$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json) Hash identifier: D38w4EaNWyx59rx9Q5el+wUJGqQZdkWi2unAmOXMQjU= Subject key identifier: B7:E9:DA:52:73:40:0A:21:3D:36:EE:02:7D:42:69:02:27:05:17:23 Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 01A1754B81C91CB04D29BF6C25A228A41DA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft Manifest number: 1AD2 Signing time: Sun 25 Oct 2026 23:00:45 +0000 Manifest this update: Sun 25 Oct 2026 23:00:45 +0000 Manifest next update: Mon 26 Oct 2026 23:00:45 +0000 Files and hashes: 1: 9XLB2pGNOPbljEVUBZRkKE3gDsg.roa (hash: yFaKRkjlVIE/J3Dt9Swl2M9fjwmRRjL86LSGNcqFa2o=) 2: FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa (hash: xP/yiKvXIB14qyF8rqguFru71C1q8PJ2Qa43mcie0iQ=) 3: MZB1UqbipBpVhmhIAAIPCSUm9tE.roa (hash: zYMw6mBm4z/9+C34n4tABKKlDK/AXIGy+SsUTUFBU8w=) 4: TaW1xof2_FS-y1oMd64DHywlLM8.roa (hash: wpTtq6XsXybW5bFqRgDMjejQMJ2CiWnuwczXgfVlZ+M=) 5: c9WQ2UD23ghc6w62neYjcrA0Hec.roa (hash: 6zkyskipE3HqNwSrbgIsZT9a9eFCr1VvbNhzrk2Ff0Y=) 6: fXpzmIEAnbtmNcx0rqptqG5QnQg.roa (hash: 5iU3booTwnLztG+lAWV3dZKWKwiQOKD5sGh5Wy5gwWk=) 7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: /3Srmw0I2fNDEBcRkeIZYp5HqLfH9QPPWMk75Z0uAZ0=) 8: hTBE-AfXHoIR0eXyurn7fldr3Uw.roa (hash: h5l8+NwGnElycHcZimGiomdSgVS5UzfYH7eaKNxeRxk=) 9: mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa (hash: HG8VsquQ+FnSEapJw68ywW3TpFwS/T5f8VjxgSgr5P4=) 10: o1g6d4IpK0z2pKch2obiVEvKpo0.roa (hash: ogKpeh7KtOQ7CbX8yF/mDVAEfUbLY6d/B58Q/R7K4YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 17:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:75:4b:81:c9:1c:b0:4d:29:bf:6c:25:a2:28:a4:1d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Oct 25 23:00:45 2026 GMT Not After : Oct 26 23:00:45 2026 GMT Subject: CN=b7e9da5273400a213d36ee027d42690227051723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:31:9e:05:54:35:28:4e:b0:ac:8f:3e:dc:57: c8:70:d5:98:da:e9:1a:e8:1e:52:a2:67:44:8a:b4: 64:c9:aa:30:94:0a:a9:5b:90:79:85:32:cf:b2:86: 93:dc:17:8e:d4:a5:c1:c9:ff:26:b8:67:5f:e2:26: 8c:aa:00:de:4c:d9:c9:a9:2a:86:f7:e5:c3:4d:c3: 5d:0d:15:ac:2c:20:2a:99:27:7a:00:7b:6c:6c:1c: d6:93:d3:f7:65:0a:d6:96:ab:23:38:da:e5:d7:7a: 84:27:6f:94:b9:d0:ef:86:4d:45:0c:11:f3:5e:04: 83:16:bd:be:15:17:c9:c6:9d:28:22:18:8c:fa:86: 56:19:78:34:af:32:c7:3f:12:e5:b8:9f:f0:94:fd: 47:98:ed:d8:de:02:52:b6:6b:68:2f:f2:f5:59:46: f7:28:5d:e5:c7:4f:df:87:7d:09:2c:82:40:fc:74: e5:52:76:63:00:4b:a4:c2:7f:2f:c4:a0:51:6c:cb: ca:09:97:f8:bb:d4:6b:52:c5:ab:75:62:9f:08:e6: 48:9e:10:9a:da:50:91:1d:f9:31:8d:a8:37:0b:81: 0d:34:0b:12:93:d2:a9:f4:55:3a:62:63:79:cd:f5: 0f:c8:45:e6:5f:0c:1b:70:d1:98:ac:05:38:8b:82: c5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E9:DA:52:73:40:0A:21:3D:36:EE:02:7D:42:69:02:27:05:17:23 X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9d:0c:51:ef:71:77:11:c0:51:2e:8f:33:4a:00:43:93:d5: 8c:ac:ec:40:1f:5f:d0:5f:f6:53:c2:62:23:23:1d:79:b5:2f: 8b:e6:f9:0f:ce:ab:f7:27:00:4e:4b:e2:64:ce:5b:e3:46:60: 91:0b:18:ef:bc:31:83:6a:72:e7:98:eb:b9:e7:83:91:18:3c: 46:f3:92:b1:6a:8b:c7:06:41:2a:17:c7:5e:a8:6b:80:8c:41: 65:db:a6:44:3a:ee:0f:c6:63:71:b5:ce:9f:e1:3d:16:f7:cb: c0:7d:58:20:fd:a7:fb:a3:83:90:b9:29:ea:cf:ed:e5:00:03: e9:2a:63:0b:dc:5f:53:82:0a:60:98:4a:b2:8d:36:fe:38:95: 5a:aa:cf:09:62:db:69:ef:a6:54:7c:14:f7:46:1e:ed:45:26: 3e:93:5a:c4:6e:29:4d:7a:c3:e4:f3:cb:38:23:85:61:ba:ac: 77:f3:59:b3:eb:5d:bf:7c:c0:d7:f9:06:ae:ea:23:c9:ca:ef: 1d:79:7d:39:bc:dd:d7:66:d2:6f:95:12:6f:a5:90:ee:b0:aa: f4:ed:bc:be:66:98:41:22:b6:b8:3b:fd:64:4a:94:66:eb:ce: 62:d3:7c:88:7f:08:4d:a1:5b:81:e6:26:6e:8b:a8:3b:a3:45: 0b:eb:4e:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF1S4HJHLBNKb9sJaIopB2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYxMDI1MjMwMDQ1WhcNMjYxMDI2MjMwMDQ1WjAzMTEwLwYDVQQD EyhiN2U5ZGE1MjczNDAwYTIxM2QzNmVlMDI3ZDQyNjkwMjI3MDUxNzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTGeBVQ1KE6wrI8+3FfIcNWY2uka 6B5SomdEirRkyaowlAqpW5B5hTLPsoaT3BeO1KXByf8muGdf4iaMqgDeTNnJqSqG 9+XDTcNdDRWsLCAqmSd6AHtsbBzWk9P3ZQrWlqsjONrl13qEJ2+UudDvhk1FDBHz XgSDFr2+FRfJxp0oIhiM+oZWGXg0rzLHPxLluJ/wlP1HmO3Y3gJStmtoL/L1WUb3 KF3lx0/fh30JLIJA/HTlUnZjAEukwn8vxKBRbMvKCZf4u9RrUsWrdWKfCOZInhCa 2lCRHfkxjag3C4ENNAsSk9Kp9FU6YmN5zfUPyEXmXwwbcNGYrAU4i4LFMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfp2lJzQAohPTbuAn1CaQInBRcjMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWp0MUe9x dxHAUS6PM0oAQ5PVjKzsQB9f0F/2U8JiIyMdebUvi+b5D86r9ycATkviZM5b40Zg kQsY77wxg2py55jrueeDkRg8RvOSsWqLxwZBKhfHXqhrgIxBZdumRDruD8ZjcbXO n+E9FvfLwH1YIP2n+6ODkLkp6s/t5QAD6SpjC9xfU4IKYJhKso02/jiVWqrPCWLb ae+mVHwU90Ye7UUmPpNaxG4pTXrD5PPLOCOFYbqsd/NZs+tdv3zA1/kGruojycrv HXl9Obzd12bSb5USb6WQ7rCq9O28vmaYQSK2uDv9ZEqUZuvOYtN8iH8ITaFbgeYm bouoO6NFC+tOVw== -----END CERTIFICATE-----Generated at Mon Oct 26 03:48:17 2026 by rpki-client