$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json) Hash identifier: 8aW4ZnLGHwYMKUW4FLk1KxtTruOGUKVliiMKiY2NESA= Subject key identifier: 1B:0A:9F:9F:41:26:E2:11:FD:5A:E3:11:E2:6D:06:C6:C5:A2:A3:01 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019EB623ADB47A78B8457361B52AFFC00FAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft Manifest number: 1652 Signing time: Thu 11 Jun 2026 10:04:11 +0000 Manifest this update: Thu 11 Jun 2026 10:04:11 +0000 Manifest next update: Fri 12 Jun 2026 10:04:11 +0000 Files and hashes: 1: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=) 2: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: O3ckhr5DOJKMAXuAQJ479nAjL+/kSAznk95f3wmRSJw=) 3: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=) 4: D_358wVuC9x_rFwlkHcnILUEgrY.roa (hash: myX67q7p8kQwqBq7Nf+RBUhtBa8xKvFxZ0GHfrUShGM=) 5: DgnHYMNEO3cW02ohlMn2axnldPY.roa (hash: vaq0LBl35c7hmyKRAqN3BqKt0SzicUAX8/qk3xf0Rag=) 6: Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa (hash: L5paJbyh0KobKYZie3ywNQHCitW9V1gxFkZu+lLubKY=) 7: KBFhtKcJq5uA7ADerkedr7ALsUc.roa (hash: zdLI7qiXR8cpmXvF/k9fx3+iYtigbpqLuzWcJYNq8OU=) 8: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=) 9: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (hash: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=) 10: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=) 11: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=) 12: VFixCVqDTtsuVTHROWi-IlsYwMQ.roa (hash: /Tp6jFtL0lAvVlGPtuLNnCLc9wvarH3Kjinrpd6RIaY=) 13: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=) 14: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=) 15: e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa (hash: BxWMVdjBecDx+1X50nR2tWLJ9Ko6bUO8kFQ40XFyRn4=) 16: xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa (hash: dqVw1zy09p9At+bsRY80wcRAlgN5UMI3c+HTy+z8Ljo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 08:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b6:23:ad:b4:7a:78:b8:45:73:61:b5:2a:ff:c0:0f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jun 11 10:04:11 2026 GMT Not After : Jun 12 10:04:11 2026 GMT Subject: CN=1b0a9f9f4126e211fd5ae311e26d06c6c5a2a301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:4b:f8:3d:4f:a2:56:48:7d:5c:d7:0a:30: f2:f7:49:d3:78:c5:19:7e:f3:84:22:1f:e6:a2:ae: ac:31:e0:6e:ca:ce:fb:9c:f2:cb:97:df:1b:84:7e: 3a:be:4a:4f:b8:87:c8:5a:69:9c:f3:2a:dd:4e:d1: db:6d:0b:eb:a3:c6:52:f2:41:c8:dc:a8:83:79:ec: 09:92:3a:71:92:5d:b1:f6:60:f4:d4:e9:76:5b:92: 1c:f3:2d:dd:3c:34:f7:44:e9:d2:69:9d:a1:3d:f7: 8e:2e:e7:30:43:09:1b:10:1e:16:cd:60:9e:4f:ca: eb:33:06:be:45:6d:12:14:df:69:b7:f3:6b:67:7b: 52:65:0f:35:68:d2:d8:3a:9e:0f:38:d4:42:89:24: 01:fa:da:73:1f:8f:28:ec:fd:57:a3:be:71:31:3e: c9:f5:2d:06:d5:0f:34:05:b6:4b:03:8b:6c:08:b5: e3:26:3a:35:d2:fb:15:0a:f4:f7:da:08:65:36:59: 4f:e9:7d:a2:02:63:81:f9:32:f1:77:fe:f7:8f:42: 25:ec:85:b1:49:0e:46:1f:f0:8c:17:ae:4d:ff:04: 4a:25:70:fc:81:d2:0c:fa:12:50:b4:6e:11:1f:27: 96:60:a3:24:98:56:80:4f:35:34:7d:1d:71:ea:9d: 07:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0A:9F:9F:41:26:E2:11:FD:5A:E3:11:E2:6D:06:C6:C5:A2:A3:01 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:6d:5f:44:2e:b3:b0:b8:49:3e:95:ac:64:71:82:4e:2d:2f: 74:0e:62:7e:0c:58:37:34:ab:62:3c:b5:df:52:26:1d:57:57: 86:db:04:b1:49:2c:71:96:70:92:d7:20:17:f1:d9:6c:27:8e: 2f:5d:ee:43:27:a1:e2:db:2c:0e:e0:26:28:cf:fd:2b:c1:0c: 04:a5:65:a2:15:f9:20:6e:a7:f1:59:37:f0:45:16:af:6c:59: db:9b:7a:bc:ed:0a:bd:48:45:57:8a:3c:d8:1e:42:79:f3:fe: 53:12:97:3c:a1:3b:fa:ef:93:7c:6e:03:f9:b9:42:86:94:23: d7:1e:c2:11:70:91:74:f6:95:07:63:c9:ec:89:0a:1b:05:7c: 5e:02:0b:d1:16:8b:f2:35:e9:47:7d:41:1a:d3:a0:51:e4:3a: 50:4c:02:62:27:c2:99:8a:61:87:84:f0:52:6d:40:08:0e:6e: 1e:ef:2c:01:d4:65:aa:bd:d8:75:41:78:06:01:f6:21:c3:ef: 64:c1:0c:78:9e:32:66:75:b6:f5:1e:5c:fd:1d:b8:e2:04:be: d5:df:ca:54:c6:97:d1:35:42:5b:f2:19:6e:12:c0:4d:4a:71: b3:6b:e3:ed:84:b2:7b:69:06:d0:fe:4e:52:32:1c:59:39:e4: 35:90:0c:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ62I620eni4RXNhtSr/wA+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwNjExMTAwNDExWhcNMjYwNjEyMTAwNDExWjAzMTEwLwYDVQQD EygxYjBhOWY5ZjQxMjZlMjExZmQ1YWUzMTFlMjZkMDZjNmM1YTJhMzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZpL+D1PolZIfVzXCjDy90nTeMUZ fvOEIh/moq6sMeBuys77nPLLl98bhH46vkpPuIfIWmmc8yrdTtHbbQvro8ZS8kHI 3KiDeewJkjpxkl2x9mD01Ol2W5Ic8y3dPDT3ROnSaZ2hPfeOLucwQwkbEB4WzWCe T8rrMwa+RW0SFN9pt/NrZ3tSZQ81aNLYOp4PONRCiSQB+tpzH48o7P1Xo75xMT7J 9S0G1Q80BbZLA4tsCLXjJjo10vsVCvT32ghlNllP6X2iAmOB+TLxd/73j0Il7IWx SQ5GH/CMF65N/wRKJXD8gdIM+hJQtG4RHyeWYKMkmFaATzU0fR1x6p0HWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsKn59BJuIR/VrjEeJtBsbFoqMBMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOm1fRC6z sLhJPpWsZHGCTi0vdA5ifgxYNzSrYjy131ImHVdXhtsEsUkscZZwktcgF/HZbCeO L13uQyeh4tssDuAmKM/9K8EMBKVlohX5IG6n8Vk38EUWr2xZ25t6vO0KvUhFV4o8 2B5CefP+UxKXPKE7+u+TfG4D+blChpQj1x7CEXCRdPaVB2PJ7IkKGwV8XgIL0RaL 8jXpR31BGtOgUeQ6UEwCYifCmYphh4TwUm1ACA5uHu8sAdRlqr3YdUF4BgH2IcPv ZMEMeJ4yZnW29R5c/R244gS+1d/KVMaX0TVCW/IZbhLATUpxs2vj7YSye2kG0P5O UjIcWTnkNZAMkw== -----END CERTIFICATE-----Generated at Thu Jun 11 13:10:08 2026 by rpki-client