$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json) Hash identifier: mzrSavJBDjCJB69+UIfmIVIxOQWWzPa9tsSy+DEdlOY= Subject key identifier: 5A:DC:84:E1:F1:83:91:7B:7F:F9:6B:D5:1E:50:3D:A6:7F:72:B3:8A Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 01A0D15BAB1BB4E52754A681322799463A29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft Manifest number: 1A7D Signing time: Thu 24 Sep 2026 03:00:40 +0000 Manifest this update: Thu 24 Sep 2026 03:00:40 +0000 Manifest next update: Fri 25 Sep 2026 03:00:40 +0000 Files and hashes: 1: 9XLB2pGNOPbljEVUBZRkKE3gDsg.roa (hash: yFaKRkjlVIE/J3Dt9Swl2M9fjwmRRjL86LSGNcqFa2o=) 2: FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa (hash: xP/yiKvXIB14qyF8rqguFru71C1q8PJ2Qa43mcie0iQ=) 3: Gjz0mygWmIZxLbOtZYh8gSNFZzY.roa (hash: h0qTYnLbIysZ9bLj3Ec2bVq0IWOpYfY2WhPaY9ABSWU=) 4: MZB1UqbipBpVhmhIAAIPCSUm9tE.roa (hash: zYMw6mBm4z/9+C34n4tABKKlDK/AXIGy+SsUTUFBU8w=) 5: TaW1xof2_FS-y1oMd64DHywlLM8.roa (hash: wpTtq6XsXybW5bFqRgDMjejQMJ2CiWnuwczXgfVlZ+M=) 6: fXpzmIEAnbtmNcx0rqptqG5QnQg.roa (hash: 5iU3booTwnLztG+lAWV3dZKWKwiQOKD5sGh5Wy5gwWk=) 7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: avBwCphc2TNZwhWuA8pbzvXdpuuv0yN5eoE+ygTSBg0=) 8: hTBE-AfXHoIR0eXyurn7fldr3Uw.roa (hash: h5l8+NwGnElycHcZimGiomdSgVS5UzfYH7eaKNxeRxk=) 9: mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa (hash: HG8VsquQ+FnSEapJw68ywW3TpFwS/T5f8VjxgSgr5P4=) 10: o1g6d4IpK0z2pKch2obiVEvKpo0.roa (hash: ogKpeh7KtOQ7CbX8yF/mDVAEfUbLY6d/B58Q/R7K4YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:5b:ab:1b:b4:e5:27:54:a6:81:32:27:99:46:3a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Sep 24 03:00:40 2026 GMT Not After : Sep 25 03:00:40 2026 GMT Subject: CN=5adc84e1f183917b7ff96bd51e503da67f72b38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:b2:4f:9b:f1:bb:35:20:c4:2f:69:aa:5f: d0:c8:66:b9:89:0b:92:29:7a:c6:b2:a7:47:23:7e: c5:e3:53:20:c7:47:7b:56:2b:92:91:11:53:5b:ff: 98:6a:67:1e:cf:ce:5e:1d:6b:81:c3:63:06:e1:c0: 9e:b9:7e:5f:7c:62:7c:5a:5e:7a:8e:a5:39:5d:0c: c6:2a:ce:f0:32:98:6a:bc:66:b3:19:a4:09:58:26: c9:a8:4f:ff:37:37:d3:09:f8:85:9e:19:cb:4a:72: fa:6f:83:94:8d:52:88:ef:56:28:06:88:11:02:46: 7a:c2:21:83:bc:1e:ec:b4:f7:dd:b8:55:fb:d1:f6: 41:2c:db:26:d5:37:2a:db:c9:85:93:8b:ba:30:38: 2a:bf:d2:df:0f:5d:c6:a1:a9:c0:28:04:b3:cc:09: dc:0a:4c:57:25:2a:4b:73:1b:05:54:d3:71:ec:89: 03:59:85:c8:9a:9a:c4:f5:39:31:15:bb:f0:9b:a9: 3b:c1:ab:1f:16:44:7f:ea:b8:bb:7c:2b:02:ab:89: 59:b7:84:ad:12:45:9d:86:6f:a0:9d:08:ba:3e:71: bb:8a:c6:14:b1:5f:c0:d1:a9:ab:94:7b:b7:3b:1b: d6:bf:7c:98:b8:9f:9b:1c:ab:1c:f7:5e:3a:ed:4f: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DC:84:E1:F1:83:91:7B:7F:F9:6B:D5:1E:50:3D:A6:7F:72:B3:8A X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:47:c5:d9:c1:a2:ad:b9:fc:e0:51:86:93:35:f8:f7:7a:c2: 71:f2:87:d1:77:3a:5c:ec:f6:9d:2e:ff:67:c0:08:d7:e7:6a: 80:74:b7:32:a5:1c:74:28:b8:16:3f:94:59:5a:64:c1:3b:45: d7:09:20:e2:88:bd:13:1b:14:d0:70:82:c1:d3:8b:df:2c:07: 3d:c1:89:89:e1:50:c9:41:92:f1:40:dc:32:3f:28:90:1a:f1: 44:1e:99:de:d3:2d:ad:01:5f:09:1e:2c:16:ff:fd:8c:35:8d: 9d:89:7c:d9:3a:3a:f0:0d:30:53:c6:2e:60:e3:59:20:e6:b9: a9:bd:f4:6f:49:d9:db:89:65:b9:8c:24:c2:2a:64:54:cd:cd: cf:5e:dd:ce:16:73:2c:d2:00:bc:ac:de:7a:e4:b9:ab:09:25: 6e:c6:54:e2:dd:be:aa:4a:a8:4d:fd:dd:4c:89:d8:5a:ce:51: 65:b7:3e:28:41:ea:dc:1f:1d:da:0b:88:6d:af:03:24:e1:99: 4b:d6:10:04:80:e9:cc:67:6b:03:2b:10:a0:a1:c8:c2:a3:4a: 24:70:72:17:fa:c0:42:36:9f:ce:44:c0:fd:0b:b7:48:32:7f: 7e:f9:85:70:23:1f:01:21:42:5a:8e:59:f7:54:64:af:79:70: 4a:d8:44:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRW6sbtOUnVKaBMieZRjopMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwOTI0MDMwMDQwWhcNMjYwOTI1MDMwMDQwWjAzMTEwLwYDVQQD Eyg1YWRjODRlMWYxODM5MTdiN2ZmOTZiZDUxZTUwM2RhNjdmNzJiMzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwouyT5vxuzUgxC9pql/QyGa5iQuS KXrGsqdHI37F41Mgx0d7ViuSkRFTW/+Yamcez85eHWuBw2MG4cCeuX5ffGJ8Wl56 jqU5XQzGKs7wMphqvGazGaQJWCbJqE//NzfTCfiFnhnLSnL6b4OUjVKI71YoBogR AkZ6wiGDvB7stPfduFX70fZBLNsm1Tcq28mFk4u6MDgqv9LfD13GoanAKASzzAnc CkxXJSpLcxsFVNNx7IkDWYXImprE9TkxFbvwm6k7wasfFkR/6ri7fCsCq4lZt4St EkWdhm+gnQi6PnG7isYUsV/A0amrlHu3OxvWv3yYuJ+bHKsc91467U+o5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrchOHxg5F7f/lr1R5QPaZ/crOKMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkfF2cGi rbn84FGGkzX493rCcfKH0Xc6XOz2nS7/Z8AI1+dqgHS3MqUcdCi4Fj+UWVpkwTtF 1wkg4oi9ExsU0HCCwdOL3ywHPcGJieFQyUGS8UDcMj8okBrxRB6Z3tMtrQFfCR4s Fv/9jDWNnYl82To68A0wU8YuYONZIOa5qb30b0nZ24lluYwkwipkVM3Nz17dzhZz LNIAvKzeeuS5qwklbsZU4t2+qkqoTf3dTInYWs5RZbc+KEHq3B8d2guIba8DJOGZ S9YQBIDpzGdrAysQoKHIwqNKJHByF/rAQjafzkTA/Qu3SDJ/fvmFcCMfASFCWo5Z 91Rkr3lwSthEPQ== -----END CERTIFICATE-----Generated at Thu Sep 24 10:23:23 2026 by rpki-client