$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft File: mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json) Hash identifier: xLIc5T4faOAMqI2EQ1k2m6NPK3Idu2o5qLLJ4imega4= Subject key identifier: 71:6E:C0:B1:4B:CE:A9:75:AA:88:27:20:6F:95:A7:AB:9D:4D:13:56 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019D27722082C550B2FB50F32AA4E6F100DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft Manifest number: 18B5 Signing time: Thu 26 Mar 2026 00:01:23 +0000 Manifest this update: Thu 26 Mar 2026 00:01:23 +0000 Manifest next update: Fri 27 Mar 2026 00:01:23 +0000 Files and hashes: 1: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (hash: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0=) 2: 2yaXAAUSdtsPMaSBJFquEdDTT6k.roa (hash: judwS/WZsJiXUyPGTQqvtLBMK0N9HxSeMb7YxOm0ElY=) 3: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (hash: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4=) 4: 6d_ENWzH-VQ6PZSxBVnrr_FPch4.roa (hash: nLEVzgKnOcDJKPh426JAlzQMVVXnAa8GP6UiExx+ycU=) 5: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (hash: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU=) 6: CO3NGBtj6lvSDwNx7qgisnxcpZE.roa (hash: Ta+b1EmbPlRx8CBP3A/a0A01hRd22nzH/W3OVEU0ya4=) 7: DehND8NWso8fnWINtOcuecHBpxM.roa (hash: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg=) 8: F40rkkhDW3ybCB_12cIOKOyXk08.roa (hash: h+hLlHz7DDayf/In7Q6RDRACl8fHTXkiC3/X/Kl3h7E=) 9: Jtp72CS2jEm3lTCDgWP7039dKYg.roa (hash: Q1Hpm3kD459iodRBV3umbkyn+j4+wiimsCk0/+2lO84=) 10: Ke0VSjrkP1jgta_WS5ntQtfKR38.roa (hash: yxWTZVrICzskJJpD6AIg7gNqPSzszPgc+Bf6OnBQWQw=) 11: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (hash: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4=) 12: LnDxIxD-hluuct808CIO9EDyMIU.roa (hash: BcxRwhFwjkIGGKDrrvqL77SCEYThrU0rRvnjjzU14s8=) 13: MAhbKgRlvoF4_D9KUePJuDoAmS4.roa (hash: ZxoAbFForFx0WnVahVEJoAAhiXTlHQB8gaScqzkZ4UU=) 14: MOd1w7flMfCwv3SyFF--8p3elzE.roa (hash: EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=) 15: McPz5S5PBhTWxGifH8fs1_NS2jU.roa (hash: KEIARx1I4vqfMuZP+WJZ2f9AE00BEAWPF5jqTraiMB4=) 16: RY84_ZI7xoALeQIscSY6f9kpXlA.roa (hash: z6waEn1aCDURcxsyuA7fD4JPp6J8E7kzdN0orgB/LDk=) 17: Rlj4VlWfwkfz6GkH-OueIIaSCuc.roa (hash: ii4MZTYhkg0ytZp/Vdsah05JAy4dduK8Ytc1ySn7mXs=) 18: SoVFcNc1lU_1SEfGUkw_ciUcpAQ.roa (hash: I90mbwCIchHVNf7BLD+pAvrY/vzh+76mAoOiyMR3xRk=) 19: Wu5XKk4A36HO6OHJ1FPfD_SFW8Q.roa (hash: BzMn4OoTVBTxxNmlLvxwZaB3pPDI9UpM0YGpy6OvehA=) 20: Zkjg3hn61JFL00ei8OTWJjwR5z4.roa (hash: 588yrYLogN7emBldqJ08eH+eoXXQ8TYe9+BBfSEy2Vs=) 21: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (hash: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y=) 22: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (hash: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I=) 23: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (hash: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME=) 24: icBjslH5ERqmqpU1USzkMdhkEjI.roa (hash: wMYjLB/rE9ycsdnG1IDtuH3D8/HkxmDfxjH3cnkuOvM=) 25: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (hash: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU=) 26: kZx2IxBD5HOKLTGnyUCslhrff3s.roa (hash: Vt6Cc39kOpNIWweAmZd5zbwANosQpiB4xiB1jbdvahg=) 27: lnpel8l0zvHfaReJqv_lxZ_B7Z0.roa (hash: kesVe4OXCvVFnF3zB6nMGPK6v8LEXAUi0VV82fdI66M=) 28: mW7TNNKOcx8Asff3LA5hFbwolus.roa (hash: C0qSa3VXz/TpxHHnVA5yQuQAXKAh2TZvyE/riAp87yc=) 29: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: +X9ZHpAWhSf7hEOJWzZH5BjXe54jRWiwipuzrk49Jsc=) 30: n50HYNvX301s5gEUcCw5M0DpFnA.roa (hash: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU=) 31: nDe-qNhnM7uiI6FvKA4tpUFbkwY.roa (hash: sTzHHKSFfupRttU47uock1mVJaqqApZAZwwhHCKIkSw=) 32: nWWjV-FqWRviIQq1sbPjpszS4J8.roa (hash: s/947r8f3drp/IQDPbvU6DHKccsz6mcfNtNyGVLNQ+I=) 33: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (hash: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4=) 34: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (hash: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8=) 35: xNY2gUvtLtxYfY6gU7_3js38DyA.roa (hash: 3CcNNA7q88gUr/9Ae4mjWpxXE8KozaNGoTSekGYA77Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:72:20:82:c5:50:b2:fb:50:f3:2a:a4:e6:f1:00:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Mar 26 00:01:23 2026 GMT Not After : Mar 27 00:01:23 2026 GMT Subject: CN=716ec0b14bcea975aa8827206f95a7ab9d4d1356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:25:67:c6:95:0e:2a:84:e4:ee:77:a2:be: 1f:7c:46:ad:4c:6c:b6:67:19:bf:34:98:e6:b3:1d: 45:9e:82:6f:56:53:0d:4b:2d:65:12:57:54:8c:a5: 88:9c:90:27:10:c5:1f:2a:46:65:35:8d:96:ac:bd: b9:47:52:a4:24:4d:d6:dc:f2:ff:fe:3a:50:3e:72: ff:d2:b9:ac:10:cd:37:2f:2e:40:6e:7e:e3:29:3a: 1b:75:92:fa:8d:42:67:10:0f:60:b4:b2:32:5e:5e: f4:97:85:71:cd:31:4f:f3:7a:58:47:94:55:aa:59: 9b:48:a4:7b:fe:93:6a:fc:cf:b7:06:7f:27:58:55: 45:69:32:ed:dc:ee:92:ee:a7:26:c4:2f:14:e0:e0: 9d:45:82:ca:75:8f:12:a7:35:dd:15:e5:39:a5:70: e7:e7:40:13:7d:13:bd:96:09:0d:c2:d4:66:fd:37: 14:28:e9:1f:6b:4c:5c:98:2b:2c:b5:dd:41:01:74: 61:d5:e2:0c:c1:8a:83:35:2e:9b:2e:6b:8c:0f:24: 8e:a2:0b:05:cb:5f:18:e8:51:45:1f:4f:ae:62:ef: e6:40:06:a2:8e:69:09:87:78:59:87:31:f6:af:82: cb:f7:52:db:98:f1:45:44:e0:43:1b:ec:71:7c:a5: 9f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6E:C0:B1:4B:CE:A9:75:AA:88:27:20:6F:95:A7:AB:9D:4D:13:56 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ff:70:1e:3f:98:c0:4e:3b:be:c5:7a:b6:81:3d:5c:51:50: c6:75:30:2b:03:a8:63:40:07:e4:5c:0d:b3:98:ee:7f:8d:ed: 1c:35:02:ef:7f:5b:be:f6:67:45:d5:5c:e4:f3:bf:72:d1:04: 5f:03:23:94:3e:cc:5c:e3:9f:c4:94:6d:c5:8b:71:bb:c3:4f: eb:db:22:82:06:e9:03:be:af:2a:e2:9a:b7:e7:96:bc:a0:5a: c5:50:41:08:1d:6e:80:55:58:d6:f7:0d:ee:dd:2a:11:93:fb: a6:1b:80:ff:20:4f:15:eb:a4:8f:f7:99:1e:fc:1a:7d:65:0c: 13:2e:0d:07:2f:a1:45:54:01:54:b2:ba:0c:c4:41:50:37:70: 39:77:3a:a4:dd:70:89:58:97:aa:61:0a:4d:c2:ad:77:47:ec: a6:56:04:2e:5f:31:d5:6e:a1:6b:84:f9:04:c5:48:31:09:26: e5:5c:31:64:39:ab:95:5f:66:75:df:3c:4e:3f:72:c3:fd:87: c9:2f:0d:7b:ff:fb:f1:d8:2f:4e:ed:6a:e8:88:15:53:00:6a: 17:19:49:aa:85:19:91:7e:57:91:9a:8d:49:2e:69:88:b4:4b: 60:eb:de:d6:b5:01:51:80:8a:a1:cb:f9:22:44:e3:7b:93:7a: d6:c7:58:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nciCCxVCy+1DzKqTm8QDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMzI2MDAwMTIzWhcNMjYwMzI3MDAwMTIzWjAzMTEwLwYDVQQD Eyg3MTZlYzBiMTRiY2VhOTc1YWE4ODI3MjA2Zjk1YTdhYjlkNGQxMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfolZ8aVDiqE5O53or4ffEatTGy2 Zxm/NJjmsx1FnoJvVlMNSy1lEldUjKWInJAnEMUfKkZlNY2WrL25R1KkJE3W3PL/ /jpQPnL/0rmsEM03Ly5Abn7jKTobdZL6jUJnEA9gtLIyXl70l4VxzTFP83pYR5RV qlmbSKR7/pNq/M+3Bn8nWFVFaTLt3O6S7qcmxC8U4OCdRYLKdY8SpzXdFeU5pXDn 50ATfRO9lgkNwtRm/TcUKOkfa0xcmCsstd1BAXRh1eIMwYqDNS6bLmuMDySOogsF y18Y6FFFH0+uYu/mQAaijmkJh3hZhzH2r4LL91LbmPFFROBDG+xxfKWfSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFuwLFLzql1qognIG+Vp6udTRNWMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvP9wHj+Y wE47vsV6toE9XFFQxnUwKwOoY0AH5FwNs5juf43tHDUC739bvvZnRdVc5PO/ctEE XwMjlD7MXOOfxJRtxYtxu8NP69siggbpA76vKuKat+eWvKBaxVBBCB1ugFVY1vcN 7t0qEZP7phuA/yBPFeukj/eZHvwafWUMEy4NBy+hRVQBVLK6DMRBUDdwOXc6pN1w iViXqmEKTcKtd0fsplYELl8x1W6ha4T5BMVIMQkm5VwxZDmrlV9mdd88Tj9yw/2H yS8Ne//78dgvTu1q6IgVUwBqFxlJqoUZkX5XkZqNSS5piLRLYOve1rUBUYCKocv5 IkTje5N61sdYWQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:16:46 2026 by rpki-client