$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json) Hash identifier: TB0A6jMZPoBsOpxCoenNAfvQ9Kx5vQoZwp9ciaANvMQ= Subject key identifier: D7:F3:36:ED:0B:0B:DA:18:DA:62:B2:85:0A:2A:01:22:A6:80:80:7C Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019CADFE84F4672F226839B25812FCB0146F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft Manifest number: 14EE Signing time: Mon 02 Mar 2026 10:01:04 +0000 Manifest this update: Mon 02 Mar 2026 10:01:04 +0000 Manifest next update: Tue 03 Mar 2026 10:01:04 +0000 Files and hashes: 1: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=) 2: 12-QpuXSG6_8hdl7cf1qgoYRbQ0.roa (hash: mN467/7GywnhA1L7FMjs4ZJkbmIwDxnvQEUBR43WDpM=) 3: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: CgJtnhiDtOwMNbIlOm3LQFNqez4pjYh0zEAELCwDHKE=) 4: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=) 5: DPcoyqmJ-ibKgBXQhldGarXkL9k.roa (hash: yqjMHYnxu0/ljepDij0QNQ+cIeV7Y0MQ0KsJKwUmcN4=) 6: GvCaLEMtreWe0TE7iBl-Fn1BAQU.roa (hash: Orxttow5nHsbqOjaRE9vUN+mw4qCsQAWnb1ehA7+MP0=) 7: LAxiO-6YgS115jRj6ZTnBKPWNX4.roa (hash: C23tlT1P7iKRhM2sakjGtkH0XaDdJ8MZzZu2tCD1PZY=) 8: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=) 9: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (hash: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=) 10: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=) 11: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=) 12: Scp2nM5P7b3JtI-qLRoRM-zY2DQ.roa (hash: ReY7U0Hu+rWmNt1KbWijPc8uks4szEsfEvUJpvT89z4=) 13: SgqvO9qBL1fWo3aBJRZpGp4K-S0.roa (hash: BHxiE3ULzbcJ44lDjqkW1hve5g/jINED6rwFK00YXx0=) 14: UNh9HBTbmAczkdMFcByOEAYWU0Y.roa (hash: W4lijVHAWghHFrkC7iuPEmv32YE3H28oL8DpFRFvg/c=) 15: WSvHFGzj7Vgob_0_S9OtU-eYECo.roa (hash: wV4wq5Kwh3/1RV581fA5ENpc2zmKMDZQlEmeVs08398=) 16: YXqFBM3Wgxl248Uckf87jL9-Y10.roa (hash: R/aH1v+NPoF+QYmVFlQRN2Ii0gntVyI3TwXZnW5icOc=) 17: YaOfJgRLouGx6tole4Xd3URpTRI.roa (hash: iNqNR/rlJQ3emWR1ZSYN26bQpkUgaYYux6SlwS0SDiA=) 18: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=) 19: dca88p-eNfR0RjuTT48u3qYdsU4.roa (hash: LkTWX4mzrSibQMirmPorFtvVIp4ZsztyLfP+2xn0pJE=) 20: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=) 21: fKoGmparJHlozAcZTA3yAU4ZJcg.roa (hash: 60cR3HY+vUpddXNenTUdu1Z2bcSowrKZj1dsz2XqYPY=) 22: fzXSzzRGH69X9HG_DPX1UIdlnMc.roa (hash: 5e/q/Of0/VbRaI+58tUil5lHG2B8yQNHwFd7IDN7AnA=) 23: hsF-37Wxovsq4ET3HfuSoaGDtNM.roa (hash: S++/ePDHA6COSJvBXLPEIeF68zg4DsT2XPbEQ6Z+HgM=) 24: nOZiS9ipdCo86_2swgfQMd065RY.roa (hash: 284FGn82DHerRbpzHLbn3Hc5ZwaGcd6vcd6k3JnrdOM=) 25: rfIN427V9zPCMZ-z5PwfYOKvWvE.roa (hash: /rLACCeghRFqZopyBKHtIJ9ZVC/Uf5aLpLTNEVJcleE=) 26: rx5FrArsEh1Pd7b0NgJ2Xd6ltaE.roa (hash: e1BXfn+1OHZJUEKq2u7HgsMulbmjg22+GP7JrrmxT/4=) 27: sbLArHFCdDYFp-yc45bbnWWHLZk.roa (hash: 50x3swjFzea0ZMQjb8qdEs7d3Kpvn0F3/nLybrYDPSY=) 28: tsW17cExldWKQOsmoSu7CzC3TsU.roa (hash: kaSKKVjmW0k6rthJ1U6bxZ/OsgU+B2Z01KcEBlJgG/k=) 29: v0WTRVyIOMbnSSTHqyRygXScgPU.roa (hash: AwqC2DBh8s09B6HD8Dw/C/8pvsrZMaYsxFJg6FacTeA=) 30: z88SnKsP5pvSo6qR47qZ1pWeSD0.roa (hash: oetmktJllcCOEDyCyKgeosdoCyMncQj+BUuqs+6CrFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:fe:84:f4:67:2f:22:68:39:b2:58:12:fc:b0:14:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Mar 2 10:01:04 2026 GMT Not After : Mar 3 10:01:04 2026 GMT Subject: CN=d7f336ed0b0bda18da62b2850a2a0122a680807c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:5b:f0:27:23:b7:b5:1a:2f:18:22:c3:64: f5:02:42:ca:2d:87:4d:9d:f6:ee:ab:3a:79:63:49: e2:e9:b4:7b:c1:8a:46:82:d4:a9:a6:a1:64:03:21: ea:2b:45:a3:b2:c4:cd:19:c0:05:7f:50:0d:93:7e: 9d:f1:b3:99:c5:34:5d:43:4a:96:a0:f8:f3:1d:78: 53:44:eb:87:3f:a7:c0:f4:f0:eb:be:b6:4e:b2:c9: 94:1f:9c:c8:5f:c8:9c:66:fc:0c:96:22:c1:a8:9f: 1b:36:cc:35:13:c9:08:a4:f2:40:16:49:c8:29:75: ae:cc:a2:40:4c:07:c8:e8:af:96:bd:60:76:ba:73: 05:fa:7a:26:b1:b3:f6:e7:32:dd:d3:e9:8e:ff:70: d4:af:80:00:1a:a4:6f:1f:6c:de:89:12:ae:2f:66: d7:24:3f:6c:48:f4:0e:97:43:52:18:97:7c:02:47: 4c:56:30:ce:95:bf:60:ca:70:52:cf:41:4d:b2:8b: 93:9e:99:32:af:4a:b3:30:9d:a6:16:8e:91:42:1b: 7c:27:64:84:28:d2:3f:e8:33:c1:4a:0e:2a:97:3f: 1c:72:7e:d7:ad:e9:e0:3c:bd:af:9d:b1:34:1b:ae: 07:79:85:75:3e:94:c5:2f:c0:2a:17:de:fb:16:05: fc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F3:36:ED:0B:0B:DA:18:DA:62:B2:85:0A:2A:01:22:A6:80:80:7C X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:91:d5:4a:83:1a:38:99:ab:5a:36:2f:ea:6b:01:1e:83:6e: c7:16:57:09:00:d6:6f:1a:f1:1f:45:4a:14:8b:71:21:4d:a1: 5f:eb:81:54:75:db:74:11:20:f6:8c:f2:45:0b:58:a9:7c:72: be:0a:2e:63:75:c2:82:f5:94:5e:7b:59:c4:e9:6a:e8:1f:16: 3a:00:43:f8:65:d3:41:54:57:e2:53:9a:c4:77:d2:96:ff:c3: e2:ed:4e:a4:17:c8:34:fd:b9:63:d6:ea:39:9c:53:e2:5c:3d: df:8b:7a:2b:72:8a:d9:e1:a8:d3:bf:b1:94:3c:85:24:1f:a2: c4:38:3f:01:b6:f6:21:56:47:99:9f:5a:28:b8:57:d6:e5:42: 05:9f:90:80:65:7f:ba:88:c4:bb:0a:c2:cc:d1:91:36:20:5d: bd:e3:6d:cb:f5:e2:df:1b:d4:4b:25:94:4f:01:18:e6:5d:9b: e1:c5:22:f0:ee:e3:71:7f:cf:29:ea:e0:9c:4d:9a:4b:75:e2: 7b:bb:93:35:d7:ec:1b:eb:b5:71:31:6a:c8:3b:3d:dc:2e:a9: 60:52:27:92:7a:8a:04:3d:13:09:ca:93:7c:fd:3f:1f:7d:79: 05:70:81:b9:c5:4a:f0:1a:8b:cc:27:73:12:6c:ae:4d:66:3c: 15:2f:8a:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyt/oT0Zy8iaDmyWBL8sBRvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMzAyMTAwMTA0WhcNMjYwMzAzMTAwMTA0WjAzMTEwLwYDVQQD EyhkN2YzMzZlZDBiMGJkYTE4ZGE2MmIyODUwYTJhMDEyMmE2ODA4MDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst9b8Ccjt7UaLxgiw2T1AkLKLYdN nfbuqzp5Y0ni6bR7wYpGgtSppqFkAyHqK0WjssTNGcAFf1ANk36d8bOZxTRdQ0qW oPjzHXhTROuHP6fA9PDrvrZOssmUH5zIX8icZvwMliLBqJ8bNsw1E8kIpPJAFknI KXWuzKJATAfI6K+WvWB2unMF+nomsbP25zLd0+mO/3DUr4AAGqRvH2zeiRKuL2bX JD9sSPQOl0NSGJd8AkdMVjDOlb9gynBSz0FNsouTnpkyr0qzMJ2mFo6RQht8J2SE KNI/6DPBSg4qlz8ccn7XrengPL2vnbE0G64HeYV1PpTFL8AqF977FgX8kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfzNu0LC9oY2mKyhQoqASKmgIB8MB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZHVSoMa OJmrWjYv6msBHoNuxxZXCQDWbxrxH0VKFItxIU2hX+uBVHXbdBEg9ozyRQtYqXxy vgouY3XCgvWUXntZxOlq6B8WOgBD+GXTQVRX4lOaxHfSlv/D4u1OpBfINP25Y9bq OZxT4lw934t6K3KK2eGo07+xlDyFJB+ixDg/Abb2IVZHmZ9aKLhX1uVCBZ+QgGV/ uojEuwrCzNGRNiBdveNty/Xi3xvUSyWUTwEY5l2b4cUi8O7jcX/PKergnE2aS3Xi e7uTNdfsG+u1cTFqyDs93C6pYFInknqKBD0TCcqTfP0/H315BXCBucVK8BqLzCdz EmyuTWY8FS+Kig== -----END CERTIFICATE-----Generated at Mon Mar 2 16:45:14 2026 by rpki-client