$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: NlQmRZXZBIrKqZxiZp+IAO88tasYNtmSo2Dap1ke+mY= Subject key identifier: 9E:C1:A6:12:81:22:3A:C9:1E:83:1C:54:0D:2A:88:9E:50:45:99:31 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019DFF17E1DD3ACADD66D682C94AD7092DE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 1914 Signing time: Wed 06 May 2026 21:00:48 +0000 Manifest this update: Wed 06 May 2026 21:00:48 +0000 Manifest next update: Thu 07 May 2026 21:00:48 +0000 Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=) 2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=) 3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=) 4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=) 5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=) 6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=) 7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: ToYAFe8vVFIUOg387eJAoktCgsbe6F29U2F4a0VzKx8=) 8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=) 9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=) 10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=) 11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=) 12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=) 13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=) 14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=) 15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=) 16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=) 17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=) 18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=) 19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=) 20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=) 21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=) 22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=) 23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=) 24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=) 25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=) 26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=) 27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=) 28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=) 29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=) 30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=) 31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=) 32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=) 33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=) 34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=) 35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 May 2026 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ff:17:e1:dd:3a:ca:dd:66:d6:82:c9:4a:d7:09:2d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: May 6 21:00:48 2026 GMT Not After : May 7 21:00:48 2026 GMT Subject: CN=9ec1a61281223ac91e831c540d2a889e50459931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:dc:bb:5c:cb:83:06:c4:35:39:b7:aa:7a: e3:dd:2c:cb:e0:2f:e5:bf:91:0b:c2:8d:17:2f:02: 0f:d2:fe:14:3a:3c:7b:4a:e9:6c:7b:20:26:27:ce: 1b:db:40:5c:82:db:fd:fd:12:50:c2:4e:26:55:00: 3f:e5:b8:1f:3d:71:34:0d:6d:8e:98:ca:77:c6:5d: 08:e2:1b:e2:4d:af:ac:39:dd:18:02:ea:34:f4:93: 12:40:95:37:d5:7e:31:01:fa:49:e3:99:d9:1f:84: b7:48:84:76:a4:e7:c9:39:81:b4:b7:34:57:7f:81: 2d:17:60:26:2f:03:1b:86:f6:2e:ca:05:67:b9:4d: aa:03:74:bb:f8:8f:6e:73:e1:ec:21:93:86:f7:eb: 64:ea:61:55:fd:83:7e:1d:59:bf:f8:07:48:6b:dd: 0b:b9:37:29:25:a7:51:59:0f:5c:a7:6c:fb:7d:dc: 17:64:e7:ba:34:a8:c1:dc:67:ef:dd:ff:f1:ea:95: 50:cd:96:b2:30:75:c1:65:2c:28:74:0a:5f:ec:81: 29:c9:ba:96:fc:e7:e0:65:35:7e:fd:31:f7:50:45: a6:d7:92:af:19:5a:a1:61:b1:18:f5:9f:cd:e9:ae: 3a:71:ea:fe:12:8f:c8:53:51:24:59:8f:d7:d0:94: 7d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C1:A6:12:81:22:3A:C9:1E:83:1C:54:0D:2A:88:9E:50:45:99:31 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ea:73:64:86:67:61:d6:ff:a4:5c:f2:a8:d1:ee:25:1d:52: 85:46:b8:95:6e:30:e9:89:98:c8:28:80:99:b6:50:d2:7b:ad: 3d:50:54:1d:3d:fb:e0:07:fd:74:dd:90:0f:dd:26:c0:d7:cb: 8d:59:89:da:f7:0b:c0:85:8e:a0:98:37:13:ec:c7:d2:dd:e1: ae:5d:48:1e:ea:9c:1f:fc:2f:02:d2:04:63:15:73:bc:6b:34: b2:a0:2b:85:14:da:a1:3f:d5:a4:c4:86:c8:12:6a:11:5e:e6: 49:02:5d:a7:33:37:7c:63:ed:e9:cd:a2:ee:fd:a7:1a:ed:57: 96:da:64:20:e6:d3:b8:2b:81:d8:63:bd:88:78:c0:13:45:b8: f0:03:92:f3:d4:45:bd:00:f7:fa:00:31:16:da:4a:9b:c5:f6: e5:73:d9:41:c0:29:77:28:71:69:f5:7e:f3:17:fe:2d:c5:7f: bd:66:ea:a8:1d:e1:4e:28:6d:73:ad:56:c7:64:c5:50:21:37: c3:90:1c:80:49:01:57:16:09:86:3e:c3:f9:08:fa:b9:38:f1: bc:39:e2:fa:78:36:be:fd:1e:2d:bb:a6:dd:96:83:e5:2a:9f: cd:3d:41:e4:74:77:ac:ea:61:3e:84:36:28:2e:d9:4a:02:2d: 3b:a2:4a:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3/F+HdOsrdZtaCyUrXCS3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwNTA2MjEwMDQ4WhcNMjYwNTA3MjEwMDQ4WjAzMTEwLwYDVQQD Eyg5ZWMxYTYxMjgxMjIzYWM5MWU4MzFjNTQwZDJhODg5ZTUwNDU5OTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJLcu1zLgwbENTm3qnrj3SzL4C/l v5ELwo0XLwIP0v4UOjx7SulseyAmJ84b20Bcgtv9/RJQwk4mVQA/5bgfPXE0DW2O mMp3xl0I4hviTa+sOd0YAuo09JMSQJU31X4xAfpJ45nZH4S3SIR2pOfJOYG0tzRX f4EtF2AmLwMbhvYuygVnuU2qA3S7+I9uc+HsIZOG9+tk6mFV/YN+HVm/+AdIa90L uTcpJadRWQ9cp2z7fdwXZOe6NKjB3Gfv3f/x6pVQzZayMHXBZSwodApf7IEpybqW /OfgZTV+/TH3UEWm15KvGVqhYbEY9Z/N6a46cer+Eo/IU1EkWY/X0JR96QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7BphKBIjrJHoMcVA0qiJ5QRZkxMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOpzZIZn Ydb/pFzyqNHuJR1ShUa4lW4w6YmYyCiAmbZQ0nutPVBUHT374Af9dN2QD90mwNfL jVmJ2vcLwIWOoJg3E+zH0t3hrl1IHuqcH/wvAtIEYxVzvGs0sqArhRTaoT/VpMSG yBJqEV7mSQJdpzM3fGPt6c2i7v2nGu1XltpkIObTuCuB2GO9iHjAE0W48AOS89RF vQD3+gAxFtpKm8X25XPZQcApdyhxafV+8xf+LcV/vWbqqB3hTihtc61Wx2TFUCE3 w5AcgEkBVxYJhj7D+Qj6uTjxvDni+ng2vv0eLbum3ZaD5SqfzT1B5HR3rOphPoQ2 KC7ZSgItO6JKwg== -----END CERTIFICATE-----Generated at Thu May 7 03:35:32 2026 by rpki-client