$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: 813YqTDgKI9Ddus7RuzP9SPyU11bBoMcObbttMhH8TY= Subject key identifier: A9:D6:F8:0C:93:65:60:2F:57:84:F7:E3:EC:A7:E0:13:26:80:60:EB Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 01A0C09EFE050C55D1EE32FA9576A0651694 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 1A9A Signing time: Sun 20 Sep 2026 21:00:40 +0000 Manifest this update: Sun 20 Sep 2026 21:00:40 +0000 Manifest next update: Mon 21 Sep 2026 21:00:40 +0000 Files and hashes: 1: 1-V84oobFXIlKZ3Dls5nBGbkUta8.roa (hash: Y6oUsmKL79cneGenSJvYXaOULigPUniMqNXXoxtkoQA=) 2: 1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa (hash: laO24ACjIVLZyTAa5hofsg3cM+gHDkRC5wH6+r7XTlw=) 3: 20xMr4UkTc7mDjSXUAQ2OIVEdaA.roa (hash: lYcXkOJMvyy3d7VAmjTtLuavcH5/RrOQ9RjLW9dvSVc=) 4: 6ZzDjxgNYdOCdszBPZyujZWdIQU.roa (hash: 9UI3twwOpxPDECF8g7XXCOiJN8BzbbKSShDSCVBs94A=) 5: 97B4Sc_XubtL_lW7OfZysQqsOs4.roa (hash: s6SnzQICC+87j3qQ2YxLoHSbPtUJDNl+2RyFPIbB7qI=) 6: D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa (hash: 3brIsivCbhFviJ62ZCvrk45wXBqMSMZrnrXYGWBpVqI=) 7: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: 0Cs2LrzJ8yqufbplo2ee7rglmpnGt5U4N7lh+FFUXPw=) 8: KW3ruKOhj6JKZMq89hnmHfD2ogg.roa (hash: 0KDaehG1BpLDekFmNyw0N8o8oxyUdxrGz4gLnB27NL0=) 9: LsDa6KTrverRW5gJHEDYsnUiWaA.roa (hash: kyRRzPpmtC/6cc1RLLOBnwLx4RCN3jXZIWgVX+OjOJY=) 10: Muj2FNE8Gldd8yzrKLebS3hsgG8.roa (hash: Rd6lCWkMq66do726k8up+6ZsrZZs2AV3lPweaatdunQ=) 11: OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa (hash: oyzTksz2QKSnafMS1kmCzYf1d4YWDMBQktGYceuURLI=) 12: UE5lqxub4HZyPzOaFIeY1MynbOM.roa (hash: G/5g2S7073n0P8fSJcz9JyRKGI6p6NHbjV1Y/gWxHho=) 13: XDU9UWSQ0e6UimvguU5iuXs0EOA.roa (hash: SCFRxNca9zUGzw86U8+KWNOZievAR3LE2W5GLXuSUcY=) 14: _qJbebTlrOvrXIQLM28_mZtacRY.roa (hash: BqUn6UdSWnNCo8IEu4itHIeonT1vIDue6NclshrDycA=) 15: hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa (hash: b4EBco8NgahSA81khEE6SumwN6LoQGLW/RXHQz3fVtU=) 16: hc27-Du5AK-QSwEPPlUOrqZiXBk.asa (hash: NZwly8DKYsKefjnwC5ZEjbZE7IIJQUE4bCO5RCZXMKA=) 17: kF__trkxnSoai5YPHEuion9F5-M.roa (hash: tWmn9E+rdr18LE8axfsyGzfbkAEBv9XZf3xK1lkaYrs=) 18: rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa (hash: 6M2XOWFy53R21mcWbAHRpsAh3NRSx51bXy4kBppg9Z0=) 19: uC3zCk-SIOTP3v8kN8AvkOioJlk.roa (hash: t6NH48ochz8I1c27bkPFIEdPItgxlKo5FppJqJnPRh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c0:9e:fe:05:0c:55:d1:ee:32:fa:95:76:a0:65:16:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Sep 20 21:00:40 2026 GMT Not After : Sep 21 21:00:40 2026 GMT Subject: CN=a9d6f80c9365602f5784f7e3eca7e013268060eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:6e:21:34:68:f9:34:bf:4e:e5:fe:b5:ac: 4e:85:23:73:7f:36:95:8a:64:4c:67:a2:50:c2:6c: d7:74:ef:15:34:0b:a7:e6:7a:6b:ce:ee:25:32:b9: 8f:06:1f:0b:d0:c5:3f:79:b8:fd:2a:2b:78:9b:a5: b7:71:5a:a6:30:e9:48:79:b0:10:fb:3c:74:2b:bf: b3:ba:fc:f4:cc:43:ac:53:73:9b:1c:a3:ac:7e:bf: fc:be:ac:78:eb:7f:96:96:3f:14:3c:6e:a3:99:dc: ba:ed:56:a3:ea:9d:2e:42:49:83:71:c9:09:da:c0: 85:2f:40:27:c1:94:47:4c:8c:f3:18:58:d6:cc:1e: fe:a6:cb:85:3b:a6:d4:d6:4e:be:ed:9d:30:01:b1: 7d:99:05:b8:98:81:68:83:20:6c:36:5c:e6:36:cc: 9c:51:74:20:ef:95:35:6a:6f:43:73:68:ba:9a:a7: 3a:e2:ed:5a:46:ea:08:8d:1f:bc:f5:45:fc:cc:51: 67:83:e6:71:74:9a:08:f8:f1:ea:6a:27:84:c6:2d: 80:c1:dc:05:6d:42:75:e4:99:51:1f:72:1c:50:3f: 1a:52:8f:ee:73:3a:51:08:fd:22:d5:7d:56:2c:b7: 1a:d1:a3:05:75:9c:8b:12:e3:b1:33:61:70:43:5e: cc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D6:F8:0C:93:65:60:2F:57:84:F7:E3:EC:A7:E0:13:26:80:60:EB X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:18:50:3c:51:54:df:fd:81:21:33:db:19:12:23:2e:4d:24: a7:91:2b:4e:7d:d2:b9:bc:04:cb:89:ad:a3:15:f0:b6:3f:b3: 57:32:89:11:33:8a:92:91:3a:67:c7:59:48:a0:4a:50:be:a7: 3f:7f:73:a7:4f:55:c2:04:84:a2:a5:24:c6:e6:33:ef:88:9c: 8f:e9:3a:70:a8:fb:9b:34:c3:e7:8e:de:f7:77:7c:14:d5:8b: 2a:02:7d:14:ef:1f:18:c5:13:06:77:f4:3c:7e:0c:02:8e:1a: 92:e3:9a:19:22:60:6a:50:18:8f:45:96:a5:0a:19:6a:16:5a: fc:85:60:64:69:18:f8:f3:78:9c:d9:a4:a7:f6:3d:9f:9e:5d: 7b:2c:d5:75:2e:ab:74:bd:70:b0:c7:28:4f:b7:ac:77:1e:09: 29:55:d7:e2:65:08:16:0b:b7:4a:18:6c:6f:c9:b4:86:82:e8: ef:66:f2:13:77:0d:87:d4:30:77:85:91:fc:4e:7a:0a:51:24: 55:5d:2f:69:b9:2d:0d:b1:7f:37:f9:48:5b:27:be:c0:bb:5c: 1c:50:74:e7:6c:28:eb:33:8c:22:ea:d6:05:a2:8a:43:9b:bf: e2:0d:94:70:88:ab:31:d6:88:19:4c:b6:80:de:a7:67:c0:c0: bb:98:ad:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDAnv4FDFXR7jL6lXagZRaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwOTIwMjEwMDQwWhcNMjYwOTIxMjEwMDQwWjAzMTEwLwYDVQQD EyhhOWQ2ZjgwYzkzNjU2MDJmNTc4NGY3ZTNlY2E3ZTAxMzI2ODA2MGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsNuITRo+TS/TuX+taxOhSNzfzaV imRMZ6JQwmzXdO8VNAun5nprzu4lMrmPBh8L0MU/ebj9Kit4m6W3cVqmMOlIebAQ +zx0K7+zuvz0zEOsU3ObHKOsfr/8vqx463+Wlj8UPG6jmdy67Vaj6p0uQkmDcckJ 2sCFL0AnwZRHTIzzGFjWzB7+psuFO6bU1k6+7Z0wAbF9mQW4mIFogyBsNlzmNsyc UXQg75U1am9Dc2i6mqc64u1aRuoIjR+89UX8zFFng+ZxdJoI+PHqaieExi2AwdwF bUJ15JlRH3IcUD8aUo/uczpRCP0i1X1WLLca0aMFdZyLEuOxM2FwQ17MVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnW+AyTZWAvV4T34+yn4BMmgGDrMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghhQPFFU 3/2BITPbGRIjLk0kp5ErTn3SubwEy4mtoxXwtj+zVzKJETOKkpE6Z8dZSKBKUL6n P39zp09VwgSEoqUkxuYz74icj+k6cKj7mzTD547e93d8FNWLKgJ9FO8fGMUTBnf0 PH4MAo4akuOaGSJgalAYj0WWpQoZahZa/IVgZGkY+PN4nNmkp/Y9n55deyzVdS6r dL1wsMcoT7esdx4JKVXX4mUIFgu3Shhsb8m0hoLo72byE3cNh9Qwd4WR/E56ClEk VV0vabktDbF/N/lIWye+wLtcHFB052wo6zOMIurWBaKKQ5u/4g2UcIirMdaIGUy2 gN6nZ8DAu5itNg== -----END CERTIFICATE-----Generated at Mon Sep 21 09:14:47 2026 by rpki-client