$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: XmC2yjxUoDGqCzaB9gYYUH1dqSf94jvRPyT3t+onz74= Subject key identifier: 96:BE:CF:E8:13:2E:9D:94:42:70:5F:3A:AD:E7:50:79:5A:94:7A:E3 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019DBEEF55B392BE00734A22F8D7B06CCB3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 1902 Signing time: Fri 24 Apr 2026 10:00:49 +0000 Manifest this update: Fri 24 Apr 2026 10:00:49 +0000 Manifest next update: Sat 25 Apr 2026 10:00:49 +0000 Files and hashes: 1: 1-V84oobFXIlKZ3Dls5nBGbkUta8.roa (hash: Y6oUsmKL79cneGenSJvYXaOULigPUniMqNXXoxtkoQA=) 2: 1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa (hash: laO24ACjIVLZyTAa5hofsg3cM+gHDkRC5wH6+r7XTlw=) 3: 1WdFXv1Jg5APhjnipHcc4mLeqvg.roa (hash: IZKCSGM3fACKg/PrPaA+UZQwdKhIoEOq7r5L+j4pjTg=) 4: 2W2MCcTiOGzKibb9IktRwoV7t7w.roa (hash: 9hzbcjFutrF6fmKr1I+WiZpYh5ANj2nzThUtT9+uWLQ=) 5: 6ZzDjxgNYdOCdszBPZyujZWdIQU.roa (hash: 9UI3twwOpxPDECF8g7XXCOiJN8BzbbKSShDSCVBs94A=) 6: 8rKgBAJA8MJvfJn7wlRXaLSOltg.roa (hash: vKik0l+/uPuH0Z6X6US0ts7buVtMAj4tzTB6bbsDKWw=) 7: D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa (hash: 3brIsivCbhFviJ62ZCvrk45wXBqMSMZrnrXYGWBpVqI=) 8: Eq8JCzY_2xgrWNLuTFpKz8LyYYI.roa (hash: /lqPOANyW17qinqhiK8qfXDXg0mEzP1UjKBeGgxEB10=) 9: FMdvNunKljn8ofGnpjf1LZVHjq8.roa (hash: 8mvnTEy6JbB2XqN3FH0fr8TfsaVsZ+l1QCmyb/WMQRQ=) 10: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: A4eWZxFHuPIVoHRMiLU4BlaWY+7iRNn7ckCR3eBcYEM=) 11: LsDa6KTrverRW5gJHEDYsnUiWaA.roa (hash: kyRRzPpmtC/6cc1RLLOBnwLx4RCN3jXZIWgVX+OjOJY=) 12: OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa (hash: oyzTksz2QKSnafMS1kmCzYf1d4YWDMBQktGYceuURLI=) 13: XDU9UWSQ0e6UimvguU5iuXs0EOA.roa (hash: SCFRxNca9zUGzw86U8+KWNOZievAR3LE2W5GLXuSUcY=) 14: hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa (hash: b4EBco8NgahSA81khEE6SumwN6LoQGLW/RXHQz3fVtU=) 15: hc27-Du5AK-QSwEPPlUOrqZiXBk.asa (hash: NZwly8DKYsKefjnwC5ZEjbZE7IIJQUE4bCO5RCZXMKA=) 16: jl7QDhibiq_JOYv1vjDrL8Omz9o.roa (hash: JDmYOxWLUYSslhLzawMmaYVHDSzzt7UH8K2KDqbbLwo=) 17: rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa (hash: 6M2XOWFy53R21mcWbAHRpsAh3NRSx51bXy4kBppg9Z0=) 18: sY1Z0d4UP1k0MtMv6mu9PscYSIo.roa (hash: OEBAEu1SEBwrWfciVaKHy8l9XFDNXjoEFOCceQeIsnI=) 19: uC3zCk-SIOTP3v8kN8AvkOioJlk.roa (hash: t6NH48ochz8I1c27bkPFIEdPItgxlKo5FppJqJnPRh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:be:ef:55:b3:92:be:00:73:4a:22:f8:d7:b0:6c:cb:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Apr 24 10:00:49 2026 GMT Not After : Apr 25 10:00:49 2026 GMT Subject: CN=96becfe8132e9d9442705f3aade750795a947ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:e9:39:5f:df:b8:89:96:ab:fd:b0:7c:57: 52:cd:c2:bb:17:cd:d8:0d:67:c5:dc:37:16:73:e3: 30:34:a3:a9:19:36:f3:26:fd:55:cf:96:9e:9a:2b: 00:ed:42:46:d9:76:01:5b:5b:67:a8:90:c3:fc:aa: 66:10:0c:15:d8:54:55:0e:ca:49:ff:8e:b0:79:2c: 21:6f:fc:af:fa:6f:82:92:92:d9:28:3a:a0:68:6b: e2:cd:e6:46:7a:33:2a:df:7b:77:69:df:d5:c0:14: 31:77:4a:6d:8b:f3:08:47:25:02:12:a8:41:6e:7e: 8d:46:00:92:71:ac:c5:67:26:a4:34:c8:bc:a5:df: e6:e6:da:4f:75:40:44:99:0f:81:0e:ec:85:31:ca: ee:0e:82:88:3a:39:c5:4a:af:a6:95:df:11:5b:16: 30:9b:21:8a:29:d2:45:1a:be:4f:18:da:65:5b:c8: fb:86:ff:a1:65:e7:f1:d7:8f:03:7f:82:c4:35:0c: ab:f5:82:4b:02:89:9f:0f:61:90:ed:41:44:96:97: 42:3c:a3:d5:6b:bd:68:8f:9d:6a:11:6f:21:75:c1: 04:d2:2a:51:31:55:c4:1c:60:3a:11:10:01:7a:30: 11:69:00:76:ed:22:15:17:21:71:e6:66:dd:1b:11: a6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BE:CF:E8:13:2E:9D:94:42:70:5F:3A:AD:E7:50:79:5A:94:7A:E3 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:7a:8c:0e:cf:35:a5:65:c7:96:c7:ce:e6:53:40:8d:8c:08: c1:03:74:8b:55:47:0b:db:14:56:f0:71:a6:a0:9a:07:e6:d4: 60:a9:4b:d6:80:bf:c6:e9:97:f8:2d:0e:cc:f2:f0:1d:ad:9d: 03:c7:31:73:97:05:8f:e0:03:b8:33:40:91:9a:81:9a:33:8a: e7:55:f1:4d:23:df:13:39:7c:11:2e:bc:b5:c1:6b:bb:a1:8b: d1:97:cd:88:54:2a:4a:2c:29:b9:17:88:a1:ce:ad:8a:00:29: 71:4e:70:20:60:11:c6:13:21:94:2d:c6:36:86:55:12:a6:8f: 06:2b:67:53:22:6d:a1:33:13:09:f5:2c:93:41:e3:de:d2:8f: 9f:83:b6:65:fb:d3:d0:de:85:4a:ac:ae:e3:f2:18:8c:10:7a: 7c:66:b3:e4:40:c6:b7:c2:b6:60:8a:d5:af:db:a7:3f:46:43: 7c:04:8f:75:7a:d9:e6:4a:09:97:06:45:dc:55:5d:3d:68:a7: a2:21:d4:1a:10:b8:f3:23:96:3e:6a:1f:8e:f4:25:7f:93:ae: 49:97:9b:2d:fb:6d:2b:ac:78:22:04:5b:90:a6:e4:e1:fc:ad: fd:f3:5a:4d:2c:72:25:6b:b7:26:80:66:dd:01:85:d4:72:ca: 38:6e:18:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2+71Wzkr4Ac0oi+NewbMs8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwNDI0MTAwMDQ5WhcNMjYwNDI1MTAwMDQ5WjAzMTEwLwYDVQQD Eyg5NmJlY2ZlODEzMmU5ZDk0NDI3MDVmM2FhZGU3NTA3OTVhOTQ3YWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupDpOV/fuImWq/2wfFdSzcK7F83Y DWfF3DcWc+MwNKOpGTbzJv1Vz5aemisA7UJG2XYBW1tnqJDD/KpmEAwV2FRVDspJ /46weSwhb/yv+m+CkpLZKDqgaGvizeZGejMq33t3ad/VwBQxd0pti/MIRyUCEqhB bn6NRgCScazFZyakNMi8pd/m5tpPdUBEmQ+BDuyFMcruDoKIOjnFSq+mld8RWxYw myGKKdJFGr5PGNplW8j7hv+hZefx148Df4LENQyr9YJLAomfD2GQ7UFElpdCPKPV a71oj51qEW8hdcEE0ipRMVXEHGA6ERABejARaQB27SIVFyFx5mbdGxGmSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJa+z+gTLp2UQnBfOq3nUHlalHrjMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXqMDs81 pWXHlsfO5lNAjYwIwQN0i1VHC9sUVvBxpqCaB+bUYKlL1oC/xumX+C0OzPLwHa2d A8cxc5cFj+ADuDNAkZqBmjOK51XxTSPfEzl8ES68tcFru6GL0ZfNiFQqSiwpuReI oc6tigApcU5wIGARxhMhlC3GNoZVEqaPBitnUyJtoTMTCfUsk0Hj3tKPn4O2ZfvT 0N6FSqyu4/IYjBB6fGaz5EDGt8K2YIrVr9unP0ZDfASPdXrZ5koJlwZF3FVdPWin oiHUGhC48yOWPmofjvQlf5OuSZebLfttK6x4IgRbkKbk4fyt/fNaTSxyJWu3JoBm 3QGF1HLKOG4Ymw== -----END CERTIFICATE-----Generated at Fri Apr 24 14:57:20 2026 by rpki-client