$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft File: Hq9cLl7cGXg00H80WWKwdFvuZtc.mft (raw, json) Hash identifier: 01K2Lgg/mHCkg/rN6R5wuLM9B+q6PX/otra74zLf4wI= Subject key identifier: A6:75:9D:86:22:6F:24:7E:11:98:E0:42:83:D3:C2:DC:B8:F2:AC:C5 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 019DCC7468FBBD31B2C4515BA474804AC971 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft Manifest number: 1915 Signing time: Mon 27 Apr 2026 01:01:14 +0000 Manifest this update: Mon 27 Apr 2026 01:01:14 +0000 Manifest next update: Tue 28 Apr 2026 01:01:14 +0000 Files and hashes: 1: 6nfKLOxto_YJYq2hDB97wz66l7E.roa (hash: nCd4ej6s8SzPKiU6agc04bISSI9GsH2UwtiXrQMxtRs=) 2: 8BGOgyvTM3cQVZkmabNpYxGe_9s.roa (hash: 9bggmjWraVwIQX28xZSm8TmHWMkhlleKkSUw+UjkIs4=) 3: 8BokwqNdAZw-F0ecrcKpG0HfvdE.roa (hash: p4KMplmsFd8hmDW0qUXNZiwtSy0rhvkuFzg9slKSx6o=) 4: B_Oas4WgmVIGn-3rrNhZeLW80Lo.roa (hash: D3jA3MorfBqB+MfUHf0sPY50LeECj4jpZHTJI+CUbGU=) 5: HP4h8_-ij1bAYdXbX3Z1R7TdJ9g.roa (hash: h5J4pV3iFw9aHd46YGtejZF/piq/CX6ObP5wMogmeI8=) 6: Hq9cLl7cGXg00H80WWKwdFvuZtc.crl (hash: 8b6pWjW2f/FUIoaK9vqMCAZCAoRyoUuHT3nCrAesD3E=) 7: JRsFGSId3TzORTpxmswJLHlu4I8.roa (hash: 5ygqb7D/I+BTjwmlYor1uSAyPC9t0hkED6pGiyYg/78=) 8: OfMasiijhAZchYy0030zvbrlt-8.roa (hash: JAjJ4Bw+aA7TY1if9MpoLvJnduTs4THfiTVv+9chKF4=) 9: QIm7dSvtcpzFOIMcrTzwe_OIWNQ.roa (hash: Ch8UtIUviSsaCVKNk2Yb1YCrdhDpRUHvwacjcC2l2ow=) 10: _6MH9zVVkOeMpELiq5Cuz4TxPq4.roa (hash: Yf/0SmZ5VEph+y/wLg+PuwUwXOxrukDOWnmf2A7NDUI=) 11: cE0yN1WOvpYnDNVGwFdAVB_PIyc.roa (hash: CWCW4wNMR0RLe8n5ZfdlICFSL8sFAoWjELlH9k3Hdic=) 12: gQLOSDe6bZCk8wDTKoJn2-ZTmUE.roa (hash: re6Ygf6gSVSu5DzyXUoiaLvQGBgaOtSi43lQvwKzPcs=) 13: iBgtsm0jgQ2Bb5AuJNJncbwCTJU.roa (hash: xxJYeXXzDMUbIn2arXYw6Bz1WeFd21DHLoaAUzTjTnk=) 14: p0p2OO5fAMJ3EsixMPWafbErHR8.roa (hash: AW4TgH3P5L8EKPSHOfhLkGluDRU0yoKTmN94YBIvSR8=) 15: pwK5uipUW01i-Mazx5XzNaCOMgE.roa (hash: 9YzuOYyTTU1NxOO3ZjZHRys+tph7wfbixRzNg7hF41o=) 16: rcW2Ii7PaBs2Uy4l6LWyLkHdSMo.roa (hash: 4rDXiZIxTJhAB4SWesiReJpAQSLBHJqIt+2m35EFqOU=) 17: tEM3cdsPlnnUtLjCCZyMoawWAtg.roa (hash: 6h53cAP7YwqSOqXrW0Uk5ZovRw+2Dyi+jtBDIPvi2c0=) 18: tqaZWzQOONuL8X5Ttv1_aR0SBeA.roa (hash: I8ohGSxZ/k/bp4akujtG1SbYswguKs5oqy4Uk65ywNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:74:68:fb:bd:31:b2:c4:51:5b:a4:74:80:4a:c9:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Apr 27 01:01:14 2026 GMT Not After : Apr 28 01:01:14 2026 GMT Subject: CN=a6759d86226f247e1198e04283d3c2dcb8f2acc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:54:e6:78:54:1b:b3:f4:99:25:a9:b2:5b:69: 20:ff:47:c3:41:86:b3:a5:c1:d3:dc:ca:c8:f5:22: 38:b0:dc:97:02:40:12:20:87:64:07:88:03:94:c0: 87:8e:0c:35:3b:4a:90:92:fa:a3:6d:26:e9:f7:e2: 2a:b2:c8:7a:39:ff:41:bf:78:1e:83:cf:9f:66:a0: 37:36:c3:c8:78:0a:be:41:9b:cd:15:cb:04:4f:71: 3e:78:51:4e:f7:f1:11:04:ce:7f:75:8c:27:8b:d9: 9b:10:71:e1:75:2c:a8:04:ef:62:ff:66:1f:21:94: 80:c4:0b:44:eb:60:64:15:6e:e1:8b:4e:45:78:57: 00:70:ce:c6:9b:87:d6:69:95:ca:ee:6c:0d:da:84: 7b:85:39:1c:44:41:85:6d:ba:e6:ed:c3:58:a4:a2: c4:5b:66:78:8f:f4:30:09:16:bf:fc:c2:d2:2d:d4: e5:62:34:97:2c:96:38:a8:f8:1d:9d:2a:64:22:52: 2c:56:99:20:9f:69:ac:c0:0d:d6:98:e3:ba:aa:02: 79:b3:b2:70:46:ec:bd:c0:91:b1:7a:ce:f6:4a:81: 8c:c3:29:fa:52:4a:f7:63:7d:ec:26:34:36:fa:22: e7:ef:91:e1:04:4b:af:50:e3:34:71:cf:2a:8a:a5: 61:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:75:9D:86:22:6F:24:7E:11:98:E0:42:83:D3:C2:DC:B8:F2:AC:C5 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c9:69:d5:8b:01:69:0e:41:39:f0:cb:c3:b3:31:bd:12:5f: 14:a9:61:2c:fc:8f:9f:31:ab:33:a6:9f:20:fc:9b:1e:a1:02: 5b:fc:e5:33:c5:87:29:1d:74:ed:d2:ba:6d:f8:40:73:18:03: 81:ba:16:3d:0c:69:05:e9:1c:a3:50:be:ad:70:dd:90:31:71: 3f:31:0f:0e:3c:bf:f7:30:2d:44:1a:46:e0:fe:c8:2c:97:ee: 9d:5c:3b:19:bf:ea:f6:82:b2:c2:8a:90:7e:f1:d7:54:53:d0: ac:7f:c8:a1:58:d8:c6:d8:c0:94:1c:e3:3a:12:c4:27:0c:7b: bc:92:b2:04:cd:17:dd:95:0d:de:61:a8:e3:4c:ba:d8:87:80: 4e:8e:45:b3:cf:3b:32:50:1c:ec:b5:92:f9:78:7e:6e:27:97: d4:f8:1f:f7:3a:0d:3f:3f:98:99:e0:67:b4:ec:0c:d5:4a:bf: 1b:2f:ad:d6:05:43:4b:32:58:c2:6d:f7:93:66:c3:c9:2f:be: 56:8b:19:69:7c:d8:b3:d0:81:49:34:d4:3c:6b:3a:a3:01:36: d5:24:5f:01:15:a1:39:a1:5e:9f:88:e1:b3:6c:3f:b6:f2:64: 53:9c:88:84:a0:72:63:48:68:db:a3:3d:bb:50:2a:9b:29:de: e5:30:fc:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MdGj7vTGyxFFbpHSASslxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjYwNDI3MDEwMTE0WhcNMjYwNDI4MDEwMTE0WjAzMTEwLwYDVQQD EyhhNjc1OWQ4NjIyNmYyNDdlMTE5OGUwNDI4M2QzYzJkY2I4ZjJhY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlTmeFQbs/SZJamyW2kg/0fDQYaz pcHT3MrI9SI4sNyXAkASIIdkB4gDlMCHjgw1O0qQkvqjbSbp9+Iqssh6Of9Bv3ge g8+fZqA3NsPIeAq+QZvNFcsET3E+eFFO9/ERBM5/dYwni9mbEHHhdSyoBO9i/2Yf IZSAxAtE62BkFW7hi05FeFcAcM7Gm4fWaZXK7mwN2oR7hTkcREGFbbrm7cNYpKLE W2Z4j/QwCRa//MLSLdTlYjSXLJY4qPgdnSpkIlIsVpkgn2mswA3WmOO6qgJ5s7Jw Ruy9wJGxes72SoGMwyn6Ukr3Y33sJjQ2+iLn75HhBEuvUOM0cc8qiqVhGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZ1nYYibyR+EZjgQoPTwty48qzFMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMlp1YsB aQ5BOfDLw7MxvRJfFKlhLPyPnzGrM6afIPybHqECW/zlM8WHKR107dK6bfhAcxgD gboWPQxpBekco1C+rXDdkDFxPzEPDjy/9zAtRBpG4P7ILJfunVw7Gb/q9oKywoqQ fvHXVFPQrH/IoVjYxtjAlBzjOhLEJwx7vJKyBM0X3ZUN3mGo40y62IeATo5Fs887 MlAc7LWS+Xh+bieX1Pgf9zoNPz+YmeBntOwM1Uq/Gy+t1gVDSzJYwm33k2bDyS++ VosZaXzYs9CBSTTUPGs6owE21SRfARWhOaFen4jhs2w/tvJkU5yIhKByY0ho26M9 u1Aqmyne5TD8TA== -----END CERTIFICATE-----Generated at Mon Apr 27 11:58:11 2026 by rpki-client