$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft File: H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json) Hash identifier: V40sr+DNmv4asx/Zwdzimrc5tsIC5R/1H6PqusZe934= Subject key identifier: 5D:FA:2C:5D:39:77:A6:E2:63:2B:E5:25:2D:F2:8C:B3:31:2F:4D:4B Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019DCD8684247FC6D0968B5DCE2F33691985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft Manifest number: 1650 Signing time: Mon 27 Apr 2026 06:00:37 +0000 Manifest this update: Mon 27 Apr 2026 06:00:37 +0000 Manifest next update: Tue 28 Apr 2026 06:00:37 +0000 Files and hashes: 1: 0cFmPlgtZFatvGsFJ_6fS1O8kQM.roa (hash: /B2VVRe5N6Un7aDXd5evcTUVemNrJ/4W8eXY2wnpu94=) 2: 1GWKutvP5wqE4NwHAG48iVSQ7PA.roa (hash: zqS2gc00NkqFjgmG9FJ6uA0+J1taXCi+tvVpRWDaifE=) 3: 3vwyO3W8Bh0zjBGqPTD-ZCPrVBE.roa (hash: 7TJhddJ8dfgM4Myf26icmLUk9o2uV/+aWcO5kEfM5+A=) 4: 891PtgTBNZC3a-YUGxtJoKTNd9Q.roa (hash: 8pLxt4vOUppE6as9sL8XWLpnhsDUpDNmeiVIIwF1HIQ=) 5: FEVud0L2kHOw5Ln1548JrqC5Q6w.roa (hash: sjR58RIZxFioAN/H+M9b6lxvvCukJWsznFLFyY4pR1M=) 6: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: +qYjTx1UZtrTlG7KJV/1girDjFKhCyj5d2+vyfu4G18=) 7: H2GH0N6BHFLGxcykoFv6zcUvV3U.roa (hash: mwIujdY9hafAxLMjhRo7Tumjv5kkNh8PdJkAoSsfwzg=) 8: ID0uSUS9YSfHNd3tbHUPCxezP7c.roa (hash: 5otoNJPeWt6BZ43Y3oQiN7LrNktvMHr+JIVRYTpLS2U=) 9: L-mOWHcg1ylWAEKsUC1Q7EkBDos.roa (hash: C7MelNSEzMNjj5NwSLZl7HFbk8+EnqV8THp51KyavaI=) 10: WDrGCEuL7zomVPzO5qOgkDOYYW8.roa (hash: Bq43pyJf1kGZbkrtrDRyCSZfh/w2s3N/titRpdx50Mk=) 11: _LjzQFp-RBvXVHPmX3DpbYIvGIk.roa (hash: UNlP0XNJK5YhJXXa04Z6EjYLUqHsqQb+BZnN1oQdL+M=) 12: an1Tdbj5z52i760TcgMy1zpUrg0.roa (hash: hyqa/bZq2B5838z18985E46JOI+C3vApH4rsbyeF/Nk=) 13: eTWMSBp3g-16UDje-DuW2V6MyZA.roa (hash: hPmex3YV052ex5E1T+0XcutmYptwXPGirLtYO5lS6nk=) 14: rtWFes-25RLRJLlkWAnOV9y_VDU.roa (hash: 3+EOMEdyyzgBn+xA9/R2u/F7BqlZVKKsbvRyIH5W+Bg=) 15: s8zryRYZWYIsQn_ONtQKxXurk28.roa (hash: N1huOpX/AGH+GVZvQgeYwmYcYRN5tn3PBeSEQanCoWM=) 16: vj81oHqBw2pAc-BDNlLiwVKERLE.roa (hash: P8A97Qm90xtFbJjDnSZwo5VP7wTH/pcEPPL3aOTXt/4=) 17: yIR2ykqDL3mm7OpbFLEIbA2EkFU.roa (hash: cduqrtFCtc6mNaM5tX4WTpvEqx6uRh6yFt4sNgSA/II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:86:84:24:7f:c6:d0:96:8b:5d:ce:2f:33:69:19:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Apr 27 06:00:37 2026 GMT Not After : Apr 28 06:00:37 2026 GMT Subject: CN=5dfa2c5d3977a6e2632be5252df28cb3312f4d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:b6:c0:3f:63:01:6c:3f:44:b9:59:1b:9a: f9:46:01:3d:c5:d4:81:d9:fb:a4:ce:f8:85:0e:45: 14:5c:af:76:cf:b7:50:16:d7:f9:48:fc:3a:ba:8c: 19:d1:d9:50:28:8f:44:1b:41:1c:1f:17:4d:a0:c1: d8:3e:e7:cf:e9:ee:91:16:2a:80:ec:28:b3:ec:65: 65:5e:fa:c9:79:f6:c8:61:34:86:7c:c4:6f:b7:85: 45:81:b1:01:ed:f5:7f:e3:14:31:51:ba:6b:b4:c5: 2f:19:26:29:c0:a2:4b:1e:6d:ed:3a:82:15:66:b2: b1:b8:17:7c:97:8f:cc:91:f7:ee:d1:23:25:7f:3f: db:fc:ee:5a:b2:b4:ef:54:ed:db:66:d5:ad:d7:10: 25:4e:5e:a2:0c:98:ba:36:f6:ee:b6:67:35:ce:7a: cb:cb:6a:a4:70:83:e4:66:12:37:25:44:c3:79:1f: 51:db:66:a9:af:9b:e0:b0:9a:46:8b:25:5d:e4:41: 55:47:c8:d7:75:fc:53:4d:e6:85:60:6e:ca:e1:91: bb:45:5d:ed:34:6e:77:b5:f2:bf:6c:b9:9f:7b:17: 61:41:9a:cd:93:29:4d:70:8a:07:1f:9d:81:e8:79: 93:9f:ee:83:b3:e6:c6:62:4f:e1:77:c7:55:47:f2: 7d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FA:2C:5D:39:77:A6:E2:63:2B:E5:25:2D:F2:8C:B3:31:2F:4D:4B X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:88:50:37:bc:dd:fc:3b:22:75:de:11:e7:6c:2f:e7:bc:32: 36:b2:3f:16:51:2e:45:46:9b:0e:b7:6e:f4:c3:70:f4:17:a3: e4:89:f7:03:b8:df:68:85:60:31:35:3c:70:57:6c:e0:2b:05: 69:03:ba:58:d3:89:33:d7:85:82:c7:91:ff:60:4c:52:77:26: 5f:75:be:85:1b:4d:82:6d:51:68:2d:41:27:14:c3:78:7f:bf: 7d:b4:de:e6:50:f1:7c:5f:f5:2a:d4:e8:dc:46:94:e2:97:5b: 65:d8:d3:c5:78:27:43:64:51:e0:63:ec:7f:d6:a0:24:28:fe: cf:2e:dc:30:34:ec:de:f6:8e:29:f4:89:11:a1:e0:ef:c5:e6: d3:e1:34:ff:53:94:b7:a6:9f:e3:81:5d:83:f5:f5:26:0d:1c: 55:89:7c:3d:af:fd:f1:37:5e:12:e8:c0:ea:64:ca:0c:1e:13: 64:e3:c4:ce:a0:e4:3d:0e:85:0b:c7:fb:db:05:f6:fa:1b:8f: 87:5f:72:d9:8a:1b:c3:11:70:e5:7a:2b:68:ad:29:1f:38:27: ab:42:ea:14:21:bc:31:af:36:22:19:a1:5f:33:e7:2a:54:86: e4:86:e5:9b:6b:6c:bf:a6:5f:fb:79:92:d1:13:e0:4c:54:15: f5:e4:b3:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3NhoQkf8bQlotdzi8zaRmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwNDI3MDYwMDM3WhcNMjYwNDI4MDYwMDM3WjAzMTEwLwYDVQQD Eyg1ZGZhMmM1ZDM5NzdhNmUyNjMyYmU1MjUyZGYyOGNiMzMxMmY0ZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwe2wD9jAWw/RLlZG5r5RgE9xdSB 2fukzviFDkUUXK92z7dQFtf5SPw6uowZ0dlQKI9EG0EcHxdNoMHYPufP6e6RFiqA 7Ciz7GVlXvrJefbIYTSGfMRvt4VFgbEB7fV/4xQxUbprtMUvGSYpwKJLHm3tOoIV ZrKxuBd8l4/Mkffu0SMlfz/b/O5asrTvVO3bZtWt1xAlTl6iDJi6Nvbutmc1znrL y2qkcIPkZhI3JUTDeR9R22apr5vgsJpGiyVd5EFVR8jXdfxTTeaFYG7K4ZG7RV3t NG53tfK/bLmfexdhQZrNkylNcIoHH52B6HmTn+6Ds+bGYk/hd8dVR/J9UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF36LF05d6biYyvlJS3yjLMxL01LMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4hQN7zd /Dsidd4R52wv57wyNrI/FlEuRUabDrdu9MNw9Bej5In3A7jfaIVgMTU8cFds4CsF aQO6WNOJM9eFgseR/2BMUncmX3W+hRtNgm1RaC1BJxTDeH+/fbTe5lDxfF/1KtTo 3EaU4pdbZdjTxXgnQ2RR4GPsf9agJCj+zy7cMDTs3vaOKfSJEaHg78Xm0+E0/1OU t6af44Fdg/X1Jg0cVYl8Pa/98TdeEujA6mTKDB4TZOPEzqDkPQ6FC8f72wX2+huP h19y2YobwxFw5XoraK0pHzgnq0LqFCG8Ma82IhmhXzPnKlSG5Iblm2tsv6Zf+3mS 0RPgTFQV9eSzpw== -----END CERTIFICATE-----Generated at Mon Apr 27 12:40:23 2026 by rpki-client