$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: gxiKv+xvSRkHfPqybcdJ7FPBkxWSDJ3s6wklpqiYZ7I= Subject key identifier: F3:F3:2E:35:ED:84:94:5A:3D:59:DB:02:7E:DC:F5:8B:EB:84:D2:63 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019EA9E507355B8416920A49AE0EE2040C82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 1980 Signing time: Tue 09 Jun 2026 01:00:19 +0000 Manifest this update: Tue 09 Jun 2026 01:00:19 +0000 Manifest next update: Wed 10 Jun 2026 01:00:19 +0000 Files and hashes: 1: 1-V84oobFXIlKZ3Dls5nBGbkUta8.roa (hash: Y6oUsmKL79cneGenSJvYXaOULigPUniMqNXXoxtkoQA=) 2: 1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa (hash: laO24ACjIVLZyTAa5hofsg3cM+gHDkRC5wH6+r7XTlw=) 3: 2W2MCcTiOGzKibb9IktRwoV7t7w.roa (hash: 9hzbcjFutrF6fmKr1I+WiZpYh5ANj2nzThUtT9+uWLQ=) 4: 6ZzDjxgNYdOCdszBPZyujZWdIQU.roa (hash: 9UI3twwOpxPDECF8g7XXCOiJN8BzbbKSShDSCVBs94A=) 5: D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa (hash: 3brIsivCbhFviJ62ZCvrk45wXBqMSMZrnrXYGWBpVqI=) 6: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: WRjFn9lzmBsSzpkaGVHyC3vNQ1TnD7pwtQA0L6jz14g=) 7: LsDa6KTrverRW5gJHEDYsnUiWaA.roa (hash: kyRRzPpmtC/6cc1RLLOBnwLx4RCN3jXZIWgVX+OjOJY=) 8: OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa (hash: oyzTksz2QKSnafMS1kmCzYf1d4YWDMBQktGYceuURLI=) 9: UE5lqxub4HZyPzOaFIeY1MynbOM.roa (hash: G/5g2S7073n0P8fSJcz9JyRKGI6p6NHbjV1Y/gWxHho=) 10: VIAQAuRhDMVFMOS_8Vtg3E1yErA.roa (hash: z4XtjWR8C+AEueHD2J5uJ4mPgu2KWREYANpsAZXVpIA=) 11: XDU9UWSQ0e6UimvguU5iuXs0EOA.roa (hash: SCFRxNca9zUGzw86U8+KWNOZievAR3LE2W5GLXuSUcY=) 12: _qJbebTlrOvrXIQLM28_mZtacRY.roa (hash: BqUn6UdSWnNCo8IEu4itHIeonT1vIDue6NclshrDycA=) 13: hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa (hash: b4EBco8NgahSA81khEE6SumwN6LoQGLW/RXHQz3fVtU=) 14: hc27-Du5AK-QSwEPPlUOrqZiXBk.asa (hash: NZwly8DKYsKefjnwC5ZEjbZE7IIJQUE4bCO5RCZXMKA=) 15: jl7QDhibiq_JOYv1vjDrL8Omz9o.roa (hash: JDmYOxWLUYSslhLzawMmaYVHDSzzt7UH8K2KDqbbLwo=) 16: rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa (hash: 6M2XOWFy53R21mcWbAHRpsAh3NRSx51bXy4kBppg9Z0=) 17: uC3zCk-SIOTP3v8kN8AvkOioJlk.roa (hash: t6NH48ochz8I1c27bkPFIEdPItgxlKo5FppJqJnPRh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Jun 2026 19:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:a9:e5:07:35:5b:84:16:92:0a:49:ae:0e:e2:04:0c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jun 9 01:00:19 2026 GMT Not After : Jun 10 01:00:19 2026 GMT Subject: CN=f3f32e35ed84945a3d59db027edcf58beb84d263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:fe:19:57:83:6a:8d:ef:13:33:26:7d:ff: 2c:44:6b:be:07:ec:97:f1:d1:ac:8c:0e:66:3e:a2: a7:49:47:6a:4b:b7:c9:02:9a:05:74:ce:fb:7f:5e: 38:a2:dd:7c:13:53:d8:ab:5f:b0:b0:60:cb:7a:d6: 3c:79:87:ad:c2:de:0e:70:d0:9f:6c:d9:f2:eb:18: 80:7b:3d:da:61:05:fd:bb:8f:08:4a:3d:61:5b:9f: 90:a0:76:7a:24:09:77:cf:70:55:68:a2:82:c4:83: d2:c9:ff:a0:3e:b7:07:d9:69:13:7c:5d:48:1d:64: 6e:05:00:b1:a2:53:d7:d5:67:d6:38:4d:3f:c0:ce: 5b:96:8b:d7:d2:46:e1:4c:fa:87:6f:8c:05:39:d0: 61:84:c1:21:66:18:f2:7d:7f:86:49:c1:81:e3:ca: ba:b0:f1:e0:4c:6e:54:83:fe:79:12:9d:a9:2d:ab: 2c:39:d0:50:10:dd:1b:59:c5:35:f7:90:9e:be:ae: cc:4d:07:1f:92:bb:fb:8f:f1:7c:a5:db:55:86:53: a6:08:02:16:ae:e4:79:6f:33:c4:7e:47:15:a9:f7: 82:99:71:23:b6:ba:63:fc:7c:71:0e:b8:1f:e4:2f: 65:72:55:b5:b1:20:6f:47:e0:8a:32:4a:e7:a9:3b: 81:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F3:2E:35:ED:84:94:5A:3D:59:DB:02:7E:DC:F5:8B:EB:84:D2:63 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:fb:04:01:a6:4c:36:bd:67:db:98:38:7e:16:7d:2b:95:11: 35:41:55:72:34:99:87:ec:b5:42:9f:ad:7b:ca:c2:66:d9:a8: ba:23:ef:a7:12:80:fd:a1:20:d0:16:54:0c:d5:8a:f8:c4:e5: a6:0d:60:37:5d:9f:4e:82:e8:4b:42:6b:dd:d4:61:79:21:8a: 8f:ec:1f:a6:0f:d7:e7:d0:08:ad:a0:d7:5c:35:65:3b:16:81: 00:1d:1a:4c:96:69:30:bc:e0:77:66:e7:3a:74:93:3d:db:7f: 4c:fe:8b:96:50:71:24:bc:e7:b9:24:a6:2c:87:26:33:00:dd: de:18:73:00:9e:5f:b9:57:2c:09:3e:6f:c0:e0:fb:00:02:32: 4f:fa:02:4f:b0:6a:78:41:03:4e:48:ac:1e:1d:6a:e5:90:3e: ad:56:a8:6d:05:18:8c:e7:81:5f:d8:75:e4:bb:0c:f2:51:21: f6:0a:d2:15:9b:0f:db:c8:a0:0a:f6:78:9f:28:74:28:56:69: 9d:83:da:73:65:a5:2d:25:24:79:f7:cb:c3:64:b5:05:e4:ba: b8:13:0f:7b:e0:04:cc:cb:48:b2:38:65:41:95:ab:b3:b7:b2: 2a:e5:39:3b:d5:52:4a:74:f9:ad:52:29:2f:37:2d:9f:22:ee: a3:a6:01:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6p5Qc1W4QWkgpJrg7iBAyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwNjA5MDEwMDE5WhcNMjYwNjEwMDEwMDE5WjAzMTEwLwYDVQQD EyhmM2YzMmUzNWVkODQ5NDVhM2Q1OWRiMDI3ZWRjZjU4YmViODRkMjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8f+GVeDao3vEzMmff8sRGu+B+yX 8dGsjA5mPqKnSUdqS7fJApoFdM77f144ot18E1PYq1+wsGDLetY8eYetwt4OcNCf bNny6xiAez3aYQX9u48ISj1hW5+QoHZ6JAl3z3BVaKKCxIPSyf+gPrcH2WkTfF1I HWRuBQCxolPX1WfWOE0/wM5blovX0kbhTPqHb4wFOdBhhMEhZhjyfX+GScGB48q6 sPHgTG5Ug/55Ep2pLassOdBQEN0bWcU195Cevq7MTQcfkrv7j/F8pdtVhlOmCAIW ruR5bzPEfkcVqfeCmXEjtrpj/HxxDrgf5C9lclW1sSBvR+CKMkrnqTuBaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPzLjXthJRaPVnbAn7c9YvrhNJjMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/sEAaZM Nr1n25g4fhZ9K5URNUFVcjSZh+y1Qp+te8rCZtmouiPvpxKA/aEg0BZUDNWK+MTl pg1gN12fToLoS0Jr3dRheSGKj+wfpg/X59AIraDXXDVlOxaBAB0aTJZpMLzgd2bn OnSTPdt/TP6LllBxJLznuSSmLIcmMwDd3hhzAJ5fuVcsCT5vwOD7AAIyT/oCT7Bq eEEDTkisHh1q5ZA+rVaobQUYjOeBX9h15LsM8lEh9grSFZsP28igCvZ4nyh0KFZp nYPac2WlLSUkeffLw2S1BeS6uBMPe+AEzMtIsjhlQZWrs7eyKuU5O9VSSnT5rVIp LzctnyLuo6YBHA== -----END CERTIFICATE-----Generated at Tue Jun 9 04:37:51 2026 by rpki-client