$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft File: Hq9cLl7cGXg00H80WWKwdFvuZtc.mft (raw, json) Hash identifier: v3Az8L2/2LMta91crySs/3CIke4GGpJ4k4vq3dbzzWM= Subject key identifier: 38:52:8F:6B:74:43:F7:4B:EE:81:E4:08:19:53:84:94:14:98:58:BA Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 019EB7D83D73DCC0A8271E5D71E85EC2E54C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft Manifest number: 1992 Signing time: Thu 11 Jun 2026 18:01:02 +0000 Manifest this update: Thu 11 Jun 2026 18:01:02 +0000 Manifest next update: Fri 12 Jun 2026 18:01:02 +0000 Files and hashes: 1: 6nfKLOxto_YJYq2hDB97wz66l7E.roa (hash: nCd4ej6s8SzPKiU6agc04bISSI9GsH2UwtiXrQMxtRs=) 2: 8BGOgyvTM3cQVZkmabNpYxGe_9s.roa (hash: 9bggmjWraVwIQX28xZSm8TmHWMkhlleKkSUw+UjkIs4=) 3: 8BokwqNdAZw-F0ecrcKpG0HfvdE.roa (hash: p4KMplmsFd8hmDW0qUXNZiwtSy0rhvkuFzg9slKSx6o=) 4: B_Oas4WgmVIGn-3rrNhZeLW80Lo.roa (hash: D3jA3MorfBqB+MfUHf0sPY50LeECj4jpZHTJI+CUbGU=) 5: HP4h8_-ij1bAYdXbX3Z1R7TdJ9g.roa (hash: h5J4pV3iFw9aHd46YGtejZF/piq/CX6ObP5wMogmeI8=) 6: Hq9cLl7cGXg00H80WWKwdFvuZtc.crl (hash: Lj6uODN+9H31hQmlNtw0vPt5rKNEYF4p2ttqpeIeyBQ=) 7: JRsFGSId3TzORTpxmswJLHlu4I8.roa (hash: 5ygqb7D/I+BTjwmlYor1uSAyPC9t0hkED6pGiyYg/78=) 8: OfMasiijhAZchYy0030zvbrlt-8.roa (hash: JAjJ4Bw+aA7TY1if9MpoLvJnduTs4THfiTVv+9chKF4=) 9: QIm7dSvtcpzFOIMcrTzwe_OIWNQ.roa (hash: Ch8UtIUviSsaCVKNk2Yb1YCrdhDpRUHvwacjcC2l2ow=) 10: _6MH9zVVkOeMpELiq5Cuz4TxPq4.roa (hash: Yf/0SmZ5VEph+y/wLg+PuwUwXOxrukDOWnmf2A7NDUI=) 11: bKam-QF0hAVKIr7uU4GhnjFhoNw.roa (hash: IiEAHA6LBRwbMc3DI0Wp/JgQMj2jSHonSenES30jsQk=) 12: p0p2OO5fAMJ3EsixMPWafbErHR8.roa (hash: AW4TgH3P5L8EKPSHOfhLkGluDRU0yoKTmN94YBIvSR8=) 13: pwK5uipUW01i-Mazx5XzNaCOMgE.roa (hash: 9YzuOYyTTU1NxOO3ZjZHRys+tph7wfbixRzNg7hF41o=) 14: rcW2Ii7PaBs2Uy4l6LWyLkHdSMo.roa (hash: 4rDXiZIxTJhAB4SWesiReJpAQSLBHJqIt+2m35EFqOU=) 15: tEM3cdsPlnnUtLjCCZyMoawWAtg.roa (hash: 6h53cAP7YwqSOqXrW0Uk5ZovRw+2Dyi+jtBDIPvi2c0=) 16: tqaZWzQOONuL8X5Ttv1_aR0SBeA.roa (hash: I8ohGSxZ/k/bp4akujtG1SbYswguKs5oqy4Uk65ywNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 18:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:d8:3d:73:dc:c0:a8:27:1e:5d:71:e8:5e:c2:e5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Jun 11 18:01:02 2026 GMT Not After : Jun 12 18:01:02 2026 GMT Subject: CN=38528f6b7443f74bee81e40819538494149858ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:da:97:49:c4:e7:92:ab:18:72:8b:1b:64: 2a:2d:ec:53:8b:2d:aa:b3:b7:cd:01:eb:b7:4b:17: b1:26:c9:d9:2d:6e:68:5c:f7:a8:cb:e4:eb:c4:f9: cf:81:fe:90:4e:8e:3f:ba:38:d8:76:69:07:aa:ce: ea:25:7f:bc:76:47:ba:05:c8:86:cb:bf:72:d3:a6: 49:df:45:f6:e4:f3:f5:0d:f4:08:62:0e:e1:6c:52: b5:63:1c:d4:3f:65:2b:d7:bb:99:d2:b0:85:b5:e3: 6c:b2:26:79:e3:0d:0c:94:26:fc:46:29:79:ce:45: e0:15:13:74:ca:b9:20:4b:b9:d4:bc:64:95:0a:0a: 93:10:a7:4f:b9:f5:d2:3a:dc:12:22:ce:1c:13:8b: fd:32:67:71:eb:47:6f:9d:d2:32:aa:ff:72:87:7b: e9:46:b5:0b:79:d0:ec:b0:d5:3e:9a:f6:0b:dc:2e: ac:9b:d1:e5:32:60:88:0a:68:64:73:9d:1a:e3:09: 7c:6a:59:e4:13:e1:43:4f:ec:6b:33:9e:60:cd:86: 2f:63:27:99:98:94:5e:64:1a:06:74:42:e3:ef:af: 87:05:9c:b8:1c:57:30:e8:7b:09:ae:b3:6e:ed:ca: 26:2f:f0:7b:bb:3a:bd:37:25:fe:73:88:96:c8:14: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:52:8F:6B:74:43:F7:4B:EE:81:E4:08:19:53:84:94:14:98:58:BA X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:88:2d:37:85:00:d7:e0:1d:da:65:95:e9:81:ce:a3:8e:19: 77:fe:bb:c6:38:0a:c2:c7:c6:94:3b:9f:45:b4:43:0a:0d:0a: 14:c9:80:92:7f:de:dd:6f:c7:86:7e:02:a4:1c:25:ec:e2:57: 8d:ea:a1:1a:2d:82:a3:33:0b:8f:78:4b:8c:82:c0:62:4c:dc: 6f:f9:f7:01:b3:42:91:1c:f9:0b:7c:df:b7:2f:28:9e:cc:a8: bd:7d:7e:f4:22:40:45:7c:75:76:af:d3:3d:aa:70:41:8b:c6: 00:e9:15:86:83:50:d1:5f:a3:d2:3c:ba:df:4c:d2:81:25:61: 4b:89:eb:97:cf:94:9e:85:81:1a:1a:b0:f6:2f:9e:9e:34:c7: 23:ee:51:aa:36:63:43:93:40:44:05:05:9b:6a:2f:29:f9:61: 73:4b:f3:af:0c:db:4f:5e:70:a4:0e:c4:ed:21:d5:d7:a3:57: a7:c4:3c:a3:e0:6f:a6:4a:0b:b0:eb:ca:45:02:0a:e5:6c:82: 17:b5:25:ad:e2:71:07:20:2c:2a:fe:95:e7:05:ef:fc:25:48: c5:e9:b9:69:a9:6f:1c:0c:67:12:8a:18:4b:18:6d:c7:25:67: 3e:c9:be:df:d0:35:ee:48:72:19:01:30:ba:c8:ac:cc:06:98: 14:b4:f4:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ632D1z3MCoJx5dcehewuVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjYwNjExMTgwMTAyWhcNMjYwNjEyMTgwMTAyWjAzMTEwLwYDVQQD EygzODUyOGY2Yjc0NDNmNzRiZWU4MWU0MDgxOTUzODQ5NDE0OTg1OGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCval0nE55KrGHKLG2QqLexTiy2q s7fNAeu3SxexJsnZLW5oXPeoy+TrxPnPgf6QTo4/ujjYdmkHqs7qJX+8dke6BciG y79y06ZJ30X25PP1DfQIYg7hbFK1YxzUP2Ur17uZ0rCFteNssiZ54w0MlCb8Ril5 zkXgFRN0yrkgS7nUvGSVCgqTEKdPufXSOtwSIs4cE4v9Mmdx60dvndIyqv9yh3vp RrULedDssNU+mvYL3C6sm9HlMmCICmhkc50a4wl8alnkE+FDT+xrM55gzYYvYyeZ mJReZBoGdELj76+HBZy4HFcw6HsJrrNu7comL/B7uzq9NyX+c4iWyBRBXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhSj2t0Q/dL7oHkCBlThJQUmFi6MB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYgtN4UA 1+Ad2mWV6YHOo44Zd/67xjgKwsfGlDufRbRDCg0KFMmAkn/e3W/Hhn4CpBwl7OJX jeqhGi2CozMLj3hLjILAYkzcb/n3AbNCkRz5C3zfty8onsyovX1+9CJARXx1dq/T PapwQYvGAOkVhoNQ0V+j0jy630zSgSVhS4nrl8+UnoWBGhqw9i+enjTHI+5RqjZj Q5NARAUFm2ovKflhc0vzrwzbT15wpA7E7SHV16NXp8Q8o+BvpkoLsOvKRQIK5WyC F7UlreJxByAsKv6V5wXv/CVIxem5aalvHAxnEooYSxhtxyVnPsm+39A17khyGQEw usiszAaYFLT0kw== -----END CERTIFICATE-----Generated at Fri Jun 12 03:22:10 2026 by rpki-client