$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: VtJv8EGQs46x5fPm+kX74FkRjrYBQ9HdMKffVeQ4EH4= Subject key identifier: 64:95:B5:AD:47:14:1A:4F:55:76:83:09:8E:2A:4B:14:09:8C:20:24 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019D99995D5FFEF2F494DB5047204A786F9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 138F Signing time: Fri 17 Apr 2026 04:00:58 +0000 Manifest this update: Fri 17 Apr 2026 04:00:58 +0000 Manifest next update: Sat 18 Apr 2026 04:00:58 +0000 Files and hashes: 1: 2YKU1ZIr104Nr6byLvuW2x4k40c.roa (hash: l9Z0hvVVupcLg12X1S4oqYfEgu/uSu//ojVLo4Xl8BM=) 2: 3KesuWRJfnUsYbbl-ge3IpkL8Qs.roa (hash: Zv5Dd9dzLjrbiTpK79whstk1Qsbu6/8Gy06b3Qo3wrk=) 3: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: 1EdiibkZj8mBfsItBlBJZAtOBWZyKfVfG1IZ0fj5Pso=) 4: JJNZOR6X4rY_GOThrdjQRSXeXBg.roa (hash: /dhiOwJGHBoTv3UZTiG0d0sePUV70qGDTkgPdoGx4eI=) 5: Lw3ZnV1VpPuaAVB3OVp8SnNyb-4.roa (hash: nBTM7MD83GgGqveTlO6ZbvL/71fYF0IUBTMvcU7YdJ8=) 6: R6Ix8lNiS_uYFTygWXMHCyCDc5o.roa (hash: Tz7QLxwy5GRJiJxjhaOPZOg+bzVuulgIR4QG/ALYYl0=) 7: R6KX3i1jslogvVjCDoWFT1Rmjjk.roa (hash: 2Q0Js/nufktkQ84upEIwC+0JGgqAMTLNlh1Y/K35COU=) 8: WKFrMc20v_3_nvwsEfVZ3pt8UJA.roa (hash: YVkbD8xPvWUS+BrYDoNJSYcp18Mk8k9LeJimBd71qQY=) 9: n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa (hash: VOHhyMAChKmkHQdwMvB1QhPPBG/k5oVzSZrLsHZLtHY=) 10: qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa (hash: CHN/ugJO85MgbT7e9ultnWAy3Ba/jHBvIHUKvsxGSz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:99:5d:5f:fe:f2:f4:94:db:50:47:20:4a:78:6f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Apr 17 04:00:58 2026 GMT Not After : Apr 18 04:00:58 2026 GMT Subject: CN=6495b5ad47141a4f557683098e2a4b14098c2024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:7b:7d:ff:9e:75:26:d6:a1:27:ef:a4:04: d3:75:6c:a4:83:ed:9c:f1:9e:16:98:14:9b:53:08: 9f:04:91:b9:2a:6f:39:0d:13:8c:4d:3f:31:f7:53: 67:25:1e:e1:e9:b9:2d:48:7e:6d:ce:df:ce:cb:0a: 93:cb:a7:4d:4f:87:aa:a4:55:2e:5d:72:6c:a0:8f: 47:b5:ca:03:0a:b7:8b:f0:bd:66:98:ad:f2:3a:b0: 4b:10:3a:bf:53:ad:c5:a1:3b:f5:b5:20:a3:9b:cd: 1d:34:c9:92:04:e8:e3:51:6c:56:c2:6c:c0:ac:50: b2:a5:42:96:86:33:5a:b8:2c:df:0e:6b:68:ca:8f: 8f:59:02:fd:8e:7f:63:3a:c2:c9:ed:03:a9:87:b7: 85:68:f6:d6:07:e3:34:35:70:c2:4c:ae:62:47:dc: 04:cf:f8:09:4d:78:6a:9e:de:b6:47:8b:dc:82:87: aa:2d:98:9d:4e:41:6e:ee:2b:04:b2:d7:fb:87:1f: f2:13:7f:37:96:72:3d:39:d2:5f:88:7f:68:08:d1: e6:2a:6f:0c:d4:ba:54:77:5e:d9:f9:50:ae:38:39: 3d:7a:ea:6d:61:e9:1c:a5:26:c3:24:c1:3c:de:b5: d9:a7:77:b0:df:91:5d:18:52:2e:ba:da:ff:f1:4d: 28:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:95:B5:AD:47:14:1A:4F:55:76:83:09:8E:2A:4B:14:09:8C:20:24 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:15:51:3c:3b:26:60:21:ea:28:7d:42:6a:76:c5:5e:9c:8d: b7:36:26:a5:04:cb:7d:43:50:02:d8:5e:9f:ac:e9:59:45:90: de:a0:90:43:9f:2f:59:72:5e:83:85:a7:3d:56:13:3a:b7:00: c7:3a:69:db:39:2f:df:7e:a7:a4:b0:ea:78:a0:3d:06:89:b9: c2:ec:bd:69:2e:57:fb:0a:85:e1:0b:cd:03:de:14:f5:ec:54: 6c:86:fb:18:ca:76:bb:dc:50:21:24:79:fa:c9:65:4c:ba:74: aa:48:c6:0f:48:0a:46:a4:1c:f9:0a:76:33:e3:62:04:29:a3: a9:ce:de:ef:d0:a6:31:17:9f:82:d9:16:cb:9f:24:df:ca:40: 49:bf:8c:18:26:33:63:77:22:50:b8:f6:e1:be:1d:4f:8d:9c: 7d:ae:d1:56:53:8c:85:ef:da:d7:cd:39:30:55:b0:a3:88:98: 01:8f:6d:e1:7b:31:df:e6:00:55:65:cf:9f:49:37:70:fa:60: 86:4a:c9:7a:9a:87:60:eb:69:91:21:5d:ba:86:bc:a4:23:58: 8b:6b:a2:a4:fb:79:d6:dd:72:9d:f1:41:79:d4:38:52:39:ac: 17:d8:7a:c6:b6:7f:ea:53:0d:e3:cc:02:a6:6c:c1:8e:e3:68: 24:94:db:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmV1f/vL0lNtQRyBKeG+fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjYwNDE3MDQwMDU4WhcNMjYwNDE4MDQwMDU4WjAzMTEwLwYDVQQD Eyg2NDk1YjVhZDQ3MTQxYTRmNTU3NjgzMDk4ZTJhNGIxNDA5OGMyMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXF7ff+edSbWoSfvpATTdWykg+2c 8Z4WmBSbUwifBJG5Km85DROMTT8x91NnJR7h6bktSH5tzt/OywqTy6dNT4eqpFUu XXJsoI9HtcoDCreL8L1mmK3yOrBLEDq/U63FoTv1tSCjm80dNMmSBOjjUWxWwmzA rFCypUKWhjNauCzfDmtoyo+PWQL9jn9jOsLJ7QOph7eFaPbWB+M0NXDCTK5iR9wE z/gJTXhqnt62R4vcgoeqLZidTkFu7isEstf7hx/yE383lnI9OdJfiH9oCNHmKm8M 1LpUd17Z+VCuODk9euptYekcpSbDJME83rXZp3ew35FdGFIuutr/8U0oCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSVta1HFBpPVXaDCY4qSxQJjCAkMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRVRPDsm YCHqKH1CanbFXpyNtzYmpQTLfUNQAthen6zpWUWQ3qCQQ58vWXJeg4WnPVYTOrcA xzpp2zkv336npLDqeKA9Bom5wuy9aS5X+wqF4QvNA94U9exUbIb7GMp2u9xQISR5 +sllTLp0qkjGD0gKRqQc+Qp2M+NiBCmjqc7e79CmMRefgtkWy58k38pASb+MGCYz Y3ciULj24b4dT42cfa7RVlOMhe/a1805MFWwo4iYAY9t4Xsx3+YAVWXPn0k3cPpg hkrJepqHYOtpkSFduoa8pCNYi2uipPt51t1ynfFBedQ4UjmsF9h6xrZ/6lMN48wC pmzBjuNoJJTb7g== -----END CERTIFICATE-----Generated at Fri Apr 17 09:55:36 2026 by rpki-client