$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: ok2EiM8iAy/44qRfyA/f+PeCm/fsDsO1KU1Nuxzz3do= Subject key identifier: 21:48:14:68:21:94:20:76:96:F8:45:D7:6E:D3:72:86:A6:3A:5C:8D Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 01A004020B1821240802503E8B315C6C391B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 1623 Signing time: Sat 15 Aug 2026 06:00:37 +0000 Manifest this update: Sat 15 Aug 2026 06:00:37 +0000 Manifest next update: Sun 16 Aug 2026 06:00:37 +0000 Files and hashes: 1: 35wDpRsfaq8aq0FjZJRW12A2SwI.roa (hash: S32iSai/D3+xMYiGNdr33Lz5mjsLhdP2ds6sS7Zu5bY=) 2: 4xaEdixeinTNAew5f36B5ogFapc.roa (hash: U+lj7Po2vIYbjteMOk724C6A7iSVfdA9w8Qr+wSn2EY=) 3: 6bp5_uY1eTTE0FRpgy0dJ0tGIWA.roa (hash: JQ6e3y/UZad8zx3alMXWmLY2Cs0ywtM7PcyjG1jGvp0=) 4: 9561YDYiFuwA3cK9_Ao81cqPzyw.roa (hash: sI0N1MtQFC1Bs34l2HPoGh51MHvRDzLlzChm4jYV9bI=) 5: IrFs_aYDL98DrBmqXNeImOXYqVs.roa (hash: /du+UzfxF5Oy69bwitaws2QcGuPpQ2q/PzP+2+rlKmc=) 6: Mpb5tIfxbf_t0TleDipa0dPzQfg.roa (hash: dlPOC3LjslO4GRq7Su9TrpsYGXUfWyZVAl7s4ntuJgI=) 7: SnpB0ExR-bCAJLKknHnesUTaAWU.roa (hash: wlr5EY83KcqFkovq8AptI/Jy70VxHPVKk3n5WEh7t3w=) 8: W-auLweCazJVGZa2RWm9KCu-wKE.roa (hash: KDvTseiWMAdzP9ZuSgmWkkWqgGW79SkpbkY25PFZ98s=) 9: YSP2K25IRGuG9q-MByo9uJoo_cg.roa (hash: Pd46j8HnroPwAsfvmv91RgjQs2qRGo37bfk5Rd39ViM=) 10: ZNVLkE0Hncpo1bsQ8SqkvCmjNMs.roa (hash: ckctwOhfUle+O6fK0mnv5ZMxRNGqbUG5lJdOX3nwnlo=) 11: djAPpFOBLqUtxJOa9UwBPjNac1E.roa (hash: 7Rj31INl1FIcMdN33laOh9K9+J+bHShe/BZUzyt8PUg=) 12: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: IZnvFYi1aM/vQnNcqeJHYX1oR/MZuC5q6dWWnWCuEPU=) 13: nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa (hash: lYeXLJKim2pWsORoTqRVNykk1XTHGi948eQwJ6tFxj4=) 14: pnn2LDubyB-s2_PbTNDUNt7JA_8.roa (hash: vW3hxl2FPzWH44KmHJKXNpZV557F5Hczl/NZRDVCKlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Aug 2026 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:04:02:0b:18:21:24:08:02:50:3e:8b:31:5c:6c:39:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Aug 15 06:00:37 2026 GMT Not After : Aug 16 06:00:37 2026 GMT Subject: CN=214814682194207696f845d76ed37286a63a5c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:61:21:2b:16:ae:95:f7:2b:ce:0f:d5:2b:a0: 4c:e8:83:76:2a:31:d6:9f:bf:00:5c:3e:a1:ec:8d: 7e:54:0c:79:0a:0e:a7:03:8a:69:5d:37:ae:77:0f: 00:bc:84:0b:5f:83:b3:b4:47:31:21:78:32:d8:7e: 3f:56:f2:98:6e:83:b3:b0:18:b1:66:79:98:1e:56: 19:23:e1:a2:b6:a1:99:ca:58:09:a6:47:c8:12:0b: 04:1e:91:ca:32:ee:30:fa:a5:f2:7f:75:05:cc:05: cf:4c:cc:9c:27:e3:0e:1d:7a:0f:59:74:3b:9a:8e: 8e:ff:13:e4:b8:30:7d:96:41:5f:c7:6e:26:a3:4a: 61:43:d1:4c:b2:20:e1:e6:29:bd:7c:fd:9d:7e:79: 27:b1:63:b8:f0:eb:4c:57:9e:d2:38:4d:09:9d:2d: 25:89:de:d3:c1:dc:19:a6:c1:4a:f1:62:45:52:c0: 92:3a:35:03:aa:98:bc:50:24:5c:c3:b8:30:03:58: 66:fe:ea:17:18:80:5a:2f:8d:48:c2:55:9f:98:72: bd:40:d4:52:a2:59:51:49:1a:91:b5:91:36:fc:11: d1:68:92:0f:55:04:50:4b:0d:cf:89:0c:a9:87:71: b8:16:48:af:7b:ea:1f:4e:0e:b1:1a:c3:cf:86:b2: 32:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:48:14:68:21:94:20:76:96:F8:45:D7:6E:D3:72:86:A6:3A:5C:8D X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e6:6f:be:12:55:56:2a:90:aa:5e:a5:88:52:e3:57:16:af: 72:70:14:b1:33:b2:4d:c3:53:94:9c:5b:d3:ee:df:dc:cf:d2: 2e:6a:ff:fd:8f:f5:6f:15:32:e9:6d:45:0b:c7:40:04:a9:35: ed:85:ce:b0:81:b7:4c:b9:36:61:8e:34:38:65:f9:58:de:f0: b7:a3:a4:88:84:13:3b:ac:2c:80:cf:ab:d9:1c:3e:e3:84:b6: eb:54:7b:bf:6a:94:2e:86:68:dd:4e:c1:54:4c:bc:30:b3:d3: 43:0e:72:0b:e6:b1:85:66:6b:db:26:b2:53:58:65:5d:ea:ba: 6b:df:0c:fa:4c:50:42:de:6e:5e:b7:c3:04:92:38:98:37:16: 23:a2:8d:fe:63:19:02:10:69:71:53:63:ee:f9:44:5d:97:05: 85:ae:1d:7a:44:4b:9f:ea:5d:ad:83:d6:e6:30:b3:48:af:09: c0:2b:55:a2:45:9c:d0:ed:d4:28:0f:58:4f:92:62:ac:ea:85: 8c:f3:57:06:25:01:7c:7f:d0:1a:f6:78:ce:47:c2:2f:1a:c0: 77:92:98:bb:30:fd:d4:09:59:4e:31:10:cf:86:cb:00:d4:25: d9:26:7a:e9:43:f1:21:60:ad:15:06:9c:ce:c0:cc:2c:7f:2e: 2b:d5:77:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAEAgsYISQIAlA+izFcbDkbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYwODE1MDYwMDM3WhcNMjYwODE2MDYwMDM3WjAzMTEwLwYDVQQD EygyMTQ4MTQ2ODIxOTQyMDc2OTZmODQ1ZDc2ZWQzNzI4NmE2M2E1YzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGEhKxaulfcrzg/VK6BM6IN2KjHW n78AXD6h7I1+VAx5Cg6nA4ppXTeudw8AvIQLX4OztEcxIXgy2H4/VvKYboOzsBix ZnmYHlYZI+GitqGZylgJpkfIEgsEHpHKMu4w+qXyf3UFzAXPTMycJ+MOHXoPWXQ7 mo6O/xPkuDB9lkFfx24mo0phQ9FMsiDh5im9fP2dfnknsWO48OtMV57SOE0JnS0l id7TwdwZpsFK8WJFUsCSOjUDqpi8UCRcw7gwA1hm/uoXGIBaL41IwlWfmHK9QNRS ollRSRqRtZE2/BHRaJIPVQRQSw3PiQyph3G4Fkive+ofTg6xGsPPhrIyBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFIFGghlCB2lvhF127TcoamOlyNMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuZvvhJV ViqQql6liFLjVxavcnAUsTOyTcNTlJxb0+7f3M/SLmr//Y/1bxUy6W1FC8dABKk1 7YXOsIG3TLk2YY40OGX5WN7wt6OkiIQTO6wsgM+r2Rw+44S261R7v2qULoZo3U7B VEy8MLPTQw5yC+axhWZr2yayU1hlXeq6a98M+kxQQt5uXrfDBJI4mDcWI6KN/mMZ AhBpcVNj7vlEXZcFha4dekRLn+pdrYPW5jCzSK8JwCtVokWc0O3UKA9YT5JirOqF jPNXBiUBfH/QGvZ4zkfCLxrAd5KYuzD91AlZTjEQz4bLANQl2SZ66UPxIWCtFQac zsDMLH8uK9V30g== -----END CERTIFICATE-----Generated at Sat Aug 15 13:47:29 2026 by rpki-client