$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: cdQFdbiZSCoiwv21U/8AoYCiPnoUB6wbYBz302mcCcc= Subject key identifier: A1:D4:A0:3B:17:CC:14:27:B1:33:20:51:29:32:33:9E:75:C0:42:0D Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 01A0C9A1A22B317AB6E7711D441386F2EFDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 1A86 Signing time: Tue 22 Sep 2026 15:00:08 +0000 Manifest this update: Tue 22 Sep 2026 15:00:08 +0000 Manifest next update: Wed 23 Sep 2026 15:00:08 +0000 Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=) 2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=) 3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=) 4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=) 5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=) 6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=) 7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: xMGCTNnU3xjDGysZ/0uNZnv6kVVl0FqK6boxjK6Hbvg=) 8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=) 9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=) 10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=) 11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=) 12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=) 13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=) 14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=) 15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=) 16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=) 17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=) 18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=) 19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=) 20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=) 21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=) 22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=) 23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=) 24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=) 25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=) 26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=) 27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=) 28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=) 29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=) 30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=) 31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=) 32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=) 33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=) 34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=) 35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:a1:a2:2b:31:7a:b6:e7:71:1d:44:13:86:f2:ef:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Sep 22 15:00:08 2026 GMT Not After : Sep 23 15:00:08 2026 GMT Subject: CN=a1d4a03b17cc1427b13320512932339e75c0420d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:2f:3d:c6:33:87:9f:3e:69:7b:30:99:22: f9:1c:98:12:72:06:b0:54:d6:3e:dc:81:8b:9c:97: 0d:4f:9b:1e:f3:e0:91:db:43:96:c5:bc:2c:31:53: 90:a3:ce:5b:0d:3d:cb:da:ab:38:fe:9d:66:0c:49: 56:91:1a:be:bf:ba:f2:15:2d:13:89:2a:d8:f5:9c: 74:e9:49:ea:28:be:f7:fc:61:b1:5e:c9:66:ec:94: 4a:10:85:c3:5b:18:3c:f2:e0:48:5b:30:d7:7f:98: 01:51:52:46:6d:6c:86:cb:89:6f:31:0b:0b:e8:89: bd:9a:6f:b0:d5:28:38:6e:c2:32:e2:e8:b3:a6:a6: 04:06:73:b7:c0:91:1c:f4:19:ce:25:e8:7a:e2:ce: 1e:7d:b5:37:61:f9:3f:7b:46:eb:08:58:5b:dc:38: f4:4d:9f:69:97:e4:ca:7f:c2:c3:14:57:e2:32:68: 87:1f:11:c2:b9:77:c9:12:13:d7:cd:e7:d2:4a:06: c3:29:bb:d6:e5:bd:d5:f8:53:83:59:22:1f:ca:0b: ee:23:11:22:bd:b6:3d:90:29:3a:5a:a7:36:7d:41: b8:f6:1d:d1:e4:89:79:d2:35:48:85:12:a1:a0:43: e6:26:9e:38:4e:73:b9:cd:9d:05:b9:06:a8:3c:25: f6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D4:A0:3B:17:CC:14:27:B1:33:20:51:29:32:33:9E:75:C0:42:0D X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6c:47:88:81:dd:8c:b3:c9:cc:d0:c9:3b:c3:1c:38:be:4b: a8:2c:b6:db:f1:03:cd:b6:0d:92:00:2d:b6:85:09:7c:92:29: ae:bc:8a:d6:c6:f5:22:74:c9:0e:14:f6:35:8c:c1:80:32:06: 64:07:d4:00:44:5d:f6:cc:cc:35:bb:8b:36:1d:d5:5e:e1:13: 9b:d3:2d:50:1c:bf:01:bc:37:06:fa:b2:e0:1a:5c:71:30:01: 16:04:d2:6f:a9:b1:8a:7c:cb:a7:35:4f:1e:a4:88:84:63:94: a3:f1:82:20:b1:03:60:0d:15:21:64:7c:f7:e7:34:44:f4:9b: 3a:e3:3a:94:8a:e5:d1:53:93:09:89:5c:c2:98:38:77:ea:34: 5f:aa:66:0e:fb:bf:92:be:59:d0:67:f0:36:15:be:a7:64:26: cb:8c:10:93:ed:cc:15:52:25:e8:db:d1:ba:b0:d0:28:62:b1: f6:86:aa:a6:d8:4f:b4:84:a7:0b:2f:da:c8:21:86:6e:03:80: e5:7d:d1:8a:bf:6f:87:58:08:82:0b:65:91:7b:90:b0:4c:95: 6e:02:a2:70:c1:18:c3:87:1c:0d:cb:24:4e:45:73:23:41:bb: 23:af:74:d3:8a:3f:ee:3a:41:39:3a:ca:7f:27:ea:87:e7:c7: 87:0b:f2:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDJoaIrMXq253EdRBOG8u/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwOTIyMTUwMDA4WhcNMjYwOTIzMTUwMDA4WjAzMTEwLwYDVQQD EyhhMWQ0YTAzYjE3Y2MxNDI3YjEzMzIwNTEyOTMyMzM5ZTc1YzA0MjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2UvPcYzh58+aXswmSL5HJgScgaw VNY+3IGLnJcNT5se8+CR20OWxbwsMVOQo85bDT3L2qs4/p1mDElWkRq+v7ryFS0T iSrY9Zx06UnqKL73/GGxXslm7JRKEIXDWxg88uBIWzDXf5gBUVJGbWyGy4lvMQsL 6Im9mm+w1Sg4bsIy4uizpqYEBnO3wJEc9BnOJeh64s4efbU3Yfk/e0brCFhb3Dj0 TZ9pl+TKf8LDFFfiMmiHHxHCuXfJEhPXzefSSgbDKbvW5b3V+FODWSIfygvuIxEi vbY9kCk6Wqc2fUG49h3R5Il50jVIhRKhoEPmJp44TnO5zZ0FuQaoPCX2twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHUoDsXzBQnsTMgUSkyM551wEINMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamxHiIHd jLPJzNDJO8McOL5LqCy22/EDzbYNkgAttoUJfJIprryK1sb1InTJDhT2NYzBgDIG ZAfUAERd9szMNbuLNh3VXuETm9MtUBy/Abw3Bvqy4BpccTABFgTSb6mxinzLpzVP HqSIhGOUo/GCILEDYA0VIWR89+c0RPSbOuM6lIrl0VOTCYlcwpg4d+o0X6pmDvu/ kr5Z0GfwNhW+p2Qmy4wQk+3MFVIl6NvRurDQKGKx9oaqpthPtISnCy/ayCGGbgOA 5X3Rir9vh1gIggtlkXuQsEyVbgKicMEYw4ccDcskTkVzI0G7I69004o/7jpBOTrK fyfqh+fHhwvy8A== -----END CERTIFICATE-----Generated at Tue Sep 22 23:41:12 2026 by rpki-client