$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: vwcF4Epk5kMPY+UerN79BzULZ7SSEbufRo2L8AmhUog= Subject key identifier: 4A:F7:0E:F4:16:40:F3:1C:D3:90:F6:10:FD:44:17:F2:62:D4:32:46 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 01A137B5F5397F7780582BFB905F8768D359 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1ABD Signing time: Wed 14 Oct 2026 00:00:33 +0000 Manifest this update: Wed 14 Oct 2026 00:00:33 +0000 Manifest next update: Thu 15 Oct 2026 00:00:33 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: CyZB8kDZ8orCNuNqD0jP-3JDzQ0.roa (hash: AOydhySyRx86U77hRjFuCY7jHngtnWo+Y3ruaih4/CY=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: Z5Pl3PnfVn0fKjpq5wdHzsKuEwCBH67elfCD+ZHPWJw=) 7: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 8: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 9: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) 17: xBSI8ulhxzPaD1wXzIlWHkfrMZE.roa (hash: xMJ4qKB6RaQDJudqrf471CfMp7Ryx25C6wOirJMZqoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Oct 2026 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:37:b5:f5:39:7f:77:80:58:2b:fb:90:5f:87:68:d3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Oct 14 00:00:33 2026 GMT Not After : Oct 15 00:00:33 2026 GMT Subject: CN=4af70ef41640f31cd390f610fd4417f262d43246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:a5:01:e3:56:d1:32:9f:7c:35:d1:7a:a0: ec:bc:2f:4d:45:69:f2:23:0b:09:b5:13:ef:b6:a8: 4a:ba:53:6e:33:c6:83:10:44:71:ae:f3:3f:ff:d9: f6:0f:c6:24:32:aa:93:89:0f:15:07:97:4e:9f:47: b1:c9:e2:4f:e2:2a:2e:9d:41:d9:bb:a3:0e:e4:ff: ce:e4:70:d6:23:4d:f5:cf:3b:ba:63:0a:c8:2d:76: ca:0c:51:90:c7:fa:98:57:d7:9d:63:59:31:ca:86: 1d:ac:17:6d:14:a8:23:34:59:1d:8d:b4:be:fc:51: 40:24:5e:cb:60:20:ec:df:a6:97:c0:61:eb:c0:3a: fa:02:a2:0f:7e:07:13:25:75:9a:12:e9:99:32:8a: c3:15:15:9a:71:64:14:8c:5a:a0:ea:c5:b2:3d:3a: 00:d5:a7:67:35:a6:88:ef:7b:e6:c2:a9:24:40:93: 18:1a:a0:ca:02:8b:62:ea:ad:3b:75:30:5c:0b:7f: 5d:00:a2:fa:e1:74:04:c8:2e:aa:d0:13:61:56:95: 29:b9:ba:e8:c9:9f:81:45:a6:85:dc:35:be:78:cc: 75:b3:e1:97:0a:a6:f4:c8:47:8a:20:07:e4:ad:21: 5c:2b:68:41:5c:e9:88:f8:f4:89:57:4c:28:67:0f: b7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F7:0E:F4:16:40:F3:1C:D3:90:F6:10:FD:44:17:F2:62:D4:32:46 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:42:a2:c4:9d:55:09:4c:59:42:52:a4:f9:f9:73:9f:20:a8: 36:e4:b2:e0:30:62:86:29:ab:54:f1:4e:52:4b:aa:33:24:19: 10:ca:31:3f:8c:f0:71:85:56:d9:a4:88:e3:d8:3a:ca:b6:ea: 95:23:90:2f:58:35:08:d9:ad:8c:e8:72:cb:33:ff:db:6d:c4: 76:94:45:96:bf:c4:04:24:23:cd:9a:f5:a5:0a:40:ec:90:fb: 99:17:c3:88:4f:7d:2e:3a:c3:c1:0c:64:a2:9d:4e:f6:54:5a: 38:37:2c:f3:1d:58:25:7e:c7:f1:57:67:e7:5c:51:59:1b:9c: 3c:f2:e4:ef:82:41:e4:b0:dc:88:79:cc:a8:c7:74:97:c2:ce: 24:6b:f5:ed:08:74:69:37:e2:cb:e3:da:de:7f:57:e9:53:de: ae:39:d4:96:18:25:90:06:be:07:85:76:a5:63:28:5d:a5:b5: 92:c5:01:aa:69:17:b0:fc:5a:c9:ea:55:15:75:c4:47:5f:1d: 7f:9a:da:a3:4a:23:f1:3d:8e:44:48:cf:7f:36:37:88:16:f7: f8:e8:11:0a:eb:a3:c8:ed:87:ff:95:df:09:f6:30:3d:af:09: ec:58:ac:a4:95:c8:00:92:d4:e8:1c:4e:78:a8:e6:00:b6:cf: c3:13:24:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaE3tfU5f3eAWCv7kF+HaNNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYxMDE0MDAwMDMzWhcNMjYxMDE1MDAwMDMzWjAzMTEwLwYDVQQD Eyg0YWY3MGVmNDE2NDBmMzFjZDM5MGY2MTBmZDQ0MTdmMjYyZDQzMjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZalAeNW0TKffDXReqDsvC9NRWny IwsJtRPvtqhKulNuM8aDEERxrvM//9n2D8YkMqqTiQ8VB5dOn0exyeJP4iounUHZ u6MO5P/O5HDWI031zzu6YwrILXbKDFGQx/qYV9edY1kxyoYdrBdtFKgjNFkdjbS+ /FFAJF7LYCDs36aXwGHrwDr6AqIPfgcTJXWaEumZMorDFRWacWQUjFqg6sWyPToA 1adnNaaI73vmwqkkQJMYGqDKAoti6q07dTBcC39dAKL64XQEyC6q0BNhVpUpubro yZ+BRaaF3DW+eMx1s+GXCqb0yEeKIAfkrSFcK2hBXOmI+PSJV0woZw+3xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEr3DvQWQPMc05D2EP1EF/Ji1DJGMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUKixJ1V CUxZQlKk+flznyCoNuSy4DBihimrVPFOUkuqMyQZEMoxP4zwcYVW2aSI49g6yrbq lSOQL1g1CNmtjOhyyzP/223EdpRFlr/EBCQjzZr1pQpA7JD7mRfDiE99LjrDwQxk op1O9lRaODcs8x1YJX7H8Vdn51xRWRucPPLk74JB5LDciHnMqMd0l8LOJGv17Qh0 aTfiy+Pa3n9X6VPerjnUlhglkAa+B4V2pWMoXaW1ksUBqmkXsPxayepVFXXER18d f5rao0oj8T2OREjPfzY3iBb3+OgRCuujyO2H/5XfCfYwPa8J7FispJXIAJLU6BxO eKjmALbPwxMkww== -----END CERTIFICATE-----Generated at Wed Oct 14 11:50:58 2026 by rpki-client