$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json) Hash identifier: gCusnxEYBn2Ab6Ms0zuuTNA5Br4ryBoZAW4lHH+64Rs= Subject key identifier: 64:BB:2D:EC:E2:31:25:52:B1:FC:61:F4:B5:C0:12:10:D4:10:A9:80 Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Certificate serial: 01A1133C98879E0F0CD84B72CB0A3DF85521 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft Manifest number: 038E Signing time: Tue 06 Oct 2026 22:01:40 +0000 Manifest this update: Tue 06 Oct 2026 22:01:40 +0000 Manifest next update: Wed 07 Oct 2026 22:01:40 +0000 Files and hashes: 1: 6hF48NdJlvMla9eluo8Mlfe595Y.roa (hash: pg8KajGYEwEU0ZGmmxsgFZa8AayGaJM9jjh0xL1LeCA=) 2: 8Z9LlW9pX1ZFA3wQNfdVO9-jjgs.roa (hash: XL3JspixgmL+Y5+ELAq1VBUarv7KKAfzu3TKsU6vMjU=) 3: F7OazNxmHQIZG_1NbQyBZDuRfp0.roa (hash: kfyCu9kGmBZWf6iCvzc+imifHO9IEOu6CS+tqE1Bls8=) 4: ZPkrtvVur46cS-5w8dwIkAjNZYE.roa (hash: vPaByPHtcOmoXzXWkiUeeFN03AP9nPQMC4Ibqh8NElg=) 5: ZvN7c-NtqYH-PaeLJUmdEPO5iC8.roa (hash: RkOPQkujkcLmBf4maBg9uGkdxV/kCwgeqMyADPSii/E=) 6: bGlKraIhhwlevroXgB4rLlo-YME.roa (hash: oIkXDeJlSani/t+wUjX7TTQDY2OjVB6ERk95GxJeYN8=) 7: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: tAZqXUgfcPW2kMX0Cski7m2c85WPi9gGs00Z2Ok6euA=) 8: mfKCIzYOA1MRX0WnVHNYXIYPDbA.roa (hash: BLUaF2c9SynmHjIFPlE7zXQ5dkGPExYAyDAAn9NF3gU=) 9: nu8XADsimCod0_uWl8egJ3aFHEw.roa (hash: H55dZSXKTNI4+9o7BFR1/GCpspjJcbHLdvt5EmFjk+U=) 10: qgusrLPdxbmOAmCCh-LDhKvWtUo.roa (hash: hmQSz0Gp8rt8ydBZY/twqJ9mc/ykbC8FHiCR9kZOXOg=) 11: qo3RmaJil-tmg6e3jCPqKh_xFAo.roa (hash: DLtprsoHKdJkHToMaxiYCDgKpyQfT89HL7h3BW0fsgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 22:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:13:3c:98:87:9e:0f:0c:d8:4b:72:cb:0a:3d:f8:55:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Validity Not Before: Oct 6 22:01:40 2026 GMT Not After : Oct 7 22:01:40 2026 GMT Subject: CN=64bb2dece2312552b1fc61f4b5c01210d410a980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:da:3a:8a:ab:b8:a2:33:73:92:58:7f:1d: 36:23:97:4a:72:9f:59:13:d4:cf:c4:fa:54:99:97: 38:a1:48:c7:a3:78:01:38:69:c4:84:c3:76:8a:49: 98:49:e7:ab:b5:83:c5:58:7e:2f:3e:b4:12:f7:de: da:23:f9:93:05:49:b3:b1:d8:12:b2:b6:a9:86:12: 59:4e:61:2e:e0:f3:ad:6a:a6:66:8c:75:c4:6b:7a: ee:0f:33:4c:b4:1f:e4:1e:26:50:32:0f:6b:3f:fd: e5:31:68:6b:fa:15:46:a7:fb:f3:1a:20:67:c9:9c: fd:fe:63:3b:f2:34:0c:c1:11:f0:dd:ee:4d:76:96: b6:a0:3d:12:59:6a:c6:ca:29:b8:a0:2b:3a:c5:15: 64:a7:3c:ad:49:05:dc:76:de:a8:70:54:9d:d3:7c: 90:67:fe:1b:e9:ce:c3:09:63:de:07:c7:c1:52:ae: 12:a8:84:36:b2:a3:0d:32:1d:67:34:75:4b:e2:bc: 1a:09:64:de:d5:60:6c:2e:22:83:1b:82:80:86:40: 0d:9a:9f:46:dc:56:d3:9d:f1:53:97:d2:c3:79:4d: eb:11:8b:e7:3f:55:4d:e6:75:ef:5c:68:37:77:1b: 88:28:55:d0:2b:b1:33:d7:80:9e:42:2d:2d:04:26: 79:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BB:2D:EC:E2:31:25:52:B1:FC:61:F4:B5:C0:12:10:D4:10:A9:80 X509v3 Authority Key Identifier: keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6f:7b:3a:eb:c0:9d:7a:a2:6e:3e:22:c2:57:a6:d0:db:e4: 93:6b:19:03:1a:f5:69:89:3e:8f:78:c7:ad:30:76:76:d2:02: c7:f9:a5:0b:66:6c:62:d1:ee:42:1e:1a:ef:df:5c:40:92:c6: 77:39:07:0d:72:5b:9d:c7:b8:52:5c:b9:87:90:d4:c2:cc:0b: ca:2c:19:d3:4c:0e:a9:90:cb:d8:b2:fd:92:4e:e6:3b:0b:dc: 00:ef:1d:3e:a2:eb:e4:0c:df:b1:52:05:29:d5:99:ad:9d:f2: d5:92:08:d0:97:60:2d:5a:34:48:f6:f3:63:be:ff:7f:f1:46: 78:34:2b:cd:24:c0:a1:1b:21:fa:bb:df:30:57:a1:43:e9:0a: a1:a7:5e:66:c1:85:5d:4b:f0:6c:f8:1b:9b:4b:b3:25:81:4e: ce:53:ab:40:5c:92:47:b9:d4:f2:bb:ba:75:85:1b:b3:c1:45: b5:60:bc:41:f9:13:1e:e1:48:7f:bc:a7:74:cf:1d:14:91:3d: 9a:78:d2:2c:f5:62:fd:af:35:a0:62:7a:d4:2d:97:90:6e:db: 68:a2:d7:4a:2d:68:b2:0d:6f:5f:f0:3d:e9:52:20:73:32:e9: 05:fd:7b:84:4b:78:cd:06:c8:20:d4:e7:09:2b:d3:fc:0a:c7: fa:34:51:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaETPJiHng8M2Etyywo9+FUhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl NGYyYzYwHhcNMjYxMDA2MjIwMTQwWhcNMjYxMDA3MjIwMTQwWjAzMTEwLwYDVQQD Eyg2NGJiMmRlY2UyMzEyNTUyYjFmYzYxZjRiNWMwMTIxMGQ0MTBhOTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfjaOoqruKIzc5JYfx02I5dKcp9Z E9TPxPpUmZc4oUjHo3gBOGnEhMN2ikmYSeertYPFWH4vPrQS997aI/mTBUmzsdgS sraphhJZTmEu4POtaqZmjHXEa3ruDzNMtB/kHiZQMg9rP/3lMWhr+hVGp/vzGiBn yZz9/mM78jQMwRHw3e5Ndpa2oD0SWWrGyim4oCs6xRVkpzytSQXcdt6ocFSd03yQ Z/4b6c7DCWPeB8fBUq4SqIQ2sqMNMh1nNHVL4rwaCWTe1WBsLiKDG4KAhkANmp9G 3FbTnfFTl9LDeU3rEYvnP1VN5nXvXGg3dxuIKFXQK7Ez14CeQi0tBCZ5tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGS7LeziMSVSsfxh9LXAEhDUEKmAMB8GA1UdIwQY MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt NzRkOTFjZGJlMTk1LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1 LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYG97OuvA nXqibj4iwlem0Nvkk2sZAxr1aYk+j3jHrTB2dtICx/mlC2ZsYtHuQh4a799cQJLG dzkHDXJbnce4Uly5h5DUwswLyiwZ00wOqZDL2LL9kk7mOwvcAO8dPqLr5AzfsVIF KdWZrZ3y1ZII0JdgLVo0SPbzY77/f/FGeDQrzSTAoRsh+rvfMFehQ+kKoadeZsGF XUvwbPgbm0uzJYFOzlOrQFySR7nU8ru6dYUbs8FFtWC8QfkTHuFIf7yndM8dFJE9 mnjSLPVi/a81oGJ61C2XkG7baKLXSi1osg1vX/A96VIgczLpBf17hEt4zQbIINTn CSvT/ArH+jRRAw== -----END CERTIFICATE-----Generated at Wed Oct 7 07:31:31 2026 by rpki-client