$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: zRPQ2SJQ8YlaoYY6mRuyMFQloaPhkpGtqN82uz/xiLI= Subject key identifier: E9:7F:9B:BF:78:6D:1A:F8:B8:EE:9E:AF:15:6D:E8:B4:E2:49:61:DF Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 01A06DCB876350C0F4B9F23F386BB336CE2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 17FE Signing time: Fri 04 Sep 2026 19:00:50 +0000 Manifest this update: Fri 04 Sep 2026 19:00:50 +0000 Manifest next update: Sat 05 Sep 2026 19:00:50 +0000 Files and hashes: 1: 1u23_XHmiJhjqy9S76sw3BzP9Ww.roa (hash: qDjQXmy6brh3hQItl8JxTdLVuqnZ3WF2FKz/Ualn8KI=) 2: 4KkUHNuHp_WUlcLV7ZmT-IELGLs.roa (hash: X02pU+wDvS97rZ0D42UQvqF9JhNnpzwkrnlhuhnewxY=) 3: An-h4kooPrBUGMT-6Nj0QudqGKE.roa (hash: 4VG1kUHyYf9yb01HKQwY97RZCAJU3VqeDAxr07wG4w0=) 4: DKJJrcnX3RnXlCDTnb0QnF9ph1c.roa (hash: FBpHgtUQjl2CKc1kAMv5YEG4ocTTbuqpzf8/LW2ex4k=) 5: GOgAejJFsLbsIoSjyXa89DsOln0.roa (hash: n61wmUPLOUsceRZoHaDl1wjd6NYSJP+7XllQ62IBWVA=) 6: Iz-RnZB4CPBnQJYhfp0OAhLrcMM.roa (hash: FaucEzJxlOy2Yut4nsgevP064GyqmURdESpVYmPVMZw=) 7: JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa (hash: J8o+5Ee3eNiQKRGdXJdghD9ZXv8Izb9VeieBzPJF1ak=) 8: L3AHD1nIaJn-Qkxqjxi4waU1okM.roa (hash: MqsTHnRn4vzlkUHWrFaXq9Uo9UAjzsK7URiYSvcgf8k=) 9: NY2MX1mgk76QbEK78KfRCv9HXlc.roa (hash: n052UQO+ldLs19+3y0B7Wj4/DIUQ0nHDh3aGl0cSB9U=) 10: NgMsux-odmw_2otfxo6fwQPz6nk.roa (hash: acZbMbI5ZnLhauOT05TvSrJPxsUogE9hJcD3gMOAgYQ=) 11: SUe4J3Et3KgT01K3Zx9sbKaSGM0.roa (hash: LwIG+mDSylEHKB/dZoPmrJsG/6vCNLIoKeokQAgcByE=) 12: XdIic6TtMnHLSFKPt0NIgYA3BZE.roa (hash: Hz8Dp4xvPL6d1SZb+xVGL2Fnk7Ii6zPdDdS2xRff/c8=) 13: bFtTO9kUoK7V5nLLHjzqVj2iOcU.roa (hash: jJC/VOkqkEwdX7ejcOTbfcTesLG6OI5LMSL4JFJb9Ek=) 14: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: fTLF/7zBadeMFOhrKJ3NXxALU/ErjtlIkwHkxDHsZws=) 15: mDj4POXBo_BA8ao0TEZHTmOo46s.roa (hash: Y2b4Ei43NJZ9dDiKlYc7gN5osX878buWXGf115YzawI=) 16: nFYGg4ZIP1H9kzcY434jAerp2kU.roa (hash: Y/IgWysEh1nmKw0nLD81dJWu3QFpKM+9pnP+lyeoZXo=) 17: obFwaT_4MZtX-dKod3UGli-Mmuo.roa (hash: S1tcUGtkx7R83UYo2rACVKW3cgPV5XEnzrmsW37TA/Q=) 18: y2mTo6HHgH1hIKjXLEt22HvPvrw.roa (hash: YRXm/TWE2LnDq+SOmryX5rTG96P5ANXEnONR2xUrL80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6d:cb:87:63:50:c0:f4:b9:f2:3f:38:6b:b3:36:ce:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Sep 4 19:00:50 2026 GMT Not After : Sep 5 19:00:50 2026 GMT Subject: CN=e97f9bbf786d1af8b8ee9eaf156de8b4e24961df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:ed:ec:77:43:d5:2a:3b:fe:6c:c0:de:d9: 53:d3:4f:33:b4:f6:19:38:74:40:4e:e2:c5:c1:5f: 9f:2e:99:8a:e8:e0:13:27:4f:48:dd:89:b7:b3:cb: c6:0d:dd:13:f6:f3:e0:1b:c7:48:11:ec:18:03:ea: 72:d4:31:37:c2:84:29:e8:99:8b:4a:ff:22:c9:8a: 7f:ac:60:8a:5b:8b:dd:cb:05:6a:d5:e5:49:ee:8d: 17:a6:1a:65:df:77:db:50:79:0c:62:c5:96:22:95: 9c:ad:c2:97:a6:68:9b:f5:fd:ba:81:a7:84:1e:bc: 5e:88:7b:c0:9b:b9:55:bf:e0:03:ef:d7:b2:95:1f: 93:22:51:2a:eb:32:e8:81:cf:d0:59:62:39:94:76: dd:1c:f4:6f:f1:22:c3:a3:e4:0b:ce:b9:fd:1d:53: b8:34:2f:be:f7:37:71:ab:13:c6:8b:53:34:41:05: 32:1f:1f:42:39:6b:e7:b7:5e:16:fa:b7:b7:01:9a: c9:b0:53:08:92:55:cf:9f:71:cf:46:3b:66:d4:6d: d3:92:82:4c:e1:11:3c:0c:fc:0f:21:ee:c9:fc:6c: d3:f8:35:62:fa:90:3f:44:c3:84:85:1f:ba:04:13: 81:f2:84:b7:f9:16:5c:0f:99:48:ec:d3:d3:65:7f: e7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7F:9B:BF:78:6D:1A:F8:B8:EE:9E:AF:15:6D:E8:B4:E2:49:61:DF X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1d:b7:5e:03:17:4e:c3:5b:d1:20:67:ed:22:6a:e3:4b:1f: e9:1b:4a:36:ef:5b:a6:25:bd:0c:56:a9:dc:cf:5a:75:3f:6d: 3d:de:73:12:8e:af:3d:fd:64:45:07:2b:92:86:b6:d4:d3:96: dd:80:f1:9d:e3:d7:70:56:d4:ab:ec:8a:6a:26:cd:e4:95:1f: 58:02:3c:6b:b8:45:c4:8b:0f:bf:18:25:5e:0f:d6:7c:3e:bc: 87:21:19:ca:99:ce:88:bc:e7:aa:99:05:83:a8:de:f7:a0:b1: 96:26:78:d1:44:c2:6a:78:78:d3:f9:03:3a:cb:be:b7:68:de: f8:b9:96:94:de:9d:cb:d1:45:38:bb:af:d9:30:f8:9c:e5:e2: 04:be:08:a8:87:6f:5b:6d:20:6b:19:f5:1b:2a:c2:24:9a:67: 09:b7:af:5f:1b:ad:a6:ec:ea:a5:17:f4:64:af:51:25:d0:6b: f9:fc:b2:a1:5b:f7:e1:f8:ea:d8:bb:de:9f:1a:85:82:e9:a8: 1b:da:7a:25:c3:0a:be:dc:50:67:44:a1:93:72:34:f1:44:ab: 19:6f:36:96:68:0b:ff:7c:f3:a7:2c:76:f3:f4:6f:43:e6:5e: 13:ec:d4:63:b9:8e:0a:2b:57:a2:dd:3d:d8:36:d5:e1:27:c7: 1e:17:4a:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBty4djUMD0ufI/OGuzNs4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwOTA0MTkwMDUwWhcNMjYwOTA1MTkwMDUwWjAzMTEwLwYDVQQD EyhlOTdmOWJiZjc4NmQxYWY4YjhlZTllYWYxNTZkZThiNGUyNDk2MWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrvt7HdD1So7/mzA3tlT008ztPYZ OHRATuLFwV+fLpmK6OATJ09I3Ym3s8vGDd0T9vPgG8dIEewYA+py1DE3woQp6JmL Sv8iyYp/rGCKW4vdywVq1eVJ7o0Xphpl33fbUHkMYsWWIpWcrcKXpmib9f26gaeE HrxeiHvAm7lVv+AD79eylR+TIlEq6zLogc/QWWI5lHbdHPRv8SLDo+QLzrn9HVO4 NC++9zdxqxPGi1M0QQUyHx9COWvnt14W+re3AZrJsFMIklXPn3HPRjtm1G3TkoJM 4RE8DPwPIe7J/GzT+DVi+pA/RMOEhR+6BBOB8oS3+RZcD5lI7NPTZX/nbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOl/m794bRr4uO6erxVt6LTiSWHfMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAch23XgMX TsNb0SBn7SJq40sf6RtKNu9bpiW9DFap3M9adT9tPd5zEo6vPf1kRQcrkoa21NOW 3YDxnePXcFbUq+yKaibN5JUfWAI8a7hFxIsPvxglXg/WfD68hyEZypnOiLznqpkF g6je96CxliZ40UTCanh40/kDOsu+t2je+LmWlN6dy9FFOLuv2TD4nOXiBL4IqIdv W20gaxn1GyrCJJpnCbevXxutpuzqpRf0ZK9RJdBr+fyyoVv34fjq2LvenxqFgumo G9p6JcMKvtxQZ0Shk3I08USrGW82lmgL/3zzpyx28/RvQ+ZeE+zUY7mOCitXot09 2DbV4SfHHhdKhQ== -----END CERTIFICATE-----Generated at Sat Sep 5 00:29:05 2026 by rpki-client