$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json) Hash identifier: DcTZeu4D7tY3LPb29yR9N+mFJ4v7mf544GlxXhcEurM= Subject key identifier: 27:51:0C:2B:87:F9:3C:75:D2:A4:54:57:A8:14:1B:9D:0C:F9:1F:3D Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019DCC74BA6800CFAFB754A1F872B35C2E30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft Manifest number: 15B5 Signing time: Mon 27 Apr 2026 01:01:34 +0000 Manifest this update: Mon 27 Apr 2026 01:01:34 +0000 Manifest next update: Tue 28 Apr 2026 01:01:34 +0000 Files and hashes: 1: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=) 2: 12-QpuXSG6_8hdl7cf1qgoYRbQ0.roa (hash: mN467/7GywnhA1L7FMjs4ZJkbmIwDxnvQEUBR43WDpM=) 3: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: B0+G460T3L0cBu8fNRKWjDS7YLE1kWArUXJcmRuJZTM=) 4: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=) 5: GMgsXAHu6rVoNZ8dQ9hwUjM5_yU.roa (hash: psSWvLUsCwmpLt18+CcJHRiClsmI+MlPeLwWiIbOmqs=) 6: Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa (hash: L5paJbyh0KobKYZie3ywNQHCitW9V1gxFkZu+lLubKY=) 7: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=) 8: MScRVKmXyA2iT_CEX8Vcd_NcPuk.roa (hash: 8X1mJRhcs4HUA1BUwufZrZ3ma3rYjjRHTESY45Kcsuw=) 9: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (hash: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=) 10: O18vIz4ADrWfyTjWv9lwIBf2Q6w.roa (hash: 6t2fxSf+Lmbr9jOdSKExEayPddEKt375FWmUM1ayblc=) 11: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=) 12: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=) 13: SgqvO9qBL1fWo3aBJRZpGp4K-S0.roa (hash: BHxiE3ULzbcJ44lDjqkW1hve5g/jINED6rwFK00YXx0=) 14: WSvHFGzj7Vgob_0_S9OtU-eYECo.roa (hash: wV4wq5Kwh3/1RV581fA5ENpc2zmKMDZQlEmeVs08398=) 15: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=) 16: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=) 17: djZFkLkOP1i4A3QD0iq7FYfbH8k.roa (hash: Ke0UPwLsbzS5tVeJA/RZ8i1nwVPlXEw7kayqjUa+RnI=) 18: e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa (hash: BxWMVdjBecDx+1X50nR2tWLJ9Ko6bUO8kFQ40XFyRn4=) 19: fzXSzzRGH69X9HG_DPX1UIdlnMc.roa (hash: 5e/q/Of0/VbRaI+58tUil5lHG2B8yQNHwFd7IDN7AnA=) 20: hitEbIx3QHgLDA0SFmdJO655wRk.roa (hash: XH2gw7V46PtDEZkxMpXOiXnwxoLCx2Bsx6+D3IRPEM0=) 21: t3pdRfKg9vRZuho18SU4sz61E8E.roa (hash: b45C4gL+ScH3KExCK0HAfDIRzNCHEOb/I9PjveaM9Ys=) 22: xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa (hash: dqVw1zy09p9At+bsRY80wcRAlgN5UMI3c+HTy+z8Ljo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:74:ba:68:00:cf:af:b7:54:a1:f8:72:b3:5c:2e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Apr 27 01:01:34 2026 GMT Not After : Apr 28 01:01:34 2026 GMT Subject: CN=27510c2b87f93c75d2a45457a8141b9d0cf91f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:09:32:11:e1:f5:61:40:35:1a:c1:82:a2: 90:e5:cd:2a:bb:77:dc:28:cb:33:3b:4b:aa:d1:e9: 1a:8d:fa:2e:82:9d:ea:04:fa:d9:59:f2:e4:bc:bf: e4:df:39:dd:eb:68:fd:f9:8f:c5:4c:d1:bb:cc:6f: 6d:18:b0:2b:f1:29:a3:93:7f:1f:44:62:76:3f:48: bb:d4:17:f5:98:62:16:4f:25:91:53:53:87:2e:51: ce:fb:61:15:ea:f1:83:2c:8c:19:9e:38:e0:d0:59: d1:8d:ee:75:ae:50:02:56:96:b2:bc:1e:0a:3b:0f: 16:53:27:8f:76:fe:37:03:c2:a9:8b:72:15:df:d5: d1:dd:43:6c:a5:c5:79:07:64:36:fd:a2:5a:97:7d: 59:a6:16:c2:f4:31:8a:54:c4:3a:aa:a4:c2:61:20: 12:7c:d1:d9:9f:d8:fa:a3:77:b4:d2:80:7b:cb:66: da:12:f2:62:66:30:24:62:70:55:86:ad:83:57:a3: 5e:4e:0b:d2:a9:c5:bf:f4:2b:68:8f:69:a1:68:93: ee:1e:1d:e4:cb:82:e0:71:e0:22:42:4f:4d:66:01: 51:1a:31:79:6b:27:8b:3a:db:a4:8a:2f:77:86:a3: 89:81:ab:77:30:e5:85:12:17:d8:79:c5:ed:6b:ee: 3c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:51:0C:2B:87:F9:3C:75:D2:A4:54:57:A8:14:1B:9D:0C:F9:1F:3D X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:25:a8:e4:b8:87:72:2e:38:c0:6f:72:e6:db:e9:4b:69:bd: 34:e1:0a:c6:2e:04:b7:ea:1e:f8:e4:6c:de:9c:46:ac:16:1c: b9:89:c0:eb:e6:de:cc:ab:0b:7a:6a:0b:5b:cb:f0:ca:41:00: 6a:31:5c:99:35:9e:dc:92:8e:61:b4:80:5a:7e:b3:40:63:21: 7a:cb:29:b7:41:b4:40:c3:2e:e0:c6:28:87:c1:79:a1:9d:0d: d0:6c:2e:b4:f5:d9:04:9a:87:83:c6:ca:e5:cc:82:10:cd:4f: 56:6e:af:39:1b:59:f3:79:79:67:a4:d9:35:40:c6:5b:42:23: 09:e2:45:75:e9:8b:e2:d0:e3:68:51:ad:23:17:9d:14:10:59: 53:54:32:85:ed:d1:c4:2a:37:6c:99:86:66:4a:cf:a9:38:80: fc:0d:b5:2b:ba:1f:2d:0e:97:f5:33:95:18:5e:a7:5b:f7:08: ed:47:f1:c7:d4:7e:47:56:24:96:03:ad:ab:ef:c3:61:b2:d7: 3a:5e:56:fc:2e:76:c2:c5:6f:32:26:26:b1:69:26:78:1d:1a: ac:a5:c3:bf:ef:45:22:ff:64:bb:01:16:5f:a5:90:01:91:4f: 68:b1:4f:5c:c0:0e:5d:81:55:24:28:c8:46:3d:b6:fc:86:27: 8c:5c:c1:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MdLpoAM+vt1Sh+HKzXC4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwNDI3MDEwMTM0WhcNMjYwNDI4MDEwMTM0WjAzMTEwLwYDVQQD EygyNzUxMGMyYjg3ZjkzYzc1ZDJhNDU0NTdhODE0MWI5ZDBjZjkxZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxowJMhHh9WFANRrBgqKQ5c0qu3fc KMszO0uq0ekajfougp3qBPrZWfLkvL/k3znd62j9+Y/FTNG7zG9tGLAr8Smjk38f RGJ2P0i71Bf1mGIWTyWRU1OHLlHO+2EV6vGDLIwZnjjg0FnRje51rlACVpayvB4K Ow8WUyePdv43A8Kpi3IV39XR3UNspcV5B2Q2/aJal31ZphbC9DGKVMQ6qqTCYSAS fNHZn9j6o3e00oB7y2baEvJiZjAkYnBVhq2DV6NeTgvSqcW/9Ctoj2mhaJPuHh3k y4LgceAiQk9NZgFRGjF5ayeLOtukii93hqOJgat3MOWFEhfYecXta+48RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdRDCuH+Tx10qRUV6gUG50M+R89MB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSWo5LiH ci44wG9y5tvpS2m9NOEKxi4Et+oe+ORs3pxGrBYcuYnA6+bezKsLemoLW8vwykEA ajFcmTWe3JKOYbSAWn6zQGMhesspt0G0QMMu4MYoh8F5oZ0N0GwutPXZBJqHg8bK 5cyCEM1PVm6vORtZ83l5Z6TZNUDGW0IjCeJFdemL4tDjaFGtIxedFBBZU1Qyhe3R xCo3bJmGZkrPqTiA/A21K7ofLQ6X9TOVGF6nW/cI7Ufxx9R+R1YklgOtq+/DYbLX Ol5W/C52wsVvMiYmsWkmeB0arKXDv+9FIv9kuwEWX6WQAZFPaLFPXMAOXYFVJCjI Rj22/IYnjFzBBg== -----END CERTIFICATE-----Generated at Mon Apr 27 09:42:41 2026 by rpki-client