$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: AuUNorFzBdNqoev+8VRi9u8nCA3qJtjWRoNlqHo2VLI= Subject key identifier: 39:7E:6C:9D:E0:49:9D:7E:5D:91:7D:9B:49:6E:E9:A5:B1:79:44:63 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019D2F6267EB4BDBDB8EAE773F6E333F0399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 1358 Signing time: Fri 27 Mar 2026 13:01:11 +0000 Manifest this update: Fri 27 Mar 2026 13:01:11 +0000 Manifest next update: Sat 28 Mar 2026 13:01:11 +0000 Files and hashes: 1: 2YKU1ZIr104Nr6byLvuW2x4k40c.roa (hash: l9Z0hvVVupcLg12X1S4oqYfEgu/uSu//ojVLo4Xl8BM=) 2: 3KesuWRJfnUsYbbl-ge3IpkL8Qs.roa (hash: Zv5Dd9dzLjrbiTpK79whstk1Qsbu6/8Gy06b3Qo3wrk=) 3: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: 9KJfntxoh0g9ER5d7ZjjviaathuCBqnSOOvNqZ5QIE0=) 4: JJNZOR6X4rY_GOThrdjQRSXeXBg.roa (hash: /dhiOwJGHBoTv3UZTiG0d0sePUV70qGDTkgPdoGx4eI=) 5: Lw3ZnV1VpPuaAVB3OVp8SnNyb-4.roa (hash: nBTM7MD83GgGqveTlO6ZbvL/71fYF0IUBTMvcU7YdJ8=) 6: R6Ix8lNiS_uYFTygWXMHCyCDc5o.roa (hash: Tz7QLxwy5GRJiJxjhaOPZOg+bzVuulgIR4QG/ALYYl0=) 7: R6KX3i1jslogvVjCDoWFT1Rmjjk.roa (hash: 2Q0Js/nufktkQ84upEIwC+0JGgqAMTLNlh1Y/K35COU=) 8: WKFrMc20v_3_nvwsEfVZ3pt8UJA.roa (hash: YVkbD8xPvWUS+BrYDoNJSYcp18Mk8k9LeJimBd71qQY=) 9: n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa (hash: VOHhyMAChKmkHQdwMvB1QhPPBG/k5oVzSZrLsHZLtHY=) 10: qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa (hash: CHN/ugJO85MgbT7e9ultnWAy3Ba/jHBvIHUKvsxGSz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2f:62:67:eb:4b:db:db:8e:ae:77:3f:6e:33:3f:03:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Mar 27 13:01:11 2026 GMT Not After : Mar 28 13:01:11 2026 GMT Subject: CN=397e6c9de0499d7e5d917d9b496ee9a5b1794463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c2:db:da:79:ed:f0:0e:74:0a:50:89:91:0c: 27:da:ca:fe:f0:58:a9:a8:b7:d9:55:95:df:7d:a3: 80:bb:12:af:8a:df:25:4b:f0:f1:30:71:a8:af:db: 39:aa:81:4b:c6:84:b6:72:f1:3f:e9:b4:5b:6a:2d: ee:49:92:08:44:97:6e:04:bd:46:b7:a2:c1:2b:ae: 98:8f:45:f2:c0:b1:ec:7c:3e:60:7b:5d:a6:81:84: f5:a6:17:93:7b:0f:bf:a7:d8:b0:ab:fd:86:da:97: bb:2a:c6:7d:99:7f:cb:31:b8:6f:92:7c:09:d7:33: 20:c8:1d:9c:5e:e6:f8:95:0a:6f:8f:14:c4:6c:3e: 07:2b:58:d2:c5:90:0f:b3:a2:1b:0a:f3:44:c8:ea: 0b:f3:73:ec:b8:83:b7:e9:67:42:50:17:88:ec:61: fc:b6:ce:a1:ea:6a:cf:d7:9e:82:a7:1f:53:7e:09: 40:68:d7:ca:3d:a1:bc:ae:68:10:88:1b:6d:1d:a0: 07:42:06:e5:3a:0f:19:c7:25:46:48:ad:7c:95:a9: 28:0c:22:8a:b6:20:0b:24:ce:e7:24:7f:80:39:8b: 24:41:06:79:82:db:c8:01:f7:7e:34:80:de:4c:a0: 3b:2d:2f:ba:fe:9c:52:5d:50:48:e4:c1:3f:85:ec: 4c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7E:6C:9D:E0:49:9D:7E:5D:91:7D:9B:49:6E:E9:A5:B1:79:44:63 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ec:73:70:93:38:bd:89:93:95:9e:fb:e3:80:80:a9:74:9f: b7:9d:a8:cc:ac:cb:f4:f6:98:db:dc:8b:c7:ff:e5:11:2a:40: 18:b5:7c:7a:0c:3e:06:62:4b:27:8d:d2:a1:4f:ca:a8:3a:6c: 8c:38:0a:f9:3b:33:97:b3:1b:f9:82:9c:af:d1:7a:f5:21:4a: ff:2c:88:56:c2:7f:78:50:fa:a2:f4:e4:4b:c2:12:88:7a:0f: 73:85:34:8f:4a:f9:ef:66:45:47:21:df:32:26:e8:c6:b9:27: 4e:ec:8f:2c:f6:0c:b8:72:f6:3e:fe:29:35:d7:0c:c0:63:48: 78:6c:6b:cb:bb:6d:3d:e8:bf:21:1a:bd:9a:d2:61:2d:08:ad: cd:4b:19:80:d9:c6:74:38:42:18:70:81:74:37:04:1d:ad:4f: b6:ca:c4:a1:98:a1:b3:f8:ab:9c:be:17:f3:00:64:84:fa:d7: f0:bc:2d:90:b8:7d:3e:c8:a1:55:eb:64:bb:4e:6b:1c:30:8d: b7:b7:49:9f:7d:b4:46:8d:f3:4c:1c:df:36:06:60:d2:25:b4: fa:1c:45:eb:89:22:31:55:80:da:8b:54:cf:1e:dc:87:a5:46: 98:af:5b:02:96:16:2f:d6:78:58:b7:93:d7:65:c8:a9:7d:50: d1:44:51:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0vYmfrS9vbjq53P24zPwOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjYwMzI3MTMwMTExWhcNMjYwMzI4MTMwMTExWjAzMTEwLwYDVQQD EygzOTdlNmM5ZGUwNDk5ZDdlNWQ5MTdkOWI0OTZlZTlhNWIxNzk0NDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MLb2nnt8A50ClCJkQwn2sr+8Fip qLfZVZXffaOAuxKvit8lS/DxMHGor9s5qoFLxoS2cvE/6bRbai3uSZIIRJduBL1G t6LBK66Yj0XywLHsfD5ge12mgYT1pheTew+/p9iwq/2G2pe7KsZ9mX/LMbhvknwJ 1zMgyB2cXub4lQpvjxTEbD4HK1jSxZAPs6IbCvNEyOoL83PsuIO36WdCUBeI7GH8 ts6h6mrP156Cpx9TfglAaNfKPaG8rmgQiBttHaAHQgblOg8ZxyVGSK18lakoDCKK tiALJM7nJH+AOYskQQZ5gtvIAfd+NIDeTKA7LS+6/pxSXVBI5ME/hexMwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDl+bJ3gSZ1+XZF9m0lu6aWxeURjMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOxzcJM4 vYmTlZ7744CAqXSft52ozKzL9PaY29yLx//lESpAGLV8egw+BmJLJ43SoU/KqDps jDgK+Tszl7Mb+YKcr9F69SFK/yyIVsJ/eFD6ovTkS8ISiHoPc4U0j0r572ZFRyHf MiboxrknTuyPLPYMuHL2Pv4pNdcMwGNIeGxry7ttPei/IRq9mtJhLQitzUsZgNnG dDhCGHCBdDcEHa1PtsrEoZihs/irnL4X8wBkhPrX8LwtkLh9PsihVetku05rHDCN t7dJn320Ro3zTBzfNgZg0iW0+hxF64kiMVWA2otUzx7ch6VGmK9bApYWL9Z4WLeT 12XIqX1Q0URRjA== -----END CERTIFICATE-----Generated at Fri Mar 27 16:11:38 2026 by rpki-client