$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json) Hash identifier: 1rIDXhgvISKa14eoNjK6C8efMM9BQn5NDvRaaDg3VxA= Subject key identifier: C1:16:82:FA:17:32:39:49:E8:D3:90:CE:0E:A8:36:DB:76:7C:0A:24 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019D9BF5EE788AE4DEECD11E2C0F28992ABD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft Manifest number: 1599 Signing time: Fri 17 Apr 2026 15:01:18 +0000 Manifest this update: Fri 17 Apr 2026 15:01:18 +0000 Manifest next update: Sat 18 Apr 2026 15:01:18 +0000 Files and hashes: 1: 04AoVxjBetq6uzr8Trjx1RVUhaM.roa (hash: Sss0a/NwObdXT4eZeD2s2rS/zf/fTumkYihBh1YTsso=) 2: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=) 3: 12-QpuXSG6_8hdl7cf1qgoYRbQ0.roa (hash: mN467/7GywnhA1L7FMjs4ZJkbmIwDxnvQEUBR43WDpM=) 4: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: /7kiRdTuV/YX3DAtA8zo81RlsRe/DDLFoOyLZvRc0OA=) 5: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=) 6: GvCaLEMtreWe0TE7iBl-Fn1BAQU.roa (hash: Orxttow5nHsbqOjaRE9vUN+mw4qCsQAWnb1ehA7+MP0=) 7: Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa (hash: L5paJbyh0KobKYZie3ywNQHCitW9V1gxFkZu+lLubKY=) 8: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=) 9: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (hash: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=) 10: O18vIz4ADrWfyTjWv9lwIBf2Q6w.roa (hash: 6t2fxSf+Lmbr9jOdSKExEayPddEKt375FWmUM1ayblc=) 11: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=) 12: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=) 13: SgqvO9qBL1fWo3aBJRZpGp4K-S0.roa (hash: BHxiE3ULzbcJ44lDjqkW1hve5g/jINED6rwFK00YXx0=) 14: UNh9HBTbmAczkdMFcByOEAYWU0Y.roa (hash: W4lijVHAWghHFrkC7iuPEmv32YE3H28oL8DpFRFvg/c=) 15: WSvHFGzj7Vgob_0_S9OtU-eYECo.roa (hash: wV4wq5Kwh3/1RV581fA5ENpc2zmKMDZQlEmeVs08398=) 16: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=) 17: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=) 18: djZFkLkOP1i4A3QD0iq7FYfbH8k.roa (hash: Ke0UPwLsbzS5tVeJA/RZ8i1nwVPlXEw7kayqjUa+RnI=) 19: e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa (hash: BxWMVdjBecDx+1X50nR2tWLJ9Ko6bUO8kFQ40XFyRn4=) 20: fzXSzzRGH69X9HG_DPX1UIdlnMc.roa (hash: 5e/q/Of0/VbRaI+58tUil5lHG2B8yQNHwFd7IDN7AnA=) 21: hitEbIx3QHgLDA0SFmdJO655wRk.roa (hash: XH2gw7V46PtDEZkxMpXOiXnwxoLCx2Bsx6+D3IRPEM0=) 22: rZRJXwJNJ3BfK_DT3CgjF4Gzyag.roa (hash: rFZHyfSVT5PCl89WaarZZiQd7lJ5nZroQNMf7o6RjwQ=) 23: rfIN427V9zPCMZ-z5PwfYOKvWvE.roa (hash: /rLACCeghRFqZopyBKHtIJ9ZVC/Uf5aLpLTNEVJcleE=) 24: t3pdRfKg9vRZuho18SU4sz61E8E.roa (hash: b45C4gL+ScH3KExCK0HAfDIRzNCHEOb/I9PjveaM9Ys=) 25: xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa (hash: dqVw1zy09p9At+bsRY80wcRAlgN5UMI3c+HTy+z8Ljo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 14:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:f5:ee:78:8a:e4:de:ec:d1:1e:2c:0f:28:99:2a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Apr 17 15:01:18 2026 GMT Not After : Apr 18 15:01:18 2026 GMT Subject: CN=c11682fa17323949e8d390ce0ea836db767c0a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b2:b0:18:27:d3:fa:6a:3d:7f:88:c6:d2:4c: 9e:8b:17:91:ef:93:12:97:d6:5a:0a:2f:ca:d0:48: 88:02:15:08:05:61:58:d4:aa:04:cb:f9:98:6d:a8: a0:9d:5f:7c:55:7e:15:70:93:28:e5:2f:ba:9e:7a: 6d:a2:db:f9:ca:35:65:34:27:35:c6:95:d9:19:b6: 54:d4:54:be:9c:58:a7:ab:b7:3c:c3:45:f3:cd:49: 1b:81:ea:e1:e7:48:8f:e4:57:4e:8a:e5:54:da:10: 7d:ae:08:e2:b1:c8:bc:56:9a:fd:f1:19:2f:ee:0a: ab:65:50:77:00:69:d9:c4:cd:5b:eb:8b:21:f9:ff: 7a:bf:ff:36:7c:bb:f0:5e:15:d9:97:d4:99:91:d1: 6c:95:95:4e:1f:cc:5d:7a:cb:a1:d5:17:06:49:7d: bd:c2:02:52:fd:ed:12:93:91:9e:3e:d4:da:1e:eb: 41:b5:eb:91:15:0d:f4:00:66:aa:b7:c3:66:5f:62: 02:d6:e3:7c:20:00:50:96:a2:0d:ad:52:71:9d:c9: 5c:46:ea:a3:8b:91:c0:45:b9:b2:d7:8c:bf:3b:57: aa:55:5c:da:07:38:c6:c4:b1:9f:43:52:67:52:03: 6b:57:64:96:18:ae:ec:a8:d6:c2:39:02:c4:47:40: bb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:16:82:FA:17:32:39:49:E8:D3:90:CE:0E:A8:36:DB:76:7C:0A:24 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:cd:37:e2:4a:d8:ab:d1:c3:6f:d9:d3:46:29:a3:77:23:d4: 78:8a:1b:7a:b4:6b:72:ad:66:1b:c4:5b:d5:fe:86:d9:1c:6d: 51:6a:7e:50:dd:5b:9f:1d:69:44:86:dd:5f:a9:12:43:d5:22: a8:b7:29:85:c5:06:e9:b8:00:93:77:bc:21:f3:ba:2d:97:be: 31:c7:6f:fb:35:c9:00:de:69:60:78:e8:ba:65:e9:15:db:36: fb:21:6b:94:e7:cc:a9:90:bc:00:ed:b4:17:37:0e:98:08:13: 21:e1:da:04:c2:1d:58:67:2d:8f:df:0e:af:57:48:8a:5f:8e: de:b2:ff:6b:5d:ec:d4:30:cd:cb:04:48:7c:35:4f:82:34:71: a8:02:7b:00:ae:ab:c5:b7:f2:d9:0b:17:ea:a9:85:28:30:f6: 88:a8:16:75:a7:02:ae:cb:35:78:0d:23:6f:24:ed:51:9b:3e: 49:c9:7f:4b:5f:f5:5e:70:46:99:00:8d:4f:ef:31:6b:0a:fd: 36:d8:53:99:2d:93:30:48:68:7d:c9:8c:91:60:b8:6b:4c:95: a9:9a:f1:78:2b:43:6d:19:9c:05:48:b6:53:d8:26:3f:cc:6c: 8c:b6:8d:f4:eb:ed:f4:59:f5:f6:59:b1:1e:5c:73:23:6e:41: af:79:1d:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2b9e54iuTe7NEeLA8omSq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwNDE3MTUwMTE4WhcNMjYwNDE4MTUwMTE4WjAzMTEwLwYDVQQD EyhjMTE2ODJmYTE3MzIzOTQ5ZThkMzkwY2UwZWE4MzZkYjc2N2MwYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LKwGCfT+mo9f4jG0kyeixeR75MS l9ZaCi/K0EiIAhUIBWFY1KoEy/mYbaignV98VX4VcJMo5S+6nnptotv5yjVlNCc1 xpXZGbZU1FS+nFinq7c8w0XzzUkbgerh50iP5FdOiuVU2hB9rgjisci8Vpr98Rkv 7gqrZVB3AGnZxM1b64sh+f96v/82fLvwXhXZl9SZkdFslZVOH8xdesuh1RcGSX29 wgJS/e0Sk5GePtTaHutBteuRFQ30AGaqt8NmX2IC1uN8IABQlqINrVJxnclcRuqj i5HARbmy14y/O1eqVVzaBzjGxLGfQ1JnUgNrV2SWGK7sqNbCOQLER0C7yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEWgvoXMjlJ6NOQzg6oNtt2fAokMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAos034krY q9HDb9nTRimjdyPUeIoberRrcq1mG8Rb1f6G2RxtUWp+UN1bnx1pRIbdX6kSQ9Ui qLcphcUG6bgAk3e8IfO6LZe+Mcdv+zXJAN5pYHjoumXpFds2+yFrlOfMqZC8AO20 FzcOmAgTIeHaBMIdWGctj98Or1dIil+O3rL/a13s1DDNywRIfDVPgjRxqAJ7AK6r xbfy2QsX6qmFKDD2iKgWdacCrss1eA0jbyTtUZs+Scl/S1/1XnBGmQCNT+8xawr9 NthTmS2TMEhofcmMkWC4a0yVqZrxeCtDbRmcBUi2U9gmP8xsjLaN9Ovt9Fn19lmx HlxzI25Br3kdnA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:27:15 2026 by rpki-client