manifest number: 15EC Signing time: Tue 12 May 2026 12:22:36 +0000 Manifest this update: Tue 12 May 2026 12:22:36 +0000 Manifest next update: Wed 13 May 2026 12:22:36 +0000 Files and hashes: 1: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=) 2: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: IpCDEb4cSFO1Kv5eyYkRavt+cR0iD+j2dk6cBIPSUU4=) 3: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=) 4: Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa (hash: L5paJbyh0KobKYZie3ywNQHCitW9V1gxFkZu+lLubKY=) 5: IxUFkOgU8gGpOMFX9SfO96C3p0A.roa (hash: o3+nxgt+QsK/H825oRolMvUK028Sit/0VLj9t5muKgQ=) 6: JQRIkl6qezQipMzefUYCu0kWQww.roa (hash: lix463Rv6Rp5dRq6rcYGLsgkIqimZfRQHEIlN/5hyp0=) 7: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=) 8: MScRVKmXyA2iT_CEX8Vcd_NcPuk.roa (hash: 8X1mJRhcs4HUA1BUwufZrZ3ma3rYjjRHTESY45Kcsuw=) 9: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (hash: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=) 10: O18vIz4ADrWfyTjWv9lwIBf2Q6w.roa (hash: 6t2fxSf+Lmbr9jOdSKExEayPddEKt375FWmUM1ayblc=) 11: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=) 12: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=) 13: SgqvO9qBL1fWo3aBJRZpGp4K-S0.roa (hash: BHxiE3ULzbcJ44lDjqkW1hve5g/jINED6rwFK00YXx0=) 14: WSvHFGzj7Vgob_0_S9OtU-eYECo.roa (hash: wV4wq5Kwh3/1RV581fA5ENpc2zmKMDZQlEmeVs08398=) 15: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=) 16: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=) 17: djZFkLkOP1i4A3QD0iq7FYfbH8k.roa (hash: Ke0UPwLsbzS5tVeJA/RZ8i1nwVPlXEw7kayqjUa+RnI=) 18: e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa (hash: BxWMVdjBecDx+1X50nR2tWLJ9Ko6bUO8kFQ40XFyRn4=) 19: fzXSzzRGH69X9HG_DPX1UIdlnMc.roa (hash: 5e/q/Of0/VbRaI+58tUil5lHG2B8yQNHwFd7IDN7AnA=) 20: xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa (hash: dqVw1zy09p9At+bsRY80wcRAlgN5UMI3c+HTy+z8Ljo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 12:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:23:9f:65:ff:e0:4b:70:27:1d:24:9f:98:df:4e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: May 12 12:22:36 2026 GMT Not After : May 13 12:22:36 2026 GMT Subject: CN=bce5083f92eb1c5abd4d68eadb1fb585ee0051e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:c8:80:b6:c7:dc:b9:34:b2:a1:f2:4d:d9: d1:99:21:83:68:27:50:c0:3d:1c:b8:9c:cf:c2:75: 68:a4:a8:bb:db:bd:b3:86:00:72:9b:79:78:b8:97: 7d:e4:70:06:81:38:8f:7d:e6:cd:1d:e5:13:ef:b5: e8:f4:10:53:b6:3d:4b:90:7f:4b:fc:13:fe:47:98: b6:0e:7f:5f:f8:39:bc:a2:e8:17:48:4f:53:63:41: 71:44:33:aa:a4:57:a6:a0:50:ce:88:3c:66:3c:3a: bf:da:e4:84:31:8b:50:d2:29:f9:0c:9b:2e:a6:37: 38:72:17:42:6b:f1:bb:e0:d2:a8:70:1e:33:27:fd: d4:0f:df:97:a7:ca:73:32:71:31:11:00:52:20:3b: ab:24:bd:02:9d:12:43:50:6d:ec:06:01:8a:36:ab: af:69:4e:e3:3b:5f:14:f9:41:6a:1c:fe:0e:0e:61: 7a:fd:aa:be:ee:49:70:f0:2f:5f:32:4c:e5:e2:43: 36:3b:cc:db:ea:82:91:16:d2:e9:21:fa:fd:ce:a9: 9d:62:fe:b2:98:10:9d:36:67:be:74:bf:4c:18:da: 28:7e:7b:11:2a:b6:d3:f8:31:e5:77:5e:de:39:b9: a5:ac:c8:e4:00:60:5c:00:be:d3:31:46:07:de:75: 1d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E5:08:3F:92:EB:1C:5A:BD:4D:68:EA:DB:1F:B5:85:EE:00:51:E9 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f0:69:c8:a2:69:e3:ce:69:43:3a:be:70:63:ac:9a:c9:99: 47:ff:20:ed:13:76:f9:91:2c:49:68:11:d5:8b:07:8f:e9:b6: 6e:dd:ad:99:8f:f6:60:cb:ab:bc:ec:ee:ad:db:24:f1:ba:41: f8:36:68:04:29:6a:6a:40:b5:8f:bc:ae:47:82:8e:d5:35:55: 97:dc:53:57:af:c6:cf:c9:f4:ae:b2:32:10:5b:e0:f2:fb:ce: 1e:1c:1e:02:6a:37:54:e7:8d:03:fe:a6:d9:3e:9e:da:85:bf: ce:04:5b:71:93:aa:1c:d5:e7:ec:0a:9c:41:a5:fa:9a:36:8c: 11:c8:81:7b:40:65:73:d3:dd:de:85:2d:b9:e0:bb:e6:41:fb: 4e:6d:d0:dd:77:1b:9f:e4:fc:d4:73:20:ad:fb:61:b2:4e:80: a4:4e:7f:2a:c2:af:b6:80:da:cf:13:2e:2d:02:97:ac:7f:3b: 72:dd:a5:0f:b4:19:3c:16:44:21:ed:1c:d7:21:d1:7d:53:e5: e9:61:27:42:87:82:31:d0:7b:2e:9d:60:d5:a3:79:50:ea:0b: b0:dd:d8:f2:48:55:d4:6e:4c:54:f8:b0:bc:2b:73:b1:da:08: ba:7d:fb:d9:83:3f:a9:2d:f8:56:39:8d:d0:d1:7a:67:c6:09: 28:7a:ed:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4cI59l/+BLcCcdJJ+Y306HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwNTEyMTIyMjM2WhcNMjYwNTEzMTIyMjM2WjAzMTEwLwYDVQQD EyhiY2U1MDgzZjkyZWIxYzVhYmQ0ZDY4ZWFkYjFmYjU4NWVlMDA1MWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbfIgLbH3Lk0sqHyTdnRmSGDaCdQ wD0cuJzPwnVopKi7272zhgBym3l4uJd95HAGgTiPfebNHeUT77Xo9BBTtj1LkH9L /BP+R5i2Dn9f+Dm8ougXSE9TY0FxRDOqpFemoFDOiDxmPDq/2uSEMYtQ0in5DJsu pjc4chdCa/G74NKocB4zJ/3UD9+Xp8pzMnExEQBSIDurJL0CnRJDUG3sBgGKNquv aU7jO18U+UFqHP4ODmF6/aq+7klw8C9fMkzl4kM2O8zb6oKRFtLpIfr9zqmdYv6y mBCdNme+dL9MGNoofnsRKrbT+DHld17eObmlrMjkAGBcAL7TMUYH3nUdeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzlCD+S6xxavU1o6tsftYXuAFHpMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvBpyKJp 485pQzq+cGOsmsmZR/8g7RN2+ZEsSWgR1YsHj+m2bt2tmY/2YMurvOzurdsk8bpB +DZoBClqakC1j7yuR4KO1TVVl9xTV6/Gz8n0rrIyEFvg8vvOHhweAmo3VOeNA/6m 2T6e2oW/zgRbcZOqHNXn7AqcQaX6mjaMEciBe0Blc9Pd3oUtueC75kH7Tm3Q3Xcb n+T81HMgrfthsk6ApE5/KsKvtoDazxMuLQKXrH87ct2lD7QZPBZEIe0c1yHRfVPl 6WEnQoeCMdB7Lp1g1aN5UOoLsN3Y8khV1G5MVPiwvCtzsdoIun372YM/qS34VjmN 0NF6Z8YJKHrtEg== -----END CERTIFICATE-----Generated at Tue May 12 21:15:22 2026 by rpki-client