$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: jbKfRrtlf5zjiWeXqa0xXVNXR1DwhkxPAEH8pCQJ3UE= Subject key identifier: BA:7E:06:08:AA:6B:43:FA:6A:95:FB:D8:B8:48:B4:7B:50:E2:96:C2 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 01A0C7B3974F1A94527FE237A2372B645731 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 1A85 Signing time: Tue 22 Sep 2026 06:00:30 +0000 Manifest this update: Tue 22 Sep 2026 06:00:30 +0000 Manifest next update: Wed 23 Sep 2026 06:00:30 +0000 Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=) 2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=) 3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=) 4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=) 5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=) 6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=) 7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: N1vl3ty06lQwjZRRbAHaGUpQlq6rYpNc1QKkSQx+SXw=) 8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=) 9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=) 10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=) 11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=) 12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=) 13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=) 14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=) 15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=) 16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=) 17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=) 18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=) 19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=) 20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=) 21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=) 22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=) 23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=) 24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=) 25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=) 26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=) 27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=) 28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=) 29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=) 30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=) 31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=) 32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=) 33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=) 34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=) 35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 05:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c7:b3:97:4f:1a:94:52:7f:e2:37:a2:37:2b:64:57:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Sep 22 06:00:30 2026 GMT Not After : Sep 23 06:00:30 2026 GMT Subject: CN=ba7e0608aa6b43fa6a95fbd8b848b47b50e296c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:65:88:bb:f0:98:2f:8c:de:ac:8d:da:fa: 7c:3e:58:39:76:d2:c2:a7:22:07:23:40:2a:c0:49: be:ad:1f:e8:90:19:96:42:ba:8d:94:ee:32:22:fa: 4c:93:a9:a0:65:b9:c3:ea:f2:16:aa:7c:75:5b:73: 36:c7:34:e0:8a:e4:0a:ff:52:c2:bb:12:e1:8e:f7: 93:4c:29:50:1b:0b:23:95:57:0d:c5:a6:fd:3e:26: 3e:aa:4f:e7:95:25:c9:b8:48:4b:da:a7:06:94:ba: 11:2b:0f:95:aa:b5:3b:11:6b:3f:85:48:49:0e:f9: 1b:c4:4a:61:b7:1b:56:c3:64:ae:2c:98:82:39:a3: 18:7b:e7:ba:6e:79:4f:7d:77:98:ac:4c:ff:1b:0a: 0d:ea:c5:5d:78:a5:4c:ad:69:1c:46:1a:f2:36:07: da:c3:e7:17:8b:41:62:b2:11:4e:e3:5c:b4:2c:f2: ff:60:3e:22:8e:51:b3:fb:81:ca:ca:5b:ac:fa:aa: 19:89:6a:a5:9a:24:48:4a:5d:e5:ff:ac:9d:c1:d4: 2e:6f:91:7c:e9:7a:e2:bb:8c:47:48:f7:5f:5d:9c: e0:d1:99:f2:44:d3:05:88:a7:4f:30:e4:08:38:29: 05:cb:d5:97:c3:4a:29:d4:60:d6:ae:e8:97:19:cb: 37:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7E:06:08:AA:6B:43:FA:6A:95:FB:D8:B8:48:B4:7B:50:E2:96:C2 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b0:58:91:7f:8e:9f:80:ce:0f:17:b7:fd:2b:85:79:d6:f5: 63:7f:1a:df:25:3f:07:8c:6a:0b:c3:25:b2:2a:40:ae:82:a4: 67:bb:da:41:57:fd:e9:5d:fb:43:a0:82:94:ca:5d:4e:db:e8: df:7f:2b:d1:07:65:6b:d5:c8:56:91:d8:8e:2c:d2:57:22:2c: 24:e6:48:37:da:0d:94:66:77:e2:2e:bf:f1:90:89:33:2e:ab: e7:20:11:30:60:af:9e:96:29:53:1a:94:23:2d:41:97:96:79: 4f:c8:f3:62:36:bc:77:be:3c:a6:64:57:3b:50:97:ff:1c:79: ae:a7:b6:28:10:e8:85:ca:58:ac:c2:6e:ec:d6:83:a1:12:09: 1a:1e:96:f0:23:ec:3d:43:23:5e:b1:ee:3d:b7:0f:0c:9b:1d: 60:d0:43:7e:13:20:f9:30:e3:80:67:ba:97:03:05:56:0f:5d: 3b:a9:b7:7f:9f:19:aa:91:bd:fe:b0:18:d1:ed:18:53:d6:67: 70:e7:3d:8a:97:72:65:b5:00:4a:f2:d9:7d:ee:35:33:e6:c9: e7:68:06:25:d4:a4:46:cb:15:1c:9a:1a:b1:bb:3d:f8:0d:72: cf:30:a2:5a:4b:74:ae:25:02:27:95:64:03:a4:59:19:5d:35: 7a:f5:17:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDHs5dPGpRSf+I3ojcrZFcxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwOTIyMDYwMDMwWhcNMjYwOTIzMDYwMDMwWjAzMTEwLwYDVQQD EyhiYTdlMDYwOGFhNmI0M2ZhNmE5NWZiZDhiODQ4YjQ3YjUwZTI5NmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApApliLvwmC+M3qyN2vp8Plg5dtLC pyIHI0AqwEm+rR/okBmWQrqNlO4yIvpMk6mgZbnD6vIWqnx1W3M2xzTgiuQK/1LC uxLhjveTTClQGwsjlVcNxab9PiY+qk/nlSXJuEhL2qcGlLoRKw+VqrU7EWs/hUhJ DvkbxEphtxtWw2SuLJiCOaMYe+e6bnlPfXeYrEz/GwoN6sVdeKVMrWkcRhryNgfa w+cXi0FishFO41y0LPL/YD4ijlGz+4HKylus+qoZiWqlmiRISl3l/6ydwdQub5F8 6Xriu4xHSPdfXZzg0ZnyRNMFiKdPMOQIOCkFy9WXw0op1GDWruiXGcs3rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLp+Bgiqa0P6apX72LhItHtQ4pbCMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrBYkX+O n4DODxe3/SuFedb1Y38a3yU/B4xqC8MlsipAroKkZ7vaQVf96V37Q6CClMpdTtvo 338r0Qdla9XIVpHYjizSVyIsJOZIN9oNlGZ34i6/8ZCJMy6r5yARMGCvnpYpUxqU Iy1Bl5Z5T8jzYja8d748pmRXO1CX/xx5rqe2KBDohcpYrMJu7NaDoRIJGh6W8CPs PUMjXrHuPbcPDJsdYNBDfhMg+TDjgGe6lwMFVg9dO6m3f58ZqpG9/rAY0e0YU9Zn cOc9ipdyZbUASvLZfe41M+bJ52gGJdSkRssVHJoasbs9+A1yzzCiWkt0riUCJ5Vk A6RZGV01evUXZA== -----END CERTIFICATE-----Generated at Tue Sep 22 13:00:12 2026 by rpki-client