$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: yVlcb/5IBmxcgmSkJ+CXx/+TfLm7Bf+J4/ArxGeSoIM= Subject key identifier: B3:57:E3:D4:7C:2D:27:4A:25:A2:DC:68:89:6C:F9:3F:95:0A:93:B2 Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019CFBE2B0F4D0FCFA4C616AD1CC09E47332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 1635 Signing time: Tue 17 Mar 2026 13:01:03 +0000 Manifest this update: Tue 17 Mar 2026 13:01:03 +0000 Manifest next update: Wed 18 Mar 2026 13:01:03 +0000 Files and hashes: 1: 1u23_XHmiJhjqy9S76sw3BzP9Ww.roa (hash: qDjQXmy6brh3hQItl8JxTdLVuqnZ3WF2FKz/Ualn8KI=) 2: 4KkUHNuHp_WUlcLV7ZmT-IELGLs.roa (hash: X02pU+wDvS97rZ0D42UQvqF9JhNnpzwkrnlhuhnewxY=) 3: An-h4kooPrBUGMT-6Nj0QudqGKE.roa (hash: 4VG1kUHyYf9yb01HKQwY97RZCAJU3VqeDAxr07wG4w0=) 4: DKJJrcnX3RnXlCDTnb0QnF9ph1c.roa (hash: FBpHgtUQjl2CKc1kAMv5YEG4ocTTbuqpzf8/LW2ex4k=) 5: GOgAejJFsLbsIoSjyXa89DsOln0.roa (hash: n61wmUPLOUsceRZoHaDl1wjd6NYSJP+7XllQ62IBWVA=) 6: JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa (hash: J8o+5Ee3eNiQKRGdXJdghD9ZXv8Izb9VeieBzPJF1ak=) 7: L3AHD1nIaJn-Qkxqjxi4waU1okM.roa (hash: MqsTHnRn4vzlkUHWrFaXq9Uo9UAjzsK7URiYSvcgf8k=) 8: NY2MX1mgk76QbEK78KfRCv9HXlc.roa (hash: n052UQO+ldLs19+3y0B7Wj4/DIUQ0nHDh3aGl0cSB9U=) 9: NgMsux-odmw_2otfxo6fwQPz6nk.roa (hash: acZbMbI5ZnLhauOT05TvSrJPxsUogE9hJcD3gMOAgYQ=) 10: SUe4J3Et3KgT01K3Zx9sbKaSGM0.roa (hash: LwIG+mDSylEHKB/dZoPmrJsG/6vCNLIoKeokQAgcByE=) 11: XdIic6TtMnHLSFKPt0NIgYA3BZE.roa (hash: Hz8Dp4xvPL6d1SZb+xVGL2Fnk7Ii6zPdDdS2xRff/c8=) 12: bFtTO9kUoK7V5nLLHjzqVj2iOcU.roa (hash: jJC/VOkqkEwdX7ejcOTbfcTesLG6OI5LMSL4JFJb9Ek=) 13: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: bB0gaX88q52nwyuW+eQohr6G/JjBB7iov7jYAX4ELbY=) 14: mDj4POXBo_BA8ao0TEZHTmOo46s.roa (hash: Y2b4Ei43NJZ9dDiKlYc7gN5osX878buWXGf115YzawI=) 15: nFYGg4ZIP1H9kzcY434jAerp2kU.roa (hash: Y/IgWysEh1nmKw0nLD81dJWu3QFpKM+9pnP+lyeoZXo=) 16: obFwaT_4MZtX-dKod3UGli-Mmuo.roa (hash: S1tcUGtkx7R83UYo2rACVKW3cgPV5XEnzrmsW37TA/Q=) 17: y2mTo6HHgH1hIKjXLEt22HvPvrw.roa (hash: YRXm/TWE2LnDq+SOmryX5rTG96P5ANXEnONR2xUrL80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Mar 2026 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:fb:e2:b0:f4:d0:fc:fa:4c:61:6a:d1:cc:09:e4:73:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Mar 17 13:01:03 2026 GMT Not After : Mar 18 13:01:03 2026 GMT Subject: CN=b357e3d47c2d274a25a2dc68896cf93f950a93b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:52:ec:ff:38:ac:1c:9d:14:4c:a5:34:e7:64: c2:c0:2a:f1:3c:68:8b:5b:1a:23:6a:c2:f1:eb:92: bf:1c:3b:a7:f6:8c:6a:c2:a6:1b:b1:39:11:fd:9e: be:da:1e:a6:5b:8e:49:2a:72:a4:d1:bb:61:64:c0: 69:bc:63:dd:9f:c3:9c:19:31:25:b1:87:40:84:1a: 2a:5e:24:5f:f8:ef:53:f0:df:35:9a:b3:2c:62:be: 10:a9:1f:bc:e8:1f:23:a6:f0:0b:6b:65:f6:66:7a: 4a:a1:dd:79:17:24:c1:9f:90:03:66:e6:04:be:43: 54:7d:bd:38:71:a8:03:78:45:13:16:96:de:0c:3d: 7d:00:1c:e0:a6:59:5c:cb:72:69:64:a4:47:c1:97: 32:0a:3c:d3:8e:b6:c7:f5:66:38:4d:17:44:8b:ed: 8b:86:f4:56:5b:6d:e1:0b:de:90:6c:67:18:e5:11: 47:56:97:30:65:c9:44:53:b2:ed:6c:61:c8:13:7c: ca:71:40:97:2e:c6:3a:d0:53:7b:4d:6e:94:5b:ce: 47:5f:b4:55:2e:0a:4b:b7:3e:fd:78:90:ce:82:af: 6e:b6:84:dd:1d:ac:07:8b:ad:6f:38:f2:3f:fe:8d: d7:33:15:4c:8a:3f:0c:2f:93:12:ac:bd:c1:2d:96: a8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:57:E3:D4:7C:2D:27:4A:25:A2:DC:68:89:6C:F9:3F:95:0A:93:B2 X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0d:73:44:d0:c8:51:d2:5c:e8:29:f3:0f:66:50:53:1f:90: 6d:36:1c:5c:52:4d:d0:a4:96:68:1f:85:48:27:78:89:ae:e7: 9f:30:d6:d1:bf:06:9c:cb:df:0a:b0:af:f1:41:1e:d9:69:80: 97:5b:c3:43:7f:9a:3f:77:24:51:d6:79:29:be:0e:53:32:a1: c8:77:1f:89:46:bd:af:e8:f5:0d:e6:ec:c8:f2:0f:40:2d:ce: 96:f8:e9:ed:54:7a:04:40:98:e1:f5:db:91:24:6a:9f:f2:34: 7e:97:b2:0e:f6:d7:0d:a5:ac:a9:bb:e7:5b:2e:01:0a:ad:73: 0f:0c:90:5b:bd:18:a5:51:5e:57:6a:13:be:49:a5:3b:b7:ff: a0:5a:72:4a:0a:66:1a:55:90:ed:99:2e:17:41:cf:f6:6a:00: 65:0e:2e:ca:49:71:27:ca:1b:ff:05:4f:5c:e6:dc:27:3a:d4: 5f:36:a5:09:d2:d2:89:87:ff:44:e7:c7:54:21:e7:93:af:17: 03:4b:8f:fd:0d:e7:c5:14:5f:c1:1e:e4:e3:c7:d9:d9:2b:15: c1:ab:77:45:29:73:4b:91:16:47:b3:f9:40:c6:1d:4e:70:f6: 64:8c:dd:a0:b0:22:ee:13:80:73:dd:9e:c8:5d:6c:e5:31:3f: 12:6a:d5:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZz74rD00Pz6TGFq0cwJ5HMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwMzE3MTMwMTAzWhcNMjYwMzE4MTMwMTAzWjAzMTEwLwYDVQQD EyhiMzU3ZTNkNDdjMmQyNzRhMjVhMmRjNjg4OTZjZjkzZjk1MGE5M2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFLs/zisHJ0UTKU052TCwCrxPGiL WxojasLx65K/HDun9oxqwqYbsTkR/Z6+2h6mW45JKnKk0bthZMBpvGPdn8OcGTEl sYdAhBoqXiRf+O9T8N81mrMsYr4QqR+86B8jpvALa2X2ZnpKod15FyTBn5ADZuYE vkNUfb04cagDeEUTFpbeDD19ABzgpllcy3JpZKRHwZcyCjzTjrbH9WY4TRdEi+2L hvRWW23hC96QbGcY5RFHVpcwZclEU7LtbGHIE3zKcUCXLsY60FN7TW6UW85HX7RV LgpLtz79eJDOgq9utoTdHawHi61vOPI//o3XMxVMij8ML5MSrL3BLZaojwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNX49R8LSdKJaLcaIls+T+VCpOyMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdg1zRNDI UdJc6CnzD2ZQUx+QbTYcXFJN0KSWaB+FSCd4ia7nnzDW0b8GnMvfCrCv8UEe2WmA l1vDQ3+aP3ckUdZ5Kb4OUzKhyHcfiUa9r+j1DebsyPIPQC3Olvjp7VR6BECY4fXb kSRqn/I0fpeyDvbXDaWsqbvnWy4BCq1zDwyQW70YpVFeV2oTvkmlO7f/oFpySgpm GlWQ7ZkuF0HP9moAZQ4uyklxJ8ob/wVPXObcJzrUXzalCdLSiYf/ROfHVCHnk68X A0uP/Q3nxRRfwR7k48fZ2SsVwat3RSlzS5EWR7P5QMYdTnD2ZIzdoLAi7hOAc92e yF1s5TE/EmrVzQ== -----END CERTIFICATE-----Generated at Tue Mar 17 15:17:59 2026 by rpki-client