$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json) Hash identifier: YfRoSZcyH7cHWApQmNw6s84Nak4ZkhJzkZFRIjtKWq8= Subject key identifier: 9A:4B:2D:64:71:DB:4A:3E:BF:37:BF:DB:4A:8E:9E:B4:55:C6:9F:C6 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 01A1249D28EA8FE973A128D01B08B9AA111F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft Manifest number: 1798 Signing time: Sat 10 Oct 2026 07:00:41 +0000 Manifest this update: Sat 10 Oct 2026 07:00:41 +0000 Manifest next update: Sun 11 Oct 2026 07:00:41 +0000 Files and hashes: 1: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=) 2: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: ptnoV05HwqsyIMgHMLiiFRJDezyBmT1FKsVSSSDDato=) 3: 9l-1vV0lLMPdjVLZ8U4gIW0OkT8.roa (hash: kHoKR3oAF432BBb7GV322ecIos7vaNdfIEmHn7z4jA0=) 4: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=) 5: DgnHYMNEO3cW02ohlMn2axnldPY.roa (hash: vaq0LBl35c7hmyKRAqN3BqKt0SzicUAX8/qk3xf0Rag=) 6: EOKiA2av8D9tfqyUWidlxDIVF7I.roa (hash: a+NxQmmW/zjcx38he+RtlHbBR768yZhQrdN+Qy40tRQ=) 7: Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa (hash: L5paJbyh0KobKYZie3ywNQHCitW9V1gxFkZu+lLubKY=) 8: KBFhtKcJq5uA7ADerkedr7ALsUc.roa (hash: zdLI7qiXR8cpmXvF/k9fx3+iYtigbpqLuzWcJYNq8OU=) 9: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=) 10: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (hash: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=) 11: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=) 12: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=) 13: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=) 14: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=) 15: e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa (hash: BxWMVdjBecDx+1X50nR2tWLJ9Ko6bUO8kFQ40XFyRn4=) 16: xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa (hash: dqVw1zy09p9At+bsRY80wcRAlgN5UMI3c+HTy+z8Ljo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:24:9d:28:ea:8f:e9:73:a1:28:d0:1b:08:b9:aa:11:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Oct 10 07:00:41 2026 GMT Not After : Oct 11 07:00:41 2026 GMT Subject: CN=9a4b2d6471db4a3ebf37bfdb4a8e9eb455c69fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:af:1e:40:53:25:05:31:50:6e:fd:28:20: 8a:2e:9a:4b:77:ab:a9:a8:fe:57:b7:1e:26:4d:a3: 20:ef:3f:c4:30:eb:2b:c2:7e:0c:9f:03:be:a7:d5: 31:d5:fe:2e:65:57:96:75:46:21:57:a0:79:2c:b5: 69:ec:74:12:c7:7b:67:99:96:35:62:cc:9a:4d:fb: 2c:de:ba:58:9f:f5:43:26:7c:82:d4:32:fb:2d:18: 61:1b:07:bd:b9:5b:76:ef:9d:7b:64:7e:21:bc:99: fd:0c:26:82:21:9d:ef:ab:7c:33:aa:e3:82:fa:75: 15:29:0c:7e:47:8c:bb:94:5d:e0:51:17:6b:1a:84: 90:7b:4c:c8:65:c7:d5:6e:68:4f:46:81:a5:e1:5b: f2:41:41:ae:cd:b1:13:e4:55:54:76:11:7e:de:bd: 0c:cb:4a:ee:e9:34:f3:3a:f4:55:aa:d1:4e:31:71: 65:fb:2e:7c:43:f9:c2:f5:07:61:00:5d:13:a9:cc: 4a:2c:49:1f:25:e7:d2:37:bd:1d:f9:25:9c:27:c7: dd:0b:51:c1:80:1e:89:15:8a:d2:cf:fc:e7:ff:99: e8:88:25:3d:be:a7:e3:14:c3:51:3e:68:cc:78:bc: e8:15:2e:24:de:19:be:26:37:25:46:e9:89:f6:39: 52:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4B:2D:64:71:DB:4A:3E:BF:37:BF:DB:4A:8E:9E:B4:55:C6:9F:C6 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:5e:33:35:f8:93:e8:ee:92:3f:30:a8:e2:8d:c3:72:ec:95: d9:e8:c4:cd:f1:41:3a:7b:00:10:46:57:d1:08:05:4e:78:b6: 3a:98:96:2e:28:97:3d:0b:d7:0f:24:76:c2:a7:31:4c:6c:ed: 3f:44:00:bf:bb:81:88:60:a5:9f:74:28:b7:fc:80:db:88:fa: 43:a3:4e:e2:c3:6e:f8:10:c6:3e:37:66:75:f0:56:83:80:ec: 0b:00:69:67:8a:a8:43:fa:97:52:5a:02:23:a5:f7:b8:a1:a9: 5e:51:96:3c:16:75:10:c8:55:fa:af:74:bb:ae:1d:59:c1:79: 63:ec:99:aa:32:8c:65:af:68:01:0b:26:f4:23:20:c4:e6:ec: 15:55:00:b5:33:d2:86:47:df:f1:f1:28:04:ab:9c:d4:46:3a: 75:c8:6a:4a:da:0d:a3:3a:48:c7:3e:87:75:be:9f:de:94:a5: bb:91:90:e7:5c:2c:a2:77:f9:38:13:47:37:0a:97:ac:f2:65: 54:97:80:d7:98:18:10:04:65:96:1c:6d:a1:4b:c1:dc:0c:b5: 40:2a:d2:cd:c9:33:af:6c:9b:34:43:f3:3a:97:d9:24:93:7b: 79:f1:f9:b6:92:f1:76:1e:71:18:3d:af:5c:cb:7f:6a:e7:9c: 12:e6:6e:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEknSjqj+lzoSjQGwi5qhEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYxMDEwMDcwMDQxWhcNMjYxMDExMDcwMDQxWjAzMTEwLwYDVQQD Eyg5YTRiMmQ2NDcxZGI0YTNlYmYzN2JmZGI0YThlOWViNDU1YzY5ZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6ivHkBTJQUxUG79KCCKLppLd6up qP5Xtx4mTaMg7z/EMOsrwn4MnwO+p9Ux1f4uZVeWdUYhV6B5LLVp7HQSx3tnmZY1 YsyaTfss3rpYn/VDJnyC1DL7LRhhGwe9uVt27517ZH4hvJn9DCaCIZ3vq3wzquOC +nUVKQx+R4y7lF3gURdrGoSQe0zIZcfVbmhPRoGl4VvyQUGuzbET5FVUdhF+3r0M y0ru6TTzOvRVqtFOMXFl+y58Q/nC9QdhAF0TqcxKLEkfJefSN70d+SWcJ8fdC1HB gB6JFYrSz/zn/5noiCU9vqfjFMNRPmjMeLzoFS4k3hm+JjclRumJ9jlSFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpLLWRx20o+vze/20qOnrRVxp/GMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGV4zNfiT 6O6SPzCo4o3DcuyV2ejEzfFBOnsAEEZX0QgFTni2OpiWLiiXPQvXDyR2wqcxTGzt P0QAv7uBiGCln3Qot/yA24j6Q6NO4sNu+BDGPjdmdfBWg4DsCwBpZ4qoQ/qXUloC I6X3uKGpXlGWPBZ1EMhV+q90u64dWcF5Y+yZqjKMZa9oAQsm9CMgxObsFVUAtTPS hkff8fEoBKuc1EY6dchqStoNozpIxz6Hdb6f3pSlu5GQ51wsonf5OBNHNwqXrPJl VJeA15gYEARllhxtoUvB3Ay1QCrSzckzr2ybNEPzOpfZJJN7efH5tpLxdh5xGD2v XMt/auecEuZu3g== -----END CERTIFICATE-----Generated at Sat Oct 10 14:52:44 2026 by rpki-client