$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json) Hash identifier: wLy2sCFHdo/fHTBD3UmVTj+PEihv56gaDs1S5+eTp3E= Subject key identifier: 40:36:09:C5:36:9E:71:67:DC:BD:C7:07:C6:8C:49:5F:89:D9:BE:C2 Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Certificate serial: 01A06F1530DB7294077811A449291512EF0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft Manifest number: 0339 Signing time: Sat 05 Sep 2026 01:00:54 +0000 Manifest this update: Sat 05 Sep 2026 01:00:54 +0000 Manifest next update: Sun 06 Sep 2026 01:00:54 +0000 Files and hashes: 1: 6hF48NdJlvMla9eluo8Mlfe595Y.roa (hash: pg8KajGYEwEU0ZGmmxsgFZa8AayGaJM9jjh0xL1LeCA=) 2: 8Z9LlW9pX1ZFA3wQNfdVO9-jjgs.roa (hash: XL3JspixgmL+Y5+ELAq1VBUarv7KKAfzu3TKsU6vMjU=) 3: F7OazNxmHQIZG_1NbQyBZDuRfp0.roa (hash: kfyCu9kGmBZWf6iCvzc+imifHO9IEOu6CS+tqE1Bls8=) 4: ZPkrtvVur46cS-5w8dwIkAjNZYE.roa (hash: vPaByPHtcOmoXzXWkiUeeFN03AP9nPQMC4Ibqh8NElg=) 5: ZvN7c-NtqYH-PaeLJUmdEPO5iC8.roa (hash: RkOPQkujkcLmBf4maBg9uGkdxV/kCwgeqMyADPSii/E=) 6: bGlKraIhhwlevroXgB4rLlo-YME.roa (hash: oIkXDeJlSani/t+wUjX7TTQDY2OjVB6ERk95GxJeYN8=) 7: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: i3Rd86ITfoQZg54uwVvK60skNTvAUAMQ62qDQPqhd8Y=) 8: mfKCIzYOA1MRX0WnVHNYXIYPDbA.roa (hash: BLUaF2c9SynmHjIFPlE7zXQ5dkGPExYAyDAAn9NF3gU=) 9: nu8XADsimCod0_uWl8egJ3aFHEw.roa (hash: H55dZSXKTNI4+9o7BFR1/GCpspjJcbHLdvt5EmFjk+U=) 10: qgusrLPdxbmOAmCCh-LDhKvWtUo.roa (hash: hmQSz0Gp8rt8ydBZY/twqJ9mc/ykbC8FHiCR9kZOXOg=) 11: qo3RmaJil-tmg6e3jCPqKh_xFAo.roa (hash: DLtprsoHKdJkHToMaxiYCDgKpyQfT89HL7h3BW0fsgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 20:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6f:15:30:db:72:94:07:78:11:a4:49:29:15:12:ef:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Validity Not Before: Sep 5 01:00:54 2026 GMT Not After : Sep 6 01:00:54 2026 GMT Subject: CN=403609c5369e7167dcbdc707c68c495f89d9bec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:18:c2:c8:c9:88:3c:06:26:b8:56:fa:31:f2: 68:98:5b:b8:bf:3f:a9:49:53:aa:58:b1:93:5f:05: 9b:51:00:64:5d:c4:17:91:88:31:ac:c5:34:24:bf: 97:fa:3f:55:ef:44:bb:a1:53:75:7e:da:ba:7e:04: fb:d7:d4:af:10:1e:27:cf:c1:2b:b6:d2:74:87:bf: 01:ba:78:fb:f7:da:b8:e6:d2:a3:fc:3e:9b:ef:3b: e4:8f:e9:53:2e:f4:c7:98:10:46:99:ba:10:4e:c6: d7:cf:2d:5e:49:bb:35:49:ff:8a:82:87:16:2e:12: 43:09:63:db:46:84:b3:d4:b9:81:e6:72:fa:1a:f9: 40:a9:73:eb:93:78:54:46:a5:02:f0:f3:0e:1d:2d: 06:31:28:64:6b:df:9a:8f:a0:c8:35:0a:80:82:eb: 5e:7f:ad:26:1b:28:a7:dd:9d:19:ae:17:75:76:44: 73:bf:7a:25:45:40:be:1f:b9:62:b3:06:a6:a6:da: 8c:e0:fa:b5:6b:6a:9e:08:e9:c9:dc:ef:40:4a:13: 62:52:18:04:a0:85:5b:c3:df:6b:56:2e:c6:4d:78: 68:99:b9:72:f7:e8:3c:69:27:4e:f8:65:71:16:59: b7:fd:17:31:ec:5a:2c:c1:68:f6:a5:b4:53:a3:d7: 72:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:36:09:C5:36:9E:71:67:DC:BD:C7:07:C6:8C:49:5F:89:D9:BE:C2 X509v3 Authority Key Identifier: keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:2e:21:12:b5:15:23:ee:a7:7d:ca:db:4e:d3:6c:a9:ec:eb: 87:84:c4:1f:43:57:81:7e:23:e9:9a:1b:0f:55:de:a5:fd:58: 91:a1:0a:b8:79:01:1a:d4:2b:b9:bf:82:af:bc:7f:9a:77:d5: c7:3d:f0:3c:d1:f2:d4:bc:d8:88:67:a3:20:84:af:49:28:88: 7e:13:41:d2:38:77:f0:97:27:59:e0:bc:dc:2a:73:e8:92:0b: 88:83:11:31:45:a5:37:64:9d:c1:0c:8a:e6:b2:23:f8:45:9c: 90:8b:56:12:bc:ef:c4:ea:c4:c7:a0:1a:bf:cb:71:d6:36:79: 5d:c8:ff:98:99:06:3e:86:ca:09:31:86:73:63:8b:0c:6d:40: e5:e7:76:d3:94:c0:2c:2a:94:1b:ef:a2:a6:d8:30:a9:f0:99: 40:e3:90:d9:52:a1:ee:63:c1:e6:4d:85:0b:54:ea:f4:37:1a: 8f:2a:27:1e:45:14:de:34:d1:22:0c:4e:d1:22:93:5d:43:5a: 1e:3a:ce:f9:05:87:e3:d6:c4:07:46:36:fb:fe:6c:e9:ce:75: 9e:85:08:27:aa:65:dc:be:a1:41:4f:ee:ae:56:d3:9f:3f:b2: 58:32:bc:37:3b:0a:b1:89:8e:b6:6a:d9:57:b4:b5:c5:80:5c: 27:34:53:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBvFTDbcpQHeBGkSSkVEu8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl NGYyYzYwHhcNMjYwOTA1MDEwMDU0WhcNMjYwOTA2MDEwMDU0WjAzMTEwLwYDVQQD Eyg0MDM2MDljNTM2OWU3MTY3ZGNiZGM3MDdjNjhjNDk1Zjg5ZDliZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRjCyMmIPAYmuFb6MfJomFu4vz+p SVOqWLGTXwWbUQBkXcQXkYgxrMU0JL+X+j9V70S7oVN1ftq6fgT719SvEB4nz8Er ttJ0h78Bunj799q45tKj/D6b7zvkj+lTLvTHmBBGmboQTsbXzy1eSbs1Sf+KgocW LhJDCWPbRoSz1LmB5nL6GvlAqXPrk3hURqUC8PMOHS0GMShka9+aj6DINQqAgute f60mGyin3Z0Zrhd1dkRzv3olRUC+H7liswamptqM4Pq1a2qeCOnJ3O9AShNiUhgE oIVbw99rVi7GTXhombly9+g8aSdO+GVxFlm3/Rcx7FoswWj2pbRTo9dyiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEA2CcU2nnFn3L3HB8aMSV+J2b7CMB8GA1UdIwQY MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt NzRkOTFjZGJlMTk1LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1 LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeC4hErUV I+6nfcrbTtNsqezrh4TEH0NXgX4j6ZobD1Xepf1YkaEKuHkBGtQrub+Cr7x/mnfV xz3wPNHy1LzYiGejIISvSSiIfhNB0jh38JcnWeC83Cpz6JILiIMRMUWlN2SdwQyK 5rIj+EWckItWErzvxOrEx6Aav8tx1jZ5Xcj/mJkGPobKCTGGc2OLDG1A5ed205TA LCqUG++iptgwqfCZQOOQ2VKh7mPB5k2FC1Tq9DcajyonHkUU3jTRIgxO0SKTXUNa HjrO+QWH49bEB0Y2+/5s6c51noUIJ6pl3L6hQU/urlbTnz+yWDK8NzsKsYmOtmrZ V7S1xYBcJzRTgA== -----END CERTIFICATE-----Generated at Sat Sep 5 03:51:13 2026 by rpki-client