$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json) Hash identifier: pr13fTDvIZlABCrtdfodR7QrXPjgtNJXlrbgouaESVc= Subject key identifier: 98:32:92:02:14:4B:9A:5E:FC:74:14:9A:D3:63:24:A1:3F:50:1A:B8 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 01A0C9D9833C194FA354BEA7E0A80C28184D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft Manifest number: 1769 Signing time: Tue 22 Sep 2026 16:01:10 +0000 Manifest this update: Tue 22 Sep 2026 16:01:10 +0000 Manifest next update: Wed 23 Sep 2026 16:01:10 +0000 Files and hashes: 1: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=) 2: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: eg0FR0scm7YdWVn4l124mKM1z2u8GsNM+AhUI9neYQI=) 3: 9l-1vV0lLMPdjVLZ8U4gIW0OkT8.roa (hash: kHoKR3oAF432BBb7GV322ecIos7vaNdfIEmHn7z4jA0=) 4: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=) 5: DgnHYMNEO3cW02ohlMn2axnldPY.roa (hash: vaq0LBl35c7hmyKRAqN3BqKt0SzicUAX8/qk3xf0Rag=) 6: EOKiA2av8D9tfqyUWidlxDIVF7I.roa (hash: a+NxQmmW/zjcx38he+RtlHbBR768yZhQrdN+Qy40tRQ=) 7: Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa (hash: L5paJbyh0KobKYZie3ywNQHCitW9V1gxFkZu+lLubKY=) 8: KBFhtKcJq5uA7ADerkedr7ALsUc.roa (hash: zdLI7qiXR8cpmXvF/k9fx3+iYtigbpqLuzWcJYNq8OU=) 9: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=) 10: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (hash: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=) 11: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=) 12: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=) 13: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=) 14: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=) 15: e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa (hash: BxWMVdjBecDx+1X50nR2tWLJ9Ko6bUO8kFQ40XFyRn4=) 16: xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa (hash: dqVw1zy09p9At+bsRY80wcRAlgN5UMI3c+HTy+z8Ljo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 16:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:d9:83:3c:19:4f:a3:54:be:a7:e0:a8:0c:28:18:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Sep 22 16:01:10 2026 GMT Not After : Sep 23 16:01:10 2026 GMT Subject: CN=98329202144b9a5efc74149ad36324a13f501ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:95:79:2b:7f:75:7c:80:5c:ec:64:96:69:67: 45:c8:21:7f:0b:fa:34:86:0a:fb:96:bb:9c:95:61: 72:e8:9e:36:05:e0:7f:3d:5f:35:68:25:da:eb:e7: 82:85:f3:5e:ad:24:71:a4:49:3c:64:ac:60:b5:0e: 51:8e:f7:b4:c5:fe:26:49:1e:8e:61:28:37:29:a6: 4b:1a:1f:98:e4:80:5e:67:f3:1b:02:73:24:67:9f: 99:32:64:fe:9d:c0:aa:68:d1:70:4c:a1:7c:81:f8: 1d:80:e8:b2:ae:c4:38:85:f3:34:15:91:d8:6c:63: be:68:12:cb:ce:a9:dd:7e:dc:fc:c7:29:7d:c7:cc: 0b:4e:fb:24:90:8c:1f:97:bc:92:70:06:68:14:4a: 0a:3a:9b:dd:c3:cd:51:e6:d8:5d:d4:1b:04:bd:2e: 8b:aa:1a:77:b9:f3:ec:77:1d:9d:87:f0:09:74:34: cf:6b:8b:d1:c5:c7:34:21:3b:fe:9b:5f:12:41:18: 06:9b:4e:d3:0e:ea:32:4b:ca:ec:35:e2:36:ed:32: 52:5e:49:80:c8:51:df:ea:fc:d4:63:f3:e8:d6:fc: e4:10:9b:46:dc:4c:51:80:bc:4e:fe:b0:7e:44:4f: 83:b1:bb:d3:87:70:eb:ac:86:b2:03:d7:0c:51:b9: 9d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:32:92:02:14:4B:9A:5E:FC:74:14:9A:D3:63:24:A1:3F:50:1A:B8 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:fb:4b:7e:8d:90:ff:47:42:e4:34:5b:70:99:2e:22:f9:c1: 41:c6:85:7a:1f:1e:89:d0:6a:48:cb:6c:e3:ed:20:b8:27:cb: f0:2e:b2:f3:01:06:86:eb:5e:7e:14:d3:9f:c9:03:39:2c:b3: 20:bb:4b:0a:1d:f0:54:3e:e4:12:9a:2f:b9:4f:99:0b:07:46: 28:0f:3d:58:aa:bf:ae:b3:3f:a7:f3:a1:a3:c0:ea:66:6d:fb: 91:c0:b0:af:ce:cd:dd:4d:29:5c:c9:2c:ae:f3:b4:cc:28:b4: d9:91:4f:69:15:2f:af:d3:c5:e0:c6:a5:6d:6d:9f:f1:70:72: 5f:6d:85:30:2c:5b:c7:7b:a8:96:72:d9:eb:2b:d7:44:2a:0a: 72:a8:96:c0:23:cf:fe:7b:f9:83:8d:1d:5a:99:0e:5d:68:1e: 02:a8:37:db:d5:0b:17:39:89:06:7d:db:c3:b0:50:ba:e5:61: c3:eb:18:a3:cc:ee:64:2e:07:69:28:3b:c9:38:64:80:d8:b1: 94:10:e7:a1:a1:8a:e0:9f:8d:f6:fe:c1:e0:3e:0b:ce:f5:73: e7:ba:51:3a:87:50:f2:06:e5:bb:17:1f:47:4b:e3:2e:4d:38: 8f:91:e5:86:b0:36:65:ae:92:ff:ae:c8:a8:07:68:a1:c2:47: 3c:ab:ca:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDJ2YM8GU+jVL6n4KgMKBhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwOTIyMTYwMTEwWhcNMjYwOTIzMTYwMTEwWjAzMTEwLwYDVQQD Eyg5ODMyOTIwMjE0NGI5YTVlZmM3NDE0OWFkMzYzMjRhMTNmNTAxYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJV5K391fIBc7GSWaWdFyCF/C/o0 hgr7lruclWFy6J42BeB/PV81aCXa6+eChfNerSRxpEk8ZKxgtQ5Rjve0xf4mSR6O YSg3KaZLGh+Y5IBeZ/MbAnMkZ5+ZMmT+ncCqaNFwTKF8gfgdgOiyrsQ4hfM0FZHY bGO+aBLLzqndftz8xyl9x8wLTvskkIwfl7yScAZoFEoKOpvdw81R5thd1BsEvS6L qhp3ufPsdx2dh/AJdDTPa4vRxcc0ITv+m18SQRgGm07TDuoyS8rsNeI27TJSXkmA yFHf6vzUY/Po1vzkEJtG3ExRgLxO/rB+RE+DsbvTh3DrrIayA9cMUbmdHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgykgIUS5pe/HQUmtNjJKE/UBq4MB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPtLfo2Q /0dC5DRbcJkuIvnBQcaFeh8eidBqSMts4+0guCfL8C6y8wEGhutefhTTn8kDOSyz ILtLCh3wVD7kEpovuU+ZCwdGKA89WKq/rrM/p/Oho8DqZm37kcCwr87N3U0pXMks rvO0zCi02ZFPaRUvr9PF4MalbW2f8XByX22FMCxbx3uolnLZ6yvXRCoKcqiWwCPP /nv5g40dWpkOXWgeAqg329ULFzmJBn3bw7BQuuVhw+sYo8zuZC4HaSg7yThkgNix lBDnoaGK4J+N9v7B4D4LzvVz57pROodQ8gbluxcfR0vjLk04j5HlhrA2Za6S/67I qAdoocJHPKvKKA== -----END CERTIFICATE-----Generated at Wed Sep 23 01:51:46 2026 by rpki-client