$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft File: H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json) Hash identifier: 4xEiZwatWPC4x5GW+lXpQsLZP+72gdLkBI1Rcl+ZL/o= Subject key identifier: 26:E8:23:AC:9D:7B:18:3C:02:9B:AB:07:96:3D:F7:DD:36:C3:FE:6C Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019CE1EC102E68197CEBE30A73CF831ADB92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft Manifest number: 15D6 Signing time: Thu 12 Mar 2026 12:01:10 +0000 Manifest this update: Thu 12 Mar 2026 12:01:10 +0000 Manifest next update: Fri 13 Mar 2026 12:01:10 +0000 Files and hashes: 1: 0cFmPlgtZFatvGsFJ_6fS1O8kQM.roa (hash: /B2VVRe5N6Un7aDXd5evcTUVemNrJ/4W8eXY2wnpu94=) 2: 1GWKutvP5wqE4NwHAG48iVSQ7PA.roa (hash: zqS2gc00NkqFjgmG9FJ6uA0+J1taXCi+tvVpRWDaifE=) 3: 3vwyO3W8Bh0zjBGqPTD-ZCPrVBE.roa (hash: 7TJhddJ8dfgM4Myf26icmLUk9o2uV/+aWcO5kEfM5+A=) 4: 891PtgTBNZC3a-YUGxtJoKTNd9Q.roa (hash: 8pLxt4vOUppE6as9sL8XWLpnhsDUpDNmeiVIIwF1HIQ=) 5: FEVud0L2kHOw5Ln1548JrqC5Q6w.roa (hash: sjR58RIZxFioAN/H+M9b6lxvvCukJWsznFLFyY4pR1M=) 6: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: /xOYDmt8C8iJ6bQrLqcv29zGMn1wsU4NyRYnUEFYUI0=) 7: H2GH0N6BHFLGxcykoFv6zcUvV3U.roa (hash: mwIujdY9hafAxLMjhRo7Tumjv5kkNh8PdJkAoSsfwzg=) 8: ID0uSUS9YSfHNd3tbHUPCxezP7c.roa (hash: 5otoNJPeWt6BZ43Y3oQiN7LrNktvMHr+JIVRYTpLS2U=) 9: L-mOWHcg1ylWAEKsUC1Q7EkBDos.roa (hash: C7MelNSEzMNjj5NwSLZl7HFbk8+EnqV8THp51KyavaI=) 10: WDrGCEuL7zomVPzO5qOgkDOYYW8.roa (hash: Bq43pyJf1kGZbkrtrDRyCSZfh/w2s3N/titRpdx50Mk=) 11: _LjzQFp-RBvXVHPmX3DpbYIvGIk.roa (hash: UNlP0XNJK5YhJXXa04Z6EjYLUqHsqQb+BZnN1oQdL+M=) 12: an1Tdbj5z52i760TcgMy1zpUrg0.roa (hash: hyqa/bZq2B5838z18985E46JOI+C3vApH4rsbyeF/Nk=) 13: eTWMSBp3g-16UDje-DuW2V6MyZA.roa (hash: hPmex3YV052ex5E1T+0XcutmYptwXPGirLtYO5lS6nk=) 14: rtWFes-25RLRJLlkWAnOV9y_VDU.roa (hash: 3+EOMEdyyzgBn+xA9/R2u/F7BqlZVKKsbvRyIH5W+Bg=) 15: s8zryRYZWYIsQn_ONtQKxXurk28.roa (hash: N1huOpX/AGH+GVZvQgeYwmYcYRN5tn3PBeSEQanCoWM=) 16: vj81oHqBw2pAc-BDNlLiwVKERLE.roa (hash: P8A97Qm90xtFbJjDnSZwo5VP7wTH/pcEPPL3aOTXt/4=) 17: yIR2ykqDL3mm7OpbFLEIbA2EkFU.roa (hash: cduqrtFCtc6mNaM5tX4WTpvEqx6uRh6yFt4sNgSA/II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e1:ec:10:2e:68:19:7c:eb:e3:0a:73:cf:83:1a:db:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Mar 12 12:01:10 2026 GMT Not After : Mar 13 12:01:10 2026 GMT Subject: CN=26e823ac9d7b183c029bab07963df7dd36c3fe6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0b:b0:01:83:3c:26:20:05:47:8b:b8:34:c9: 45:3d:90:dc:28:64:0e:68:a5:6f:4c:eb:e8:cc:4d: 31:ed:67:7c:85:46:2b:7f:82:dd:28:ab:d4:a5:40: 48:71:51:b3:78:73:69:6e:cf:20:2c:89:09:3d:fe: 3a:ef:d7:95:54:ca:eb:89:ed:35:64:63:d3:72:84: db:34:d5:38:bb:eb:26:57:99:7f:4d:87:7b:d5:a2: 0f:09:37:5a:68:22:fe:d1:7b:bd:93:04:0e:ca:f6: 1d:8a:c8:e0:ea:fa:2d:89:85:02:ae:d1:81:8a:24: 45:bd:0a:ac:76:64:09:e8:17:f0:e8:e2:a1:10:6e: f1:15:7e:e1:48:b1:2d:57:1b:5a:31:d7:47:cd:ce: 0b:6d:fa:e9:50:54:4b:8b:ef:db:06:09:b1:27:da: 39:fe:b0:bd:45:b6:e8:90:ee:1f:f8:19:c1:1f:7f: 87:94:37:65:c2:01:76:76:f4:54:24:80:5a:ab:25: 76:4c:06:89:bf:b4:97:60:a1:6d:f8:dd:18:f7:61: a3:51:04:45:30:ae:24:ed:46:50:81:c9:a8:11:80: be:82:29:79:f3:07:b3:f2:e8:eb:19:b8:26:a7:04: 8b:66:a7:c1:41:83:70:3a:a2:b4:05:9d:fb:92:75: df:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E8:23:AC:9D:7B:18:3C:02:9B:AB:07:96:3D:F7:DD:36:C3:FE:6C X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:13:0a:71:79:d7:a8:3b:98:88:31:3e:e3:a0:16:29:d3:72: 26:a2:59:99:8e:42:b2:cf:f3:da:51:07:25:1c:97:b5:8e:4c: c1:ff:cc:36:90:4b:dd:fa:7e:9b:5b:a1:45:6e:6c:f6:da:8e: 96:22:bb:f2:90:38:76:3c:48:ce:25:77:fb:31:71:98:00:74: 6f:de:98:e3:b1:31:9f:eb:c7:e5:c1:ed:37:82:c1:4d:f9:4b: df:78:8c:2b:63:4b:47:09:bb:e4:ed:1f:d7:f7:90:48:a6:dc: 0a:f5:b1:26:d7:a8:ea:fe:d3:0b:d0:39:f2:b7:96:e5:12:d6: 61:01:c1:91:0e:44:bd:15:ff:28:82:74:36:99:06:4f:f7:c9: ef:5f:5b:5d:65:3e:3b:62:6a:da:86:dc:e3:05:40:c9:1f:3d: 2f:24:c8:28:70:48:21:6d:0a:2a:06:6c:a9:44:56:22:8e:82: 56:64:b0:28:77:c6:8f:9b:0a:45:ca:10:e5:79:0a:52:be:93: 4e:76:e7:23:9f:93:c3:01:45:57:70:91:9a:6f:f9:55:a7:a9: 0b:4e:3f:12:47:c0:10:0d:ac:ac:31:fe:68:00:a6:8b:2e:b3: 89:8a:eb:f2:ab:d8:82:fb:f5:14:44:c6:be:29:ed:46:ee:01: a3:85:93:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzh7BAuaBl86+MKc8+DGtuSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwMzEyMTIwMTEwWhcNMjYwMzEzMTIwMTEwWjAzMTEwLwYDVQQD EygyNmU4MjNhYzlkN2IxODNjMDI5YmFiMDc5NjNkZjdkZDM2YzNmZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wuwAYM8JiAFR4u4NMlFPZDcKGQO aKVvTOvozE0x7Wd8hUYrf4LdKKvUpUBIcVGzeHNpbs8gLIkJPf4679eVVMrrie01 ZGPTcoTbNNU4u+smV5l/TYd71aIPCTdaaCL+0Xu9kwQOyvYdisjg6votiYUCrtGB iiRFvQqsdmQJ6Bfw6OKhEG7xFX7hSLEtVxtaMddHzc4LbfrpUFRLi+/bBgmxJ9o5 /rC9RbbokO4f+BnBH3+HlDdlwgF2dvRUJIBaqyV2TAaJv7SXYKFt+N0Y92GjUQRF MK4k7UZQgcmoEYC+gil58wez8ujrGbgmpwSLZqfBQYNwOqK0BZ37knXfGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCboI6ydexg8ApurB5Y99902w/5sMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxMKcXnX qDuYiDE+46AWKdNyJqJZmY5Css/z2lEHJRyXtY5Mwf/MNpBL3fp+m1uhRW5s9tqO liK78pA4djxIziV3+zFxmAB0b96Y47Exn+vH5cHtN4LBTflL33iMK2NLRwm75O0f 1/eQSKbcCvWxJteo6v7TC9A58reW5RLWYQHBkQ5EvRX/KIJ0NpkGT/fJ719bXWU+ O2Jq2obc4wVAyR89LyTIKHBIIW0KKgZsqURWIo6CVmSwKHfGj5sKRcoQ5XkKUr6T TnbnI5+TwwFFV3CRmm/5VaepC04/EkfAEA2srDH+aACmiy6ziYrr8qvYgvv1FETG vintRu4Bo4WTpg== -----END CERTIFICATE-----Generated at Thu Mar 12 18:41:39 2026 by rpki-client