$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: CMokzNsgBcFJVkuVVbGIUbksr5BI/o3PTJ0gT8Lzy0Y= Subject key identifier: 1F:1E:4C:5A:6F:FA:E1:78:F1:53:71:B5:04:15:5D:D4:D8:18:0C:38 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019EC0A40F032334AE64BE9D78E7F372685B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1976 Signing time: Sat 13 Jun 2026 11:00:37 +0000 Manifest this update: Sat 13 Jun 2026 11:00:37 +0000 Manifest next update: Sun 14 Jun 2026 11:00:37 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: VapFh6kOKSeQbOWR9ZDtGwH1bzMJI/eAqfe0hmqu0jc=) 6: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 7: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 8: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 9: TdMbLOSHOW5Od2MPBqFS6Pw8TSY.roa (hash: wSA7n34Q3CSKY3OiMDAvE3mXUvYqFJEZqY3Hqxwarms=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) 17: xBSI8ulhxzPaD1wXzIlWHkfrMZE.roa (hash: xMJ4qKB6RaQDJudqrf471CfMp7Ryx25C6wOirJMZqoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:a4:0f:03:23:34:ae:64:be:9d:78:e7:f3:72:68:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jun 13 11:00:37 2026 GMT Not After : Jun 14 11:00:37 2026 GMT Subject: CN=1f1e4c5a6ffae178f15371b504155dd4d8180c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:35:61:6b:00:9c:86:c9:8b:d0:62:fa:a8:18: 40:b5:f7:98:16:6c:ce:74:32:bd:da:a7:de:d6:c1: d1:a5:87:f7:81:29:70:86:a8:69:9f:16:7f:b5:49: bc:4a:7f:68:6e:df:43:fd:cc:73:1b:d3:86:15:e0: 52:a3:3b:83:80:0b:32:9a:0e:b5:5f:ab:76:3b:8f: a0:25:ce:59:e1:c2:e5:b9:de:3a:da:3d:a6:2c:21: 77:56:b8:dd:5b:6f:f4:22:12:0e:4f:e9:0d:74:57: b8:2e:63:09:79:ba:49:97:a1:9d:e9:f3:c0:d5:0d: d9:97:93:90:d6:44:70:9b:e5:30:87:d9:88:58:6f: be:f1:30:df:fa:1b:44:4c:94:28:50:ce:c7:a1:ea: b5:08:07:7b:cb:6f:5f:b9:d9:81:51:7c:ac:3d:6f: cf:28:59:b1:a3:3c:de:ae:58:39:21:29:9d:f1:23: 8c:55:49:a7:96:b3:a8:eb:9a:05:28:c7:85:78:4f: b6:48:63:59:96:77:d0:5e:2a:af:70:40:3e:af:87: aa:f5:d7:89:7f:30:2a:a7:89:b1:53:66:16:23:70: f9:f3:36:a2:81:6c:51:1d:ab:9e:90:b7:19:f6:25: 8c:de:43:7b:d5:7d:75:af:62:3b:a1:69:b4:c9:83: 5b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1E:4C:5A:6F:FA:E1:78:F1:53:71:B5:04:15:5D:D4:D8:18:0C:38 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:9f:ec:c4:8f:8f:32:c7:0a:e3:18:68:02:39:b3:e8:44:2c: 1f:0d:e2:f2:08:43:89:e5:80:44:ff:2b:0d:28:cb:0a:58:e7: 88:62:ae:64:e7:59:e1:ad:fa:96:96:b3:9f:2d:64:3a:34:d8: 6a:c4:06:5a:82:6b:e2:9d:f2:b8:81:19:7e:73:bb:9b:55:10: dd:50:3d:15:e1:46:89:70:15:55:ab:d7:7f:95:93:33:82:e4: 15:a7:d6:0f:38:5d:a5:e0:dd:fc:f3:c3:14:95:3b:0b:54:23: e0:bc:7e:8a:37:93:6e:76:6a:65:cf:7f:8f:f5:32:5d:fd:a6: 02:49:53:73:55:84:49:1f:77:c0:50:ef:86:8e:52:92:7a:85: 17:16:70:27:be:80:a5:bf:74:f0:bf:b5:f5:d9:14:0a:92:87: 72:6d:81:61:01:ca:ad:83:22:52:5c:df:fb:b6:cd:70:93:35: 0e:8d:02:4a:57:96:35:6d:ed:08:d6:31:f6:f9:5d:9e:5d:c8: e6:e6:8c:b4:1a:d3:d8:a9:9d:b3:46:bb:e1:ae:0e:49:e9:f5: 09:88:91:f3:94:88:8c:3c:4c:79:90:ef:47:21:5a:35:b7:ac: 98:8b:d3:48:96:14:16:e3:d1:db:bb:63:d8:3b:7d:8d:35:eb: f6:a4:cf:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7ApA8DIzSuZL6deOfzcmhbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwNjEzMTEwMDM3WhcNMjYwNjE0MTEwMDM3WjAzMTEwLwYDVQQD EygxZjFlNGM1YTZmZmFlMTc4ZjE1MzcxYjUwNDE1NWRkNGQ4MTgwYzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zVhawCchsmL0GL6qBhAtfeYFmzO dDK92qfe1sHRpYf3gSlwhqhpnxZ/tUm8Sn9obt9D/cxzG9OGFeBSozuDgAsymg61 X6t2O4+gJc5Z4cLlud462j2mLCF3VrjdW2/0IhIOT+kNdFe4LmMJebpJl6Gd6fPA 1Q3Zl5OQ1kRwm+Uwh9mIWG++8TDf+htETJQoUM7Hoeq1CAd7y29fudmBUXysPW/P KFmxozzerlg5ISmd8SOMVUmnlrOo65oFKMeFeE+2SGNZlnfQXiqvcEA+r4eq9deJ fzAqp4mxU2YWI3D58zaigWxRHauekLcZ9iWM3kN71X11r2I7oWm0yYNbyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8eTFpv+uF48VNxtQQVXdTYGAw4MB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJ/sxI+P MscK4xhoAjmz6EQsHw3i8ghDieWARP8rDSjLCljniGKuZOdZ4a36lpazny1kOjTY asQGWoJr4p3yuIEZfnO7m1UQ3VA9FeFGiXAVVavXf5WTM4LkFafWDzhdpeDd/PPD FJU7C1Qj4Lx+ijeTbnZqZc9/j/UyXf2mAklTc1WESR93wFDvho5SknqFFxZwJ76A pb908L+19dkUCpKHcm2BYQHKrYMiUlzf+7bNcJM1Do0CSleWNW3tCNYx9vldnl3I 5uaMtBrT2Kmds0a74a4OSen1CYiR85SIjDxMeZDvRyFaNbesmIvTSJYUFuPR27tj 2Dt9jTXr9qTPuw== -----END CERTIFICATE-----Generated at Sat Jun 13 14:49:16 2026 by rpki-client