$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json) Hash identifier: pgd8HdY4hPfdgOZ4c/ejBCSH4ABbrRiFabj/7gqRjB4= Subject key identifier: 17:48:59:27:73:3A:B6:84:42:5D:B8:28:61:5C:F0:0E:4A:68:D6:8E Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019DAF0E56EC19776F3E3ACE37DDA46FFE60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft Manifest number: 132A Signing time: Tue 21 Apr 2026 08:00:45 +0000 Manifest this update: Tue 21 Apr 2026 08:00:45 +0000 Manifest next update: Wed 22 Apr 2026 08:00:45 +0000 Files and hashes: 1: 19E50qchIIRYPEcBaHq7sGG5wI0.roa (hash: eE5229153hExm9zLLNjIVvIWU28fOYiSgL3s6vOhycw=) 2: 97SNWyMUYRiDeG9n1N95AncRQnk.roa (hash: nI2lxusT43e2HGHQlJ+OS4ZlLDLuDOW3fSKQ9vYde5w=) 3: ARsNkmXZICw7mVOEEqaeLzW0NS8.roa (hash: HGEzOhh+K3s8r+6AsZZdfpNC/GqHLS7ExwsdeMVtoJI=) 4: Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa (hash: 5Sm32JyDwrhWc3vyfBWLEKgqGMIQn0oSGZgkbi9R4Ng=) 5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: WHEa6VPXyyV1IW3Fn5mSChX2SwYWjj8ag7YroAjE9Rg=) 6: LkfXZqcx7G1RdcSSUX4VqE95iT0.roa (hash: J2g84l93sai+C1V8lXRu8vRKenlTXlmBdpYyXxL3Hmg=) 7: M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa (hash: l1YoZfcF40wNjjNm0JW8TrQnl6c8teto/VumFdsbKYw=) 8: OdLu_HTcQvIodFBv5wrW_bitNt8.roa (hash: Lh3p2rmlivj/4TCynBLAARFyup/lYvxOvhDJIyFzt24=) 9: axcATIOsEbV9qEHFR_BgJI8InRc.roa (hash: nhsbsi/hDL4AYgein99xctG644QzrEf5lgLkARRpWaU=) 10: ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa (hash: fcj6iTqUPy26aGGnXwajRdM6fbwzNnBSUbT+6zg93yE=) 11: kz59O-9rHRK3If4NGher4WpZjHE.roa (hash: AakaTSLsPxjlp4i8uprsoV1LtGwgVY7VSh5IFGItGZA=) 12: pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa (hash: HlDfShnHsELTO0EoU+/TscI7vJQLc2cGhli7/Qj3Qo0=) 13: r3dW9lAqMZzJ4q1ECWLy0uvljys.roa (hash: Ydp4ZLQaFBxEhvTauDjxFwFAUVvVLiZ8FUXZtyhH9lE=) 14: rHkDmoeEUk_UKkDPiPl2ZLunlP8.roa (hash: N4gR2twlyF+k4BziCYf7gyFcmHQBn89bTMP/4cwgXIQ=) 15: rjyccDgFllWxfeQb355Lp_fLXxk.roa (hash: tQCLpc6R3fwHVeq06ryeCzjgqeU2l9Z+qX3z3qLohNI=) 16: vndxFTa05fIa6-yUCZPvIBrR_Rc.roa (hash: yxkn5B4HUiA8jl1lZWZyV1zdTXR6L83beQGj3WTktO4=) 17: xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa (hash: iBuZkqTWmF5qEyHqfDnsRPYzPSipq5gF9EuzoGnhAUE=) 18: zpnZiHFwy0LGsQziGTNhSdlz9Es.roa (hash: xFQHjKoar8tgV6VJF9byW8WcGGZiORzqntKof2KtHCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:af:0e:56:ec:19:77:6f:3e:3a:ce:37:dd:a4:6f:fe:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Apr 21 08:00:45 2026 GMT Not After : Apr 22 08:00:45 2026 GMT Subject: CN=17485927733ab684425db828615cf00e4a68d68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:43:19:20:92:00:d5:2e:c9:2e:45:cf:67: c0:7c:48:45:7d:12:b3:b2:06:42:49:93:0a:7b:36: a0:0d:e6:28:55:e9:f1:16:13:74:c7:d2:73:13:30: 36:a7:c7:b9:83:1c:f8:f2:9c:ce:ee:52:65:b8:8b: 7f:76:d8:f0:d6:2e:44:cf:45:f8:da:fd:56:11:83: b0:47:42:7f:cb:e4:17:0c:ef:26:b6:7d:f7:0e:f5: 8f:ff:1b:48:74:83:8b:af:eb:07:c2:b4:5c:f2:41: b8:96:82:ea:7b:99:b7:e2:21:9f:32:09:78:2f:a1: be:fd:5e:4d:c2:9f:01:52:08:f0:eb:48:4f:20:b6: 07:d2:5a:5d:01:54:13:34:49:d9:c2:c9:59:7d:8a: 7f:9a:88:9b:d1:63:cc:b7:b1:33:f8:01:2a:4d:04: 65:7a:43:67:f2:b0:8b:cc:fc:ad:27:b4:56:94:28: 31:89:ad:52:be:51:ed:c0:56:fa:4a:d4:4e:49:4e: 9a:35:b5:18:ec:b1:de:a4:04:d2:69:80:63:9e:5c: 4b:70:f5:ae:2d:93:82:b9:8e:4c:e4:42:1a:a8:06: fa:e3:de:48:a2:4f:d5:b6:b6:f5:b8:20:b5:be:ca: 0e:80:06:26:f1:f4:c3:ad:7f:af:91:de:16:a3:38: 72:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:48:59:27:73:3A:B6:84:42:5D:B8:28:61:5C:F0:0E:4A:68:D6:8E X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:10:38:f7:05:d7:74:f0:b9:f6:9c:c2:6c:a1:0b:6e:1f:a7: 69:d3:71:16:c7:2b:dc:b3:22:ec:91:11:f6:2d:86:cb:51:b4: d5:b0:ee:d0:4f:cb:66:94:3f:c2:7a:55:55:74:73:f4:14:39: 9e:9f:5f:4c:79:94:9e:2a:89:bf:c5:35:c7:a1:13:8e:f4:3a: 16:bb:1e:03:ff:68:25:f8:b8:1a:79:d8:83:32:ed:ae:46:62: ec:ea:63:8a:7b:70:43:c5:ac:e4:d7:a1:de:51:16:dd:3c:fd: b8:c7:f0:91:19:69:17:f4:49:3a:7c:49:6a:dd:5c:c0:59:e7: ba:8e:bf:48:0e:c7:0a:9e:96:d0:06:4d:49:46:f6:eb:29:2b: 9e:2e:57:76:56:c1:c5:2f:6a:14:19:b4:ac:9d:6e:58:05:eb: ec:3f:29:bc:d4:b9:20:a1:a2:0b:6e:20:fa:8b:f6:15:33:cf: b8:39:6f:0f:c4:99:82:80:8a:8c:80:b9:13:b4:69:68:c7:6a: f8:c2:31:6a:1d:1c:2d:15:57:1e:08:26:2f:02:71:9f:6e:70: 11:d3:f0:6b:b4:ca:11:84:c3:0b:bf:c1:1d:32:f4:0b:52:67: 34:06:61:fd:f7:93:2f:27:d7:93:ca:1a:6c:31:8d:69:3f:11: 98:0f:25:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2vDlbsGXdvPjrON92kb/5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjYwNDIxMDgwMDQ1WhcNMjYwNDIyMDgwMDQ1WjAzMTEwLwYDVQQD EygxNzQ4NTkyNzczM2FiNjg0NDI1ZGI4Mjg2MTVjZjAwZTRhNjhkNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc1DGSCSANUuyS5Fz2fAfEhFfRKz sgZCSZMKezagDeYoVenxFhN0x9JzEzA2p8e5gxz48pzO7lJluIt/dtjw1i5Ez0X4 2v1WEYOwR0J/y+QXDO8mtn33DvWP/xtIdIOLr+sHwrRc8kG4loLqe5m34iGfMgl4 L6G+/V5Nwp8BUgjw60hPILYH0lpdAVQTNEnZwslZfYp/moib0WPMt7Ez+AEqTQRl ekNn8rCLzPytJ7RWlCgxia1SvlHtwFb6StROSU6aNbUY7LHepATSaYBjnlxLcPWu LZOCuY5M5EIaqAb6495Iok/Vtrb1uCC1vsoOgAYm8fTDrX+vkd4WozhyNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdIWSdzOraEQl24KGFc8A5KaNaOMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRA49wXX dPC59pzCbKELbh+nadNxFscr3LMi7JER9i2Gy1G01bDu0E/LZpQ/wnpVVXRz9BQ5 np9fTHmUniqJv8U1x6ETjvQ6FrseA/9oJfi4GnnYgzLtrkZi7OpjintwQ8Ws5Neh 3lEW3Tz9uMfwkRlpF/RJOnxJat1cwFnnuo6/SA7HCp6W0AZNSUb26ykrni5XdlbB xS9qFBm0rJ1uWAXr7D8pvNS5IKGiC24g+ov2FTPPuDlvD8SZgoCKjIC5E7RpaMdq +MIxah0cLRVXHggmLwJxn25wEdPwa7TKEYTDC7/BHTL0C1JnNAZh/feTLyfXk8oa bDGNaT8RmA8lZw== -----END CERTIFICATE-----Generated at Tue Apr 21 17:22:27 2026 by rpki-client