$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: OQcieBi5uHkgyXf2WVEL9B1gFD5f9LOOAC9JzHQOs8k= Subject key identifier: D3:41:02:17:DF:EC:18:60:89:E0:9E:B7:44:42:CA:88:18:48:DB:F7 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 01A0D15BA4592781B3D8DF029E0CE4943077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1A88 Signing time: Thu 24 Sep 2026 03:00:38 +0000 Manifest this update: Thu 24 Sep 2026 03:00:38 +0000 Manifest next update: Fri 25 Sep 2026 03:00:38 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: CyZB8kDZ8orCNuNqD0jP-3JDzQ0.roa (hash: AOydhySyRx86U77hRjFuCY7jHngtnWo+Y3ruaih4/CY=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: /o8UT4FMB7fW223Sg7A3mhzCab/RDIpEKnDk4SqXZuM=) 7: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 8: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 9: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) 17: xBSI8ulhxzPaD1wXzIlWHkfrMZE.roa (hash: xMJ4qKB6RaQDJudqrf471CfMp7Ryx25C6wOirJMZqoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:5b:a4:59:27:81:b3:d8:df:02:9e:0c:e4:94:30:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Sep 24 03:00:38 2026 GMT Not After : Sep 25 03:00:38 2026 GMT Subject: CN=d3410217dfec186089e09eb74442ca881848dbf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:16:35:72:4e:7c:25:89:fc:3b:ca:dd:22:01: 8a:83:28:ff:49:ae:b1:99:7f:be:2d:be:a5:f9:da: fe:1c:7b:9d:6e:ac:ed:98:ea:3e:7b:dd:a4:33:6e: bc:1f:e5:9d:f8:d7:d7:dd:e6:48:d7:46:3e:69:d1: 9f:66:12:c6:27:dc:c1:7b:53:dd:49:bc:6b:f2:47: 5f:cc:e9:b5:11:92:0e:90:fa:9a:ca:fa:71:f9:7e: 9e:58:18:fa:c9:ee:65:f9:46:47:34:cf:9c:5d:27: cc:bc:ae:2b:8e:33:6a:a8:e7:77:11:03:f1:67:06: d1:cb:6d:01:75:fd:92:3a:12:64:00:29:74:df:d0: c5:42:95:78:71:54:f4:45:d4:de:dc:3e:34:66:ae: aa:b4:58:fc:20:5a:47:6f:8e:e8:b5:2a:4d:8d:d9: eb:71:1d:05:f5:54:eb:37:a7:a8:0f:b7:6f:de:a0: f0:87:d5:ec:28:48:6a:c3:eb:bf:57:a6:07:e9:d3: 06:45:5a:c4:8b:b9:41:cb:11:89:bf:12:c5:59:b9: df:1c:0e:c7:f8:d7:b3:ca:4d:23:70:4c:7d:1e:a3: b3:d5:6a:5b:c7:b8:2e:95:f1:4c:8a:5e:0f:d9:49: d6:55:a1:3b:49:3d:4b:de:dd:41:25:98:d6:16:74: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:41:02:17:DF:EC:18:60:89:E0:9E:B7:44:42:CA:88:18:48:DB:F7 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6a:15:61:25:ad:fa:3e:45:67:b2:c0:bc:93:cc:fe:69:c6: 32:14:9f:18:c1:c2:d6:ca:a4:71:c6:93:b4:44:9c:58:5b:dd: 4f:26:db:68:66:d0:4b:7a:24:61:24:73:84:ec:e4:f3:20:74: 65:23:e7:23:6d:a0:00:dc:69:9f:cb:3b:ac:7e:96:31:6d:f9: 03:75:4e:4a:3a:df:eb:c4:42:d8:a8:61:7a:43:b1:22:54:d4: d1:a9:12:54:f8:20:98:1d:06:41:cd:4c:8d:62:93:18:60:29: 19:34:5f:65:e1:0f:e8:3e:5b:b0:78:ab:72:f0:de:d1:14:e3: 79:c6:d0:02:07:e8:cb:ad:c1:cc:7c:5d:b0:36:4f:45:ed:ec: 1c:b5:91:6d:fb:de:28:80:75:a2:30:53:54:a6:77:a5:40:b6: d8:0f:74:d7:3b:a7:c4:cc:77:95:22:61:91:04:33:a4:4c:3d: 45:ac:bc:d9:00:cf:b1:5f:b7:05:c1:59:1c:64:80:18:55:9b: 24:e2:22:8f:a5:d9:56:0b:ec:c9:af:19:82:fc:74:a1:50:17: 0c:fe:bb:f0:52:70:c2:c0:67:ca:2b:a7:6e:4d:76:0b:95:98: 85:31:79:ec:f5:20:38:81:00:17:50:3e:41:41:80:0e:26:1b: 6b:e0:6f:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRW6RZJ4Gz2N8CngzklDB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwOTI0MDMwMDM4WhcNMjYwOTI1MDMwMDM4WjAzMTEwLwYDVQQD EyhkMzQxMDIxN2RmZWMxODYwODllMDllYjc0NDQyY2E4ODE4NDhkYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBY1ck58JYn8O8rdIgGKgyj/Sa6x mX++Lb6l+dr+HHudbqztmOo+e92kM268H+Wd+NfX3eZI10Y+adGfZhLGJ9zBe1Pd Sbxr8kdfzOm1EZIOkPqayvpx+X6eWBj6ye5l+UZHNM+cXSfMvK4rjjNqqOd3EQPx ZwbRy20Bdf2SOhJkACl039DFQpV4cVT0RdTe3D40Zq6qtFj8IFpHb47otSpNjdnr cR0F9VTrN6eoD7dv3qDwh9XsKEhqw+u/V6YH6dMGRVrEi7lByxGJvxLFWbnfHA7H +Nezyk0jcEx9HqOz1Wpbx7gulfFMil4P2UnWVaE7ST1L3t1BJZjWFnQoRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNBAhff7BhgieCet0RCyogYSNv3MB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2oVYSWt +j5FZ7LAvJPM/mnGMhSfGMHC1sqkccaTtEScWFvdTybbaGbQS3okYSRzhOzk8yB0 ZSPnI22gANxpn8s7rH6WMW35A3VOSjrf68RC2KhhekOxIlTU0akSVPggmB0GQc1M jWKTGGApGTRfZeEP6D5bsHircvDe0RTjecbQAgfoy63BzHxdsDZPRe3sHLWRbfve KIB1ojBTVKZ3pUC22A901zunxMx3lSJhkQQzpEw9Ray82QDPsV+3BcFZHGSAGFWb JOIij6XZVgvsya8Zgvx0oVAXDP678FJwwsBnyiunbk12C5WYhTF57PUgOIEAF1A+ QUGADiYba+BvVg== -----END CERTIFICATE-----Generated at Thu Sep 24 07:10:25 2026 by rpki-client