$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json) Hash identifier: 9b1qYGc1aY9xN7SdaC074M1bBOG+67Jh64GOwI3YbtU= Subject key identifier: 1F:BD:06:A0:5B:40:48:B1:B9:74:A8:9C:36:8A:63:48:F9:BC:96:A0 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019D9A06D98EE1247A6B1E78C367D32FBCC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft Manifest number: 1598 Signing time: Fri 17 Apr 2026 06:00:33 +0000 Manifest this update: Fri 17 Apr 2026 06:00:33 +0000 Manifest next update: Sat 18 Apr 2026 06:00:33 +0000 Files and hashes: 1: 04AoVxjBetq6uzr8Trjx1RVUhaM.roa (hash: Sss0a/NwObdXT4eZeD2s2rS/zf/fTumkYihBh1YTsso=) 2: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=) 3: 12-QpuXSG6_8hdl7cf1qgoYRbQ0.roa (hash: mN467/7GywnhA1L7FMjs4ZJkbmIwDxnvQEUBR43WDpM=) 4: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: TIKL0mLu75XUwdaFFQ6ocxs4KXN9NN6iLfHMyjq9yYQ=) 5: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=) 6: GvCaLEMtreWe0TE7iBl-Fn1BAQU.roa (hash: Orxttow5nHsbqOjaRE9vUN+mw4qCsQAWnb1ehA7+MP0=) 7: Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa (hash: L5paJbyh0KobKYZie3ywNQHCitW9V1gxFkZu+lLubKY=) 8: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=) 9: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (hash: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=) 10: O18vIz4ADrWfyTjWv9lwIBf2Q6w.roa (hash: 6t2fxSf+Lmbr9jOdSKExEayPddEKt375FWmUM1ayblc=) 11: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=) 12: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=) 13: SgqvO9qBL1fWo3aBJRZpGp4K-S0.roa (hash: BHxiE3ULzbcJ44lDjqkW1hve5g/jINED6rwFK00YXx0=) 14: UNh9HBTbmAczkdMFcByOEAYWU0Y.roa (hash: W4lijVHAWghHFrkC7iuPEmv32YE3H28oL8DpFRFvg/c=) 15: WSvHFGzj7Vgob_0_S9OtU-eYECo.roa (hash: wV4wq5Kwh3/1RV581fA5ENpc2zmKMDZQlEmeVs08398=) 16: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=) 17: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=) 18: djZFkLkOP1i4A3QD0iq7FYfbH8k.roa (hash: Ke0UPwLsbzS5tVeJA/RZ8i1nwVPlXEw7kayqjUa+RnI=) 19: e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa (hash: BxWMVdjBecDx+1X50nR2tWLJ9Ko6bUO8kFQ40XFyRn4=) 20: fzXSzzRGH69X9HG_DPX1UIdlnMc.roa (hash: 5e/q/Of0/VbRaI+58tUil5lHG2B8yQNHwFd7IDN7AnA=) 21: hitEbIx3QHgLDA0SFmdJO655wRk.roa (hash: XH2gw7V46PtDEZkxMpXOiXnwxoLCx2Bsx6+D3IRPEM0=) 22: rZRJXwJNJ3BfK_DT3CgjF4Gzyag.roa (hash: rFZHyfSVT5PCl89WaarZZiQd7lJ5nZroQNMf7o6RjwQ=) 23: rfIN427V9zPCMZ-z5PwfYOKvWvE.roa (hash: /rLACCeghRFqZopyBKHtIJ9ZVC/Uf5aLpLTNEVJcleE=) 24: t3pdRfKg9vRZuho18SU4sz61E8E.roa (hash: b45C4gL+ScH3KExCK0HAfDIRzNCHEOb/I9PjveaM9Ys=) 25: xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa (hash: dqVw1zy09p9At+bsRY80wcRAlgN5UMI3c+HTy+z8Ljo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:06:d9:8e:e1:24:7a:6b:1e:78:c3:67:d3:2f:bc:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Apr 17 06:00:33 2026 GMT Not After : Apr 18 06:00:33 2026 GMT Subject: CN=1fbd06a05b4048b1b974a89c368a6348f9bc96a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:42:e8:06:4a:32:e3:0c:b6:33:71:05:c3: 64:21:a7:c8:5d:c9:e4:40:2c:66:50:ef:c2:60:2d: 5e:c7:30:4b:44:91:99:d3:a2:76:b4:b9:7c:60:39: b6:21:98:cc:95:c2:c0:7e:73:19:bf:11:7e:cb:eb: 4a:4d:cb:04:f2:70:2b:dc:33:8c:46:02:2b:2a:55: 2e:79:fc:b9:e5:28:a2:35:3d:78:e4:66:e2:71:d8: b0:ab:5c:2c:01:e6:8e:f9:d5:14:f8:83:b0:a5:21: 11:06:2a:f0:b5:b6:a0:a7:47:aa:d0:97:46:9e:bf: 61:2e:2c:8b:cd:76:96:1b:e0:55:6d:9a:a2:6b:fc: 1a:ac:78:bb:0c:ad:06:bd:34:32:04:34:89:3f:71: 54:05:00:66:c9:3c:c7:99:3d:6a:b7:3d:e4:5b:39: 19:c8:5a:c4:96:0c:c8:d4:8c:f0:52:d1:79:d4:2a: e5:15:a0:7a:45:1e:70:1c:6d:ba:f7:3b:bb:39:74: f0:19:a2:68:cd:05:69:77:af:9e:75:30:5c:b3:83: f4:b5:61:88:00:bb:1b:9d:5c:39:9e:1d:64:df:06: 1c:50:a2:45:cc:bb:80:49:ac:b0:ef:d4:90:c8:b3: 1d:c1:ad:5b:e7:62:8b:22:86:65:23:4e:24:6e:77: 43:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BD:06:A0:5B:40:48:B1:B9:74:A8:9C:36:8A:63:48:F9:BC:96:A0 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:25:dd:e7:7f:07:cc:4b:a5:28:55:3a:f1:05:4e:3c:b8:f8: 9b:09:9f:f3:fb:39:52:e9:ac:58:6e:4c:ed:2e:91:43:3d:52: ce:f8:ee:c3:65:44:47:61:22:33:91:ed:62:96:78:f3:24:52: b8:51:c0:e1:d6:73:9c:bc:62:29:63:c7:22:a4:19:c2:1e:17: c7:1a:40:3f:89:61:cb:51:cb:eb:f5:6a:ff:20:1a:70:34:ad: 65:ae:85:15:79:3d:90:e6:fb:9f:03:44:ce:1a:63:ed:17:7f: 3c:43:18:3c:69:93:ee:a9:b4:f5:c7:1f:08:c4:03:01:50:5b: 1d:7d:da:f5:4b:24:84:1d:06:e4:04:70:7b:54:33:2a:d6:77: 2c:8b:a5:4f:b7:a4:67:c0:8c:f8:7d:c3:4e:10:08:9c:75:91: 08:1e:06:a3:24:b3:8d:17:fe:5e:dc:6f:b1:b3:fb:c9:78:53: 7f:50:84:b5:6f:bd:58:af:cb:62:b0:2d:86:9d:5e:2c:04:aa: f8:10:f2:cf:2c:89:6e:87:b4:34:28:3f:e5:5a:fc:c2:4b:5e: 4c:34:42:19:48:3a:12:6d:09:4e:a9:2f:17:49:ef:e4:d3:66: 07:16:ce:6a:3a:98:e3:e6:b6:32:39:0a:40:b7:ac:dc:9b:71: 4c:32:59:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aBtmO4SR6ax54w2fTL7zIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwNDE3MDYwMDMzWhcNMjYwNDE4MDYwMDMzWjAzMTEwLwYDVQQD EygxZmJkMDZhMDViNDA0OGIxYjk3NGE4OWMzNjhhNjM0OGY5YmM5NmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ5C6AZKMuMMtjNxBcNkIafIXcnk QCxmUO/CYC1exzBLRJGZ06J2tLl8YDm2IZjMlcLAfnMZvxF+y+tKTcsE8nAr3DOM RgIrKlUuefy55SiiNT145Gbicdiwq1wsAeaO+dUU+IOwpSERBirwtbagp0eq0JdG nr9hLiyLzXaWG+BVbZqia/warHi7DK0GvTQyBDSJP3FUBQBmyTzHmT1qtz3kWzkZ yFrElgzI1IzwUtF51CrlFaB6RR5wHG269zu7OXTwGaJozQVpd6+edTBcs4P0tWGI ALsbnVw5nh1k3wYcUKJFzLuASayw79SQyLMdwa1b52KLIoZlI04kbndDkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+9BqBbQEixuXSonDaKY0j5vJagMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSXd538H zEulKFU68QVOPLj4mwmf8/s5UumsWG5M7S6RQz1Szvjuw2VER2EiM5HtYpZ48yRS uFHA4dZznLxiKWPHIqQZwh4XxxpAP4lhy1HL6/Vq/yAacDStZa6FFXk9kOb7nwNE zhpj7Rd/PEMYPGmT7qm09ccfCMQDAVBbHX3a9UskhB0G5ARwe1QzKtZ3LIulT7ek Z8CM+H3DThAInHWRCB4GoySzjRf+XtxvsbP7yXhTf1CEtW+9WK/LYrAthp1eLASq +BDyzyyJboe0NCg/5Vr8wkteTDRCGUg6Em0JTqkvF0nv5NNmBxbOajqY4+a2MjkK QLes3JtxTDJZxQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:08:38 2026 by rpki-client