$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft File: mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json) Hash identifier: yD3wQfGav52u0uLhb5vxlDPkNDVz7/BpyKK/9wZJKQg= Subject key identifier: 3D:33:D7:EB:FB:7C:20:F3:CE:23:68:84:B4:07:09:7F:4D:C7:52:53 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019D29610E507AB62D01A9F79D0E93F12828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft Manifest number: 18B6 Signing time: Thu 26 Mar 2026 09:01:59 +0000 Manifest this update: Thu 26 Mar 2026 09:01:59 +0000 Manifest next update: Fri 27 Mar 2026 09:01:59 +0000 Files and hashes: 1: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (hash: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0=) 2: 2yaXAAUSdtsPMaSBJFquEdDTT6k.roa (hash: judwS/WZsJiXUyPGTQqvtLBMK0N9HxSeMb7YxOm0ElY=) 3: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (hash: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4=) 4: 6d_ENWzH-VQ6PZSxBVnrr_FPch4.roa (hash: nLEVzgKnOcDJKPh426JAlzQMVVXnAa8GP6UiExx+ycU=) 5: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (hash: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU=) 6: CO3NGBtj6lvSDwNx7qgisnxcpZE.roa (hash: Ta+b1EmbPlRx8CBP3A/a0A01hRd22nzH/W3OVEU0ya4=) 7: DehND8NWso8fnWINtOcuecHBpxM.roa (hash: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg=) 8: F40rkkhDW3ybCB_12cIOKOyXk08.roa (hash: h+hLlHz7DDayf/In7Q6RDRACl8fHTXkiC3/X/Kl3h7E=) 9: Jtp72CS2jEm3lTCDgWP7039dKYg.roa (hash: Q1Hpm3kD459iodRBV3umbkyn+j4+wiimsCk0/+2lO84=) 10: Ke0VSjrkP1jgta_WS5ntQtfKR38.roa (hash: yxWTZVrICzskJJpD6AIg7gNqPSzszPgc+Bf6OnBQWQw=) 11: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (hash: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4=) 12: LnDxIxD-hluuct808CIO9EDyMIU.roa (hash: BcxRwhFwjkIGGKDrrvqL77SCEYThrU0rRvnjjzU14s8=) 13: MAhbKgRlvoF4_D9KUePJuDoAmS4.roa (hash: ZxoAbFForFx0WnVahVEJoAAhiXTlHQB8gaScqzkZ4UU=) 14: MOd1w7flMfCwv3SyFF--8p3elzE.roa (hash: EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=) 15: McPz5S5PBhTWxGifH8fs1_NS2jU.roa (hash: KEIARx1I4vqfMuZP+WJZ2f9AE00BEAWPF5jqTraiMB4=) 16: RY84_ZI7xoALeQIscSY6f9kpXlA.roa (hash: z6waEn1aCDURcxsyuA7fD4JPp6J8E7kzdN0orgB/LDk=) 17: Rlj4VlWfwkfz6GkH-OueIIaSCuc.roa (hash: ii4MZTYhkg0ytZp/Vdsah05JAy4dduK8Ytc1ySn7mXs=) 18: SoVFcNc1lU_1SEfGUkw_ciUcpAQ.roa (hash: I90mbwCIchHVNf7BLD+pAvrY/vzh+76mAoOiyMR3xRk=) 19: Wu5XKk4A36HO6OHJ1FPfD_SFW8Q.roa (hash: BzMn4OoTVBTxxNmlLvxwZaB3pPDI9UpM0YGpy6OvehA=) 20: Zkjg3hn61JFL00ei8OTWJjwR5z4.roa (hash: 588yrYLogN7emBldqJ08eH+eoXXQ8TYe9+BBfSEy2Vs=) 21: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (hash: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y=) 22: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (hash: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I=) 23: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (hash: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME=) 24: icBjslH5ERqmqpU1USzkMdhkEjI.roa (hash: wMYjLB/rE9ycsdnG1IDtuH3D8/HkxmDfxjH3cnkuOvM=) 25: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (hash: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU=) 26: kZx2IxBD5HOKLTGnyUCslhrff3s.roa (hash: Vt6Cc39kOpNIWweAmZd5zbwANosQpiB4xiB1jbdvahg=) 27: lnpel8l0zvHfaReJqv_lxZ_B7Z0.roa (hash: kesVe4OXCvVFnF3zB6nMGPK6v8LEXAUi0VV82fdI66M=) 28: mW7TNNKOcx8Asff3LA5hFbwolus.roa (hash: C0qSa3VXz/TpxHHnVA5yQuQAXKAh2TZvyE/riAp87yc=) 29: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: A7gli36quHBSlkKOtjEqtslA5s+nrHLzTRLWh8YcyyM=) 30: n50HYNvX301s5gEUcCw5M0DpFnA.roa (hash: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU=) 31: nDe-qNhnM7uiI6FvKA4tpUFbkwY.roa (hash: sTzHHKSFfupRttU47uock1mVJaqqApZAZwwhHCKIkSw=) 32: nWWjV-FqWRviIQq1sbPjpszS4J8.roa (hash: s/947r8f3drp/IQDPbvU6DHKccsz6mcfNtNyGVLNQ+I=) 33: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (hash: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4=) 34: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (hash: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8=) 35: xNY2gUvtLtxYfY6gU7_3js38DyA.roa (hash: 3CcNNA7q88gUr/9Ae4mjWpxXE8KozaNGoTSekGYA77Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:61:0e:50:7a:b6:2d:01:a9:f7:9d:0e:93:f1:28:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Mar 26 09:01:59 2026 GMT Not After : Mar 27 09:01:59 2026 GMT Subject: CN=3d33d7ebfb7c20f3ce236884b407097f4dc75253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:6c:e4:6b:e3:4f:7f:66:d8:92:da:14:d4: 99:03:2f:b6:36:44:8f:6d:cc:b6:13:13:cf:86:bc: bc:ac:56:45:7d:e9:48:92:7c:03:08:26:ef:b5:2d: f1:35:75:94:5c:d8:de:f6:20:f5:1a:3c:26:38:3b: c9:2f:e0:1d:0a:bb:d8:a2:00:cb:a8:14:e2:f3:68: 7b:86:5c:b3:03:da:12:89:e8:c9:11:3b:12:ac:07: 67:1f:92:76:ea:20:bb:8f:8a:7f:11:be:03:31:8c: ae:1b:02:d8:b0:13:48:ca:17:15:8b:1c:cd:ae:60: 8e:f5:cb:c2:fc:c3:7e:44:50:0b:85:f4:b8:bc:f4: fe:89:91:45:17:49:e2:1b:4c:2c:e3:35:2d:9d:67: 67:e6:bc:b1:fb:2e:4b:10:87:96:c9:7b:9c:da:fb: 5a:2b:4e:7a:bb:cb:32:da:18:d0:d3:e3:41:1a:77: 10:c3:50:e0:99:6a:c3:c2:5b:c4:37:44:08:59:19: 79:64:23:c6:94:d6:42:ad:cd:52:39:44:6b:4e:99: cc:0a:94:bb:ad:5b:0a:b6:4d:00:ef:6e:4b:8c:2f: 82:15:77:55:28:64:bf:cd:4c:b7:e2:7e:55:11:60: 38:ad:89:2c:21:fd:e7:ae:37:05:e2:e1:f8:43:51: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:33:D7:EB:FB:7C:20:F3:CE:23:68:84:B4:07:09:7F:4D:C7:52:53 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:21:0e:19:4d:77:3e:0d:0e:98:30:40:20:e7:44:98:50:18: 88:8c:21:5e:b6:ff:0c:88:55:40:d2:d8:5f:1e:de:f7:44:2b: 7e:f1:8c:0d:06:61:cd:07:49:d5:43:59:5b:97:e1:51:72:82: db:59:0b:e0:f3:54:1e:50:09:6d:f3:d0:16:5c:7e:aa:aa:c8: 47:2f:01:0b:cc:62:87:a4:d6:45:b8:de:90:d4:96:64:bc:62: ca:9e:a4:e5:b8:f6:23:9a:00:54:ca:09:dc:7f:81:10:bf:1d: 8e:6c:07:97:aa:de:4f:bd:b5:1f:61:6b:e8:1a:fb:51:57:fc: 96:02:82:a6:eb:1f:02:96:e6:d5:4f:00:32:89:1b:9d:07:1e: 13:9d:cf:89:b4:34:c9:0c:29:06:8e:85:3f:80:aa:65:0e:39: b4:52:1c:39:0b:a0:8b:0f:d1:17:3f:11:37:32:42:cb:fc:f6: c2:23:59:d4:a2:f0:6f:ea:2f:55:14:95:e5:93:7d:f8:3f:db: 11:c6:4d:1e:b4:a0:d1:66:fe:bc:a9:2a:3c:a5:95:45:31:70: 9b:03:5f:fe:03:39:0a:86:f5:f7:3e:d0:17:3c:6a:da:08:88: 1f:84:24:90:34:aa:2d:e9:5d:c0:e2:15:04:be:d4:43:15:c6: 65:1e:12:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pYQ5QerYtAan3nQ6T8SgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMzI2MDkwMTU5WhcNMjYwMzI3MDkwMTU5WjAzMTEwLwYDVQQD EygzZDMzZDdlYmZiN2MyMGYzY2UyMzY4ODRiNDA3MDk3ZjRkYzc1MjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHxs5GvjT39m2JLaFNSZAy+2NkSP bcy2ExPPhry8rFZFfelIknwDCCbvtS3xNXWUXNje9iD1GjwmODvJL+AdCrvYogDL qBTi82h7hlyzA9oSiejJETsSrAdnH5J26iC7j4p/Eb4DMYyuGwLYsBNIyhcVixzN rmCO9cvC/MN+RFALhfS4vPT+iZFFF0niG0ws4zUtnWdn5ryx+y5LEIeWyXuc2vta K056u8sy2hjQ0+NBGncQw1DgmWrDwlvEN0QIWRl5ZCPGlNZCrc1SOURrTpnMCpS7 rVsKtk0A725LjC+CFXdVKGS/zUy34n5VEWA4rYksIf3nrjcF4uH4Q1H2cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0z1+v7fCDzziNohLQHCX9Nx1JTMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyEOGU13 Pg0OmDBAIOdEmFAYiIwhXrb/DIhVQNLYXx7e90QrfvGMDQZhzQdJ1UNZW5fhUXKC 21kL4PNUHlAJbfPQFlx+qqrIRy8BC8xih6TWRbjekNSWZLxiyp6k5bj2I5oAVMoJ 3H+BEL8djmwHl6reT721H2Fr6Br7UVf8lgKCpusfApbm1U8AMokbnQceE53PibQ0 yQwpBo6FP4CqZQ45tFIcOQugiw/RFz8RNzJCy/z2wiNZ1KLwb+ovVRSV5ZN9+D/b EcZNHrSg0Wb+vKkqPKWVRTFwmwNf/gM5Cob19z7QFzxq2giIH4QkkDSqLeldwOIV BL7UQxXGZR4SZw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:24 2026 by rpki-client