$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json) Hash identifier: JAOJtRn2o1c6hGzwff9JTE30joZVk7ZpevYgSgYOKhA= Subject key identifier: B7:A6:C5:87:43:F9:3B:FA:50:9B:50:32:1A:32:47:86:8C:57:C3:E9 Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 019DCE2B7779233D71AE0C78437AC1C75F35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft Manifest number: 18EC Signing time: Mon 27 Apr 2026 09:00:48 +0000 Manifest this update: Mon 27 Apr 2026 09:00:48 +0000 Manifest next update: Tue 28 Apr 2026 09:00:48 +0000 Files and hashes: 1: 0kMqt-CPfgtjYdaZtK0l7K4Ure0.roa (hash: KGaaMrvGH34iblBGGLnwSzs+JaREEUUOumEoCywsnd8=) 2: 9XLB2pGNOPbljEVUBZRkKE3gDsg.roa (hash: yFaKRkjlVIE/J3Dt9Swl2M9fjwmRRjL86LSGNcqFa2o=) 3: FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa (hash: xP/yiKvXIB14qyF8rqguFru71C1q8PJ2Qa43mcie0iQ=) 4: JNZkNs3RJOo2AnXmnTbKg_X2Nm8.roa (hash: +pMZwPRauFNHIAoy64TMZM699q7Sq6HNlbnD+XOQxn4=) 5: MZB1UqbipBpVhmhIAAIPCSUm9tE.roa (hash: zYMw6mBm4z/9+C34n4tABKKlDK/AXIGy+SsUTUFBU8w=) 6: TaW1xof2_FS-y1oMd64DHywlLM8.roa (hash: wpTtq6XsXybW5bFqRgDMjejQMJ2CiWnuwczXgfVlZ+M=) 7: fXpzmIEAnbtmNcx0rqptqG5QnQg.roa (hash: 5iU3booTwnLztG+lAWV3dZKWKwiQOKD5sGh5Wy5gwWk=) 8: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: 5olzTXmzODtN/ufZiAS4mLEKAFCJC19JxCrha92j7NU=) 9: hTBE-AfXHoIR0eXyurn7fldr3Uw.roa (hash: h5l8+NwGnElycHcZimGiomdSgVS5UzfYH7eaKNxeRxk=) 10: mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa (hash: HG8VsquQ+FnSEapJw68ywW3TpFwS/T5f8VjxgSgr5P4=) 11: o1g6d4IpK0z2pKch2obiVEvKpo0.roa (hash: ogKpeh7KtOQ7CbX8yF/mDVAEfUbLY6d/B58Q/R7K4YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:2b:77:79:23:3d:71:ae:0c:78:43:7a:c1:c7:5f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Apr 27 09:00:48 2026 GMT Not After : Apr 28 09:00:48 2026 GMT Subject: CN=b7a6c58743f93bfa509b50321a3247868c57c3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:cf:d9:27:87:d9:27:04:0e:02:f9:02:ca: e4:fd:ae:f9:8b:be:da:fd:bf:a9:d9:09:75:2c:aa: d9:53:59:47:3d:46:c4:91:ba:86:48:de:4f:68:54: 36:97:9f:19:6d:bc:ee:8b:a5:a3:77:21:a0:c9:25: 7f:60:3c:ca:a7:39:54:e5:8b:a9:56:60:c7:a2:31: 1e:73:19:c3:30:16:6c:8d:8d:34:8d:9f:86:fe:7e: 0c:ee:55:24:9d:81:7c:9b:27:19:65:3f:e2:8a:53: 90:43:b9:4c:d1:4a:97:99:79:52:bc:08:d6:0d:3b: 8d:bc:44:fb:a1:5c:e1:f3:13:fc:82:ad:9c:b1:ec: a7:1a:01:a6:6b:20:af:c3:20:10:69:41:40:82:15: 0c:08:cc:1e:93:51:cf:67:d6:de:8f:ac:97:fa:ab: 2f:3a:d0:a9:07:56:6e:27:e2:1c:b3:04:c0:4d:e6: 77:65:f1:aa:fc:b4:69:65:75:6b:b7:14:27:07:fd: fc:bd:c1:0f:62:75:0c:85:b0:bf:cb:be:1b:47:68: b8:52:06:ab:13:b3:b1:0d:92:ad:2d:9c:1f:01:48: 55:02:61:36:c5:07:36:c6:f9:c3:f8:ea:20:f6:4c: 60:c0:eb:af:d3:ed:f1:70:82:32:b5:ca:cd:30:3b: 63:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A6:C5:87:43:F9:3B:FA:50:9B:50:32:1A:32:47:86:8C:57:C3:E9 X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:85:30:52:a1:e4:8c:c0:3c:4d:35:a4:18:5d:d3:ef:2d:65: 99:d0:5e:c6:b1:eb:c7:4d:68:ae:e6:77:88:dd:52:8a:99:9b: aa:4e:ca:f9:bd:69:5c:5a:5a:fa:70:90:e4:e8:68:07:e0:de: 7c:30:7e:f5:01:c9:de:13:3d:9f:26:d1:2b:84:ef:09:10:2a: e1:a3:a6:4d:f4:7d:a1:de:8b:da:b6:e2:80:3a:cc:21:a2:30: 2c:02:95:7b:ba:2e:f6:68:6a:53:36:34:06:43:9a:1e:6a:b9: d2:14:95:c1:10:2b:14:c4:06:b9:74:65:26:79:d4:e2:99:9e: 9d:de:e8:4b:db:b7:d1:72:0b:66:22:c1:e9:07:cd:9f:b1:2d: 24:36:82:de:1e:af:56:29:d7:01:95:ae:49:a7:14:a1:b6:54: 13:6e:d5:dd:63:5a:b6:11:1f:1f:d7:b6:a1:86:bc:be:e7:30: 78:ad:f9:f4:4e:5c:07:1f:79:b5:b5:8e:1a:e8:e2:c9:e8:d2: 14:94:b7:18:dc:bf:0e:85:3b:43:f9:c6:5c:28:67:02:89:52: 86:d6:07:de:68:ee:3f:af:1d:45:9c:e8:95:0d:c1:32:3d:04: dc:93:20:5e:a2:52:97:d5:52:ee:4b:55:6a:ab:4a:8e:a7:c1: 3b:8f:71:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OK3d5Iz1xrgx4Q3rBx181MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwNDI3MDkwMDQ4WhcNMjYwNDI4MDkwMDQ4WjAzMTEwLwYDVQQD EyhiN2E2YzU4NzQzZjkzYmZhNTA5YjUwMzIxYTMyNDc4NjhjNTdjM2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY3P2SeH2ScEDgL5Asrk/a75i77a /b+p2Ql1LKrZU1lHPUbEkbqGSN5PaFQ2l58Zbbzui6WjdyGgySV/YDzKpzlU5Yup VmDHojEecxnDMBZsjY00jZ+G/n4M7lUknYF8mycZZT/iilOQQ7lM0UqXmXlSvAjW DTuNvET7oVzh8xP8gq2cseynGgGmayCvwyAQaUFAghUMCMwek1HPZ9bej6yX+qsv OtCpB1ZuJ+IcswTATeZ3ZfGq/LRpZXVrtxQnB/38vcEPYnUMhbC/y74bR2i4Ugar E7OxDZKtLZwfAUhVAmE2xQc2xvnD+Oog9kxgwOuv0+3xcIIytcrNMDtjewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLemxYdD+Tv6UJtQMhoyR4aMV8PpMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvIUwUqHk jMA8TTWkGF3T7y1lmdBexrHrx01oruZ3iN1Sipmbqk7K+b1pXFpa+nCQ5OhoB+De fDB+9QHJ3hM9nybRK4TvCRAq4aOmTfR9od6L2rbigDrMIaIwLAKVe7ou9mhqUzY0 BkOaHmq50hSVwRArFMQGuXRlJnnU4pmend7oS9u30XILZiLB6QfNn7EtJDaC3h6v VinXAZWuSacUobZUE27V3WNathEfH9e2oYa8vucweK359E5cBx95tbWOGujiyejS FJS3GNy/DoU7Q/nGXChnAolShtYH3mjuP68dRZzolQ3BMj0E3JMgXqJSl9VS7ktV aqtKjqfBO49xkw== -----END CERTIFICATE-----Generated at Mon Apr 27 15:00:30 2026 by rpki-client