$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft File: mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json) Hash identifier: j9hw2Zp8nfQppU7Q0wY1hOx5sEDnowoSe/TSdUAXzF0= Subject key identifier: 3E:11:B5:53:44:4E:BA:6B:48:4A:E8:3C:30:77:2D:BB:A0:74:2C:B0 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 01A0D34AAC07546DB99E226CA7399EA2C805 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft Manifest number: 1AA2 Signing time: Thu 24 Sep 2026 12:01:21 +0000 Manifest this update: Thu 24 Sep 2026 12:01:21 +0000 Manifest next update: Fri 25 Sep 2026 12:01:21 +0000 Files and hashes: 1: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (hash: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0=) 2: 2yaXAAUSdtsPMaSBJFquEdDTT6k.roa (hash: judwS/WZsJiXUyPGTQqvtLBMK0N9HxSeMb7YxOm0ElY=) 3: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (hash: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4=) 4: 6d_ENWzH-VQ6PZSxBVnrr_FPch4.roa (hash: nLEVzgKnOcDJKPh426JAlzQMVVXnAa8GP6UiExx+ycU=) 5: 877gblyC3fNplcxOQRcSVA_wkoU.roa (hash: FPmfqAGJMI/bwduEg7CvapHPJGcw4GGIWlU9wyWJ4Ns=) 6: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (hash: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU=) 7: CO3NGBtj6lvSDwNx7qgisnxcpZE.roa (hash: Ta+b1EmbPlRx8CBP3A/a0A01hRd22nzH/W3OVEU0ya4=) 8: DehND8NWso8fnWINtOcuecHBpxM.roa (hash: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg=) 9: Exzf4PskjTMc5LIyk1evDnbig4o.roa (hash: /XbM8Up/CzKNgL2qr7cqhEQox2OxF2jJdDjq9JA7I2M=) 10: F40rkkhDW3ybCB_12cIOKOyXk08.roa (hash: h+hLlHz7DDayf/In7Q6RDRACl8fHTXkiC3/X/Kl3h7E=) 11: Jtp72CS2jEm3lTCDgWP7039dKYg.roa (hash: Q1Hpm3kD459iodRBV3umbkyn+j4+wiimsCk0/+2lO84=) 12: Ke0VSjrkP1jgta_WS5ntQtfKR38.roa (hash: yxWTZVrICzskJJpD6AIg7gNqPSzszPgc+Bf6OnBQWQw=) 13: Kg06NaGezROeWtBK1qTOADXp_pQ.roa (hash: wmDFJ/5sVQtr4RNwEITHDUmCB7Qq4hdLVGdv9QNDX30=) 14: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (hash: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4=) 15: LnDxIxD-hluuct808CIO9EDyMIU.roa (hash: BcxRwhFwjkIGGKDrrvqL77SCEYThrU0rRvnjjzU14s8=) 16: MAhbKgRlvoF4_D9KUePJuDoAmS4.roa (hash: ZxoAbFForFx0WnVahVEJoAAhiXTlHQB8gaScqzkZ4UU=) 17: MOd1w7flMfCwv3SyFF--8p3elzE.roa (hash: EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=) 18: McPz5S5PBhTWxGifH8fs1_NS2jU.roa (hash: KEIARx1I4vqfMuZP+WJZ2f9AE00BEAWPF5jqTraiMB4=) 19: Rlj4VlWfwkfz6GkH-OueIIaSCuc.roa (hash: ii4MZTYhkg0ytZp/Vdsah05JAy4dduK8Ytc1ySn7mXs=) 20: SoVFcNc1lU_1SEfGUkw_ciUcpAQ.roa (hash: I90mbwCIchHVNf7BLD+pAvrY/vzh+76mAoOiyMR3xRk=) 21: Zkjg3hn61JFL00ei8OTWJjwR5z4.roa (hash: 588yrYLogN7emBldqJ08eH+eoXXQ8TYe9+BBfSEy2Vs=) 22: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (hash: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y=) 23: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (hash: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I=) 24: gwB8EQKBkF6rAUQregKYO8DR9DM.roa (hash: bkCyPXRCyEr0y70TR0Ql1njvG/oRBgnO+/E/e2UhPeQ=) 25: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (hash: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME=) 26: icBjslH5ERqmqpU1USzkMdhkEjI.roa (hash: wMYjLB/rE9ycsdnG1IDtuH3D8/HkxmDfxjH3cnkuOvM=) 27: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (hash: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU=) 28: kZx2IxBD5HOKLTGnyUCslhrff3s.roa (hash: Vt6Cc39kOpNIWweAmZd5zbwANosQpiB4xiB1jbdvahg=) 29: lSaiK2qUcsBb2SRVSSn0lBTLk8w.roa (hash: Jw4NGPd3f960D6rAt45BHw7wfutR5RSd+rPJNYNB2E0=) 30: lnpel8l0zvHfaReJqv_lxZ_B7Z0.roa (hash: kesVe4OXCvVFnF3zB6nMGPK6v8LEXAUi0VV82fdI66M=) 31: mW7TNNKOcx8Asff3LA5hFbwolus.roa (hash: C0qSa3VXz/TpxHHnVA5yQuQAXKAh2TZvyE/riAp87yc=) 32: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: X76LOWnH/iF+NxEWe5CmxQrEgbBeA2NlKG1MOA4qVlE=) 33: n50HYNvX301s5gEUcCw5M0DpFnA.roa (hash: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU=) 34: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (hash: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4=) 35: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (hash: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8=) 36: xEUKzOOkARoDjaObKTAU7gIkvJ0.roa (hash: 78z8Ey8iTFTJsB0kmSdbcd2syS5QWJtz2XrcMbWt2hA=) 37: xNY2gUvtLtxYfY6gU7_3js38DyA.roa (hash: 3CcNNA7q88gUr/9Ae4mjWpxXE8KozaNGoTSekGYA77Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d3:4a:ac:07:54:6d:b9:9e:22:6c:a7:39:9e:a2:c8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Sep 24 12:01:21 2026 GMT Not After : Sep 25 12:01:21 2026 GMT Subject: CN=3e11b553444eba6b484ae83c30772dbba0742cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6a:08:a1:8f:17:99:e7:5a:c8:7c:dc:78:a1: 63:17:e8:fe:b5:b5:f2:59:67:28:76:f3:06:b4:91: da:71:87:13:57:97:fc:fa:6c:a0:2e:63:6e:7d:08: 70:e7:0b:1f:57:cd:9a:15:0b:f9:44:f1:7f:48:bf: 4c:c7:f8:c7:3a:e8:ac:88:62:0d:12:44:e0:53:d3: e7:e0:c9:31:d6:33:1e:68:71:fc:13:e8:67:5a:ce: ca:2e:41:02:b7:ae:e3:55:db:a8:52:82:f8:3a:7e: 9e:49:e4:d7:22:21:9b:89:fc:74:9a:c7:89:cd:53: 9b:42:e2:67:a8:bc:ec:9e:82:0b:22:99:bd:6e:0b: 8f:f3:a9:92:72:42:c1:5c:62:cd:bf:c5:73:61:3c: f7:69:43:78:a4:c0:37:1c:78:45:8e:aa:3e:48:79: 4e:14:3a:02:d4:71:a3:00:78:57:34:ce:af:73:bf: 84:29:bb:9e:30:79:c8:2c:d3:81:42:e7:64:3c:d2: a5:a2:2b:fe:88:ab:2c:37:f8:db:98:3e:c4:7f:78: 2c:65:7b:43:4e:56:6d:b2:59:99:68:91:46:7d:a7: 52:5e:a1:e4:50:d2:3f:84:d5:86:6f:7b:e0:ea:22: e6:57:d3:d6:d9:74:06:21:4b:73:35:eb:f5:11:a4: e4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:11:B5:53:44:4E:BA:6B:48:4A:E8:3C:30:77:2D:BB:A0:74:2C:B0 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4a:26:32:e8:e1:8b:da:7c:a7:84:fd:f5:3b:d4:de:ae:0d: b8:ff:19:d5:56:e3:f1:53:6a:c5:ea:9e:d1:e0:0c:27:21:39: 53:6f:c8:2d:f2:35:cc:da:54:1e:01:2c:b8:eb:12:fe:1d:01: 72:90:de:4b:6a:9f:0d:a7:a9:b5:e7:e8:b5:89:6f:46:cd:47: f9:58:47:5d:80:65:f3:e0:89:45:87:06:5a:14:8e:cd:8a:06: f0:a4:d9:b5:53:f7:d1:19:ca:3f:e0:27:96:3e:88:4e:26:6c: 8b:f0:0a:06:78:3b:fb:ad:34:ea:a2:17:d2:f1:03:f6:64:74: ee:d2:75:0b:8e:1a:5e:a7:de:fc:9c:b5:a3:42:bc:cb:5c:7b: ed:2c:2d:f0:cb:c0:79:38:75:7d:d5:f6:82:de:05:63:1e:05: 19:a7:b4:b4:c0:98:13:aa:17:c4:9d:3c:b0:99:ed:62:bb:e3: 2c:04:09:0d:93:68:f8:9f:e6:66:ca:20:16:a5:11:95:86:ab: 46:8b:0b:38:14:b4:94:b6:9c:57:5e:9b:91:ae:3f:dc:a1:df: 8b:82:b9:3e:d5:f5:b9:eb:e1:18:bf:02:b6:46:57:51:9a:31: cc:56:80:d7:f2:53:7a:42:a2:21:95:75:2a:b1:03:a2:39:cc: 9b:c9:98:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDTSqwHVG25niJspzmeosgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwOTI0MTIwMTIxWhcNMjYwOTI1MTIwMTIxWjAzMTEwLwYDVQQD EygzZTExYjU1MzQ0NGViYTZiNDg0YWU4M2MzMDc3MmRiYmEwNzQyY2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2oIoY8XmedayHzceKFjF+j+tbXy WWcodvMGtJHacYcTV5f8+mygLmNufQhw5wsfV82aFQv5RPF/SL9Mx/jHOuisiGIN EkTgU9Pn4Mkx1jMeaHH8E+hnWs7KLkECt67jVduoUoL4On6eSeTXIiGbifx0mseJ zVObQuJnqLzsnoILIpm9bguP86mSckLBXGLNv8VzYTz3aUN4pMA3HHhFjqo+SHlO FDoC1HGjAHhXNM6vc7+EKbueMHnILNOBQudkPNKloiv+iKssN/jbmD7Ef3gsZXtD TlZtslmZaJFGfadSXqHkUNI/hNWGb3vg6iLmV9PW2XQGIUtzNev1EaTkOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4RtVNETrprSEroPDB3LbugdCywMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUomMujh i9p8p4T99TvU3q4NuP8Z1Vbj8VNqxeqe0eAMJyE5U2/ILfI1zNpUHgEsuOsS/h0B cpDeS2qfDaeptefotYlvRs1H+VhHXYBl8+CJRYcGWhSOzYoG8KTZtVP30RnKP+An lj6ITiZsi/AKBng7+6006qIX0vED9mR07tJ1C44aXqfe/Jy1o0K8y1x77Swt8MvA eTh1fdX2gt4FYx4FGae0tMCYE6oXxJ08sJntYrvjLAQJDZNo+J/mZsogFqURlYar RosLOBS0lLacV16bka4/3KHfi4K5PtX1uevhGL8CtkZXUZoxzFaA1/JTekKiIZV1 KrEDojnMm8mYXw== -----END CERTIFICATE-----Generated at Thu Sep 24 17:41:10 2026 by rpki-client