$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft File: Hq9cLl7cGXg00H80WWKwdFvuZtc.mft (raw, json) Hash identifier: q4NVPLYVS6mGHoqDDcAY9T5TCKbdQZvu8pFvvjzFtRs= Subject key identifier: 23:BD:5F:AB:CE:C2:41:95:A4:54:8D:C2:73:D0:73:84:91:6C:0C:1D Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 01A0889F12AC26F02FC8F5AF955D012B7CA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft Manifest number: 1A84 Signing time: Thu 10 Sep 2026 00:02:01 +0000 Manifest this update: Thu 10 Sep 2026 00:02:01 +0000 Manifest next update: Fri 11 Sep 2026 00:02:01 +0000 Files and hashes: 1: 6nfKLOxto_YJYq2hDB97wz66l7E.roa (hash: nCd4ej6s8SzPKiU6agc04bISSI9GsH2UwtiXrQMxtRs=) 2: 8BGOgyvTM3cQVZkmabNpYxGe_9s.roa (hash: 9bggmjWraVwIQX28xZSm8TmHWMkhlleKkSUw+UjkIs4=) 3: 8BokwqNdAZw-F0ecrcKpG0HfvdE.roa (hash: p4KMplmsFd8hmDW0qUXNZiwtSy0rhvkuFzg9slKSx6o=) 4: B_Oas4WgmVIGn-3rrNhZeLW80Lo.roa (hash: D3jA3MorfBqB+MfUHf0sPY50LeECj4jpZHTJI+CUbGU=) 5: HP4h8_-ij1bAYdXbX3Z1R7TdJ9g.roa (hash: h5J4pV3iFw9aHd46YGtejZF/piq/CX6ObP5wMogmeI8=) 6: Hq9cLl7cGXg00H80WWKwdFvuZtc.crl (hash: ULQTtF2AonhxxygvHJ1dnwQr7g5oVUU4I87S5WoK1rk=) 7: JRsFGSId3TzORTpxmswJLHlu4I8.roa (hash: 5ygqb7D/I+BTjwmlYor1uSAyPC9t0hkED6pGiyYg/78=) 8: OfMasiijhAZchYy0030zvbrlt-8.roa (hash: JAjJ4Bw+aA7TY1if9MpoLvJnduTs4THfiTVv+9chKF4=) 9: QIm7dSvtcpzFOIMcrTzwe_OIWNQ.roa (hash: Ch8UtIUviSsaCVKNk2Yb1YCrdhDpRUHvwacjcC2l2ow=) 10: _6MH9zVVkOeMpELiq5Cuz4TxPq4.roa (hash: Yf/0SmZ5VEph+y/wLg+PuwUwXOxrukDOWnmf2A7NDUI=) 11: p0p2OO5fAMJ3EsixMPWafbErHR8.roa (hash: AW4TgH3P5L8EKPSHOfhLkGluDRU0yoKTmN94YBIvSR8=) 12: pwK5uipUW01i-Mazx5XzNaCOMgE.roa (hash: 9YzuOYyTTU1NxOO3ZjZHRys+tph7wfbixRzNg7hF41o=) 13: rcW2Ii7PaBs2Uy4l6LWyLkHdSMo.roa (hash: 4rDXiZIxTJhAB4SWesiReJpAQSLBHJqIt+2m35EFqOU=) 14: sBcp-KfPMLb3b0O-MHNhu68HhH4.roa (hash: bn1J4rpbxYSjkRdiPx8otefx7IPJbaM21sshZ5BvBsw=) 15: tEM3cdsPlnnUtLjCCZyMoawWAtg.roa (hash: 6h53cAP7YwqSOqXrW0Uk5ZovRw+2Dyi+jtBDIPvi2c0=) 16: tqaZWzQOONuL8X5Ttv1_aR0SBeA.roa (hash: I8ohGSxZ/k/bp4akujtG1SbYswguKs5oqy4Uk65ywNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 00:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:88:9f:12:ac:26:f0:2f:c8:f5:af:95:5d:01:2b:7c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Sep 10 00:02:01 2026 GMT Not After : Sep 11 00:02:01 2026 GMT Subject: CN=23bd5fabcec24195a4548dc273d07384916c0c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:c9:76:ef:13:63:d3:d6:d4:49:f1:1d:c3: 6e:80:79:8b:a6:b8:ce:ec:38:13:26:ac:ba:a6:09: 68:80:1d:59:cd:d9:49:58:5f:05:6f:93:50:ee:ae: f2:5e:9b:87:c8:51:85:fc:93:a0:42:26:bb:fb:0f: 1c:6b:3e:f3:30:03:97:0d:26:c1:04:7c:c8:56:45: ee:6f:b9:8f:70:d2:3f:2a:4f:00:c7:93:fb:39:11: 96:ca:fc:9e:fd:5c:8f:c3:bd:a7:a7:86:9e:b3:5d: 14:08:d5:ea:27:ef:e3:c0:7a:ac:85:cf:9e:a2:85: c4:2f:36:5f:18:73:d5:fe:d9:d9:a1:75:32:81:45: 6e:eb:c4:2d:42:57:30:13:c5:84:5d:3a:20:ec:03: a0:86:a1:80:fa:79:4c:b3:e9:c4:fc:1b:9a:70:99: da:0a:82:b7:3f:af:ca:65:5a:55:b9:fc:96:ae:bd: 3c:00:ac:da:53:94:fe:35:c6:fb:12:b7:20:f0:5c: 78:d8:95:c0:cb:7a:9d:62:c0:ba:bd:86:27:53:af: 23:f1:b3:31:fe:fd:50:7c:29:b6:72:31:df:03:f0: 7d:fb:a8:18:d4:78:6a:91:c2:49:82:05:4e:49:47: 5d:98:57:85:6b:6b:8e:53:c6:cd:e4:da:f0:be:54: 58:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BD:5F:AB:CE:C2:41:95:A4:54:8D:C2:73:D0:73:84:91:6C:0C:1D X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:40:c1:97:63:23:82:e7:75:5a:fd:3a:9f:3a:06:4a:f6:1b: fb:dd:1f:79:b7:cf:d0:2f:a3:e6:25:db:ff:51:53:08:ac:8f: 28:67:ee:eb:aa:09:13:24:dd:bf:ee:43:79:a4:59:18:d2:74: 79:38:ed:d0:f2:60:39:c2:6d:d5:3b:03:64:c6:3c:17:e2:11: b0:d1:40:74:f5:d9:ad:2b:5e:98:d1:cd:cd:3e:6a:ef:9a:90: a6:e6:1d:c1:2b:14:a8:2f:36:d9:78:2e:ca:7b:f6:12:cf:a4: 54:2b:35:05:7b:b5:6c:3e:c2:14:c4:af:3f:ba:93:cf:56:41: 26:32:cc:80:a9:b2:e1:4b:8c:14:ca:2c:b4:f9:4b:a4:24:81: ba:66:43:bf:b2:48:b2:56:79:ef:f8:5e:38:21:a0:d3:3a:28: 44:c5:e4:93:84:32:5a:a8:9f:cf:59:42:0b:3a:ad:d9:5e:6c: 3d:f4:04:04:4c:a5:0d:1d:6c:8f:4e:63:1d:73:0e:80:d7:35: 81:23:46:66:e9:30:55:bf:66:9f:4f:95:3e:b8:89:1d:b1:a4: f5:ba:ca:17:f7:42:d2:93:6c:cb:bb:17:e1:8d:78:12:45:6d: f7:e1:9b:70:11:a4:03:4e:e7:9f:22:9d:3c:2c:34:20:6f:93: 33:2f:a3:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCInxKsJvAvyPWvlV0BK3yjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjYwOTEwMDAwMjAxWhcNMjYwOTExMDAwMjAxWjAzMTEwLwYDVQQD EygyM2JkNWZhYmNlYzI0MTk1YTQ1NDhkYzI3M2QwNzM4NDkxNmMwYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBnJdu8TY9PW1EnxHcNugHmLprjO 7DgTJqy6pglogB1ZzdlJWF8Fb5NQ7q7yXpuHyFGF/JOgQia7+w8caz7zMAOXDSbB BHzIVkXub7mPcNI/Kk8Ax5P7ORGWyvye/VyPw72np4aes10UCNXqJ+/jwHqshc+e ooXELzZfGHPV/tnZoXUygUVu68QtQlcwE8WEXTog7AOghqGA+nlMs+nE/BuacJna CoK3P6/KZVpVufyWrr08AKzaU5T+Ncb7Ercg8Fx42JXAy3qdYsC6vYYnU68j8bMx /v1QfCm2cjHfA/B9+6gY1HhqkcJJggVOSUddmFeFa2uOU8bN5NrwvlRY7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCO9X6vOwkGVpFSNwnPQc4SRbAwdMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUDBl2Mj gud1Wv06nzoGSvYb+90febfP0C+j5iXb/1FTCKyPKGfu66oJEyTdv+5DeaRZGNJ0 eTjt0PJgOcJt1TsDZMY8F+IRsNFAdPXZrStemNHNzT5q75qQpuYdwSsUqC822Xgu ynv2Es+kVCs1BXu1bD7CFMSvP7qTz1ZBJjLMgKmy4UuMFMostPlLpCSBumZDv7JI slZ57/heOCGg0zooRMXkk4QyWqifz1lCCzqt2V5sPfQEBEylDR1sj05jHXMOgNc1 gSNGZukwVb9mn0+VPriJHbGk9brKF/dC0pNsy7sX4Y14EkVt9+GbcBGkA07nnyKd PCw0IG+TMy+jbw== -----END CERTIFICATE-----Generated at Thu Sep 10 11:21:40 2026 by rpki-client