$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft File: hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json) Hash identifier: Om2pr9UClTMFWDbhYTrlCNt/sKIClFpfQWlGzuN1mKU= Subject key identifier: 97:0D:87:C7:CA:DD:10:01:E1:40:08:05:C1:1F:AA:0E:9B:AB:9A:3B Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019D9A74B96589D959EED51B8B3F5474C9A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft Manifest number: 0ED5 Signing time: Fri 17 Apr 2026 08:00:34 +0000 Manifest this update: Fri 17 Apr 2026 08:00:34 +0000 Manifest next update: Sat 18 Apr 2026 08:00:34 +0000 Files and hashes: 1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=) 2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=) 3: 59xHeQcfN9MrHnGV12N9v9XcThY.roa (hash: Elta/uOtbtWIHwKEBTZUqwVybQem3iwKx6GhTo1J6rY=) 4: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=) 5: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=) 6: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=) 7: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=) 8: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=) 9: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=) 10: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=) 11: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=) 12: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=) 13: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=) 14: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=) 15: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=) 16: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=) 17: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=) 18: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=) 19: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=) 20: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=) 21: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=) 22: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=) 23: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: hFCGbgRp7mSF3DZO6R6YW45MMnXOxk3GJXRSVlT5OHM=) 24: kVBqw1NBveCe29uXziyZqSZwkNE.roa (hash: 4QQTa0gtMgzzmsuQOSTk/eBtgGx9FmdkrEJEaJesrmA=) 25: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=) 26: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=) 27: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=) 28: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=) 29: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=) 30: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=) 31: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=) 32: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=) 33: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=) 34: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=) 35: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=) 36: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:74:b9:65:89:d9:59:ee:d5:1b:8b:3f:54:74:c9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Apr 17 08:00:34 2026 GMT Not After : Apr 18 08:00:34 2026 GMT Subject: CN=970d87c7cadd1001e1400805c11faa0e9bab9a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:16:19:a7:af:e4:54:e7:d9:70:22:57:ea:be: be:42:e2:51:ea:d6:06:d6:4c:75:08:d8:c1:c0:63: 24:24:94:98:03:6b:eb:3a:85:80:d6:fe:f5:5c:8b: 92:75:36:28:6d:de:f3:4e:ff:b5:39:d3:8e:44:1b: 98:df:7e:38:d1:dc:c2:9d:b8:60:92:5a:4a:5d:8f: 87:78:78:47:3b:37:c5:cd:e2:5b:d9:2d:73:04:60: 94:2e:6a:35:4b:de:0e:7d:b5:bd:31:c5:25:57:94: 23:0f:54:1d:ae:67:67:48:92:2a:1b:e5:9a:83:ba: 61:bc:19:2a:53:50:51:f7:10:ff:b0:f5:cd:9c:12: a6:f0:b2:58:75:1c:72:d5:20:f0:8b:e2:7f:71:c9: ce:44:72:d8:51:f1:3a:ee:e2:e7:b3:28:dc:e3:6f: 2d:a7:29:d3:47:46:53:7e:7a:63:d6:c7:be:07:6e: bf:67:36:ab:b2:7c:7a:a3:24:d5:ef:1e:91:0c:ad: 96:11:38:fa:11:f4:ce:69:1e:8e:47:a5:cb:f9:af: 50:3e:5f:99:f1:b9:99:87:ee:eb:a3:1a:a8:3f:5d: 92:8a:b7:9a:f2:28:1a:b9:87:a5:15:a0:28:3e:75: 27:38:e4:18:a2:b0:46:65:d9:95:2b:bd:d7:bb:d7: 32:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0D:87:C7:CA:DD:10:01:E1:40:08:05:C1:1F:AA:0E:9B:AB:9A:3B X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:53:d1:bd:0e:17:d4:4d:b2:ad:42:43:c7:c2:80:bc:9e:46: 40:31:b0:2c:2e:99:c4:bb:65:0e:fb:4c:ee:a0:40:1b:51:ed: e1:e5:ac:b3:cd:40:fc:87:c0:c4:88:2d:54:67:5c:4c:2d:be: fb:7a:27:76:2c:7b:10:57:0a:b7:7c:e5:ef:af:6d:4f:43:6d: a7:22:48:52:38:04:e2:da:1a:b6:8b:7d:c6:e5:10:4f:d2:a5: f9:3f:9b:6b:2a:ed:aa:94:a3:17:91:42:46:5c:06:98:77:64: c7:77:89:e1:ff:b6:01:21:0b:74:17:91:32:66:b0:50:89:47: 06:ef:af:2a:e2:1d:93:d1:87:e3:36:4e:03:2b:85:25:e0:c2: 51:9f:f6:d9:b3:02:cd:3c:0a:cb:e7:84:ea:f3:fc:0f:c4:3a: db:b0:3d:92:48:fe:f3:20:59:97:80:6a:cc:81:a6:15:e1:e2: 57:b9:a2:0e:b3:ec:47:dd:ac:7a:1c:80:cb:dd:50:69:14:0c: ca:18:9a:73:a8:c7:98:38:1c:94:0c:a5:75:6b:bb:5a:67:97: 6d:95:9c:cf:15:3a:7a:84:71:ef:db:c6:85:27:3b:fa:68:6b: 64:b1:d0:e2:fb:b1:1b:0a:8b:bc:db:99:34:04:9e:9b:8f:51: c9:59:0e:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2adLllidlZ7tUbiz9UdMmiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwNDE3MDgwMDM0WhcNMjYwNDE4MDgwMDM0WjAzMTEwLwYDVQQD Eyg5NzBkODdjN2NhZGQxMDAxZTE0MDA4MDVjMTFmYWEwZTliYWI5YTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshYZp6/kVOfZcCJX6r6+QuJR6tYG 1kx1CNjBwGMkJJSYA2vrOoWA1v71XIuSdTYobd7zTv+1OdOORBuY33440dzCnbhg klpKXY+HeHhHOzfFzeJb2S1zBGCULmo1S94OfbW9McUlV5QjD1QdrmdnSJIqG+Wa g7phvBkqU1BR9xD/sPXNnBKm8LJYdRxy1SDwi+J/ccnORHLYUfE67uLnsyjc428t pynTR0ZTfnpj1se+B26/Zzarsnx6oyTV7x6RDK2WETj6EfTOaR6OR6XL+a9QPl+Z 8bmZh+7roxqoP12Sirea8igauYelFaAoPnUnOOQYorBGZdmVK73Xu9cy6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcNh8fK3RAB4UAIBcEfqg6bq5o7MB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVPRvQ4X 1E2yrUJDx8KAvJ5GQDGwLC6ZxLtlDvtM7qBAG1Ht4eWss81A/IfAxIgtVGdcTC2+ +3ondix7EFcKt3zl769tT0NtpyJIUjgE4toatot9xuUQT9Kl+T+bayrtqpSjF5FC RlwGmHdkx3eJ4f+2ASELdBeRMmawUIlHBu+vKuIdk9GH4zZOAyuFJeDCUZ/22bMC zTwKy+eE6vP8D8Q627A9kkj+8yBZl4BqzIGmFeHiV7miDrPsR92sehyAy91QaRQM yhiac6jHmDgclAyldWu7WmeXbZWczxU6eoRx79vGhSc7+mhrZLHQ4vuxGwqLvNuZ NASem49RyVkOJw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:26:58 2026 by rpki-client