$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: Twd0geOjx/KrtgFwaleCGZj3XGkBKcea+UMDGGl74+8= Subject key identifier: 2E:ED:18:1F:B3:FE:99:90:F0:E9:AF:F4:35:E7:16:00:F8:37:C5:5B Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019D984FD3869CE8CED4CB2395C2A8B55BD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 18EE Signing time: Thu 16 Apr 2026 22:01:01 +0000 Manifest this update: Thu 16 Apr 2026 22:01:01 +0000 Manifest next update: Fri 17 Apr 2026 22:01:01 +0000 Files and hashes: 1: 1-V84oobFXIlKZ3Dls5nBGbkUta8.roa (hash: Y6oUsmKL79cneGenSJvYXaOULigPUniMqNXXoxtkoQA=) 2: 1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa (hash: laO24ACjIVLZyTAa5hofsg3cM+gHDkRC5wH6+r7XTlw=) 3: 1WdFXv1Jg5APhjnipHcc4mLeqvg.roa (hash: IZKCSGM3fACKg/PrPaA+UZQwdKhIoEOq7r5L+j4pjTg=) 4: 2W2MCcTiOGzKibb9IktRwoV7t7w.roa (hash: 9hzbcjFutrF6fmKr1I+WiZpYh5ANj2nzThUtT9+uWLQ=) 5: 6ZzDjxgNYdOCdszBPZyujZWdIQU.roa (hash: 9UI3twwOpxPDECF8g7XXCOiJN8BzbbKSShDSCVBs94A=) 6: 8rKgBAJA8MJvfJn7wlRXaLSOltg.roa (hash: vKik0l+/uPuH0Z6X6US0ts7buVtMAj4tzTB6bbsDKWw=) 7: D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa (hash: 3brIsivCbhFviJ62ZCvrk45wXBqMSMZrnrXYGWBpVqI=) 8: Eq8JCzY_2xgrWNLuTFpKz8LyYYI.roa (hash: /lqPOANyW17qinqhiK8qfXDXg0mEzP1UjKBeGgxEB10=) 9: FMdvNunKljn8ofGnpjf1LZVHjq8.roa (hash: 8mvnTEy6JbB2XqN3FH0fr8TfsaVsZ+l1QCmyb/WMQRQ=) 10: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: U9kujSj1BZVEWuQKBzqhesBM9hbbX8ip+4rm5WpEC18=) 11: LsDa6KTrverRW5gJHEDYsnUiWaA.roa (hash: kyRRzPpmtC/6cc1RLLOBnwLx4RCN3jXZIWgVX+OjOJY=) 12: OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa (hash: oyzTksz2QKSnafMS1kmCzYf1d4YWDMBQktGYceuURLI=) 13: XDU9UWSQ0e6UimvguU5iuXs0EOA.roa (hash: SCFRxNca9zUGzw86U8+KWNOZievAR3LE2W5GLXuSUcY=) 14: hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa (hash: b4EBco8NgahSA81khEE6SumwN6LoQGLW/RXHQz3fVtU=) 15: hc27-Du5AK-QSwEPPlUOrqZiXBk.asa (hash: NZwly8DKYsKefjnwC5ZEjbZE7IIJQUE4bCO5RCZXMKA=) 16: jl7QDhibiq_JOYv1vjDrL8Omz9o.roa (hash: JDmYOxWLUYSslhLzawMmaYVHDSzzt7UH8K2KDqbbLwo=) 17: rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa (hash: 6M2XOWFy53R21mcWbAHRpsAh3NRSx51bXy4kBppg9Z0=) 18: sY1Z0d4UP1k0MtMv6mu9PscYSIo.roa (hash: OEBAEu1SEBwrWfciVaKHy8l9XFDNXjoEFOCceQeIsnI=) 19: uC3zCk-SIOTP3v8kN8AvkOioJlk.roa (hash: t6NH48ochz8I1c27bkPFIEdPItgxlKo5FppJqJnPRh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:4f:d3:86:9c:e8:ce:d4:cb:23:95:c2:a8:b5:5b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Apr 16 22:01:01 2026 GMT Not After : Apr 17 22:01:01 2026 GMT Subject: CN=2eed181fb3fe9990f0e9aff435e71600f837c55b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e2:1c:88:31:72:10:b5:12:df:aa:00:84:7b: e8:ed:6a:4e:d6:00:b1:b6:3c:3d:ca:c9:9d:c5:f1: 2f:40:01:34:0e:e6:1e:fe:be:ba:d5:53:b5:42:f7: 0e:53:2d:8a:bc:8c:4e:05:a8:7b:ba:a8:c9:7b:cf: ac:54:9a:3d:71:91:5d:68:72:94:4e:d3:7a:f8:f8: 77:e5:d4:8a:9d:45:bc:52:71:03:9d:57:e0:75:37: b2:da:68:44:e3:4c:2a:ce:33:7b:93:e7:c3:1f:c5: 43:50:d6:e0:8b:f0:b4:10:b0:ee:1f:8f:04:b0:bf: 1e:08:5f:e6:14:ba:ad:81:f4:22:56:71:61:44:6e: 7c:6a:cd:d2:c5:40:f2:43:1b:ff:38:5d:13:5b:e8: bf:73:40:76:5f:b5:f0:40:1a:64:9b:7c:5b:7c:69: 21:d5:a7:d8:26:f9:8c:db:9c:d4:90:ed:14:83:d7: 61:82:d9:38:28:91:12:71:b2:40:40:f9:f2:78:71: 7c:4b:fe:b0:2e:1a:71:78:31:bc:e4:d5:99:63:88: 99:fe:03:6f:49:f9:9a:38:46:09:7f:ae:46:06:f3: fd:09:d5:98:85:d7:44:60:88:1a:79:9c:67:fe:f7: b0:a7:fd:6f:98:1c:4a:0b:e8:35:fd:51:a0:9e:98: 53:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:ED:18:1F:B3:FE:99:90:F0:E9:AF:F4:35:E7:16:00:F8:37:C5:5B X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e2:9b:11:7c:e0:9a:60:33:16:0a:6a:01:39:8d:e4:6d:4d: 11:c7:dd:3d:b1:d6:82:8f:81:1c:b6:5f:69:a0:8d:8a:44:b5: ed:93:70:96:1a:64:6c:85:61:1e:ee:87:83:b0:e7:82:fb:23: 5a:22:3e:00:e5:53:64:46:5b:fb:51:e1:26:ce:8a:2c:59:a0: 5f:ff:eb:dc:ed:63:bc:d0:0e:90:b4:ee:d1:9d:94:e2:93:50: fa:fd:75:c4:90:95:3d:a2:09:e4:aa:4e:43:02:81:2f:55:93: de:67:05:3c:2e:b9:0b:54:26:42:40:73:75:fc:92:7e:5f:a0: 6d:23:89:b0:47:e1:59:f1:72:da:81:62:bb:be:16:1f:96:8f: 26:4d:c4:1c:a4:6f:95:ca:4f:23:19:d1:e5:af:15:1a:c5:c6: bf:ff:b6:cd:f9:a0:6b:41:ea:b0:f8:e1:bd:7b:5f:29:9d:55: 92:2e:24:eb:a9:13:d1:f2:11:eb:54:a7:97:93:7d:57:ed:67: 1c:a7:be:bf:8e:6e:f3:1f:80:91:7b:bb:19:7a:7c:22:6a:5a: 54:03:19:5d:e8:11:a9:27:86:d4:d6:7c:da:5a:f6:4b:cf:aa: df:33:9f:0a:c9:31:7f:10:ee:b4:f3:dd:0a:e2:1e:42:fd:2e: f6:7d:64:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YT9OGnOjO1MsjlcKotVvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwNDE2MjIwMTAxWhcNMjYwNDE3MjIwMTAxWjAzMTEwLwYDVQQD EygyZWVkMTgxZmIzZmU5OTkwZjBlOWFmZjQzNWU3MTYwMGY4MzdjNTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OIciDFyELUS36oAhHvo7WpO1gCx tjw9ysmdxfEvQAE0DuYe/r661VO1QvcOUy2KvIxOBah7uqjJe8+sVJo9cZFdaHKU TtN6+Ph35dSKnUW8UnEDnVfgdTey2mhE40wqzjN7k+fDH8VDUNbgi/C0ELDuH48E sL8eCF/mFLqtgfQiVnFhRG58as3SxUDyQxv/OF0TW+i/c0B2X7XwQBpkm3xbfGkh 1afYJvmM25zUkO0Ug9dhgtk4KJEScbJAQPnyeHF8S/6wLhpxeDG85NWZY4iZ/gNv SfmaOEYJf65GBvP9CdWYhddEYIgaeZxn/vewp/1vmBxKC+g1/VGgnphTLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7tGB+z/pmQ8Omv9DXnFgD4N8VbMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeKbEXzg mmAzFgpqATmN5G1NEcfdPbHWgo+BHLZfaaCNikS17ZNwlhpkbIVhHu6Hg7Dngvsj WiI+AOVTZEZb+1HhJs6KLFmgX//r3O1jvNAOkLTu0Z2U4pNQ+v11xJCVPaIJ5KpO QwKBL1WT3mcFPC65C1QmQkBzdfySfl+gbSOJsEfhWfFy2oFiu74WH5aPJk3EHKRv lcpPIxnR5a8VGsXGv/+2zfmga0HqsPjhvXtfKZ1Vki4k66kT0fIR61Snl5N9V+1n HKe+v45u8x+AkXu7GXp8ImpaVAMZXegRqSeG1NZ82lr2S8+q3zOfCskxfxDutPPd CuIeQv0u9n1kjg== -----END CERTIFICATE-----Generated at Fri Apr 17 05:32:23 2026 by rpki-client