$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json) Hash identifier: SQ04QSAVJR2oUO069rvYaQlJVc6V3n99NTSNlceW2t0= Subject key identifier: 68:80:4D:5E:1C:D2:CB:C8:3C:FC:95:7B:76:53:9C:D6:5C:99:27:EA Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 019D26284CAEA9AAD8EDFC7888BF6809E1E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft Manifest number: 1895 Signing time: Wed 25 Mar 2026 18:01:08 +0000 Manifest this update: Wed 25 Mar 2026 18:01:08 +0000 Manifest next update: Thu 26 Mar 2026 18:01:08 +0000 Files and hashes: 1: 0kMqt-CPfgtjYdaZtK0l7K4Ure0.roa (hash: KGaaMrvGH34iblBGGLnwSzs+JaREEUUOumEoCywsnd8=) 2: 9XLB2pGNOPbljEVUBZRkKE3gDsg.roa (hash: yFaKRkjlVIE/J3Dt9Swl2M9fjwmRRjL86LSGNcqFa2o=) 3: FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa (hash: xP/yiKvXIB14qyF8rqguFru71C1q8PJ2Qa43mcie0iQ=) 4: JNZkNs3RJOo2AnXmnTbKg_X2Nm8.roa (hash: +pMZwPRauFNHIAoy64TMZM699q7Sq6HNlbnD+XOQxn4=) 5: MZB1UqbipBpVhmhIAAIPCSUm9tE.roa (hash: zYMw6mBm4z/9+C34n4tABKKlDK/AXIGy+SsUTUFBU8w=) 6: TaW1xof2_FS-y1oMd64DHywlLM8.roa (hash: wpTtq6XsXybW5bFqRgDMjejQMJ2CiWnuwczXgfVlZ+M=) 7: fXpzmIEAnbtmNcx0rqptqG5QnQg.roa (hash: 5iU3booTwnLztG+lAWV3dZKWKwiQOKD5sGh5Wy5gwWk=) 8: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: Ghg5ALE42zvVua7Y4K7p+XZKxpt9Fbm2FlwG6UmLyJI=) 9: hTBE-AfXHoIR0eXyurn7fldr3Uw.roa (hash: h5l8+NwGnElycHcZimGiomdSgVS5UzfYH7eaKNxeRxk=) 10: mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa (hash: HG8VsquQ+FnSEapJw68ywW3TpFwS/T5f8VjxgSgr5P4=) 11: o1g6d4IpK0z2pKch2obiVEvKpo0.roa (hash: ogKpeh7KtOQ7CbX8yF/mDVAEfUbLY6d/B58Q/R7K4YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:28:4c:ae:a9:aa:d8:ed:fc:78:88:bf:68:09:e1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Mar 25 18:01:08 2026 GMT Not After : Mar 26 18:01:08 2026 GMT Subject: CN=68804d5e1cd2cbc83cfc957b76539cd65c9927ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5b:7f:24:74:28:00:8c:62:81:ec:07:9c:46: 3e:a5:9e:19:c5:f0:28:ca:bd:1d:9c:a8:5a:55:a9: 37:da:1b:c6:56:77:70:d2:c9:16:ac:85:1d:c5:18: 7e:5b:52:41:23:64:8d:a3:d7:7c:94:b4:35:34:7d: e5:c1:24:5c:fd:6d:46:6f:7b:d7:f5:d3:57:76:71: b8:4e:df:5c:d9:c5:d9:a7:0c:f7:86:0b:32:4c:c6: ca:bb:ab:37:b8:0b:17:fe:12:d9:63:e0:80:67:26: f1:91:74:f3:c5:dd:86:88:12:97:e5:85:69:3f:9f: f0:8c:e7:55:77:90:03:93:c2:e9:8a:69:4f:94:33: 17:b8:f0:c7:b0:85:12:fc:55:48:b0:26:d7:f0:09: 01:89:42:35:38:9c:93:ae:29:06:91:f5:5b:14:d9: 72:1c:ce:9d:46:6f:b7:5b:0f:a3:5c:1a:fb:8e:dd: ca:ac:95:3d:d3:1e:1e:59:36:d0:30:df:76:31:25: a3:15:81:76:73:61:cf:8b:32:ab:d4:89:26:5a:95: 4e:3b:26:75:ce:7b:10:43:c7:bd:d8:06:26:cf:fe: 03:b4:11:b1:f9:b1:f0:0a:d2:95:89:3c:d5:a2:f9: 5a:a6:ed:01:66:7d:a1:67:fc:1c:f6:40:3f:4b:ac: fa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:80:4D:5E:1C:D2:CB:C8:3C:FC:95:7B:76:53:9C:D6:5C:99:27:EA X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:99:69:bf:df:13:39:24:70:62:2b:77:df:c3:d7:7b:68:ed: 38:a3:b7:a4:d1:e8:75:12:d5:18:26:4b:37:d3:8b:62:33:d5: 69:6a:6c:66:ea:ce:22:d9:e8:49:3c:e3:00:be:d6:8f:ab:31: 10:79:85:0c:75:3a:42:b1:75:ca:30:2a:d7:62:2e:c1:f1:4f: 14:fb:19:4f:01:ac:19:cb:69:7f:e6:7e:b5:40:7c:ad:f6:1b: 1a:8f:88:7d:dd:a0:bf:44:6e:e9:73:b8:3f:86:36:fa:83:59: c9:51:61:b1:00:03:b5:39:f1:e4:8f:39:54:54:6b:01:03:cf: 3e:7c:c9:3d:f3:bb:45:35:1d:d7:82:2e:07:09:5d:c7:b2:90: 50:8f:15:e8:18:41:82:aa:b8:1a:9f:32:48:0d:c0:01:b3:53: d2:75:0a:e3:70:bb:c0:b7:c8:a8:5e:85:22:5d:a3:f3:e4:6a: ab:ca:1c:18:a3:bc:99:41:6c:84:37:0f:ad:57:4e:c5:c7:27: e8:6d:2f:75:07:2a:c5:7a:d6:ca:29:66:65:27:10:b1:c7:25: 44:ba:5f:da:f4:1a:90:1a:3f:b1:70:0f:45:ac:08:31:df:11: f8:f2:82:ce:8b:d1:3a:a9:92:1e:37:a9:bb:41:9c:35:8b:93: c6:8b:4c:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mKEyuqarY7fx4iL9oCeHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwMzI1MTgwMTA4WhcNMjYwMzI2MTgwMTA4WjAzMTEwLwYDVQQD Eyg2ODgwNGQ1ZTFjZDJjYmM4M2NmYzk1N2I3NjUzOWNkNjVjOTkyN2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1t/JHQoAIxigewHnEY+pZ4ZxfAo yr0dnKhaVak32hvGVndw0skWrIUdxRh+W1JBI2SNo9d8lLQ1NH3lwSRc/W1Gb3vX 9dNXdnG4Tt9c2cXZpwz3hgsyTMbKu6s3uAsX/hLZY+CAZybxkXTzxd2GiBKX5YVp P5/wjOdVd5ADk8LpimlPlDMXuPDHsIUS/FVIsCbX8AkBiUI1OJyTrikGkfVbFNly HM6dRm+3Ww+jXBr7jt3KrJU90x4eWTbQMN92MSWjFYF2c2HPizKr1IkmWpVOOyZ1 znsQQ8e92AYmz/4DtBGx+bHwCtKViTzVovlapu0BZn2hZ/wc9kA/S6z6awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiATV4c0svIPPyVe3ZTnNZcmSfqMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZlpv98T OSRwYit338PXe2jtOKO3pNHodRLVGCZLN9OLYjPVaWpsZurOItnoSTzjAL7Wj6sx EHmFDHU6QrF1yjAq12IuwfFPFPsZTwGsGctpf+Z+tUB8rfYbGo+Ifd2gv0Ru6XO4 P4Y2+oNZyVFhsQADtTnx5I85VFRrAQPPPnzJPfO7RTUd14IuBwldx7KQUI8V6BhB gqq4Gp8ySA3AAbNT0nUK43C7wLfIqF6FIl2j8+Rqq8ocGKO8mUFshDcPrVdOxccn 6G0vdQcqxXrWyilmZScQscclRLpf2vQakBo/sXAPRawIMd8R+PKCzovROqmSHjep u0GcNYuTxotMjA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:35:03 2026 by rpki-client