$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json) Hash identifier: 6caGTPbODVuSsV4fNGj7D2DSHxXaObVhUxZR4iY1oyk= Subject key identifier: AC:FE:0F:B5:66:69:3A:70:C4:FB:7C:8F:AE:D7:81:16:36:E5:CF:E4 Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 01A0889F046D732C7F93C46EA6B6208ABE1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft Manifest number: 1A57 Signing time: Thu 10 Sep 2026 00:01:57 +0000 Manifest this update: Thu 10 Sep 2026 00:01:57 +0000 Manifest next update: Fri 11 Sep 2026 00:01:57 +0000 Files and hashes: 1: 4W8zMWdvB6Q5Y33ST-LiwR-bi9I.roa (hash: yYLJjJcxGbsPt1kbF7TqW+8yFUQxUCBfKdPuqHD0TvQ=) 2: 9XLB2pGNOPbljEVUBZRkKE3gDsg.roa (hash: yFaKRkjlVIE/J3Dt9Swl2M9fjwmRRjL86LSGNcqFa2o=) 3: FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa (hash: xP/yiKvXIB14qyF8rqguFru71C1q8PJ2Qa43mcie0iQ=) 4: MZB1UqbipBpVhmhIAAIPCSUm9tE.roa (hash: zYMw6mBm4z/9+C34n4tABKKlDK/AXIGy+SsUTUFBU8w=) 5: TaW1xof2_FS-y1oMd64DHywlLM8.roa (hash: wpTtq6XsXybW5bFqRgDMjejQMJ2CiWnuwczXgfVlZ+M=) 6: fXpzmIEAnbtmNcx0rqptqG5QnQg.roa (hash: 5iU3booTwnLztG+lAWV3dZKWKwiQOKD5sGh5Wy5gwWk=) 7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: e7VmJAy/izz+tx46GkDKTyP5zVZe90UevTANa27xhH0=) 8: hTBE-AfXHoIR0eXyurn7fldr3Uw.roa (hash: h5l8+NwGnElycHcZimGiomdSgVS5UzfYH7eaKNxeRxk=) 9: mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa (hash: HG8VsquQ+FnSEapJw68ywW3TpFwS/T5f8VjxgSgr5P4=) 10: o1g6d4IpK0z2pKch2obiVEvKpo0.roa (hash: ogKpeh7KtOQ7CbX8yF/mDVAEfUbLY6d/B58Q/R7K4YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 00:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:88:9f:04:6d:73:2c:7f:93:c4:6e:a6:b6:20:8a:be:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Sep 10 00:01:57 2026 GMT Not After : Sep 11 00:01:57 2026 GMT Subject: CN=acfe0fb566693a70c4fb7c8faed7811636e5cfe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:df:dd:dc:85:9e:3f:13:92:b6:6a:65:bc: 9e:3e:c4:73:c4:a7:80:77:b6:78:83:bd:54:24:47: 25:ee:2a:9f:7a:44:53:42:42:c8:df:d1:5e:ab:94: 2c:b9:81:b3:d2:e2:e9:ba:37:75:40:c5:d6:4c:4a: db:04:37:e0:3a:c2:96:75:69:a1:5d:8a:2e:98:4f: 82:a5:9f:f2:5a:5a:1b:73:5c:d7:44:85:3e:b6:49: 82:5d:3c:b5:de:fb:32:b8:cf:e5:e4:69:e0:48:1d: f3:19:0d:5b:a0:ad:ed:1b:ce:08:6e:c3:2a:bf:d2: 1a:09:03:c3:21:9e:c5:77:a8:7a:52:b8:f0:91:88: d4:6c:23:4e:b2:5e:9c:7b:7a:d3:6b:1d:88:5a:38: 94:07:b8:11:f0:99:fd:04:ee:f1:f8:75:39:3a:51: f6:02:db:e4:fa:73:0e:6d:06:19:e8:97:69:0c:73: f5:9f:9a:8f:2f:aa:3d:f7:d1:a4:b9:cf:32:f4:ba: c8:eb:0a:c8:db:49:1e:cc:c2:d0:05:85:5d:22:18: a4:a3:17:0f:b5:73:a3:eb:de:04:2b:51:71:b9:a0: f5:b9:34:d1:93:03:bb:ab:42:eb:33:95:1f:cb:15: cf:84:67:43:ca:ae:95:af:80:06:ba:ed:c6:01:8e: d9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FE:0F:B5:66:69:3A:70:C4:FB:7C:8F:AE:D7:81:16:36:E5:CF:E4 X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:7f:48:0e:9e:d8:48:99:5f:99:46:79:66:a6:8b:10:0d:3f: 1a:d1:d2:25:6a:50:71:83:cd:94:23:2b:f9:13:ee:93:d7:b1: d7:7e:f7:1f:a4:13:fd:1b:0b:0b:a1:4c:19:db:6e:71:33:8c: 60:22:fb:5f:ac:cf:4f:2d:1b:52:44:5c:1a:ba:3b:cc:69:b8: 26:49:58:b2:23:08:8b:0d:bf:7d:78:24:47:3b:50:2e:36:97: c6:d3:99:5a:ff:17:1b:b5:ab:44:77:b4:d3:9e:2d:ec:f7:36: f2:1c:6b:dc:3d:9a:45:63:42:9e:bc:fc:e6:92:3b:12:38:e6: 26:ec:5f:ee:d5:bc:c0:dc:33:b7:89:ec:13:98:72:1c:f4:f0: 1c:11:1f:ea:92:91:5e:ae:a5:bb:96:72:26:92:1a:71:1e:e4: af:f4:1d:42:06:12:7e:db:b1:7c:a7:a6:da:90:bd:5d:c3:b3: 50:0b:21:80:dc:da:e1:34:8a:25:48:f9:fe:12:ba:63:0b:06: f0:c2:4e:e4:66:96:6f:9d:9d:e0:19:f9:10:a4:24:67:b5:c4: 3f:53:9d:ac:f7:fe:e5:b4:21:4f:ad:12:d7:2c:d7:dc:d6:3d: ef:75:e6:f7:bd:c1:50:98:02:45:d3:d4:8f:5a:12:f8:0d:bd: e8:66:97:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCInwRtcyx/k8RuprYgir4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwOTEwMDAwMTU3WhcNMjYwOTExMDAwMTU3WjAzMTEwLwYDVQQD EyhhY2ZlMGZiNTY2NjkzYTcwYzRmYjdjOGZhZWQ3ODExNjM2ZTVjZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk7f3dyFnj8TkrZqZbyePsRzxKeA d7Z4g71UJEcl7iqfekRTQkLI39Feq5QsuYGz0uLpujd1QMXWTErbBDfgOsKWdWmh XYoumE+CpZ/yWlobc1zXRIU+tkmCXTy13vsyuM/l5GngSB3zGQ1boK3tG84IbsMq v9IaCQPDIZ7Fd6h6UrjwkYjUbCNOsl6ce3rTax2IWjiUB7gR8Jn9BO7x+HU5OlH2 Atvk+nMObQYZ6JdpDHP1n5qPL6o999Gkuc8y9LrI6wrI20kezMLQBYVdIhikoxcP tXOj694EK1FxuaD1uTTRkwO7q0LrM5UfyxXPhGdDyq6Vr4AGuu3GAY7ZWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKz+D7VmaTpwxPt8j67XgRY25c/kMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz39IDp7Y SJlfmUZ5ZqaLEA0/GtHSJWpQcYPNlCMr+RPuk9ex1373H6QT/RsLC6FMGdtucTOM YCL7X6zPTy0bUkRcGro7zGm4JklYsiMIiw2/fXgkRztQLjaXxtOZWv8XG7WrRHe0 054t7Pc28hxr3D2aRWNCnrz85pI7EjjmJuxf7tW8wNwzt4nsE5hyHPTwHBEf6pKR Xq6lu5ZyJpIacR7kr/QdQgYSftuxfKem2pC9XcOzUAshgNza4TSKJUj5/hK6YwsG 8MJO5GaWb52d4Bn5EKQkZ7XEP1OdrPf+5bQhT60S1yzX3NY973Xm973BUJgCRdPU j1oS+A296GaXxQ== -----END CERTIFICATE-----Generated at Thu Sep 10 11:18:26 2026 by rpki-client