$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json) Hash identifier: TbXHbQmfTr/2HibmX0S4z3oaxqlCEXq+dtE4yx7PfYM= Subject key identifier: BC:7B:2A:EB:4B:A8:A6:1D:63:CD:DE:43:DA:21:AF:AB:DC:19:D7:07 Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Certificate serial: 01A16458AE9714F20615AE01340F017225C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft Manifest number: 03B8 Signing time: Thu 22 Oct 2026 16:01:35 +0000 Manifest this update: Thu 22 Oct 2026 16:01:35 +0000 Manifest next update: Fri 23 Oct 2026 16:01:35 +0000 Files and hashes: 1: 6hF48NdJlvMla9eluo8Mlfe595Y.roa (hash: pg8KajGYEwEU0ZGmmxsgFZa8AayGaJM9jjh0xL1LeCA=) 2: 8Z9LlW9pX1ZFA3wQNfdVO9-jjgs.roa (hash: XL3JspixgmL+Y5+ELAq1VBUarv7KKAfzu3TKsU6vMjU=) 3: F7OazNxmHQIZG_1NbQyBZDuRfp0.roa (hash: kfyCu9kGmBZWf6iCvzc+imifHO9IEOu6CS+tqE1Bls8=) 4: ZPkrtvVur46cS-5w8dwIkAjNZYE.roa (hash: vPaByPHtcOmoXzXWkiUeeFN03AP9nPQMC4Ibqh8NElg=) 5: ZvN7c-NtqYH-PaeLJUmdEPO5iC8.roa (hash: RkOPQkujkcLmBf4maBg9uGkdxV/kCwgeqMyADPSii/E=) 6: bGlKraIhhwlevroXgB4rLlo-YME.roa (hash: oIkXDeJlSani/t+wUjX7TTQDY2OjVB6ERk95GxJeYN8=) 7: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: snk/rVmfy3GZZBsH13FsRDEt36zlF2DmtzWeREkJIpg=) 8: mfKCIzYOA1MRX0WnVHNYXIYPDbA.roa (hash: BLUaF2c9SynmHjIFPlE7zXQ5dkGPExYAyDAAn9NF3gU=) 9: nu8XADsimCod0_uWl8egJ3aFHEw.roa (hash: H55dZSXKTNI4+9o7BFR1/GCpspjJcbHLdvt5EmFjk+U=) 10: qgusrLPdxbmOAmCCh-LDhKvWtUo.roa (hash: hmQSz0Gp8rt8ydBZY/twqJ9mc/ykbC8FHiCR9kZOXOg=) 11: qo3RmaJil-tmg6e3jCPqKh_xFAo.roa (hash: DLtprsoHKdJkHToMaxiYCDgKpyQfT89HL7h3BW0fsgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 16:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:64:58:ae:97:14:f2:06:15:ae:01:34:0f:01:72:25:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Validity Not Before: Oct 22 16:01:35 2026 GMT Not After : Oct 23 16:01:35 2026 GMT Subject: CN=bc7b2aeb4ba8a61d63cdde43da21afabdc19d707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:b3:58:ab:85:4d:47:a1:d0:0d:56:0d:73: fd:d6:c5:f3:24:05:9d:8e:a1:0b:c5:e9:2c:aa:a2: 31:e4:73:fd:ac:40:53:ed:0a:86:5d:eb:92:f4:44: a8:bc:47:73:ed:16:00:28:ed:be:b1:bb:b2:2f:a0: 7c:ef:79:3a:32:38:d9:ad:00:9f:14:34:b3:4e:92: 41:30:07:91:4a:33:24:1f:7f:fb:7e:33:07:e6:b7: d3:50:24:5a:45:bb:03:31:47:66:60:65:e3:23:ab: 44:3d:39:7f:1d:39:5f:b6:6f:7a:43:48:fb:ba:4d: 56:5a:c7:33:31:38:59:7a:7a:78:19:37:74:de:c6: ae:d0:e7:a8:9a:18:7c:37:d5:5d:79:8b:e7:31:5e: a8:7a:1f:62:70:25:1a:c6:23:4d:f1:5f:86:b4:0d: 2d:2f:cf:c0:3d:fd:b0:fc:82:df:c2:59:b7:2f:db: 28:43:96:66:94:77:3f:77:55:a1:f4:e5:46:88:24: ee:06:ed:4f:eb:8a:3f:26:e6:21:be:2f:b8:34:5a: 8a:83:59:71:4e:a1:79:2f:f5:c6:c4:e0:89:00:22: 65:ed:14:83:1e:07:28:e7:94:1a:e2:61:25:5d:56: f2:e8:02:5d:c3:4e:19:a8:2c:16:b1:60:88:cd:a2: 55:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7B:2A:EB:4B:A8:A6:1D:63:CD:DE:43:DA:21:AF:AB:DC:19:D7:07 X509v3 Authority Key Identifier: keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ba:61:ef:ae:d7:cb:6e:cb:4e:ae:3f:70:56:2a:41:40:70: 3b:f8:67:79:e9:04:02:79:cc:ae:fc:89:79:4c:aa:9a:90:e1: a0:ed:30:73:73:9c:0b:6a:ec:a7:ee:d1:90:d6:a1:4c:46:8b: 8d:3a:a6:35:f3:c0:af:83:19:e1:b0:1a:2a:d0:56:29:11:18: d4:a6:bd:59:53:f4:6f:01:e1:a9:89:77:26:30:e0:c9:8f:db: 60:ca:64:98:ce:11:42:48:46:2b:77:8a:5a:2d:15:97:d2:2a: 2e:3e:d1:82:06:c4:55:9b:2c:00:d4:0f:76:2f:62:8b:e1:4a: 08:85:90:39:21:77:a8:15:f4:51:5f:34:6a:b3:0d:34:66:d5: a8:64:af:b7:1c:26:51:f4:01:6f:ac:8c:65:59:83:31:1d:8c: 98:9b:9c:52:85:8a:5b:36:1a:48:31:c9:0f:62:3b:68:e8:77: ef:4a:67:b2:57:ae:33:42:29:2d:56:ad:9c:58:c9:c4:93:a8: af:02:f6:a1:24:c0:61:7a:0c:fe:77:e5:f9:1d:52:c0:91:89: b4:dd:47:1b:30:77:78:6b:97:d0:30:2e:3a:ff:69:06:c7:59: 97:f8:e9:00:c2:76:ef:1b:85:8a:c0:f9:a4:da:b7:61:64:ea: ad:e1:b9:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFkWK6XFPIGFa4BNA8BciXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl NGYyYzYwHhcNMjYxMDIyMTYwMTM1WhcNMjYxMDIzMTYwMTM1WjAzMTEwLwYDVQQD EyhiYzdiMmFlYjRiYThhNjFkNjNjZGRlNDNkYTIxYWZhYmRjMTlkNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX6zWKuFTUeh0A1WDXP91sXzJAWd jqELxeksqqIx5HP9rEBT7QqGXeuS9ESovEdz7RYAKO2+sbuyL6B873k6MjjZrQCf FDSzTpJBMAeRSjMkH3/7fjMH5rfTUCRaRbsDMUdmYGXjI6tEPTl/HTlftm96Q0j7 uk1WWsczMThZenp4GTd03sau0Oeomhh8N9VdeYvnMV6oeh9icCUaxiNN8V+GtA0t L8/APf2w/ILfwlm3L9soQ5ZmlHc/d1Wh9OVGiCTuBu1P64o/JuYhvi+4NFqKg1lx TqF5L/XGxOCJACJl7RSDHgco55Qa4mElXVby6AJdw04ZqCwWsWCIzaJVqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLx7KutLqKYdY83eQ9ohr6vcGdcHMB8GA1UdIwQY MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt NzRkOTFjZGJlMTk1LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1 LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7ph767X y27LTq4/cFYqQUBwO/hneekEAnnMrvyJeUyqmpDhoO0wc3OcC2rsp+7RkNahTEaL jTqmNfPAr4MZ4bAaKtBWKREY1Ka9WVP0bwHhqYl3JjDgyY/bYMpkmM4RQkhGK3eK Wi0Vl9IqLj7RggbEVZssANQPdi9ii+FKCIWQOSF3qBX0UV80arMNNGbVqGSvtxwm UfQBb6yMZVmDMR2MmJucUoWKWzYaSDHJD2I7aOh370pnsleuM0IpLVatnFjJxJOo rwL2oSTAYXoM/nfl+R1SwJGJtN1HGzB3eGuX0DAuOv9pBsdZl/jpAMJ27xuFisD5 pNq3YWTqreG5Hg== -----END CERTIFICATE-----Generated at Fri Oct 23 00:29:46 2026 by rpki-client