$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: cNE/yNW/1QIubM+2JktQClhb1s04OQd3UMhHXkMca3w= Subject key identifier: B5:94:76:1F:0D:38:C4:66:BE:80:FE:D0:C7:7B:19:C6:E1:B4:D1:12 Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 019E314E40B5A70731338F45575FB58D5CCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 1531 Signing time: Sat 16 May 2026 15:01:12 +0000 Manifest this update: Sat 16 May 2026 15:01:12 +0000 Manifest next update: Sun 17 May 2026 15:01:12 +0000 Files and hashes: 1: 4xaEdixeinTNAew5f36B5ogFapc.roa (hash: U+lj7Po2vIYbjteMOk724C6A7iSVfdA9w8Qr+wSn2EY=) 2: 6bp5_uY1eTTE0FRpgy0dJ0tGIWA.roa (hash: JQ6e3y/UZad8zx3alMXWmLY2Cs0ywtM7PcyjG1jGvp0=) 3: 8rDvMkxptJnltjzzUCN1e7h2mu0.roa (hash: bN6iyJOU8RYfCqW0mfWStueUrIARdx585ED2RX3ioso=) 4: 9561YDYiFuwA3cK9_Ao81cqPzyw.roa (hash: sI0N1MtQFC1Bs34l2HPoGh51MHvRDzLlzChm4jYV9bI=) 5: IrFs_aYDL98DrBmqXNeImOXYqVs.roa (hash: /du+UzfxF5Oy69bwitaws2QcGuPpQ2q/PzP+2+rlKmc=) 6: Mpb5tIfxbf_t0TleDipa0dPzQfg.roa (hash: dlPOC3LjslO4GRq7Su9TrpsYGXUfWyZVAl7s4ntuJgI=) 7: SnpB0ExR-bCAJLKknHnesUTaAWU.roa (hash: wlr5EY83KcqFkovq8AptI/Jy70VxHPVKk3n5WEh7t3w=) 8: W-auLweCazJVGZa2RWm9KCu-wKE.roa (hash: KDvTseiWMAdzP9ZuSgmWkkWqgGW79SkpbkY25PFZ98s=) 9: ZNVLkE0Hncpo1bsQ8SqkvCmjNMs.roa (hash: ckctwOhfUle+O6fK0mnv5ZMxRNGqbUG5lJdOX3nwnlo=) 10: djAPpFOBLqUtxJOa9UwBPjNac1E.roa (hash: 7Rj31INl1FIcMdN33laOh9K9+J+bHShe/BZUzyt8PUg=) 11: ggV7rBXwprR59jciPQhDDTZxxmQ.roa (hash: I4MtXY7ClGvNcIjMAoHA2mKMcNbnijfTuvNa/n/j6Xw=) 12: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: wL4jvHtjs1S+w3ruhdbk+ZgmyJp+Bj++u6g4kBrCSRA=) 13: nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa (hash: lYeXLJKim2pWsORoTqRVNykk1XTHGi948eQwJ6tFxj4=) 14: pnn2LDubyB-s2_PbTNDUNt7JA_8.roa (hash: vW3hxl2FPzWH44KmHJKXNpZV557F5Hczl/NZRDVCKlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:31:4e:40:b5:a7:07:31:33:8f:45:57:5f:b5:8d:5c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: May 16 15:01:12 2026 GMT Not After : May 17 15:01:12 2026 GMT Subject: CN=b594761f0d38c466be80fed0c77b19c6e1b4d112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:98:00:a6:f7:b5:7a:90:a8:ef:33:ed:7f:bb: 16:d0:d2:f1:2d:d6:4b:b3:60:b9:b7:70:26:38:d5: 55:dd:c5:b2:7c:bc:b7:e8:b9:7c:3f:ce:36:23:92: 8e:4f:9b:00:0c:3c:a2:2d:8d:b2:04:b3:6b:37:ac: be:3a:14:b7:be:9f:6d:d5:74:aa:4c:a4:6f:a1:0b: 0a:2e:ae:7a:f0:43:21:2b:22:35:0e:de:e7:12:28: 13:14:8e:16:e0:b9:b3:6d:27:d4:60:63:92:97:80: c5:fa:f6:e4:a3:81:f8:50:93:cf:7a:ec:fa:4f:40: 7b:6f:8d:17:54:8e:b1:5e:76:cb:d7:91:67:be:44: 21:4c:2f:b9:d8:c9:73:2e:c4:c9:74:77:70:e3:0e: 09:00:49:62:aa:9e:35:dc:85:12:af:29:2b:9b:34: 7f:35:5a:6a:4a:d3:87:6d:7c:ea:0e:2f:46:e5:7c: 91:02:ec:10:67:34:e1:96:60:a0:b2:31:6a:ac:df: 71:c0:89:74:07:af:4a:60:c5:13:0b:62:06:a0:cf: 6b:0b:21:62:6a:02:bd:de:89:ce:61:e7:25:52:22: 75:57:57:d1:07:e4:4a:ab:9d:70:c4:0a:a0:42:c4: 7f:7d:fc:97:71:95:ca:70:fe:43:4c:85:70:8d:94: 1a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:94:76:1F:0D:38:C4:66:BE:80:FE:D0:C7:7B:19:C6:E1:B4:D1:12 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ed:be:6b:14:31:1f:8e:ff:a5:30:9b:a9:bb:6f:a3:9f:de: db:d1:32:ba:99:65:bf:88:2d:2d:fc:a5:5b:d3:aa:04:ef:ff: fd:98:e3:2e:da:9d:f5:be:be:c3:8e:67:41:8f:03:80:b0:09: 46:61:e9:fb:13:c2:80:4b:4c:f7:a2:cd:f3:28:44:18:19:3f: 5a:8e:1e:d9:60:bd:2a:c5:1b:63:45:e4:e5:4c:f5:23:0f:9a: 7e:92:ea:1b:b2:5e:37:f1:9d:af:9f:2d:15:0e:8b:8a:10:4a: 0d:e9:cc:e4:24:1f:be:e3:dc:15:7c:c5:2c:ec:14:56:d4:93: fe:89:41:14:1b:8e:dc:c4:79:2e:56:26:b5:a7:97:0a:c1:d8: 8c:3b:7e:0f:d2:dc:3d:62:ce:ec:83:52:ae:cd:bc:d2:17:20: db:7c:9a:80:2c:91:22:78:03:52:06:54:9a:0e:78:8e:70:03: d8:ae:88:47:c6:f8:0f:af:0d:b6:54:c8:f8:b7:73:fe:90:92: 9b:4a:f5:3c:0d:72:5c:9d:b0:cf:6a:42:e9:a1:21:ea:44:f4: 06:49:5f:8d:30:b6:7b:72:c2:88:c5:f7:a9:5e:2f:36:7c:91: 59:c9:50:55:ea:c8:cb:46:38:46:bc:e6:ba:59:ef:0e:9e:f1: e3:96:47:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4xTkC1pwcxM49FV1+1jVzLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYwNTE2MTUwMTEyWhcNMjYwNTE3MTUwMTEyWjAzMTEwLwYDVQQD EyhiNTk0NzYxZjBkMzhjNDY2YmU4MGZlZDBjNzdiMTljNmUxYjRkMTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5gApve1epCo7zPtf7sW0NLxLdZL s2C5t3AmONVV3cWyfLy36Ll8P842I5KOT5sADDyiLY2yBLNrN6y+OhS3vp9t1XSq TKRvoQsKLq568EMhKyI1Dt7nEigTFI4W4LmzbSfUYGOSl4DF+vbko4H4UJPPeuz6 T0B7b40XVI6xXnbL15FnvkQhTC+52MlzLsTJdHdw4w4JAEliqp413IUSrykrmzR/ NVpqStOHbXzqDi9G5XyRAuwQZzThlmCgsjFqrN9xwIl0B69KYMUTC2IGoM9rCyFi agK93onOYeclUiJ1V1fRB+RKq51wxAqgQsR/ffyXcZXKcP5DTIVwjZQaKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWUdh8NOMRmvoD+0Md7GcbhtNESMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAO2+axQx H47/pTCbqbtvo5/e29Eyupllv4gtLfylW9OqBO///ZjjLtqd9b6+w45nQY8DgLAJ RmHp+xPCgEtM96LN8yhEGBk/Wo4e2WC9KsUbY0Xk5Uz1Iw+afpLqG7JeN/Gdr58t FQ6LihBKDenM5CQfvuPcFXzFLOwUVtST/olBFBuO3MR5LlYmtaeXCsHYjDt+D9Lc PWLO7INSrs280hcg23yagCyRIngDUgZUmg54jnAD2K6IR8b4D68NtlTI+Ldz/pCS m0r1PA1yXJ2wz2pC6aEh6kT0BklfjTC2e3LCiMX3qV4vNnyRWclQVerIy0Y4Rrzm ulnvDp7x45ZHUQ== -----END CERTIFICATE-----Generated at Sat May 16 23:31:41 2026 by rpki-client