$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: 3aFWcQyvN875c4rNbCUBd4x6uJPYrEQbsgRNR3iWZ2Q= Subject key identifier: 94:BF:F5:75:ED:CE:6A:E4:E1:A3:48:87:A1:86:49:00:C4:48:57:E9 Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019E973AFC8B50D3078820CDD429BDC2E076 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 170A Signing time: Fri 05 Jun 2026 10:01:25 +0000 Manifest this update: Fri 05 Jun 2026 10:01:25 +0000 Manifest next update: Sat 06 Jun 2026 10:01:25 +0000 Files and hashes: 1: 1u23_XHmiJhjqy9S76sw3BzP9Ww.roa (hash: qDjQXmy6brh3hQItl8JxTdLVuqnZ3WF2FKz/Ualn8KI=) 2: 4KkUHNuHp_WUlcLV7ZmT-IELGLs.roa (hash: X02pU+wDvS97rZ0D42UQvqF9JhNnpzwkrnlhuhnewxY=) 3: An-h4kooPrBUGMT-6Nj0QudqGKE.roa (hash: 4VG1kUHyYf9yb01HKQwY97RZCAJU3VqeDAxr07wG4w0=) 4: DKJJrcnX3RnXlCDTnb0QnF9ph1c.roa (hash: FBpHgtUQjl2CKc1kAMv5YEG4ocTTbuqpzf8/LW2ex4k=) 5: GOgAejJFsLbsIoSjyXa89DsOln0.roa (hash: n61wmUPLOUsceRZoHaDl1wjd6NYSJP+7XllQ62IBWVA=) 6: JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa (hash: J8o+5Ee3eNiQKRGdXJdghD9ZXv8Izb9VeieBzPJF1ak=) 7: L3AHD1nIaJn-Qkxqjxi4waU1okM.roa (hash: MqsTHnRn4vzlkUHWrFaXq9Uo9UAjzsK7URiYSvcgf8k=) 8: NY2MX1mgk76QbEK78KfRCv9HXlc.roa (hash: n052UQO+ldLs19+3y0B7Wj4/DIUQ0nHDh3aGl0cSB9U=) 9: NgMsux-odmw_2otfxo6fwQPz6nk.roa (hash: acZbMbI5ZnLhauOT05TvSrJPxsUogE9hJcD3gMOAgYQ=) 10: SUe4J3Et3KgT01K3Zx9sbKaSGM0.roa (hash: LwIG+mDSylEHKB/dZoPmrJsG/6vCNLIoKeokQAgcByE=) 11: XdIic6TtMnHLSFKPt0NIgYA3BZE.roa (hash: Hz8Dp4xvPL6d1SZb+xVGL2Fnk7Ii6zPdDdS2xRff/c8=) 12: bFtTO9kUoK7V5nLLHjzqVj2iOcU.roa (hash: jJC/VOkqkEwdX7ejcOTbfcTesLG6OI5LMSL4JFJb9Ek=) 13: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: p5wJfs3jvsKeaYGs0GqPGZg6GkKJht3TGfF4JjSWP8g=) 14: mDj4POXBo_BA8ao0TEZHTmOo46s.roa (hash: Y2b4Ei43NJZ9dDiKlYc7gN5osX878buWXGf115YzawI=) 15: nFYGg4ZIP1H9kzcY434jAerp2kU.roa (hash: Y/IgWysEh1nmKw0nLD81dJWu3QFpKM+9pnP+lyeoZXo=) 16: obFwaT_4MZtX-dKod3UGli-Mmuo.roa (hash: S1tcUGtkx7R83UYo2rACVKW3cgPV5XEnzrmsW37TA/Q=) 17: y2mTo6HHgH1hIKjXLEt22HvPvrw.roa (hash: YRXm/TWE2LnDq+SOmryX5rTG96P5ANXEnONR2xUrL80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:97:3a:fc:8b:50:d3:07:88:20:cd:d4:29:bd:c2:e0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jun 5 10:01:25 2026 GMT Not After : Jun 6 10:01:25 2026 GMT Subject: CN=94bff575edce6ae4e1a34887a1864900c44857e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:07:5e:a6:03:ad:cb:f7:30:29:13:f1:9b:50: af:ef:62:00:99:80:0e:9c:92:dc:b1:b3:42:e5:94: 56:aa:91:10:30:38:ab:76:ca:26:66:eb:a2:8c:0f: 8b:6b:cc:9e:55:57:c7:aa:91:f4:d7:7d:94:41:63: f1:bc:c4:85:96:4b:49:80:4e:8d:5e:c4:3e:92:0a: 18:7e:81:81:be:05:14:2e:1b:27:8d:b9:2e:5a:8b: a0:bf:14:01:bc:98:cd:03:74:af:c5:61:4b:a7:b5: 9e:7a:dd:2c:1b:ca:3c:ae:77:bc:ed:a4:3a:5e:f5: 98:aa:da:88:70:e0:b4:de:69:f9:f3:f0:48:a4:c8: 64:a0:9f:18:03:7e:27:a2:eb:6d:2e:13:ce:3b:ef: ad:66:b8:8c:ad:d7:c2:6c:79:16:44:53:e0:d8:6c: d2:e0:fb:89:f6:2e:64:87:2f:8a:02:31:de:44:3d: 42:43:83:72:d0:9d:11:b6:21:54:1c:e7:87:85:61: 6d:61:8b:17:ff:5a:91:56:ee:72:31:97:04:fc:17: 7c:89:3a:bb:c0:df:21:72:f6:84:9f:56:ea:81:9d: cb:ac:0f:70:c9:b2:92:dc:be:a3:c8:90:55:33:ba: f9:bf:98:00:1d:d8:9d:58:e1:73:39:8f:78:5c:62: 32:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BF:F5:75:ED:CE:6A:E4:E1:A3:48:87:A1:86:49:00:C4:48:57:E9 X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e2:e9:fa:1e:ab:15:a2:a1:7c:d2:f8:e6:bd:0b:f1:bd:91: a4:5e:13:48:ed:d9:25:b6:41:d1:30:04:fa:ca:b8:8b:12:d1: 2f:5a:bc:a7:df:24:11:42:65:17:63:9b:d2:da:64:28:fa:7c: 78:b8:91:ce:3c:6e:c5:ed:40:11:16:9a:4f:fa:ad:07:8e:dc: c9:46:b9:89:ea:5e:3f:a6:a1:20:4e:5b:9b:3d:b2:ad:d1:b1: 90:10:eb:2c:f7:85:bc:27:98:93:e1:e0:f2:47:6f:1e:2f:88: 85:33:8d:fd:fd:9d:c9:c5:ad:4e:dd:5a:c6:83:d6:1b:7e:12: 9c:88:30:2a:98:7e:d2:f6:7d:3e:a6:14:5d:68:22:7c:c5:2b: 59:b9:1f:37:38:44:87:bf:26:3a:94:96:b0:f8:a7:32:d1:5c: 15:cf:d0:b8:98:44:c7:c8:3d:4f:5b:db:73:2f:ea:a1:8a:78: bd:3a:1d:41:e7:83:ca:0f:03:17:6b:44:af:c3:32:10:2f:b1: 47:4a:c8:27:ac:79:1d:17:cc:2f:6b:0f:04:4d:e7:85:84:74: c2:f9:4c:c4:f1:a2:60:7f:ac:9f:52:34:6d:45:cc:91:a5:2f: 5c:79:c1:8d:78:17:4c:5f:ac:e7:a5:30:45:8f:9b:32:8f:db: c2:35:39:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6XOvyLUNMHiCDN1Cm9wuB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwNjA1MTAwMTI1WhcNMjYwNjA2MTAwMTI1WjAzMTEwLwYDVQQD Eyg5NGJmZjU3NWVkY2U2YWU0ZTFhMzQ4ODdhMTg2NDkwMGM0NDg1N2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+wdepgOty/cwKRPxm1Cv72IAmYAO nJLcsbNC5ZRWqpEQMDirdsomZuuijA+La8yeVVfHqpH0132UQWPxvMSFlktJgE6N XsQ+kgoYfoGBvgUULhsnjbkuWougvxQBvJjNA3SvxWFLp7Weet0sG8o8rne87aQ6 XvWYqtqIcOC03mn58/BIpMhkoJ8YA34nouttLhPOO++tZriMrdfCbHkWRFPg2GzS 4PuJ9i5khy+KAjHeRD1CQ4Ny0J0RtiFUHOeHhWFtYYsX/1qRVu5yMZcE/Bd8iTq7 wN8hcvaEn1bqgZ3LrA9wybKS3L6jyJBVM7r5v5gAHdidWOFzOY94XGIy7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJS/9XXtzmrk4aNIh6GGSQDESFfpMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeLp+h6r FaKhfNL45r0L8b2RpF4TSO3ZJbZB0TAE+sq4ixLRL1q8p98kEUJlF2Ob0tpkKPp8 eLiRzjxuxe1AERaaT/qtB47cyUa5iepeP6ahIE5bmz2yrdGxkBDrLPeFvCeYk+Hg 8kdvHi+IhTON/f2dycWtTt1axoPWG34SnIgwKph+0vZ9PqYUXWgifMUrWbkfNzhE h78mOpSWsPinMtFcFc/QuJhEx8g9T1vbcy/qoYp4vTodQeeDyg8DF2tEr8MyEC+x R0rIJ6x5HRfML2sPBE3nhYR0wvlMxPGiYH+sn1I0bUXMkaUvXHnBjXgXTF+s56Uw RY+bMo/bwjU5vQ== -----END CERTIFICATE-----Generated at Fri Jun 5 15:18:21 2026 by rpki-client