$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json) Hash identifier: XLobahpNG6cjpqJCS/gWshyynIyBEm+drGS4uD3iXnM= Subject key identifier: 6F:EE:E4:1E:29:46:AE:62:28:08:C4:1B:27:AA:32:2C:52:E3:A5:29 Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Certificate serial: 019FA93DECC454B83C6B5A37809F17978F3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft Manifest number: 02D1 Signing time: Tue 28 Jul 2026 15:00:35 +0000 Manifest this update: Tue 28 Jul 2026 15:00:35 +0000 Manifest next update: Wed 29 Jul 2026 15:00:35 +0000 Files and hashes: 1: 6pKfmev0hnHoQYvyLlxq6lN61Ac.roa (hash: oED6iNOIvqNMWfh9ZbIfZ0p3WvaM7LQ4X8hPxL6izFc=) 2: F7OazNxmHQIZG_1NbQyBZDuRfp0.roa (hash: kfyCu9kGmBZWf6iCvzc+imifHO9IEOu6CS+tqE1Bls8=) 3: IGonrweKcV3pBiFmxgMN0Hhq74c.roa (hash: YkHvQYVpbz1V6t76f23kYkJHWGSnZkMw7J+Y7FV0iWY=) 4: ZPkrtvVur46cS-5w8dwIkAjNZYE.roa (hash: vPaByPHtcOmoXzXWkiUeeFN03AP9nPQMC4Ibqh8NElg=) 5: ZvN7c-NtqYH-PaeLJUmdEPO5iC8.roa (hash: RkOPQkujkcLmBf4maBg9uGkdxV/kCwgeqMyADPSii/E=) 6: bGlKraIhhwlevroXgB4rLlo-YME.roa (hash: oIkXDeJlSani/t+wUjX7TTQDY2OjVB6ERk95GxJeYN8=) 7: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: kntl5xF2BbfYEnUpdTVry1Lj3iAWt/XWCjtGDP8je2U=) 8: nu8XADsimCod0_uWl8egJ3aFHEw.roa (hash: H55dZSXKTNI4+9o7BFR1/GCpspjJcbHLdvt5EmFjk+U=) 9: q1_uvTwS2odl5ebIbbIhhY5492k.roa (hash: rcptFlj+yIPXEnP3ZQnKAkTZfAlxMM8LHnpHcZGEHWI=) 10: qo3RmaJil-tmg6e3jCPqKh_xFAo.roa (hash: DLtprsoHKdJkHToMaxiYCDgKpyQfT89HL7h3BW0fsgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3d:ec:c4:54:b8:3c:6b:5a:37:80:9f:17:97:8f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Validity Not Before: Jul 28 15:00:35 2026 GMT Not After : Jul 29 15:00:35 2026 GMT Subject: CN=6feee41e2946ae622808c41b27aa322c52e3a529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:88:55:15:9e:cd:2e:33:c0:3f:3e:cf:19: e1:e7:71:ec:39:0d:75:d7:f3:5c:4b:be:c2:d1:98: 1a:c8:21:f2:68:f9:63:7d:82:ae:23:ec:34:4f:99: bd:42:78:ee:98:5c:59:da:d6:ab:85:b5:51:c7:1a: ec:a2:7b:3f:c9:aa:b5:4e:5e:52:61:c1:8c:15:d9: 38:bf:1e:88:9d:68:27:7c:94:5b:a2:78:df:01:ea: bb:d5:6b:47:31:21:c7:78:ad:61:1e:34:ca:ce:a4: ee:fb:87:bf:07:7a:0c:44:30:38:01:89:69:13:74: cd:07:59:90:6e:63:dc:cd:69:1a:ae:c8:25:bc:53: c8:b2:bb:f8:10:d5:0b:aa:ed:74:e9:1a:9e:65:2d: d4:f8:22:6d:86:b6:2b:0c:9c:98:c0:7e:ad:6b:66: 65:af:6b:99:b3:85:2e:31:21:55:4f:dd:6a:72:b8: e7:d8:ed:69:52:db:77:f7:7d:48:77:2a:9e:b9:33: be:fc:cd:2c:ce:34:a8:12:bb:ce:60:c6:78:1a:ea: 12:df:69:33:67:d5:c7:af:24:da:03:7f:99:b9:a1: 4d:65:e7:f0:97:13:d0:58:90:de:a2:35:9e:8d:d2: 87:f7:00:96:28:cf:41:39:39:dc:de:7d:39:3c:c1: e9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EE:E4:1E:29:46:AE:62:28:08:C4:1B:27:AA:32:2C:52:E3:A5:29 X509v3 Authority Key Identifier: keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ea:49:ca:e5:87:87:ed:f7:c8:a8:23:57:76:04:f4:ba:f4: 22:48:96:4b:80:64:01:12:aa:af:96:95:40:7a:f6:e4:98:d8: 34:fc:38:07:02:97:ed:12:09:60:58:68:35:03:c3:a2:ca:92: 4a:e3:05:88:c6:27:06:e1:ca:89:16:33:d5:24:1e:a7:ac:1a: cb:27:0e:05:6a:5d:8f:a9:82:89:58:be:1f:bb:0c:52:f1:9d: 57:2d:2a:06:7c:b7:1a:9a:17:72:87:20:b9:10:09:7c:06:43: a4:e6:a6:ef:5a:81:55:d2:f4:6e:4e:bb:e5:ec:74:be:56:35: bd:f4:b3:37:a7:bd:64:6b:a4:78:ff:55:32:72:37:b9:4c:d5: c9:f1:50:63:ca:e9:18:68:2a:ca:a3:01:f3:39:9f:cb:7d:6f: 4c:bc:6e:0a:23:35:cb:fb:d4:57:68:cc:96:16:7f:3a:73:3f: e7:4a:30:1f:7d:93:ac:fe:79:04:6b:19:f0:8c:7a:13:1a:de: fd:13:58:36:b6:48:6b:87:36:92:19:b6:58:70:4d:b0:fb:8e: 62:55:a0:d4:c6:12:c4:d3:d4:d6:07:b8:c2:3e:97:6b:b8:c5: 8c:ae:1c:ef:dd:c7:7a:25:34:eb:e6:29:e5:c2:0b:cc:87:fd: 9f:bd:bc:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPezEVLg8a1o3gJ8Xl48+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl NGYyYzYwHhcNMjYwNzI4MTUwMDM1WhcNMjYwNzI5MTUwMDM1WjAzMTEwLwYDVQQD Eyg2ZmVlZTQxZTI5NDZhZTYyMjgwOGM0MWIyN2FhMzIyYzUyZTNhNTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLqIVRWezS4zwD8+zxnh53HsOQ11 1/NcS77C0ZgayCHyaPljfYKuI+w0T5m9QnjumFxZ2tarhbVRxxrsons/yaq1Tl5S YcGMFdk4vx6InWgnfJRbonjfAeq71WtHMSHHeK1hHjTKzqTu+4e/B3oMRDA4AYlp E3TNB1mQbmPczWkarsglvFPIsrv4ENULqu106RqeZS3U+CJthrYrDJyYwH6ta2Zl r2uZs4UuMSFVT91qcrjn2O1pUtt3931IdyqeuTO+/M0szjSoErvOYMZ4GuoS32kz Z9XHryTaA3+ZuaFNZefwlxPQWJDeojWejdKH9wCWKM9BOTnc3n05PMHpVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/u5B4pRq5iKAjEGyeqMixS46UpMB8GA1UdIwQY MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt NzRkOTFjZGJlMTk1LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1 LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOpJyuWH h+33yKgjV3YE9Lr0IkiWS4BkARKqr5aVQHr25JjYNPw4BwKX7RIJYFhoNQPDosqS SuMFiMYnBuHKiRYz1SQep6wayycOBWpdj6mCiVi+H7sMUvGdVy0qBny3GpoXcocg uRAJfAZDpOam71qBVdL0bk675ex0vlY1vfSzN6e9ZGukeP9VMnI3uUzVyfFQY8rp GGgqyqMB8zmfy31vTLxuCiM1y/vUV2jMlhZ/OnM/50owH32TrP55BGsZ8Ix6Exre /RNYNrZIa4c2khm2WHBNsPuOYlWg1MYSxNPU1ge4wj6Xa7jFjK4c793HeiU06+Yp 5cILzIf9n728QA== -----END CERTIFICATE-----Generated at Tue Jul 28 17:17:51 2026 by rpki-client