$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json) Hash identifier: ZtKEzs/42SXua4VOsbN3Q561qJqnHTTpJZv/7222lLs= Subject key identifier: BA:11:75:20:1C:33:99:2D:B7:B7:E5:F6:0A:AE:E9:0C:BE:A9:72:97 Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 01A1773A1C194696AC8C0F9569D4A8BA5720 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft Manifest number: 1AD3 Signing time: Mon 26 Oct 2026 08:00:59 +0000 Manifest this update: Mon 26 Oct 2026 08:00:59 +0000 Manifest next update: Tue 27 Oct 2026 08:00:59 +0000 Files and hashes: 1: 9XLB2pGNOPbljEVUBZRkKE3gDsg.roa (hash: yFaKRkjlVIE/J3Dt9Swl2M9fjwmRRjL86LSGNcqFa2o=) 2: FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa (hash: xP/yiKvXIB14qyF8rqguFru71C1q8PJ2Qa43mcie0iQ=) 3: MZB1UqbipBpVhmhIAAIPCSUm9tE.roa (hash: zYMw6mBm4z/9+C34n4tABKKlDK/AXIGy+SsUTUFBU8w=) 4: TaW1xof2_FS-y1oMd64DHywlLM8.roa (hash: wpTtq6XsXybW5bFqRgDMjejQMJ2CiWnuwczXgfVlZ+M=) 5: c9WQ2UD23ghc6w62neYjcrA0Hec.roa (hash: 6zkyskipE3HqNwSrbgIsZT9a9eFCr1VvbNhzrk2Ff0Y=) 6: fXpzmIEAnbtmNcx0rqptqG5QnQg.roa (hash: 5iU3booTwnLztG+lAWV3dZKWKwiQOKD5sGh5Wy5gwWk=) 7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: Ei4DvcC4i/3ILEwWz8r+YcgIKP/T0x9Jwxx78e7Jl8w=) 8: hTBE-AfXHoIR0eXyurn7fldr3Uw.roa (hash: h5l8+NwGnElycHcZimGiomdSgVS5UzfYH7eaKNxeRxk=) 9: mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa (hash: HG8VsquQ+FnSEapJw68ywW3TpFwS/T5f8VjxgSgr5P4=) 10: o1g6d4IpK0z2pKch2obiVEvKpo0.roa (hash: ogKpeh7KtOQ7CbX8yF/mDVAEfUbLY6d/B58Q/R7K4YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:77:3a:1c:19:46:96:ac:8c:0f:95:69:d4:a8:ba:57:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Oct 26 08:00:59 2026 GMT Not After : Oct 27 08:00:59 2026 GMT Subject: CN=ba1175201c33992db7b7e5f60aaee90cbea97297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:99:5c:f1:53:d9:f1:38:3e:83:49:e4:4e:6d: 46:f5:62:93:d4:d1:e9:fa:a5:53:21:a0:20:84:21: 8a:36:64:c9:dc:1a:97:7c:c0:21:33:e8:10:b8:ac: 9d:19:22:c0:05:bc:da:61:7a:7d:7d:51:15:72:fe: f5:b6:bd:62:f8:15:73:20:ce:e5:78:52:9d:67:db: d8:4b:d6:08:dc:af:69:46:8e:4a:61:b3:8f:ac:fc: 32:5b:25:ee:be:c0:69:63:51:e7:9a:8d:52:92:54: 46:37:ae:58:8e:94:e9:a2:90:6a:9c:03:47:33:c4: fc:5f:fa:2e:4e:c0:a8:bc:fc:2e:1b:f5:e4:14:51: cf:4b:25:52:c8:b8:93:4a:af:b6:4d:50:e1:54:70: 01:f6:63:64:cb:7f:0c:4f:0c:f8:54:9c:56:da:38: cb:0e:33:46:f8:27:29:74:5c:e6:e9:bd:c5:07:09: f4:de:dc:62:fb:e0:54:84:75:60:a7:0d:24:3c:ef: 33:ab:1a:ba:44:df:e3:58:ed:f0:91:45:61:95:0d: 5c:2a:bb:ef:00:3f:ec:24:6c:dd:8e:e1:a7:fc:dc: ac:35:96:53:c5:b6:2b:f3:6b:a3:4b:65:43:f8:08: 7e:6a:56:1b:35:8f:c4:e9:3f:1e:c6:8d:a6:a6:34: 69:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:11:75:20:1C:33:99:2D:B7:B7:E5:F6:0A:AE:E9:0C:BE:A9:72:97 X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:da:e6:8f:dc:65:c2:ad:b6:20:cc:d3:61:ba:d9:bc:1a:74: 6a:fd:54:98:64:fa:4b:ca:f2:39:9a:2e:bb:59:4b:7d:28:4e: ef:ef:a0:a1:d5:14:aa:b6:b6:6e:f8:05:a8:56:c1:b3:29:9c: b6:db:ea:b7:11:da:b0:9d:6c:a6:95:0c:5a:4b:d2:28:04:b2: 9f:34:ed:2e:6b:81:58:46:95:3b:2a:e8:1e:b2:a2:20:e2:1e: 34:e4:5c:4b:d3:44:01:4b:60:fd:4d:36:94:e1:29:6b:ae:34: 9a:ab:f3:72:f1:b1:79:fc:52:65:b8:1f:fa:95:d7:a9:62:58: cb:3e:69:25:a0:c2:1b:fd:03:1b:01:a9:d6:22:1e:14:dc:43: 4a:b9:68:30:2a:ea:4b:42:92:91:cb:d9:93:81:93:6d:2e:56: f2:ec:83:38:84:a7:1f:59:c0:9e:9e:38:5d:2b:ea:b7:f2:d5: 80:c8:03:53:51:7f:68:a3:25:4a:cd:f6:86:43:db:1a:71:46: 41:a2:0c:ff:a8:d0:53:99:be:5f:95:f3:2f:12:6f:d2:45:80: 20:e4:f6:af:33:f5:53:24:56:fe:a6:a8:cd:d0:18:72:66:70: ff:4d:3d:8e:6b:90:14:0b:4b:78:f4:c4:c6:d5:bf:9a:13:0c: 4b:93:bd:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF3OhwZRpasjA+VadSoulcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYxMDI2MDgwMDU5WhcNMjYxMDI3MDgwMDU5WjAzMTEwLwYDVQQD EyhiYTExNzUyMDFjMzM5OTJkYjdiN2U1ZjYwYWFlZTkwY2JlYTk3Mjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJlc8VPZ8Tg+g0nkTm1G9WKT1NHp +qVTIaAghCGKNmTJ3BqXfMAhM+gQuKydGSLABbzaYXp9fVEVcv71tr1i+BVzIM7l eFKdZ9vYS9YI3K9pRo5KYbOPrPwyWyXuvsBpY1Hnmo1SklRGN65YjpTpopBqnANH M8T8X/ouTsCovPwuG/XkFFHPSyVSyLiTSq+2TVDhVHAB9mNky38MTwz4VJxW2jjL DjNG+CcpdFzm6b3FBwn03txi++BUhHVgpw0kPO8zqxq6RN/jWO3wkUVhlQ1cKrvv AD/sJGzdjuGn/NysNZZTxbYr82ujS2VD+Ah+alYbNY/E6T8exo2mpjRpBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoRdSAcM5ktt7fl9gqu6Qy+qXKXMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvtrmj9xl wq22IMzTYbrZvBp0av1UmGT6S8ryOZouu1lLfShO7++godUUqra2bvgFqFbBsymc ttvqtxHasJ1sppUMWkvSKASynzTtLmuBWEaVOyroHrKiIOIeNORcS9NEAUtg/U02 lOEpa640mqvzcvGxefxSZbgf+pXXqWJYyz5pJaDCG/0DGwGp1iIeFNxDSrloMCrq S0KSkcvZk4GTbS5W8uyDOISnH1nAnp44XSvqt/LVgMgDU1F/aKMlSs32hkPbGnFG QaIM/6jQU5m+X5XzLxJv0kWAIOT2rzP1UyRW/qaozdAYcmZw/009jmuQFAtLePTE xtW/mhMMS5O9Ag== -----END CERTIFICATE-----Generated at Mon Oct 26 12:41:20 2026 by rpki-client