$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: hMKCCtJb25kBDDZD53PB3BANu/PATwNGEUYdkUeH6bI= Subject key identifier: FA:5E:94:19:5A:70:91:8B:D5:35:72:AB:BA:2C:EF:E3:3B:FD:11:15 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019CAB340F68546BE7EC82413C02CA699832 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 1864 Signing time: Sun 01 Mar 2026 21:00:41 +0000 Manifest this update: Sun 01 Mar 2026 21:00:41 +0000 Manifest next update: Mon 02 Mar 2026 21:00:41 +0000 Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=) 2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=) 3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=) 4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=) 5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=) 6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=) 7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: fptGK3PmejyrrjKN3lMx3oU2wqQJ6LXDuJc6NzMhcgQ=) 8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=) 9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=) 10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=) 11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=) 12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=) 13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=) 14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=) 15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=) 16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=) 17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=) 18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=) 19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=) 20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=) 21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=) 22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=) 23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=) 24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=) 25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=) 26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=) 27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=) 28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=) 29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=) 30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=) 31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=) 32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=) 33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=) 34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=) 35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:34:0f:68:54:6b:e7:ec:82:41:3c:02:ca:69:98:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Mar 1 21:00:41 2026 GMT Not After : Mar 2 21:00:41 2026 GMT Subject: CN=fa5e94195a70918bd53572abba2cefe33bfd1115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:11:bd:ee:22:f4:6f:91:51:37:2c:58:02: ac:04:88:22:95:e5:17:76:60:10:ab:38:4e:54:f6: 9f:95:f2:aa:09:99:a3:2e:cb:d7:2c:fa:9c:20:bb: 88:a2:9b:4d:6b:87:11:1a:f4:45:11:af:7b:03:d5: 95:4f:bf:c1:69:64:08:aa:88:4e:31:26:8b:0f:13: df:85:1a:5a:2d:3c:26:07:4d:52:df:5a:4f:25:4b: bd:ea:cd:f7:05:99:8a:24:2e:e1:a4:a5:3c:0e:87: 48:c2:80:c7:ad:28:a5:48:23:43:f8:05:bd:99:df: 46:4c:d0:3e:57:35:bd:dd:17:b6:6b:64:fd:7d:de: 0f:9a:17:d6:19:66:f2:01:8d:76:c7:e5:ea:54:01: 01:72:f2:ea:92:2b:19:5c:f9:d9:3a:10:b0:73:0c: 16:5a:44:3b:54:54:5e:06:5c:26:a5:f0:5d:d3:9b: a2:83:fa:d0:cb:9d:8f:b7:5b:eb:5c:3e:ac:37:30: 8a:a1:92:18:92:c5:50:33:07:3b:e7:30:fc:fb:24: f0:6d:7c:f4:d9:65:7f:c4:25:66:47:04:37:1d:b2: f2:c7:98:3f:c1:ff:6a:aa:53:c1:ed:35:80:21:84: 00:51:6d:95:5e:a2:61:26:d8:2c:7c:9e:2d:91:62: d1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5E:94:19:5A:70:91:8B:D5:35:72:AB:BA:2C:EF:E3:3B:FD:11:15 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:09:44:4e:d9:12:01:f7:1d:b9:0e:ab:59:ed:0e:a0:df:91: bb:1a:c5:0d:82:95:0d:0d:21:9c:e0:2a:11:e9:04:9f:6f:ba: 0c:06:48:e5:5f:8c:eb:74:70:0c:28:2f:36:48:30:23:52:12: 35:7a:ca:95:aa:70:69:9d:b8:23:4b:b8:8d:eb:d7:d5:41:39: 1a:88:25:4c:a2:fc:44:cf:4d:8f:46:b0:79:41:60:8e:12:1e: d5:ab:82:bc:89:ba:f5:11:d3:de:85:e8:ff:d8:35:cc:c6:e3: 4f:f9:e0:8c:fa:76:26:1b:c3:bc:1c:ca:b4:63:1a:63:69:aa: d3:26:b1:a7:18:be:38:4c:24:42:ea:c3:c8:3d:ba:ef:6b:83: ec:43:be:7c:0e:83:5a:05:af:16:01:9e:fc:7a:7c:18:3a:fb: 65:a9:db:8f:ee:f6:dd:be:aa:fa:64:61:9f:2d:8a:65:95:9c: 0a:96:cf:40:87:23:d5:fe:2e:f4:35:d8:7e:02:4d:ac:22:0f: b3:10:f5:ae:82:ab:94:1c:1a:83:97:1e:fc:2e:47:a4:1a:f9: c9:03:ca:bc:18:32:da:45:6f:7f:e1:7d:a1:c6:d9:8a:2d:28: 7c:d1:c6:e2:c6:82:9d:82:57:b3:09:82:51:b6:89:68:40:41: c7:3d:0c:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrNA9oVGvn7IJBPALKaZgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMzAxMjEwMDQxWhcNMjYwMzAyMjEwMDQxWjAzMTEwLwYDVQQD EyhmYTVlOTQxOTVhNzA5MThiZDUzNTcyYWJiYTJjZWZlMzNiZmQxMTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueURve4i9G+RUTcsWAKsBIgileUX dmAQqzhOVPaflfKqCZmjLsvXLPqcILuIoptNa4cRGvRFEa97A9WVT7/BaWQIqohO MSaLDxPfhRpaLTwmB01S31pPJUu96s33BZmKJC7hpKU8DodIwoDHrSilSCND+AW9 md9GTNA+VzW93Re2a2T9fd4PmhfWGWbyAY12x+XqVAEBcvLqkisZXPnZOhCwcwwW WkQ7VFReBlwmpfBd05uig/rQy52Pt1vrXD6sNzCKoZIYksVQMwc75zD8+yTwbXz0 2WV/xCVmRwQ3HbLyx5g/wf9qqlPB7TWAIYQAUW2VXqJhJtgsfJ4tkWLRSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpelBlacJGL1TVyq7os7+M7/REVMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASglETtkS AfcduQ6rWe0OoN+RuxrFDYKVDQ0hnOAqEekEn2+6DAZI5V+M63RwDCgvNkgwI1IS NXrKlapwaZ24I0u4jevX1UE5GoglTKL8RM9Nj0aweUFgjhIe1auCvIm69RHT3oXo /9g1zMbjT/ngjPp2JhvDvBzKtGMaY2mq0yaxpxi+OEwkQurDyD2672uD7EO+fA6D WgWvFgGe/Hp8GDr7Zanbj+723b6q+mRhny2KZZWcCpbPQIcj1f4u9DXYfgJNrCIP sxD1roKrlBwag5ce/C5HpBr5yQPKvBgy2kVvf+F9ocbZii0ofNHG4saCnYJXswmC UbaJaEBBxz0Mkw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:10:35 2026 by rpki-client