$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: 5pqF24qpxMrKPw7V7Yu8S6Q6NeBj9Cu2cxC+wyV+w5k= Subject key identifier: FA:E9:2C:10:E4:A5:74:52:F5:D8:DD:2C:3E:E0:67:DE:8B:7C:CA:7F Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019DAF7C1AE82DC1C662060963AFF8FFE513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 1692 Signing time: Tue 21 Apr 2026 10:00:39 +0000 Manifest this update: Tue 21 Apr 2026 10:00:39 +0000 Manifest next update: Wed 22 Apr 2026 10:00:39 +0000 Files and hashes: 1: 1u23_XHmiJhjqy9S76sw3BzP9Ww.roa (hash: qDjQXmy6brh3hQItl8JxTdLVuqnZ3WF2FKz/Ualn8KI=) 2: 4KkUHNuHp_WUlcLV7ZmT-IELGLs.roa (hash: X02pU+wDvS97rZ0D42UQvqF9JhNnpzwkrnlhuhnewxY=) 3: An-h4kooPrBUGMT-6Nj0QudqGKE.roa (hash: 4VG1kUHyYf9yb01HKQwY97RZCAJU3VqeDAxr07wG4w0=) 4: DKJJrcnX3RnXlCDTnb0QnF9ph1c.roa (hash: FBpHgtUQjl2CKc1kAMv5YEG4ocTTbuqpzf8/LW2ex4k=) 5: GOgAejJFsLbsIoSjyXa89DsOln0.roa (hash: n61wmUPLOUsceRZoHaDl1wjd6NYSJP+7XllQ62IBWVA=) 6: JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa (hash: J8o+5Ee3eNiQKRGdXJdghD9ZXv8Izb9VeieBzPJF1ak=) 7: L3AHD1nIaJn-Qkxqjxi4waU1okM.roa (hash: MqsTHnRn4vzlkUHWrFaXq9Uo9UAjzsK7URiYSvcgf8k=) 8: NY2MX1mgk76QbEK78KfRCv9HXlc.roa (hash: n052UQO+ldLs19+3y0B7Wj4/DIUQ0nHDh3aGl0cSB9U=) 9: NgMsux-odmw_2otfxo6fwQPz6nk.roa (hash: acZbMbI5ZnLhauOT05TvSrJPxsUogE9hJcD3gMOAgYQ=) 10: SUe4J3Et3KgT01K3Zx9sbKaSGM0.roa (hash: LwIG+mDSylEHKB/dZoPmrJsG/6vCNLIoKeokQAgcByE=) 11: XdIic6TtMnHLSFKPt0NIgYA3BZE.roa (hash: Hz8Dp4xvPL6d1SZb+xVGL2Fnk7Ii6zPdDdS2xRff/c8=) 12: bFtTO9kUoK7V5nLLHjzqVj2iOcU.roa (hash: jJC/VOkqkEwdX7ejcOTbfcTesLG6OI5LMSL4JFJb9Ek=) 13: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: eLpWi/99cRhLxFrTw8yVih9z0YbhqUQJ3ifZljxCxkA=) 14: mDj4POXBo_BA8ao0TEZHTmOo46s.roa (hash: Y2b4Ei43NJZ9dDiKlYc7gN5osX878buWXGf115YzawI=) 15: nFYGg4ZIP1H9kzcY434jAerp2kU.roa (hash: Y/IgWysEh1nmKw0nLD81dJWu3QFpKM+9pnP+lyeoZXo=) 16: obFwaT_4MZtX-dKod3UGli-Mmuo.roa (hash: S1tcUGtkx7R83UYo2rACVKW3cgPV5XEnzrmsW37TA/Q=) 17: y2mTo6HHgH1hIKjXLEt22HvPvrw.roa (hash: YRXm/TWE2LnDq+SOmryX5rTG96P5ANXEnONR2xUrL80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 07:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:af:7c:1a:e8:2d:c1:c6:62:06:09:63:af:f8:ff:e5:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Apr 21 10:00:39 2026 GMT Not After : Apr 22 10:00:39 2026 GMT Subject: CN=fae92c10e4a57452f5d8dd2c3ee067de8b7cca7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:55:6b:81:ac:56:e4:21:2d:5f:81:58:90: 4b:4f:12:74:04:5a:fd:13:14:b6:02:4a:f9:cf:c3: 8c:b5:9c:ff:c2:07:b8:55:da:de:46:bd:9a:08:65: 8d:e8:69:ee:59:ff:a1:65:f7:22:3f:7a:cd:9c:ab: 81:4f:05:af:8e:eb:e5:d2:f5:19:6f:ec:84:f8:ff: e6:4f:6e:a4:62:0e:86:f8:2e:06:45:91:60:11:a6: e0:85:1f:6d:88:25:96:f2:f9:11:2f:be:51:1d:9f: 28:bb:d4:e7:c5:82:d3:8a:c2:5e:16:84:96:ee:4f: 8f:f2:73:d1:55:3f:72:3b:a1:51:ed:90:5e:a1:d0: c8:db:b0:52:b5:da:5f:95:14:1d:a0:e1:c8:80:a4: 14:b4:e4:f1:26:0a:ad:37:f8:c1:04:b4:af:eb:ca: 9f:ee:f1:33:65:d7:65:0b:08:77:de:9b:d6:10:9b: ba:a6:17:bc:d3:25:d9:08:0b:cf:42:4f:0e:f8:e3: e7:90:fe:68:15:dc:d1:c2:21:1f:1d:21:8d:ed:3b: df:3b:79:e9:df:87:6a:1a:b6:05:38:46:bd:01:94: 8d:4d:cc:67:c6:9c:b6:f8:74:04:d1:0a:f5:5a:23: cf:5f:68:4e:6f:91:7b:7f:26:60:f6:63:45:60:55: 8b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E9:2C:10:E4:A5:74:52:F5:D8:DD:2C:3E:E0:67:DE:8B:7C:CA:7F X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:12:43:cd:9a:02:7a:a6:32:df:fa:ac:fd:87:59:92:f6:2a: a4:f6:04:68:1e:8e:0f:ba:d6:d7:32:cc:b9:cd:dd:8c:c8:7d: b3:04:0a:e0:c1:fb:00:00:b4:ec:4e:51:5e:1d:23:c5:ed:01: ab:85:70:b9:53:0c:1a:a4:3d:73:4b:a9:61:a9:f6:40:06:b7: 52:5d:5d:e3:1e:15:c5:3e:3a:e3:1c:15:90:b2:cf:6f:a0:ab: 9e:98:dd:9c:c3:d6:70:2a:cd:50:8d:9d:a8:f7:34:08:b1:f4: 32:4d:74:c3:ce:93:9c:57:36:00:22:f5:1b:af:b0:e1:3b:f4: 75:41:1a:3e:9c:05:58:93:f1:82:38:b6:6e:55:54:4b:c5:5c: 8c:cf:77:6b:70:c6:9b:6b:88:fc:9f:8b:2c:a9:c2:d3:ef:e3: 80:0f:86:55:b9:42:9b:cd:b4:ea:af:64:04:31:d8:c8:1b:14: d3:81:df:fa:30:1c:3b:17:f5:7d:58:58:f8:25:f0:c2:5e:83: 81:77:b2:6e:f2:24:9e:5b:3f:7b:2d:aa:d4:b2:9e:a2:63:cc: 6c:a2:19:9c:1b:74:3e:9d:b7:9d:d7:1f:7f:61:55:de:fc:c5: 6c:28:51:55:68:4d:de:21:bd:c5:96:f2:1e:65:8b:9d:3c:bb: 8a:12:48:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2vfBroLcHGYgYJY6/4/+UTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwNDIxMTAwMDM5WhcNMjYwNDIyMTAwMDM5WjAzMTEwLwYDVQQD EyhmYWU5MmMxMGU0YTU3NDUyZjVkOGRkMmMzZWUwNjdkZThiN2NjYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2pVa4GsVuQhLV+BWJBLTxJ0BFr9 ExS2Akr5z8OMtZz/wge4VdreRr2aCGWN6GnuWf+hZfciP3rNnKuBTwWvjuvl0vUZ b+yE+P/mT26kYg6G+C4GRZFgEabghR9tiCWW8vkRL75RHZ8ou9TnxYLTisJeFoSW 7k+P8nPRVT9yO6FR7ZBeodDI27BStdpflRQdoOHIgKQUtOTxJgqtN/jBBLSv68qf 7vEzZddlCwh33pvWEJu6phe80yXZCAvPQk8O+OPnkP5oFdzRwiEfHSGN7TvfO3np 34dqGrYFOEa9AZSNTcxnxpy2+HQE0Qr1WiPPX2hOb5F7fyZg9mNFYFWLXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrpLBDkpXRS9djdLD7gZ96LfMp/MB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxJDzZoC eqYy3/qs/YdZkvYqpPYEaB6OD7rW1zLMuc3djMh9swQK4MH7AAC07E5RXh0jxe0B q4VwuVMMGqQ9c0upYan2QAa3Ul1d4x4VxT464xwVkLLPb6CrnpjdnMPWcCrNUI2d qPc0CLH0Mk10w86TnFc2ACL1G6+w4Tv0dUEaPpwFWJPxgji2blVUS8VcjM93a3DG m2uI/J+LLKnC0+/jgA+GVblCm8206q9kBDHYyBsU04Hf+jAcOxf1fVhY+CXwwl6D gXeybvIknls/ey2q1LKeomPMbKIZnBt0Pp23ndcff2FV3vzFbChRVWhN3iG9xZby HmWLnTy7ihJI7w== -----END CERTIFICATE-----Generated at Tue Apr 21 13:04:27 2026 by rpki-client