$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: kMwGUt5hE+mKgDJjKyYVkjQmsIwWhdQLk/S1WU2kCyk= Subject key identifier: FB:95:C0:29:DA:B8:13:88:8D:D7:CE:05:97:88:C7:46:BF:15:A1:F6 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 01A1705D3F889A4B2700B62C791F8A1E41E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 1AF5 Signing time: Sun 25 Oct 2026 00:02:01 +0000 Manifest this update: Sun 25 Oct 2026 00:02:01 +0000 Manifest next update: Mon 26 Oct 2026 00:02:01 +0000 Files and hashes: 1: 1-V84oobFXIlKZ3Dls5nBGbkUta8.roa (hash: Y6oUsmKL79cneGenSJvYXaOULigPUniMqNXXoxtkoQA=) 2: 1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa (hash: laO24ACjIVLZyTAa5hofsg3cM+gHDkRC5wH6+r7XTlw=) 3: 20xMr4UkTc7mDjSXUAQ2OIVEdaA.roa (hash: lYcXkOJMvyy3d7VAmjTtLuavcH5/RrOQ9RjLW9dvSVc=) 4: 6ZzDjxgNYdOCdszBPZyujZWdIQU.roa (hash: 9UI3twwOpxPDECF8g7XXCOiJN8BzbbKSShDSCVBs94A=) 5: 97B4Sc_XubtL_lW7OfZysQqsOs4.roa (hash: s6SnzQICC+87j3qQ2YxLoHSbPtUJDNl+2RyFPIbB7qI=) 6: D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa (hash: 3brIsivCbhFviJ62ZCvrk45wXBqMSMZrnrXYGWBpVqI=) 7: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: rwyJTU+FLVpL4X0LYivOVqefxbcykHcxDpJk3p0dAOo=) 8: KW3ruKOhj6JKZMq89hnmHfD2ogg.roa (hash: 0KDaehG1BpLDekFmNyw0N8o8oxyUdxrGz4gLnB27NL0=) 9: LsDa6KTrverRW5gJHEDYsnUiWaA.roa (hash: kyRRzPpmtC/6cc1RLLOBnwLx4RCN3jXZIWgVX+OjOJY=) 10: Muj2FNE8Gldd8yzrKLebS3hsgG8.roa (hash: Rd6lCWkMq66do726k8up+6ZsrZZs2AV3lPweaatdunQ=) 11: OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa (hash: oyzTksz2QKSnafMS1kmCzYf1d4YWDMBQktGYceuURLI=) 12: UE5lqxub4HZyPzOaFIeY1MynbOM.roa (hash: G/5g2S7073n0P8fSJcz9JyRKGI6p6NHbjV1Y/gWxHho=) 13: XDU9UWSQ0e6UimvguU5iuXs0EOA.roa (hash: SCFRxNca9zUGzw86U8+KWNOZievAR3LE2W5GLXuSUcY=) 14: _qJbebTlrOvrXIQLM28_mZtacRY.roa (hash: BqUn6UdSWnNCo8IEu4itHIeonT1vIDue6NclshrDycA=) 15: hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa (hash: b4EBco8NgahSA81khEE6SumwN6LoQGLW/RXHQz3fVtU=) 16: hc27-Du5AK-QSwEPPlUOrqZiXBk.asa (hash: NZwly8DKYsKefjnwC5ZEjbZE7IIJQUE4bCO5RCZXMKA=) 17: kF__trkxnSoai5YPHEuion9F5-M.roa (hash: tWmn9E+rdr18LE8axfsyGzfbkAEBv9XZf3xK1lkaYrs=) 18: rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa (hash: 6M2XOWFy53R21mcWbAHRpsAh3NRSx51bXy4kBppg9Z0=) 19: uC3zCk-SIOTP3v8kN8AvkOioJlk.roa (hash: t6NH48ochz8I1c27bkPFIEdPItgxlKo5FppJqJnPRh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 23:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:70:5d:3f:88:9a:4b:27:00:b6:2c:79:1f:8a:1e:41:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Oct 25 00:02:01 2026 GMT Not After : Oct 26 00:02:01 2026 GMT Subject: CN=fb95c029dab813888dd7ce059788c746bf15a1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:e3:6f:94:51:1f:60:b4:a8:eb:79:df:ec: db:3b:c0:6f:05:b3:20:63:cd:f0:ee:06:33:31:23: af:c6:2c:4e:b4:5c:e6:67:1c:3a:88:86:80:f6:49: 18:56:63:8f:36:bc:3f:39:75:b8:a8:7b:4c:be:24: 5b:3b:14:24:c8:c1:a0:b0:e7:bb:61:73:16:b8:f0: 5c:63:9f:c1:0f:7e:04:87:8e:7e:60:ce:1e:d3:81: c5:7e:14:82:ae:41:88:4b:37:1a:36:99:20:00:90: 63:75:7f:1d:06:60:19:23:f7:f5:70:69:95:36:c1: 59:3d:27:9b:5e:3e:f1:24:03:71:74:56:9b:b8:27: 40:4d:d9:60:f6:49:20:58:13:a0:ca:e4:18:bb:e7: 13:06:78:fd:0e:e7:8d:53:65:d6:3c:ab:e3:5f:69: 33:36:6d:90:4f:94:b5:b4:9d:52:10:bb:74:48:39: b5:30:50:bf:f8:0c:84:a1:89:9a:c6:39:37:2e:3a: 36:d9:31:e9:3b:af:c7:96:e4:8a:34:f7:9a:de:43: 42:ba:05:8a:5c:ce:1d:f4:70:c4:a9:3a:1c:9e:07: 4d:da:2e:90:5b:a3:d6:96:fb:dd:12:db:0e:20:b0: 18:d8:37:b7:7f:33:a5:10:5f:5e:44:79:57:16:7d: 0c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:95:C0:29:DA:B8:13:88:8D:D7:CE:05:97:88:C7:46:BF:15:A1:F6 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:72:8d:fa:5b:10:38:6a:ac:a7:da:39:f5:a8:80:f0:06:8e: b1:bd:4b:83:fa:83:b2:f4:f5:5c:01:cb:27:f1:64:13:38:1d: d3:18:f6:43:51:de:1f:b2:ce:ea:7c:9c:27:7c:59:1d:39:a9: 31:5a:4d:d5:cc:57:99:07:39:f8:f5:bf:d9:2d:ee:2b:cb:f6: fa:04:dd:ed:19:74:63:c9:a9:31:f6:fd:29:03:ed:d2:1c:f2: ac:33:0d:60:d8:39:ed:13:ad:78:0a:4e:23:20:55:6c:20:51: 99:e8:49:2e:3d:b9:23:b1:21:22:20:b4:9c:76:ec:81:4e:0c: 47:71:d1:33:37:2a:e0:98:3d:61:0a:36:13:7a:ad:81:cf:fe: 79:7a:7e:69:44:f2:c2:f1:48:5d:92:0f:20:49:00:13:31:cf: 26:a4:af:35:db:67:2c:12:a6:6d:89:dc:03:cc:9c:d8:e3:f6: 0e:74:f6:a2:80:a3:7e:9e:c9:bb:6f:99:a4:87:77:2f:7a:24: b0:36:c8:1b:09:1d:06:5b:7c:09:0c:99:9a:80:22:e3:e3:e4: 5a:2b:ae:54:a2:fb:ec:53:91:bc:1c:b8:15:9a:25:82:a3:66: a1:4e:1a:d5:49:68:1f:f3:c6:1d:03:83:fc:9d:e9:07:06:95: 78:2c:75:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFwXT+ImksnALYseR+KHkHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYxMDI1MDAwMjAxWhcNMjYxMDI2MDAwMjAxWjAzMTEwLwYDVQQD EyhmYjk1YzAyOWRhYjgxMzg4OGRkN2NlMDU5Nzg4Yzc0NmJmMTVhMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYbjb5RRH2C0qOt53+zbO8BvBbMg Y83w7gYzMSOvxixOtFzmZxw6iIaA9kkYVmOPNrw/OXW4qHtMviRbOxQkyMGgsOe7 YXMWuPBcY5/BD34Eh45+YM4e04HFfhSCrkGISzcaNpkgAJBjdX8dBmAZI/f1cGmV NsFZPSebXj7xJANxdFabuCdATdlg9kkgWBOgyuQYu+cTBnj9DueNU2XWPKvjX2kz Nm2QT5S1tJ1SELt0SDm1MFC/+AyEoYmaxjk3Ljo22THpO6/HluSKNPea3kNCugWK XM4d9HDEqTocngdN2i6QW6PWlvvdEtsOILAY2De3fzOlEF9eRHlXFn0McwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuVwCnauBOIjdfOBZeIx0a/FaH2MB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnKN+lsQ OGqsp9o59aiA8AaOsb1Lg/qDsvT1XAHLJ/FkEzgd0xj2Q1HeH7LO6nycJ3xZHTmp MVpN1cxXmQc5+PW/2S3uK8v2+gTd7Rl0Y8mpMfb9KQPt0hzyrDMNYNg57ROteApO IyBVbCBRmehJLj25I7EhIiC0nHbsgU4MR3HRMzcq4Jg9YQo2E3qtgc/+eXp+aUTy wvFIXZIPIEkAEzHPJqSvNdtnLBKmbYncA8yc2OP2DnT2ooCjfp7Ju2+ZpId3L3ok sDbIGwkdBlt8CQyZmoAi4+PkWiuuVKL77FORvBy4FZolgqNmoU4a1UloH/PGHQOD /J3pBwaVeCx1cQ== -----END CERTIFICATE-----Generated at Sun Oct 25 06:49:16 2026 by rpki-client