$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json) Hash identifier: OZ4IC9elwRe7Ig6pS4cwfJRzlTTYkhV3gObNFqaQTpQ= Subject key identifier: 8D:6C:C8:1F:8B:B2:AB:1A:F4:65:5A:C0:C0:75:51:6F:F9:D7:60:BF Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 019E1D59A479CAE63423EBF9F50EBB89A01A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft Manifest number: 1915 Signing time: Tue 12 May 2026 18:01:14 +0000 Manifest this update: Tue 12 May 2026 18:01:14 +0000 Manifest next update: Wed 13 May 2026 18:01:14 +0000 Files and hashes: 1: 0kMqt-CPfgtjYdaZtK0l7K4Ure0.roa (hash: KGaaMrvGH34iblBGGLnwSzs+JaREEUUOumEoCywsnd8=) 2: 9XLB2pGNOPbljEVUBZRkKE3gDsg.roa (hash: yFaKRkjlVIE/J3Dt9Swl2M9fjwmRRjL86LSGNcqFa2o=) 3: FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa (hash: xP/yiKvXIB14qyF8rqguFru71C1q8PJ2Qa43mcie0iQ=) 4: JNZkNs3RJOo2AnXmnTbKg_X2Nm8.roa (hash: +pMZwPRauFNHIAoy64TMZM699q7Sq6HNlbnD+XOQxn4=) 5: MZB1UqbipBpVhmhIAAIPCSUm9tE.roa (hash: zYMw6mBm4z/9+C34n4tABKKlDK/AXIGy+SsUTUFBU8w=) 6: TaW1xof2_FS-y1oMd64DHywlLM8.roa (hash: wpTtq6XsXybW5bFqRgDMjejQMJ2CiWnuwczXgfVlZ+M=) 7: fXpzmIEAnbtmNcx0rqptqG5QnQg.roa (hash: 5iU3booTwnLztG+lAWV3dZKWKwiQOKD5sGh5Wy5gwWk=) 8: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: TD/AR9izkbXoSnN1e18S+2DQrD7nec/NQ73RxfBSw3c=) 9: hTBE-AfXHoIR0eXyurn7fldr3Uw.roa (hash: h5l8+NwGnElycHcZimGiomdSgVS5UzfYH7eaKNxeRxk=) 10: mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa (hash: HG8VsquQ+FnSEapJw68ywW3TpFwS/T5f8VjxgSgr5P4=) 11: o1g6d4IpK0z2pKch2obiVEvKpo0.roa (hash: ogKpeh7KtOQ7CbX8yF/mDVAEfUbLY6d/B58Q/R7K4YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:a4:79:ca:e6:34:23:eb:f9:f5:0e:bb:89:a0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: May 12 18:01:14 2026 GMT Not After : May 13 18:01:14 2026 GMT Subject: CN=8d6cc81f8bb2ab1af4655ac0c075516ff9d760bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2b:02:03:96:a5:0e:3d:fd:4c:90:59:31:3c: 65:cf:61:02:e4:e7:92:f4:68:80:1d:78:09:0e:79: 4b:6e:3d:9e:21:3d:0e:c5:4b:1c:05:aa:a5:d3:b1: 5c:bf:f9:de:e5:01:4c:d6:9d:6c:bd:6d:20:4d:cd: cf:86:7d:c8:b7:73:2b:f8:6f:ff:80:b6:e3:b9:bf: 3f:52:5c:17:07:f3:8f:8e:ab:be:3b:5e:c5:7a:a7: f5:12:ab:c0:9d:bd:64:39:48:a1:fb:79:5b:d9:2c: 68:86:dd:e5:37:dc:95:38:d8:ab:b5:17:19:db:53: 59:46:21:18:22:ff:02:67:c2:48:a5:8b:9b:0b:0f: fe:67:70:21:58:22:f9:5e:bd:0f:30:7a:f5:4b:68: 1a:29:0f:6c:65:af:b0:4b:69:b5:14:2d:c2:b3:8d: a2:dd:be:2f:1e:5d:09:27:75:75:a1:1b:9a:13:73: 7f:6b:e8:23:89:10:9a:80:ec:d6:9e:76:e9:8d:58: c9:80:e0:06:b8:d8:cf:6b:41:f8:b0:6a:0c:f6:7d: 93:39:3c:bd:75:0a:ae:9e:23:15:06:8e:91:bb:05: 50:32:68:b9:aa:84:e7:9b:30:81:21:17:7c:ce:7d: 8f:e2:9c:9c:e5:8a:9e:8f:5b:45:52:50:7b:19:81: 35:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6C:C8:1F:8B:B2:AB:1A:F4:65:5A:C0:C0:75:51:6F:F9:D7:60:BF X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c9:e2:aa:99:2a:62:4d:fc:75:87:56:67:2b:ed:76:6b:70: ec:f5:e7:bf:54:cb:f3:2d:13:6a:94:14:3e:81:f7:b3:e0:eb: 01:bb:55:33:11:75:a5:0f:59:41:36:1f:99:08:00:f4:44:cf: 4a:19:15:15:82:11:a8:9d:35:88:f0:85:63:9d:f9:cc:63:ea: c3:bf:c1:88:54:0e:69:f8:cf:96:92:d0:c8:75:73:74:a3:80: cb:0e:68:36:3c:d4:93:3a:f3:6f:98:f6:8d:fc:7c:ed:da:8f: ba:54:08:bf:57:db:9c:6d:4a:cf:f9:27:ac:31:5e:24:95:ba: df:b5:fa:10:7f:f1:de:1d:03:98:b3:f0:e8:9a:76:4d:1c:6b: 94:52:e1:a6:84:b3:18:d1:2a:3e:32:ab:39:fe:11:81:46:0d: 1b:46:10:bf:96:d6:29:24:81:0c:14:89:d0:f5:44:39:24:b3: a0:f0:d8:3d:7e:4f:a0:9b:82:a9:5f:07:76:00:d8:f0:7a:84: cb:8e:ac:f9:f2:f0:a8:fb:53:3d:a3:dc:df:48:47:d0:d1:78: 9c:db:97:b2:c4:97:df:c9:33:b6:04:ba:21:35:9a:a7:b8:d6: 3d:d2:09:10:0e:d3:27:ce:c8:96:3d:dc:15:39:16:5d:5c:89: b4:08:1a:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWaR5yuY0I+v59Q67iaAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwNTEyMTgwMTE0WhcNMjYwNTEzMTgwMTE0WjAzMTEwLwYDVQQD Eyg4ZDZjYzgxZjhiYjJhYjFhZjQ2NTVhYzBjMDc1NTE2ZmY5ZDc2MGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyisCA5alDj39TJBZMTxlz2EC5OeS 9GiAHXgJDnlLbj2eIT0OxUscBaql07Fcv/ne5QFM1p1svW0gTc3Phn3It3Mr+G// gLbjub8/UlwXB/OPjqu+O17Feqf1EqvAnb1kOUih+3lb2Sxoht3lN9yVONirtRcZ 21NZRiEYIv8CZ8JIpYubCw/+Z3AhWCL5Xr0PMHr1S2gaKQ9sZa+wS2m1FC3Cs42i 3b4vHl0JJ3V1oRuaE3N/a+gjiRCagOzWnnbpjVjJgOAGuNjPa0H4sGoM9n2TOTy9 dQquniMVBo6RuwVQMmi5qoTnmzCBIRd8zn2P4pyc5Yqej1tFUlB7GYE1jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1syB+Lsqsa9GVawMB1UW/512C/MB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8niqpkq Yk38dYdWZyvtdmtw7PXnv1TL8y0TapQUPoH3s+DrAbtVMxF1pQ9ZQTYfmQgA9ETP ShkVFYIRqJ01iPCFY535zGPqw7/BiFQOafjPlpLQyHVzdKOAyw5oNjzUkzrzb5j2 jfx87dqPulQIv1fbnG1Kz/knrDFeJJW637X6EH/x3h0DmLPw6Jp2TRxrlFLhpoSz GNEqPjKrOf4RgUYNG0YQv5bWKSSBDBSJ0PVEOSSzoPDYPX5PoJuCqV8HdgDY8HqE y46s+fLwqPtTPaPc30hH0NF4nNuXssSX38kztgS6ITWap7jWPdIJEA7TJ87Ilj3c FTkWXVyJtAgatg== -----END CERTIFICATE-----Generated at Wed May 13 01:23:22 2026 by rpki-client