$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: MFXEgDo8EGwwknInzXvxGtqdf37Ro5Kd0WmQU0gMYR4= Subject key identifier: DF:3C:97:50:56:9D:4B:FE:D3:F1:54:21:5C:D2:4E:E5:60:A5:D3:3C Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 01A0C3D6E4F410CF981C1D2A134E72D1E2C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1A81 Signing time: Mon 21 Sep 2026 12:00:35 +0000 Manifest this update: Mon 21 Sep 2026 12:00:35 +0000 Manifest next update: Tue 22 Sep 2026 12:00:35 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: CyZB8kDZ8orCNuNqD0jP-3JDzQ0.roa (hash: AOydhySyRx86U77hRjFuCY7jHngtnWo+Y3ruaih4/CY=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: XFVZVRDLDz9oz3lBAFWUamY2plTmlj+ki8hXyLShCNM=) 7: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 8: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 9: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) 17: xBSI8ulhxzPaD1wXzIlWHkfrMZE.roa (hash: xMJ4qKB6RaQDJudqrf471CfMp7Ryx25C6wOirJMZqoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:d6:e4:f4:10:cf:98:1c:1d:2a:13:4e:72:d1:e2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Sep 21 12:00:35 2026 GMT Not After : Sep 22 12:00:35 2026 GMT Subject: CN=df3c9750569d4bfed3f154215cd24ee560a5d33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:34:6c:2a:9b:cb:59:d9:7f:0a:2d:84:4b:db: fd:b6:8e:ca:51:13:c1:09:ce:1c:e4:0a:a6:28:d4: a8:5e:cf:25:c9:cc:aa:a1:b5:83:e7:cc:56:9a:14: f2:87:85:05:92:06:e6:3a:55:39:b3:4d:77:9a:56: 65:be:6e:d1:78:a2:6b:07:78:64:93:39:5f:34:1d: f7:56:ba:6a:37:5a:54:19:4a:de:00:a7:f5:ec:68: e9:7e:2c:ac:ca:89:96:ee:5d:9b:1e:ec:ea:96:32: 3d:63:fd:ea:bb:e0:ba:f2:96:ef:a6:bd:c1:15:6f: 17:61:f4:a3:63:06:83:5b:b6:25:70:07:12:71:bb: d8:e7:38:3c:a2:10:c1:79:c7:81:0b:5d:a9:e4:4e: 08:0a:f2:3a:85:1f:13:70:b8:20:27:6f:c7:8d:94: c5:31:43:fc:0c:4a:ee:c6:00:b5:fe:bb:66:dd:e9: 2e:fc:7d:cd:86:3a:89:02:dc:d9:17:5f:f1:73:53: 99:56:6b:f6:4a:2f:59:a9:37:88:39:73:6c:ea:cf: 51:46:46:2a:d8:81:87:3d:38:c7:a8:e7:75:a9:21: 4c:bd:89:e8:5e:2e:f5:9b:7c:30:ab:c1:d0:24:c0: ca:95:db:1e:63:1a:8c:57:44:2d:58:3a:17:00:e0: 8e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3C:97:50:56:9D:4B:FE:D3:F1:54:21:5C:D2:4E:E5:60:A5:D3:3C X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a4:29:d4:84:8c:35:49:2e:ec:f0:cd:67:cd:97:c6:71:c8: 19:ce:87:16:dc:81:bb:22:f1:04:9c:7c:63:d7:d3:a3:bd:ab: 94:53:e4:4d:aa:bd:63:65:b2:c8:d0:a8:d7:3c:c5:55:08:85: a0:25:1b:18:b2:eb:ab:a2:90:11:5a:32:dc:80:83:1f:be:4f: 4e:3f:ef:8b:86:e3:17:a5:6a:99:50:a3:82:d5:d7:ac:75:8f: d3:2f:6a:a8:6b:ca:65:dc:55:06:92:a1:63:9d:6c:5f:ac:7e: 75:b3:70:d9:8b:2a:5f:bb:aa:2b:f0:87:05:02:a9:da:30:c6: b6:96:74:6d:f2:68:92:84:55:c3:33:a7:ff:b5:91:9b:03:22: 63:71:72:8f:66:be:76:69:0e:76:38:7f:d2:06:59:f6:40:c9: 25:97:72:6b:16:02:e2:f1:74:1d:6e:21:55:68:a9:77:77:de: 2e:22:ca:ad:ad:5b:c0:2e:7f:f1:e0:47:2b:7a:b9:b9:1a:df: 88:20:87:55:cc:d5:b1:e5:30:8a:59:ee:05:90:10:b7:8c:9c: dd:7b:e0:07:24:28:4a:20:36:dd:11:13:81:b9:f8:ac:c5:48: 0a:63:31:66:e4:97:c0:3d:1f:c2:99:a7:45:e6:84:1b:b6:83: e7:f0:3d:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDD1uT0EM+YHB0qE05y0eLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwOTIxMTIwMDM1WhcNMjYwOTIyMTIwMDM1WjAzMTEwLwYDVQQD EyhkZjNjOTc1MDU2OWQ0YmZlZDNmMTU0MjE1Y2QyNGVlNTYwYTVkMzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTRsKpvLWdl/Ci2ES9v9to7KURPB Cc4c5AqmKNSoXs8lycyqobWD58xWmhTyh4UFkgbmOlU5s013mlZlvm7ReKJrB3hk kzlfNB33VrpqN1pUGUreAKf17GjpfiysyomW7l2bHuzqljI9Y/3qu+C68pbvpr3B FW8XYfSjYwaDW7YlcAcScbvY5zg8ohDBeceBC12p5E4ICvI6hR8TcLggJ2/HjZTF MUP8DEruxgC1/rtm3eku/H3NhjqJAtzZF1/xc1OZVmv2Si9ZqTeIOXNs6s9RRkYq 2IGHPTjHqOd1qSFMvYnoXi71m3wwq8HQJMDKldseYxqMV0QtWDoXAOCOAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN88l1BWnUv+0/FUIVzSTuVgpdM8MB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6Qp1ISM NUku7PDNZ82XxnHIGc6HFtyBuyLxBJx8Y9fTo72rlFPkTaq9Y2WyyNCo1zzFVQiF oCUbGLLrq6KQEVoy3ICDH75PTj/vi4bjF6VqmVCjgtXXrHWP0y9qqGvKZdxVBpKh Y51sX6x+dbNw2YsqX7uqK/CHBQKp2jDGtpZ0bfJokoRVwzOn/7WRmwMiY3Fyj2a+ dmkOdjh/0gZZ9kDJJZdyaxYC4vF0HW4hVWipd3feLiLKra1bwC5/8eBHK3q5uRrf iCCHVczVseUwilnuBZAQt4yc3XvgByQoSiA23RETgbn4rMVICmMxZuSXwD0fwpmn ReaEG7aD5/A9yA== -----END CERTIFICATE-----Generated at Mon Sep 21 22:23:22 2026 by rpki-client