$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: XP5i38pALFLS8XU/niEiSpBTadzgPDCU0cuh3xSPBMk= Subject key identifier: 76:E5:21:64:DB:0E:37:51:4B:AC:F8:9A:5A:40:1A:AC:7B:2D:EE:E1 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019D156BF93598F45C7A30171EBBC7D554D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 189B Signing time: Sun 22 Mar 2026 12:01:30 +0000 Manifest this update: Sun 22 Mar 2026 12:01:30 +0000 Manifest next update: Mon 23 Mar 2026 12:01:30 +0000 Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=) 2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=) 3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=) 4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=) 5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=) 6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=) 7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: M5lVqX61eHwo40YJbpDIpHMEqCkHJpGjYdBONHLO6nU=) 8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=) 9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=) 10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=) 11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=) 12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=) 13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=) 14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=) 15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=) 16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=) 17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=) 18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=) 19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=) 20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=) 21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=) 22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=) 23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=) 24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=) 25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=) 26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=) 27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=) 28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=) 29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=) 30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=) 31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=) 32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=) 33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=) 34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=) 35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Mar 2026 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:15:6b:f9:35:98:f4:5c:7a:30:17:1e:bb:c7:d5:54:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Mar 22 12:01:30 2026 GMT Not After : Mar 23 12:01:30 2026 GMT Subject: CN=76e52164db0e37514bacf89a5a401aac7b2deee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:54:67:43:d1:fa:8b:07:76:bb:cf:47:3c:e9: 83:f3:9f:83:e6:07:09:a5:ae:26:af:3e:47:67:2c: 3d:ba:5b:1a:ad:2a:41:22:ca:27:50:0a:a1:70:28: c2:43:39:38:23:ad:19:88:a7:8e:77:ad:29:0e:6e: ca:d2:8d:bb:79:a3:88:da:37:3e:df:5a:25:65:d7: 39:d6:d9:74:ce:e7:71:6f:c0:55:4b:b2:45:18:44: 66:c0:b2:24:e1:50:4a:bf:d4:11:f9:ee:31:88:0e: e5:d3:49:3b:f9:8b:63:b2:2f:7e:72:03:d5:e3:2c: 3b:c7:05:c0:2d:c9:e0:b3:23:d8:04:f9:15:a6:44: e6:01:d6:2e:72:e7:64:b7:76:3b:e3:d7:5c:56:73: a3:64:2d:44:00:bf:dc:d9:ab:c0:16:a8:e3:76:31: 02:54:6f:a7:c4:5e:0a:ce:8e:19:ed:11:85:7c:89: b4:50:a7:66:0b:43:05:71:8e:a0:dd:84:60:ef:58: 82:1c:fe:58:3a:ff:7a:1c:da:2e:3f:ed:b1:ec:83: fc:4e:af:6e:b2:11:ec:cd:81:2a:88:fd:2b:b5:6e: 56:35:5d:08:2a:37:8b:75:ba:b9:0e:86:bb:72:ff: 27:45:3e:b9:7a:b0:ad:28:a0:3f:cc:eb:f2:da:56: 39:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E5:21:64:DB:0E:37:51:4B:AC:F8:9A:5A:40:1A:AC:7B:2D:EE:E1 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6f:db:60:7a:04:72:ba:d2:16:80:2a:14:ca:57:2d:79:73: 8b:0d:a9:37:c1:a6:a7:41:de:05:d6:e0:16:db:b8:68:2a:a4: 6d:39:ad:c6:95:1c:4c:53:e4:30:2f:8b:52:c7:f1:f1:cf:f5: db:b3:41:5c:f2:9e:23:55:91:8a:fb:9e:a4:e7:96:3e:da:63: ef:d1:e9:11:aa:2e:d2:b3:12:b2:1f:3c:ea:0c:b3:ba:34:df: 6c:1a:1f:54:70:45:8a:5f:e3:ef:b7:2c:36:09:a2:bf:1e:ac: 51:66:90:c5:c0:77:c8:66:8b:38:73:bc:b8:51:3e:f2:cf:6d: e8:b9:42:cf:eb:f0:3d:6b:30:85:c2:25:55:f8:5d:32:7e:52: 05:1b:51:a2:73:a9:7f:76:f2:1e:44:e2:d2:80:ce:21:3f:2f: 69:89:2e:ae:63:c4:ca:62:87:e8:4c:dd:e5:30:ce:2c:e3:93: f3:b3:6f:ae:99:b9:fe:0f:4f:4a:e3:88:93:c1:0b:0e:56:4e: f2:a4:99:fb:85:01:66:fe:14:1c:b2:c2:2d:c0:49:f1:32:1a: fe:d0:19:e0:41:3f:3b:94:51:8a:72:27:74:1c:40:54:f8:c0: ef:94:ad:a6:6b:09:36:93:8b:0a:8b:3f:77:6e:98:df:05:38: 22:8c:6a:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0Va/k1mPRcejAXHrvH1VTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMzIyMTIwMTMwWhcNMjYwMzIzMTIwMTMwWjAzMTEwLwYDVQQD Eyg3NmU1MjE2NGRiMGUzNzUxNGJhY2Y4OWE1YTQwMWFhYzdiMmRlZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlRnQ9H6iwd2u89HPOmD85+D5gcJ pa4mrz5HZyw9ulsarSpBIsonUAqhcCjCQzk4I60ZiKeOd60pDm7K0o27eaOI2jc+ 31olZdc51tl0zudxb8BVS7JFGERmwLIk4VBKv9QR+e4xiA7l00k7+Ytjsi9+cgPV 4yw7xwXALcngsyPYBPkVpkTmAdYucudkt3Y749dcVnOjZC1EAL/c2avAFqjjdjEC VG+nxF4Kzo4Z7RGFfIm0UKdmC0MFcY6g3YRg71iCHP5YOv96HNouP+2x7IP8Tq9u shHszYEqiP0rtW5WNV0IKjeLdbq5Doa7cv8nRT65erCtKKA/zOvy2lY5WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHblIWTbDjdRS6z4mlpAGqx7Le7hMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG/bYHoE crrSFoAqFMpXLXlziw2pN8Gmp0HeBdbgFtu4aCqkbTmtxpUcTFPkMC+LUsfx8c/1 27NBXPKeI1WRivuepOeWPtpj79HpEaou0rMSsh886gyzujTfbBofVHBFil/j77cs Ngmivx6sUWaQxcB3yGaLOHO8uFE+8s9t6LlCz+vwPWswhcIlVfhdMn5SBRtRonOp f3byHkTi0oDOIT8vaYkurmPEymKH6Ezd5TDOLOOT87Nvrpm5/g9PSuOIk8ELDlZO 8qSZ+4UBZv4UHLLCLcBJ8TIa/tAZ4EE/O5RRinIndBxAVPjA75StpmsJNpOLCos/ d26Y3wU4Ioxq6Q== -----END CERTIFICATE-----Generated at Sun Mar 22 13:54:25 2026 by rpki-client