$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft File: mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json) Hash identifier: sjgwoTzSZX3keKkFzk5ySulzwFzKKhd5RJadluQ1nk0= Subject key identifier: 1B:FF:D1:4C:EB:CC:37:EF:74:96:F4:AA:16:63:FE:29:03:B3:60:1C Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 01A176CC66833AF71FB535B918DBFB0C446A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft Manifest number: 1AF7 Signing time: Mon 26 Oct 2026 06:01:09 +0000 Manifest this update: Mon 26 Oct 2026 06:01:09 +0000 Manifest next update: Tue 27 Oct 2026 06:01:09 +0000 Files and hashes: 1: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (hash: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0=) 2: 2yaXAAUSdtsPMaSBJFquEdDTT6k.roa (hash: judwS/WZsJiXUyPGTQqvtLBMK0N9HxSeMb7YxOm0ElY=) 3: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (hash: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4=) 4: 6d_ENWzH-VQ6PZSxBVnrr_FPch4.roa (hash: nLEVzgKnOcDJKPh426JAlzQMVVXnAa8GP6UiExx+ycU=) 5: 877gblyC3fNplcxOQRcSVA_wkoU.roa (hash: FPmfqAGJMI/bwduEg7CvapHPJGcw4GGIWlU9wyWJ4Ns=) 6: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (hash: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU=) 7: CO3NGBtj6lvSDwNx7qgisnxcpZE.roa (hash: Ta+b1EmbPlRx8CBP3A/a0A01hRd22nzH/W3OVEU0ya4=) 8: DehND8NWso8fnWINtOcuecHBpxM.roa (hash: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg=) 9: Exzf4PskjTMc5LIyk1evDnbig4o.roa (hash: /XbM8Up/CzKNgL2qr7cqhEQox2OxF2jJdDjq9JA7I2M=) 10: F40rkkhDW3ybCB_12cIOKOyXk08.roa (hash: h+hLlHz7DDayf/In7Q6RDRACl8fHTXkiC3/X/Kl3h7E=) 11: FlUhhr8SXDum_EWDp9geIZ0dsgk.roa (hash: Sxlm9YFroUXgLZNS0tdgMYSmtPTusL3YRrPjkdaX58A=) 12: Jtp72CS2jEm3lTCDgWP7039dKYg.roa (hash: Q1Hpm3kD459iodRBV3umbkyn+j4+wiimsCk0/+2lO84=) 13: Ke0VSjrkP1jgta_WS5ntQtfKR38.roa (hash: yxWTZVrICzskJJpD6AIg7gNqPSzszPgc+Bf6OnBQWQw=) 14: Kg06NaGezROeWtBK1qTOADXp_pQ.roa (hash: wmDFJ/5sVQtr4RNwEITHDUmCB7Qq4hdLVGdv9QNDX30=) 15: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (hash: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4=) 16: LnDxIxD-hluuct808CIO9EDyMIU.roa (hash: BcxRwhFwjkIGGKDrrvqL77SCEYThrU0rRvnjjzU14s8=) 17: MAhbKgRlvoF4_D9KUePJuDoAmS4.roa (hash: ZxoAbFForFx0WnVahVEJoAAhiXTlHQB8gaScqzkZ4UU=) 18: MOd1w7flMfCwv3SyFF--8p3elzE.roa (hash: EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=) 19: McPz5S5PBhTWxGifH8fs1_NS2jU.roa (hash: KEIARx1I4vqfMuZP+WJZ2f9AE00BEAWPF5jqTraiMB4=) 20: Rlj4VlWfwkfz6GkH-OueIIaSCuc.roa (hash: ii4MZTYhkg0ytZp/Vdsah05JAy4dduK8Ytc1ySn7mXs=) 21: SoVFcNc1lU_1SEfGUkw_ciUcpAQ.roa (hash: I90mbwCIchHVNf7BLD+pAvrY/vzh+76mAoOiyMR3xRk=) 22: Zkjg3hn61JFL00ei8OTWJjwR5z4.roa (hash: 588yrYLogN7emBldqJ08eH+eoXXQ8TYe9+BBfSEy2Vs=) 23: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (hash: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y=) 24: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (hash: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I=) 25: gwB8EQKBkF6rAUQregKYO8DR9DM.roa (hash: bkCyPXRCyEr0y70TR0Ql1njvG/oRBgnO+/E/e2UhPeQ=) 26: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (hash: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME=) 27: icBjslH5ERqmqpU1USzkMdhkEjI.roa (hash: wMYjLB/rE9ycsdnG1IDtuH3D8/HkxmDfxjH3cnkuOvM=) 28: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (hash: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU=) 29: kZx2IxBD5HOKLTGnyUCslhrff3s.roa (hash: Vt6Cc39kOpNIWweAmZd5zbwANosQpiB4xiB1jbdvahg=) 30: lSaiK2qUcsBb2SRVSSn0lBTLk8w.roa (hash: Jw4NGPd3f960D6rAt45BHw7wfutR5RSd+rPJNYNB2E0=) 31: lnpel8l0zvHfaReJqv_lxZ_B7Z0.roa (hash: kesVe4OXCvVFnF3zB6nMGPK6v8LEXAUi0VV82fdI66M=) 32: mW7TNNKOcx8Asff3LA5hFbwolus.roa (hash: C0qSa3VXz/TpxHHnVA5yQuQAXKAh2TZvyE/riAp87yc=) 33: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: 3w2+mH9Jjr8Wo8WwJUe5h3uF7TuenqIRi+kw1jslA5w=) 34: n50HYNvX301s5gEUcCw5M0DpFnA.roa (hash: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU=) 35: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (hash: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4=) 36: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (hash: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8=) 37: xEUKzOOkARoDjaObKTAU7gIkvJ0.roa (hash: 78z8Ey8iTFTJsB0kmSdbcd2syS5QWJtz2XrcMbWt2hA=) 38: xNY2gUvtLtxYfY6gU7_3js38DyA.roa (hash: 3CcNNA7q88gUr/9Ae4mjWpxXE8KozaNGoTSekGYA77Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:76:cc:66:83:3a:f7:1f:b5:35:b9:18:db:fb:0c:44:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Oct 26 06:01:09 2026 GMT Not After : Oct 27 06:01:09 2026 GMT Subject: CN=1bffd14cebcc37ef7496f4aa1663fe2903b3601c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:96:3a:5a:32:20:df:23:12:e1:c3:71:8b: 27:4c:c1:35:ce:b5:47:24:69:58:a4:ae:7e:f1:17: 02:51:e2:76:7a:3d:7b:86:ef:a0:ba:e8:87:b5:6c: ee:60:66:cf:da:d2:4f:46:86:67:b8:f9:56:a4:8d: c8:2b:1c:49:26:9a:3e:84:60:17:d1:86:c9:eb:78: ac:1a:1d:c2:15:17:73:84:bc:84:cf:d1:a9:62:05: 9f:db:4b:e3:c7:0a:35:da:6f:34:37:b8:6b:68:56: 62:22:86:f0:c3:6c:35:97:57:c4:63:a2:06:a7:a0: 94:89:14:3a:fb:b5:6d:f8:0e:69:38:90:0e:57:f0: 42:52:66:6f:d2:af:02:0e:a9:6f:9f:d5:83:a1:46: ed:bd:98:ad:07:dd:3e:d1:35:5d:c3:1f:66:b4:f2: 48:60:ae:6f:da:71:78:dc:f7:09:09:63:d5:93:41: d4:8a:ae:95:8b:7a:59:a0:81:48:4b:4e:85:3c:36: a0:cc:27:0b:66:59:c3:0f:db:74:f1:24:e0:4c:3e: 14:4c:66:22:d6:26:22:88:96:c5:cd:49:f4:c3:e9: b3:93:0f:d5:23:f5:47:ea:a4:8f:0f:d6:24:a2:d6: 85:d0:5a:e1:bf:4c:40:75:5d:ea:4c:cf:63:45:3c: 9e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FF:D1:4C:EB:CC:37:EF:74:96:F4:AA:16:63:FE:29:03:B3:60:1C X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:78:76:76:30:9f:9a:84:d8:84:a1:a1:a5:ca:86:55:f2:f1: 05:75:e9:82:e0:67:f6:25:a6:4e:2e:78:40:ed:2b:af:dd:a4: 38:f1:13:0a:fb:93:01:7d:f4:69:0d:97:0a:97:b1:f1:39:c5: 29:04:1e:50:46:85:1d:5b:65:65:80:84:c0:c1:92:82:a6:f0: 8b:55:be:43:63:b1:7a:28:b7:a5:3e:17:bb:4d:7f:ca:ff:09: 44:62:92:e7:73:63:76:04:77:4c:ea:a2:2f:b7:d3:27:35:5d: 12:0c:04:2b:7f:70:74:80:9d:b3:d8:60:4a:90:aa:09:b8:7b: 74:38:ab:3b:31:5b:6c:5d:ff:d6:8a:2b:54:48:55:ad:58:a7: d4:25:ce:5e:97:b5:6c:b0:9d:8e:e7:d7:d9:b4:5a:9e:aa:52: d8:cf:6c:6b:63:3d:77:53:90:c6:b1:99:ff:ec:72:2a:e8:4b: 22:75:7f:eb:7e:9f:e7:aa:a8:07:bc:30:2f:7c:c0:d7:ca:28: 8a:1f:45:90:16:03:45:7b:b2:3d:83:31:a2:fd:19:db:6f:ff: 1f:a5:4c:72:4f:18:c1:e8:67:98:36:e6:00:c3:85:1c:e2:0b: e7:c0:35:8d:50:d8:dc:2e:29:5d:38:98:c7:52:0e:61:53:c4: 40:4c:7c:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF2zGaDOvcftTW5GNv7DERqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYxMDI2MDYwMTA5WhcNMjYxMDI3MDYwMTA5WjAzMTEwLwYDVQQD EygxYmZmZDE0Y2ViY2MzN2VmNzQ5NmY0YWExNjYzZmUyOTAzYjM2MDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVKWOloyIN8jEuHDcYsnTME1zrVH JGlYpK5+8RcCUeJ2ej17hu+guuiHtWzuYGbP2tJPRoZnuPlWpI3IKxxJJpo+hGAX 0YbJ63isGh3CFRdzhLyEz9GpYgWf20vjxwo12m80N7hraFZiIobww2w1l1fEY6IG p6CUiRQ6+7Vt+A5pOJAOV/BCUmZv0q8CDqlvn9WDoUbtvZitB90+0TVdwx9mtPJI YK5v2nF43PcJCWPVk0HUiq6Vi3pZoIFIS06FPDagzCcLZlnDD9t08STgTD4UTGYi 1iYiiJbFzUn0w+mzkw/VI/VH6qSPD9YkotaF0Frhv0xAdV3qTM9jRTyeywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBv/0UzrzDfvdJb0qhZj/ikDs2AcMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv3h2djCf moTYhKGhpcqGVfLxBXXpguBn9iWmTi54QO0rr92kOPETCvuTAX30aQ2XCpex8TnF KQQeUEaFHVtlZYCEwMGSgqbwi1W+Q2Oxeii3pT4Xu01/yv8JRGKS53NjdgR3TOqi L7fTJzVdEgwEK39wdICds9hgSpCqCbh7dDirOzFbbF3/1oorVEhVrVin1CXOXpe1 bLCdjufX2bRanqpS2M9sa2M9d1OQxrGZ/+xyKuhLInV/636f56qoB7wwL3zA18oo ih9FkBYDRXuyPYMxov0Z22//H6VMck8YwehnmDbmAMOFHOIL58A1jVDY3C4pXTiY x1IOYVPEQEx8vA== -----END CERTIFICATE-----Generated at Mon Oct 26 14:21:59 2026 by rpki-client