$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft File: mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json) Hash identifier: zxxKJdPdLzMK0ka1O7oVgQfKOJWbHpZ3CP3FQlqzukw= Subject key identifier: 43:BE:26:90:D1:43:D5:57:FC:7D:B7:FD:62:1D:B8:59:9A:2C:4A:03 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019EB8B49A5D75FA539F2A9D4A07772FE8D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft Manifest number: 1989 Signing time: Thu 11 Jun 2026 22:01:44 +0000 Manifest this update: Thu 11 Jun 2026 22:01:44 +0000 Manifest next update: Fri 12 Jun 2026 22:01:44 +0000 Files and hashes: 1: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (hash: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0=) 2: 2yaXAAUSdtsPMaSBJFquEdDTT6k.roa (hash: judwS/WZsJiXUyPGTQqvtLBMK0N9HxSeMb7YxOm0ElY=) 3: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (hash: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4=) 4: 6d_ENWzH-VQ6PZSxBVnrr_FPch4.roa (hash: nLEVzgKnOcDJKPh426JAlzQMVVXnAa8GP6UiExx+ycU=) 5: 877gblyC3fNplcxOQRcSVA_wkoU.roa (hash: FPmfqAGJMI/bwduEg7CvapHPJGcw4GGIWlU9wyWJ4Ns=) 6: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (hash: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU=) 7: CO3NGBtj6lvSDwNx7qgisnxcpZE.roa (hash: Ta+b1EmbPlRx8CBP3A/a0A01hRd22nzH/W3OVEU0ya4=) 8: DehND8NWso8fnWINtOcuecHBpxM.roa (hash: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg=) 9: F40rkkhDW3ybCB_12cIOKOyXk08.roa (hash: h+hLlHz7DDayf/In7Q6RDRACl8fHTXkiC3/X/Kl3h7E=) 10: Jtp72CS2jEm3lTCDgWP7039dKYg.roa (hash: Q1Hpm3kD459iodRBV3umbkyn+j4+wiimsCk0/+2lO84=) 11: Ke0VSjrkP1jgta_WS5ntQtfKR38.roa (hash: yxWTZVrICzskJJpD6AIg7gNqPSzszPgc+Bf6OnBQWQw=) 12: Kg06NaGezROeWtBK1qTOADXp_pQ.roa (hash: wmDFJ/5sVQtr4RNwEITHDUmCB7Qq4hdLVGdv9QNDX30=) 13: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (hash: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4=) 14: LnDxIxD-hluuct808CIO9EDyMIU.roa (hash: BcxRwhFwjkIGGKDrrvqL77SCEYThrU0rRvnjjzU14s8=) 15: MAhbKgRlvoF4_D9KUePJuDoAmS4.roa (hash: ZxoAbFForFx0WnVahVEJoAAhiXTlHQB8gaScqzkZ4UU=) 16: MOd1w7flMfCwv3SyFF--8p3elzE.roa (hash: EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=) 17: McPz5S5PBhTWxGifH8fs1_NS2jU.roa (hash: KEIARx1I4vqfMuZP+WJZ2f9AE00BEAWPF5jqTraiMB4=) 18: Rlj4VlWfwkfz6GkH-OueIIaSCuc.roa (hash: ii4MZTYhkg0ytZp/Vdsah05JAy4dduK8Ytc1ySn7mXs=) 19: SoVFcNc1lU_1SEfGUkw_ciUcpAQ.roa (hash: I90mbwCIchHVNf7BLD+pAvrY/vzh+76mAoOiyMR3xRk=) 20: Zkjg3hn61JFL00ei8OTWJjwR5z4.roa (hash: 588yrYLogN7emBldqJ08eH+eoXXQ8TYe9+BBfSEy2Vs=) 21: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (hash: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y=) 22: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (hash: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I=) 23: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (hash: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME=) 24: icBjslH5ERqmqpU1USzkMdhkEjI.roa (hash: wMYjLB/rE9ycsdnG1IDtuH3D8/HkxmDfxjH3cnkuOvM=) 25: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (hash: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU=) 26: kZx2IxBD5HOKLTGnyUCslhrff3s.roa (hash: Vt6Cc39kOpNIWweAmZd5zbwANosQpiB4xiB1jbdvahg=) 27: lnpel8l0zvHfaReJqv_lxZ_B7Z0.roa (hash: kesVe4OXCvVFnF3zB6nMGPK6v8LEXAUi0VV82fdI66M=) 28: mW7TNNKOcx8Asff3LA5hFbwolus.roa (hash: C0qSa3VXz/TpxHHnVA5yQuQAXKAh2TZvyE/riAp87yc=) 29: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: uMTB4G+7lheWt6x0KXJQqnJe3ZW3A0rlMTuSxhGlopU=) 30: n50HYNvX301s5gEUcCw5M0DpFnA.roa (hash: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU=) 31: nDe-qNhnM7uiI6FvKA4tpUFbkwY.roa (hash: sTzHHKSFfupRttU47uock1mVJaqqApZAZwwhHCKIkSw=) 32: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (hash: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4=) 33: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (hash: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8=) 34: xEUKzOOkARoDjaObKTAU7gIkvJ0.roa (hash: 78z8Ey8iTFTJsB0kmSdbcd2syS5QWJtz2XrcMbWt2hA=) 35: xNY2gUvtLtxYfY6gU7_3js38DyA.roa (hash: 3CcNNA7q88gUr/9Ae4mjWpxXE8KozaNGoTSekGYA77Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 20:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b8:b4:9a:5d:75:fa:53:9f:2a:9d:4a:07:77:2f:e8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jun 11 22:01:44 2026 GMT Not After : Jun 12 22:01:44 2026 GMT Subject: CN=43be2690d143d557fc7db7fd621db8599a2c4a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d2:29:64:fd:1e:55:4c:c7:df:6a:4c:ef:43: 81:52:3b:3e:1d:ee:2a:ba:c5:33:4a:ce:4e:0b:fc: ee:f9:cf:61:b9:b0:f4:eb:0b:cd:3f:37:0f:0f:6a: eb:9b:f4:25:76:56:5a:b9:4c:91:5b:ef:bb:f0:74: 39:b0:b9:3d:e1:96:51:2b:cc:34:83:6c:3a:5e:dc: a9:94:18:74:6e:60:79:e0:90:ef:81:0b:c5:71:a7: 8e:58:7c:0c:c8:a0:23:76:21:6d:18:ac:d5:5d:e2: bf:c8:9c:34:db:e4:dc:ed:04:fc:48:1f:6f:66:8b: 12:58:31:a2:12:48:47:7c:87:e0:e4:24:ea:20:60: e6:21:b0:4f:06:65:c6:d7:57:f8:da:b5:b9:f4:54: 71:d8:f6:b9:b7:ef:0d:69:48:64:5d:af:18:e3:34: 7a:79:d3:59:8c:47:ab:fe:90:1d:aa:db:09:d0:38: d9:a0:d9:49:dc:6c:1e:b8:3c:f9:52:68:40:84:93: c9:f7:19:f8:31:c2:80:db:01:93:15:52:d3:51:cd: d5:9d:0e:58:8b:72:5e:cb:51:86:29:b9:4c:de:be: a9:a8:52:62:22:d4:c1:08:7d:8c:0c:09:a8:73:86: 40:95:5a:9c:e1:8b:9f:b7:2f:c0:1a:92:da:6b:84: aa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BE:26:90:D1:43:D5:57:FC:7D:B7:FD:62:1D:B8:59:9A:2C:4A:03 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:1a:76:ad:9a:84:93:e0:8e:e9:ee:a2:61:40:f7:ca:dd:fe: 6e:8e:24:71:e3:37:70:fc:9f:d5:f7:1e:4f:b2:5f:56:cb:68: 7f:a0:0d:a0:e4:91:45:0c:fc:c4:fb:d6:69:90:c8:15:86:fc: 4f:93:62:0c:15:af:6a:5e:9c:a5:22:2f:8a:bb:8f:82:ca:11: 8f:f9:1f:12:89:d6:35:26:4b:11:dc:5d:4c:29:b5:52:cd:1c: 1b:c8:18:d9:8f:72:a4:de:af:97:8f:b6:92:de:9b:82:6b:f9: c7:36:b2:2b:93:e2:8c:ba:a2:4d:f6:7b:d1:bb:da:e1:db:6f: a7:c7:79:58:2a:5a:20:e4:4e:6f:a4:74:52:16:de:55:e4:51: 5d:47:fd:c5:fc:e9:31:ae:f5:16:34:ca:df:f8:4c:95:de:5b: 5e:d4:ed:81:4d:dd:1f:70:bd:36:9c:3b:75:71:39:af:1e:b7: ab:42:d9:48:c2:9e:8a:7d:6d:ec:f5:31:6b:61:c8:43:e2:f1: 05:65:95:36:b1:d6:9d:bc:a2:f2:19:7f:a5:e7:f4:6e:d6:73: 8d:c7:b3:40:c7:8c:7a:b8:23:c3:49:99:bf:6b:ab:df:39:f6: d1:9f:97:bb:cf:9b:5e:cb:2b:3a:1d:96:20:61:9c:00:a8:19: ae:64:98:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ64tJpddfpTnyqdSgd3L+jVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwNjExMjIwMTQ0WhcNMjYwNjEyMjIwMTQ0WjAzMTEwLwYDVQQD Eyg0M2JlMjY5MGQxNDNkNTU3ZmM3ZGI3ZmQ2MjFkYjg1OTlhMmM0YTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29IpZP0eVUzH32pM70OBUjs+He4q usUzSs5OC/zu+c9hubD06wvNPzcPD2rrm/QldlZauUyRW++78HQ5sLk94ZZRK8w0 g2w6XtyplBh0bmB54JDvgQvFcaeOWHwMyKAjdiFtGKzVXeK/yJw02+Tc7QT8SB9v ZosSWDGiEkhHfIfg5CTqIGDmIbBPBmXG11f42rW59FRx2Pa5t+8NaUhkXa8Y4zR6 edNZjEer/pAdqtsJ0DjZoNlJ3GweuDz5UmhAhJPJ9xn4McKA2wGTFVLTUc3VnQ5Y i3Jey1GGKblM3r6pqFJiItTBCH2MDAmoc4ZAlVqc4Yufty/AGpLaa4SqPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEO+JpDRQ9VX/H23/WIduFmaLEoDMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRp2rZqE k+CO6e6iYUD3yt3+bo4kceM3cPyf1fceT7JfVstof6ANoOSRRQz8xPvWaZDIFYb8 T5NiDBWval6cpSIviruPgsoRj/kfEonWNSZLEdxdTCm1Us0cG8gY2Y9ypN6vl4+2 kt6bgmv5xzayK5PijLqiTfZ70bva4dtvp8d5WCpaIOROb6R0UhbeVeRRXUf9xfzp Ma71FjTK3/hMld5bXtTtgU3dH3C9Npw7dXE5rx63q0LZSMKein1t7PUxa2HIQ+Lx BWWVNrHWnbyi8hl/pef0btZzjcezQMeMergjw0mZv2ur3zn20Z+Xu8+bXssrOh2W IGGcAKgZrmSYlg== -----END CERTIFICATE-----Generated at Fri Jun 12 04:12:54 2026 by rpki-client