$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: znJCHave2x37HMihWOpefvWTAgXAJigLPgCsYzXHYJE= Subject key identifier: F9:0E:BE:08:B0:9F:AE:4B:94:FF:FF:18:B5:4F:6F:B7:72:F3:88:5A Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019D99992B13A9B396CF19A9022D8008078A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 18DD Signing time: Fri 17 Apr 2026 04:00:45 +0000 Manifest this update: Fri 17 Apr 2026 04:00:45 +0000 Manifest next update: Sat 18 Apr 2026 04:00:45 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: FVjEvjHEsDwDwD35pGuCtcz0UvCy31dlhrXsRfE4zZI=) 6: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 7: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 8: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 9: TdMbLOSHOW5Od2MPBqFS6Pw8TSY.roa (hash: wSA7n34Q3CSKY3OiMDAvE3mXUvYqFJEZqY3Hqxwarms=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:99:2b:13:a9:b3:96:cf:19:a9:02:2d:80:08:07:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Apr 17 04:00:45 2026 GMT Not After : Apr 18 04:00:45 2026 GMT Subject: CN=f90ebe08b09fae4b94ffff18b54f6fb772f3885a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:41:38:ce:16:b4:7a:6d:26:3b:c0:dc:39:f9: 25:55:69:ab:05:07:2a:81:25:fc:57:ed:2b:b2:2d: 1e:6b:24:63:00:cd:0e:98:dd:e1:e8:4b:33:c4:c2: ad:07:b0:06:56:ef:41:95:51:c8:c8:6b:c5:d3:a0: 37:78:a8:5e:4b:fe:95:53:db:b6:e5:d3:b6:95:1b: 01:8a:b9:3b:9a:79:e5:c6:91:7a:99:56:6b:bf:08: 63:be:7e:68:eb:e8:ea:67:90:16:33:b5:af:70:c5: 7e:71:fe:5c:6d:d8:0f:bb:26:78:a1:88:6f:4b:96: 18:da:e3:68:bf:b3:9f:10:26:e8:1c:7f:68:af:41: f7:22:1e:7a:b1:b9:93:02:df:44:77:07:e6:56:6b: 0a:fc:cb:82:94:ad:aa:58:96:b6:36:79:ca:6c:18: 36:b5:a6:a9:68:1e:7e:c4:7f:40:bb:8f:e1:2a:51: 91:fb:6e:78:74:fc:c7:d4:85:1c:21:ec:e8:d4:d9: 8d:37:2c:4b:29:9e:5d:f8:0f:8c:46:67:f5:12:14: 08:0c:98:93:4b:ef:55:31:21:95:8b:80:32:47:5f: 5d:54:c4:f4:35:ed:59:fe:44:7a:9f:d9:bf:82:1c: 5d:5e:e5:a9:34:c0:bf:ff:1f:9b:3e:53:6b:4a:57: 6d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0E:BE:08:B0:9F:AE:4B:94:FF:FF:18:B5:4F:6F:B7:72:F3:88:5A X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:7c:11:8f:11:b0:51:09:b9:ba:2f:9f:4c:cf:02:d1:13:20: 14:4d:59:5a:3f:78:e7:4b:1a:3e:6c:1e:e8:26:58:b9:1c:b5: 64:82:69:41:fa:6d:1c:5f:23:6b:47:ca:cc:c0:50:66:9e:b5: 25:88:d6:41:ed:59:b6:2c:25:1c:8b:36:42:b9:6a:10:a4:7d: 36:6a:cc:11:6a:b5:1d:f5:df:33:04:f9:0f:d6:33:9b:33:41: d8:21:38:d8:83:21:01:e9:39:c0:11:bf:9e:34:cb:b4:23:7f: 10:f4:0a:1c:24:b5:fa:f6:65:79:99:e9:58:ba:87:e8:0b:4a: f9:7b:4e:e6:73:32:a6:5f:f2:6f:33:db:7a:c7:b1:62:9e:39: aa:f1:8d:62:e7:ea:2b:f2:f5:11:14:f3:dc:9c:e8:fd:5f:0c: ee:0d:5c:13:f4:9b:c3:27:1d:43:86:ac:28:37:f1:2a:32:f5: c4:92:71:96:5a:c1:67:9c:d4:1f:70:d6:e7:0e:24:cf:82:55: 93:cd:cb:a0:0f:69:aa:6d:2a:aa:ad:09:a6:65:47:ee:c3:31: 1e:78:42:2e:2e:64:b9:4a:4a:2d:02:b7:e8:2d:05:55:9c:84: 3d:7f:37:c1:60:87:2c:31:52:01:26:ee:74:aa:28:0f:3f:98: 8a:c5:44:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmSsTqbOWzxmpAi2ACAeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwNDE3MDQwMDQ1WhcNMjYwNDE4MDQwMDQ1WjAzMTEwLwYDVQQD EyhmOTBlYmUwOGIwOWZhZTRiOTRmZmZmMThiNTRmNmZiNzcyZjM4ODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUE4zha0em0mO8DcOfklVWmrBQcq gSX8V+0rsi0eayRjAM0OmN3h6EszxMKtB7AGVu9BlVHIyGvF06A3eKheS/6VU9u2 5dO2lRsBirk7mnnlxpF6mVZrvwhjvn5o6+jqZ5AWM7WvcMV+cf5cbdgPuyZ4oYhv S5YY2uNov7OfECboHH9or0H3Ih56sbmTAt9EdwfmVmsK/MuClK2qWJa2NnnKbBg2 taapaB5+xH9Au4/hKlGR+254dPzH1IUcIezo1NmNNyxLKZ5d+A+MRmf1EhQIDJiT S+9VMSGVi4AyR19dVMT0Ne1Z/kR6n9m/ghxdXuWpNMC//x+bPlNrSldtaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkOvgiwn65LlP//GLVPb7dy84haMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnwRjxGw UQm5ui+fTM8C0RMgFE1ZWj9450saPmwe6CZYuRy1ZIJpQfptHF8ja0fKzMBQZp61 JYjWQe1ZtiwlHIs2QrlqEKR9NmrMEWq1HfXfMwT5D9YzmzNB2CE42IMhAek5wBG/ njTLtCN/EPQKHCS1+vZleZnpWLqH6AtK+XtO5nMypl/ybzPbesexYp45qvGNYufq K/L1ERTz3Jzo/V8M7g1cE/SbwycdQ4asKDfxKjL1xJJxllrBZ5zUH3DW5w4kz4JV k83LoA9pqm0qqq0JpmVH7sMxHnhCLi5kuUpKLQK36C0FVZyEPX83wWCHLDFSASbu dKooDz+YisVEVQ== -----END CERTIFICATE-----Generated at Fri Apr 17 08:08:38 2026 by rpki-client