$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: t3GKdSHeOVYuCH9PXUijd+YlEkC4QQyj+tISPpaxJ7Y= Subject key identifier: CA:D1:3D:3D:16:90:EB:8F:8D:69:A7:57:B5:1A:2E:C9:4C:E3:90:80 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019CAAFD5E17F0BC2C662E5323E687BF7AFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 1871 Signing time: Sun 01 Mar 2026 20:00:57 +0000 Manifest this update: Sun 01 Mar 2026 20:00:57 +0000 Manifest next update: Mon 02 Mar 2026 20:00:57 +0000 Files and hashes: 1: 1-V84oobFXIlKZ3Dls5nBGbkUta8.roa (hash: Y6oUsmKL79cneGenSJvYXaOULigPUniMqNXXoxtkoQA=) 2: 1-spxrtAD4oXbrE0RHzjgwEyo9dc.roa (hash: laO24ACjIVLZyTAa5hofsg3cM+gHDkRC5wH6+r7XTlw=) 3: 2W2MCcTiOGzKibb9IktRwoV7t7w.roa (hash: 9hzbcjFutrF6fmKr1I+WiZpYh5ANj2nzThUtT9+uWLQ=) 4: 6ZzDjxgNYdOCdszBPZyujZWdIQU.roa (hash: 9UI3twwOpxPDECF8g7XXCOiJN8BzbbKSShDSCVBs94A=) 5: 8rKgBAJA8MJvfJn7wlRXaLSOltg.roa (hash: vKik0l+/uPuH0Z6X6US0ts7buVtMAj4tzTB6bbsDKWw=) 6: A06Zl3resPwzCE3ljng8unzLIBg.roa (hash: 3hu0RLBphdyrbDMaUFm0iq2YQxj4KBfXy2ehiORwwFE=) 7: D_XaVdSAo9MO91lS2vDjyI3P6Ys.roa (hash: 3brIsivCbhFviJ62ZCvrk45wXBqMSMZrnrXYGWBpVqI=) 8: Eq8JCzY_2xgrWNLuTFpKz8LyYYI.roa (hash: /lqPOANyW17qinqhiK8qfXDXg0mEzP1UjKBeGgxEB10=) 9: FMdvNunKljn8ofGnpjf1LZVHjq8.roa (hash: 8mvnTEy6JbB2XqN3FH0fr8TfsaVsZ+l1QCmyb/WMQRQ=) 10: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: 5fJ0nBt8AJQYhQK7XWpwiAGa7h0265zZ7/1Gbgfaong=) 11: LsDa6KTrverRW5gJHEDYsnUiWaA.roa (hash: kyRRzPpmtC/6cc1RLLOBnwLx4RCN3jXZIWgVX+OjOJY=) 12: OsXJRVI9Phmgo0xXhFQ7ia1dwww.roa (hash: oyzTksz2QKSnafMS1kmCzYf1d4YWDMBQktGYceuURLI=) 13: XDU9UWSQ0e6UimvguU5iuXs0EOA.roa (hash: SCFRxNca9zUGzw86U8+KWNOZievAR3LE2W5GLXuSUcY=) 14: hD5Jp6vS9axOhOQnGtkd8d1fNdk.roa (hash: b4EBco8NgahSA81khEE6SumwN6LoQGLW/RXHQz3fVtU=) 15: jl7QDhibiq_JOYv1vjDrL8Omz9o.roa (hash: JDmYOxWLUYSslhLzawMmaYVHDSzzt7UH8K2KDqbbLwo=) 16: l-ZKr09NttdeXg94r2iAP2Tf2os.roa (hash: uIZHiQuAz0fk7L1tQpqZz3KSl9Uj4Nhz/RwPNmUtXv0=) 17: rmRD7sZaIQo6NKmJlFJdecxZ0JY.roa (hash: 6M2XOWFy53R21mcWbAHRpsAh3NRSx51bXy4kBppg9Z0=) 18: sY1Z0d4UP1k0MtMv6mu9PscYSIo.roa (hash: OEBAEu1SEBwrWfciVaKHy8l9XFDNXjoEFOCceQeIsnI=) 19: uC3zCk-SIOTP3v8kN8AvkOioJlk.roa (hash: t6NH48ochz8I1c27bkPFIEdPItgxlKo5FppJqJnPRh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fd:5e:17:f0:bc:2c:66:2e:53:23:e6:87:bf:7a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Mar 1 20:00:57 2026 GMT Not After : Mar 2 20:00:57 2026 GMT Subject: CN=cad13d3d1690eb8f8d69a757b51a2ec94ce39080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e5:75:cd:b3:93:23:71:52:0b:bc:0d:ce:04: 99:e3:4d:c9:34:89:76:0c:52:7d:61:17:cf:89:86: a8:a4:4d:70:42:60:9d:c9:ab:ca:bd:11:b5:01:6f: 5d:9d:74:78:01:01:50:e5:dd:13:ee:f6:c6:b4:e7: 0c:c4:83:fb:03:45:a1:18:c9:e6:4d:7a:76:65:5d: 64:b8:ed:4e:61:43:13:3e:e5:57:b9:0d:1d:76:a9: 32:d5:8b:62:46:a0:63:3b:13:55:05:0c:01:70:96: 39:12:e3:20:0b:58:72:7d:80:6f:9b:5a:3d:2e:b7: 03:e8:a7:6e:3d:6f:35:03:13:fa:b3:66:02:6b:18: 25:fb:e5:86:b8:6e:9c:c9:45:59:0b:e4:e8:3b:9b: 81:8c:6d:68:b2:c3:30:11:2c:5e:30:6b:ae:d5:6c: 47:c2:53:16:e3:cb:f9:e2:54:40:08:67:f1:d5:bb: d2:f6:8d:a9:d4:0c:7e:26:3d:4b:3e:89:8c:ba:89: ae:94:5f:98:3a:52:69:58:42:48:78:7b:de:f7:73: 48:f6:96:1f:29:19:86:db:d8:fa:d8:05:0f:54:36: 89:b5:c4:30:8b:f8:3a:10:4c:8e:36:65:c3:44:0c: 7e:54:6f:3f:8a:69:8c:eb:ae:4a:7e:42:54:eb:ba: 32:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D1:3D:3D:16:90:EB:8F:8D:69:A7:57:B5:1A:2E:C9:4C:E3:90:80 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d1:8c:58:3a:72:d2:1a:21:67:2b:7a:7b:ad:4d:c3:bd:eb: 8d:fc:14:b9:c5:7a:00:ca:8a:6d:b0:c1:37:fa:f4:ef:58:7a: 82:d4:04:14:b8:9a:5c:ee:32:c4:26:46:e8:65:bb:a6:3e:e6: 54:6c:77:5a:a8:7f:46:ca:f9:4f:7f:d2:a8:39:11:21:6c:af: 6a:23:8c:ec:38:e5:2e:07:70:ee:07:4b:53:7c:23:8d:e5:6b: 3c:5b:59:6b:63:81:3a:54:7f:77:a1:b5:05:31:66:f6:f1:55: 55:bb:6a:17:a4:e3:0d:be:46:a4:f5:f7:99:ce:78:61:d8:55: 22:dd:1d:6b:6f:a3:3e:0e:36:ab:60:b9:ad:d5:84:36:3a:ed: 09:11:89:64:3e:f3:08:bc:97:dd:4e:91:41:fa:ff:03:3d:a2: 96:61:b7:56:17:27:09:6a:8d:24:91:ed:f0:e0:8e:cb:2b:c5: 47:dc:9d:6b:39:50:42:3f:71:84:eb:b3:30:9b:89:90:84:39: d5:e7:7a:e9:65:d4:2b:cc:95:b5:49:b8:bb:9c:b8:9f:bf:4e: a4:0f:46:f9:3a:ea:58:c6:52:f7:47:ba:b6:8a:24:93:fb:4f: 0b:cc:91:31:79:c9:70:5f:b4:06:75:85:5e:7d:4c:b2:3d:76: 60:36:10:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/V4X8LwsZi5TI+aHv3r/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMzAxMjAwMDU3WhcNMjYwMzAyMjAwMDU3WjAzMTEwLwYDVQQD EyhjYWQxM2QzZDE2OTBlYjhmOGQ2OWE3NTdiNTFhMmVjOTRjZTM5MDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uV1zbOTI3FSC7wNzgSZ403JNIl2 DFJ9YRfPiYaopE1wQmCdyavKvRG1AW9dnXR4AQFQ5d0T7vbGtOcMxIP7A0WhGMnm TXp2ZV1kuO1OYUMTPuVXuQ0ddqky1YtiRqBjOxNVBQwBcJY5EuMgC1hyfYBvm1o9 LrcD6KduPW81AxP6s2YCaxgl++WGuG6cyUVZC+ToO5uBjG1ossMwESxeMGuu1WxH wlMW48v54lRACGfx1bvS9o2p1Ax+Jj1LPomMuomulF+YOlJpWEJIeHve93NI9pYf KRmG29j62AUPVDaJtcQwi/g6EEyONmXDRAx+VG8/immM665KfkJU67oyfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrRPT0WkOuPjWmnV7UaLslM45CAMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtGMWDpy 0hohZyt6e61Nw73rjfwUucV6AMqKbbDBN/r071h6gtQEFLiaXO4yxCZG6GW7pj7m VGx3Wqh/Rsr5T3/SqDkRIWyvaiOM7DjlLgdw7gdLU3wjjeVrPFtZa2OBOlR/d6G1 BTFm9vFVVbtqF6TjDb5GpPX3mc54YdhVIt0da2+jPg42q2C5rdWENjrtCRGJZD7z CLyX3U6RQfr/Az2ilmG3VhcnCWqNJJHt8OCOyyvFR9ydazlQQj9xhOuzMJuJkIQ5 1ed66WXUK8yVtUm4u5y4n79OpA9G+TrqWMZS90e6tookk/tPC8yRMXnJcF+0BnWF Xn1Msj12YDYQXw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:05:39 2026 by rpki-client