$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json) Hash identifier: Y22W+4Q+d8amv1eKw6TEtFEM2fuvxl9FAfET8m5AyFA= Subject key identifier: 08:AB:B5:1E:8D:71:CE:40:7D:04:74:19:5E:D7:F8:A0:B9:0A:93:A1 Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Certificate serial: 01A0CFA424EC2CFA66647E1F5BEA28A5480D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft Manifest number: 036B Signing time: Wed 23 Sep 2026 19:00:36 +0000 Manifest this update: Wed 23 Sep 2026 19:00:36 +0000 Manifest next update: Thu 24 Sep 2026 19:00:36 +0000 Files and hashes: 1: 6hF48NdJlvMla9eluo8Mlfe595Y.roa (hash: pg8KajGYEwEU0ZGmmxsgFZa8AayGaJM9jjh0xL1LeCA=) 2: 8Z9LlW9pX1ZFA3wQNfdVO9-jjgs.roa (hash: XL3JspixgmL+Y5+ELAq1VBUarv7KKAfzu3TKsU6vMjU=) 3: F7OazNxmHQIZG_1NbQyBZDuRfp0.roa (hash: kfyCu9kGmBZWf6iCvzc+imifHO9IEOu6CS+tqE1Bls8=) 4: ZPkrtvVur46cS-5w8dwIkAjNZYE.roa (hash: vPaByPHtcOmoXzXWkiUeeFN03AP9nPQMC4Ibqh8NElg=) 5: ZvN7c-NtqYH-PaeLJUmdEPO5iC8.roa (hash: RkOPQkujkcLmBf4maBg9uGkdxV/kCwgeqMyADPSii/E=) 6: bGlKraIhhwlevroXgB4rLlo-YME.roa (hash: oIkXDeJlSani/t+wUjX7TTQDY2OjVB6ERk95GxJeYN8=) 7: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: 1B+HhAZ/R4qwp9QmfbHYJUttYe1Mj149vTpd2FV9Xw4=) 8: mfKCIzYOA1MRX0WnVHNYXIYPDbA.roa (hash: BLUaF2c9SynmHjIFPlE7zXQ5dkGPExYAyDAAn9NF3gU=) 9: nu8XADsimCod0_uWl8egJ3aFHEw.roa (hash: H55dZSXKTNI4+9o7BFR1/GCpspjJcbHLdvt5EmFjk+U=) 10: qgusrLPdxbmOAmCCh-LDhKvWtUo.roa (hash: hmQSz0Gp8rt8ydBZY/twqJ9mc/ykbC8FHiCR9kZOXOg=) 11: qo3RmaJil-tmg6e3jCPqKh_xFAo.roa (hash: DLtprsoHKdJkHToMaxiYCDgKpyQfT89HL7h3BW0fsgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:a4:24:ec:2c:fa:66:64:7e:1f:5b:ea:28:a5:48:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Validity Not Before: Sep 23 19:00:36 2026 GMT Not After : Sep 24 19:00:36 2026 GMT Subject: CN=08abb51e8d71ce407d0474195ed7f8a0b90a93a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:7f:80:cc:80:49:dc:a1:cb:6e:31:cd:90: 2e:0e:14:a1:50:fa:a8:3a:18:ae:97:6b:3b:a5:e7: bb:b2:fc:62:6f:02:ca:f0:cb:78:3f:1b:61:13:72: 49:1f:44:d5:94:b5:59:9e:e0:a3:15:c2:d6:42:3b: ec:41:53:23:c6:95:c5:af:6c:8c:cb:47:4e:2d:89: 0c:9a:a0:c4:bb:b8:26:f1:48:22:25:7b:02:31:a6: 8e:21:7d:7b:d1:d0:96:db:14:30:e2:ff:bc:37:93: 52:a3:68:36:c7:46:33:1b:7a:f0:3e:84:65:f9:74: 34:ff:77:1b:cf:61:9d:59:12:37:f3:2d:c4:10:6d: 50:72:31:e6:cd:62:4b:df:f4:9c:8a:95:33:87:c8: 55:54:b0:a8:a9:d3:2e:24:5a:6a:12:01:4e:b8:9f: 6e:2e:55:0a:fe:3f:79:c7:ad:16:f5:34:07:48:4d: 3b:bc:e7:13:36:a4:13:36:b2:5b:d7:fe:f9:44:31: c6:6e:52:bf:99:01:b9:0a:9f:99:ac:8e:71:7c:22: f3:e1:b5:a4:2b:d0:80:b3:48:41:da:66:e5:ea:09: f5:03:bb:f5:ca:28:ec:e0:f3:8c:19:98:ac:be:c5: 44:77:4b:bd:b7:d0:f5:6b:31:68:d3:3b:33:bb:45: c0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AB:B5:1E:8D:71:CE:40:7D:04:74:19:5E:D7:F8:A0:B9:0A:93:A1 X509v3 Authority Key Identifier: keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:49:52:91:1d:34:08:39:25:64:84:4f:4e:67:d8:e1:a7:a3: 66:38:a6:ce:dc:ad:00:95:93:59:57:73:f1:72:76:f6:72:a3: 5a:a2:3e:49:81:bc:05:6c:10:d5:51:03:ee:2d:b4:68:3e:9c: 42:a7:38:ca:93:ef:be:a4:84:c1:df:94:0d:04:50:07:f5:c4: a3:7f:16:dc:35:7a:85:23:45:de:00:96:59:62:cb:6b:58:40: 69:61:b7:f1:73:b1:51:02:82:93:e8:10:82:26:c2:b5:0e:a4: d9:e7:09:17:78:f1:63:e3:10:26:ee:00:d5:ea:b6:96:6c:39: dd:e2:a8:f5:56:e4:c2:cc:d8:cd:ed:d4:1c:7c:37:68:e7:07: dd:8e:2d:e4:78:d8:95:e5:77:50:0b:69:7a:0a:52:82:12:06: 4d:99:c6:91:47:19:e3:fd:35:86:f0:4f:68:17:3d:f6:df:80: ef:60:fb:64:3e:0a:32:8e:bd:1d:bb:9b:2c:1f:fc:86:1e:d5: 6f:60:4c:25:06:48:98:2d:b8:59:7a:8f:0f:b0:5d:e9:2b:b6: 7e:48:14:94:eb:e0:d4:d1:8a:bb:64:bc:51:e4:24:ea:66:89: 32:59:c6:0b:97:c4:65:86:4e:6c:77:5c:6f:ff:01:f3:b5:d8: 70:a1:d6:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDPpCTsLPpmZH4fW+oopUgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl NGYyYzYwHhcNMjYwOTIzMTkwMDM2WhcNMjYwOTI0MTkwMDM2WjAzMTEwLwYDVQQD EygwOGFiYjUxZThkNzFjZTQwN2QwNDc0MTk1ZWQ3ZjhhMGI5MGE5M2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs21/gMyASdyhy24xzZAuDhShUPqo Ohiul2s7pee7svxibwLK8Mt4PxthE3JJH0TVlLVZnuCjFcLWQjvsQVMjxpXFr2yM y0dOLYkMmqDEu7gm8UgiJXsCMaaOIX170dCW2xQw4v+8N5NSo2g2x0YzG3rwPoRl +XQ0/3cbz2GdWRI38y3EEG1QcjHmzWJL3/ScipUzh8hVVLCoqdMuJFpqEgFOuJ9u LlUK/j95x60W9TQHSE07vOcTNqQTNrJb1/75RDHGblK/mQG5Cp+ZrI5xfCLz4bWk K9CAs0hB2mbl6gn1A7v1yijs4POMGZisvsVEd0u9t9D1azFo0zszu0XAHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAirtR6Ncc5AfQR0GV7X+KC5CpOhMB8GA1UdIwQY MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt NzRkOTFjZGJlMTk1LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1 LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0lSkR00 CDklZIRPTmfY4aejZjimztytAJWTWVdz8XJ29nKjWqI+SYG8BWwQ1VED7i20aD6c Qqc4ypPvvqSEwd+UDQRQB/XEo38W3DV6hSNF3gCWWWLLa1hAaWG38XOxUQKCk+gQ gibCtQ6k2ecJF3jxY+MQJu4A1eq2lmw53eKo9VbkwszYze3UHHw3aOcH3Y4t5HjY leV3UAtpegpSghIGTZnGkUcZ4/01hvBPaBc99t+A72D7ZD4KMo69HbubLB/8hh7V b2BMJQZImC24WXqPD7Bd6Su2fkgUlOvg1NGKu2S8UeQk6maJMlnGC5fEZYZObHdc b/8B87XYcKHW6w== -----END CERTIFICATE-----Generated at Thu Sep 24 03:11:31 2026 by rpki-client