$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft File: mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json) Hash identifier: /ff1dIHfBLrixgt7z5c3yWOkGqohzYZFj4D5gWU72vY= Subject key identifier: 6C:28:4B:7D:5C:AB:23:5D:2B:73:78:54:C7:3B:80:FB:CB:4F:29:FC Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 01A0C5C4DF1C69936395C6221577DDEC0547 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft Manifest number: 1A9B Signing time: Mon 21 Sep 2026 21:00:08 +0000 Manifest this update: Mon 21 Sep 2026 21:00:08 +0000 Manifest next update: Tue 22 Sep 2026 21:00:08 +0000 Files and hashes: 1: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (hash: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0=) 2: 2yaXAAUSdtsPMaSBJFquEdDTT6k.roa (hash: judwS/WZsJiXUyPGTQqvtLBMK0N9HxSeMb7YxOm0ElY=) 3: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (hash: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4=) 4: 6d_ENWzH-VQ6PZSxBVnrr_FPch4.roa (hash: nLEVzgKnOcDJKPh426JAlzQMVVXnAa8GP6UiExx+ycU=) 5: 877gblyC3fNplcxOQRcSVA_wkoU.roa (hash: FPmfqAGJMI/bwduEg7CvapHPJGcw4GGIWlU9wyWJ4Ns=) 6: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (hash: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU=) 7: CO3NGBtj6lvSDwNx7qgisnxcpZE.roa (hash: Ta+b1EmbPlRx8CBP3A/a0A01hRd22nzH/W3OVEU0ya4=) 8: DehND8NWso8fnWINtOcuecHBpxM.roa (hash: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg=) 9: Exzf4PskjTMc5LIyk1evDnbig4o.roa (hash: /XbM8Up/CzKNgL2qr7cqhEQox2OxF2jJdDjq9JA7I2M=) 10: F40rkkhDW3ybCB_12cIOKOyXk08.roa (hash: h+hLlHz7DDayf/In7Q6RDRACl8fHTXkiC3/X/Kl3h7E=) 11: Jtp72CS2jEm3lTCDgWP7039dKYg.roa (hash: Q1Hpm3kD459iodRBV3umbkyn+j4+wiimsCk0/+2lO84=) 12: Ke0VSjrkP1jgta_WS5ntQtfKR38.roa (hash: yxWTZVrICzskJJpD6AIg7gNqPSzszPgc+Bf6OnBQWQw=) 13: Kg06NaGezROeWtBK1qTOADXp_pQ.roa (hash: wmDFJ/5sVQtr4RNwEITHDUmCB7Qq4hdLVGdv9QNDX30=) 14: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (hash: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4=) 15: LnDxIxD-hluuct808CIO9EDyMIU.roa (hash: BcxRwhFwjkIGGKDrrvqL77SCEYThrU0rRvnjjzU14s8=) 16: MAhbKgRlvoF4_D9KUePJuDoAmS4.roa (hash: ZxoAbFForFx0WnVahVEJoAAhiXTlHQB8gaScqzkZ4UU=) 17: MOd1w7flMfCwv3SyFF--8p3elzE.roa (hash: EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=) 18: McPz5S5PBhTWxGifH8fs1_NS2jU.roa (hash: KEIARx1I4vqfMuZP+WJZ2f9AE00BEAWPF5jqTraiMB4=) 19: Rlj4VlWfwkfz6GkH-OueIIaSCuc.roa (hash: ii4MZTYhkg0ytZp/Vdsah05JAy4dduK8Ytc1ySn7mXs=) 20: SoVFcNc1lU_1SEfGUkw_ciUcpAQ.roa (hash: I90mbwCIchHVNf7BLD+pAvrY/vzh+76mAoOiyMR3xRk=) 21: Zkjg3hn61JFL00ei8OTWJjwR5z4.roa (hash: 588yrYLogN7emBldqJ08eH+eoXXQ8TYe9+BBfSEy2Vs=) 22: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (hash: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y=) 23: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (hash: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I=) 24: gwB8EQKBkF6rAUQregKYO8DR9DM.roa (hash: bkCyPXRCyEr0y70TR0Ql1njvG/oRBgnO+/E/e2UhPeQ=) 25: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (hash: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME=) 26: icBjslH5ERqmqpU1USzkMdhkEjI.roa (hash: wMYjLB/rE9ycsdnG1IDtuH3D8/HkxmDfxjH3cnkuOvM=) 27: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (hash: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU=) 28: kZx2IxBD5HOKLTGnyUCslhrff3s.roa (hash: Vt6Cc39kOpNIWweAmZd5zbwANosQpiB4xiB1jbdvahg=) 29: lSaiK2qUcsBb2SRVSSn0lBTLk8w.roa (hash: Jw4NGPd3f960D6rAt45BHw7wfutR5RSd+rPJNYNB2E0=) 30: lnpel8l0zvHfaReJqv_lxZ_B7Z0.roa (hash: kesVe4OXCvVFnF3zB6nMGPK6v8LEXAUi0VV82fdI66M=) 31: mW7TNNKOcx8Asff3LA5hFbwolus.roa (hash: C0qSa3VXz/TpxHHnVA5yQuQAXKAh2TZvyE/riAp87yc=) 32: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: eW/0MDbvLxPJ5JrlESQwqXnuKahN2fYS7DIk6pgPIMk=) 33: n50HYNvX301s5gEUcCw5M0DpFnA.roa (hash: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU=) 34: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (hash: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4=) 35: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (hash: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8=) 36: xEUKzOOkARoDjaObKTAU7gIkvJ0.roa (hash: 78z8Ey8iTFTJsB0kmSdbcd2syS5QWJtz2XrcMbWt2hA=) 37: xNY2gUvtLtxYfY6gU7_3js38DyA.roa (hash: 3CcNNA7q88gUr/9Ae4mjWpxXE8KozaNGoTSekGYA77Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:c4:df:1c:69:93:63:95:c6:22:15:77:dd:ec:05:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Sep 21 21:00:08 2026 GMT Not After : Sep 22 21:00:08 2026 GMT Subject: CN=6c284b7d5cab235d2b737854c73b80fbcb4f29fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7f:82:24:32:62:f0:e3:0c:79:79:98:e9:c9: b0:36:32:82:3c:eb:da:b4:c6:40:66:e8:37:8f:16: a1:72:a8:28:52:77:e6:c2:65:8d:72:d1:a9:dd:af: a7:e6:af:0f:89:7b:88:df:d1:25:81:d0:cd:4e:1a: c0:2f:56:91:36:49:48:a2:53:d6:30:90:66:e5:52: 24:f8:94:e5:09:e0:fa:c7:64:e7:83:85:d4:19:7c: 21:0e:5f:aa:c9:89:4f:e2:ac:0c:5b:bd:94:66:11: fa:7e:71:6d:9b:6a:30:07:7b:0a:8f:44:74:3d:28: 45:5a:c3:fb:02:a7:0c:37:45:6c:1d:fd:16:8a:bc: 9d:dc:cf:82:24:b4:c5:6b:53:e6:4f:12:72:3a:85: 53:0b:b1:f5:5b:57:4d:09:fe:05:5a:76:42:c7:27: 63:f7:d3:52:98:d8:f4:70:3b:94:ce:c2:29:8c:00: 61:d9:cf:82:e0:50:0c:cf:14:55:7e:35:ab:d9:8c: b8:0a:01:c1:8e:e7:bc:5e:3f:3a:b6:19:1a:95:89: c5:67:5d:e1:ee:65:60:eb:22:b1:99:94:80:cf:04: 9f:75:c6:9a:d7:9c:fa:86:ea:75:2b:b7:76:a7:f1: e7:0f:ac:a8:76:c8:12:3f:07:17:2b:1a:3e:a0:31: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:28:4B:7D:5C:AB:23:5D:2B:73:78:54:C7:3B:80:FB:CB:4F:29:FC X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f0:a2:8f:2e:4d:54:49:25:72:ca:72:95:1a:c1:2d:0e:ae: 4f:d5:4d:39:c2:c4:f2:fa:a4:af:82:74:cb:c6:40:01:fa:e3: 2e:7c:4b:ad:4d:eb:58:11:18:e0:a5:34:cc:41:f4:2c:fa:88: 12:8b:69:d4:20:e6:b8:b7:d5:d1:dd:f0:8f:95:63:dc:43:85: f7:a3:31:ee:3e:52:9f:77:39:33:f1:b9:b4:1e:b5:ec:53:14: df:6a:8c:d4:0f:10:80:1e:bf:98:3e:47:39:63:bb:7c:23:9c: 24:46:60:6e:57:be:6e:08:72:98:c0:71:3d:a4:86:4d:59:a9: 59:14:7c:8d:16:a3:3f:ad:1e:69:81:b5:cf:53:5a:e1:21:18: f0:3b:cf:e0:19:0f:0b:1e:d0:49:80:f1:7c:bb:37:db:1b:9c: 54:34:e8:34:40:e1:c4:ae:9a:5e:dc:a1:e2:db:e3:6d:70:01: 0c:6d:23:64:64:b2:d7:38:d0:06:f2:28:ec:54:c7:ac:02:ce: cf:8f:c4:ea:70:e2:c3:ce:17:39:f3:c6:12:45:db:0f:71:ab: 0c:fa:72:5a:e3:5a:a7:1a:7a:15:b9:b9:39:72:c2:00:d9:c6: 53:c8:c3:04:ce:c0:4b:b0:6e:de:a6:af:d2:73:8d:3c:4d:e6: bb:4e:18:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFxN8caZNjlcYiFXfd7AVHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwOTIxMjEwMDA4WhcNMjYwOTIyMjEwMDA4WjAzMTEwLwYDVQQD Eyg2YzI4NGI3ZDVjYWIyMzVkMmI3Mzc4NTRjNzNiODBmYmNiNGYyOWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH+CJDJi8OMMeXmY6cmwNjKCPOva tMZAZug3jxahcqgoUnfmwmWNctGp3a+n5q8PiXuI39ElgdDNThrAL1aRNklIolPW MJBm5VIk+JTlCeD6x2Tng4XUGXwhDl+qyYlP4qwMW72UZhH6fnFtm2owB3sKj0R0 PShFWsP7AqcMN0VsHf0Wiryd3M+CJLTFa1PmTxJyOoVTC7H1W1dNCf4FWnZCxydj 99NSmNj0cDuUzsIpjABh2c+C4FAMzxRVfjWr2Yy4CgHBjue8Xj86thkalYnFZ13h 7mVg6yKxmZSAzwSfdcaa15z6hup1K7d2p/HnD6yodsgSPwcXKxo+oDGNZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwoS31cqyNdK3N4VMc7gPvLTyn8MB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPCijy5N VEklcspylRrBLQ6uT9VNOcLE8vqkr4J0y8ZAAfrjLnxLrU3rWBEY4KU0zEH0LPqI Eotp1CDmuLfV0d3wj5Vj3EOF96Mx7j5Sn3c5M/G5tB617FMU32qM1A8QgB6/mD5H OWO7fCOcJEZgble+bghymMBxPaSGTVmpWRR8jRajP60eaYG1z1Na4SEY8DvP4BkP Cx7QSYDxfLs32xucVDToNEDhxK6aXtyh4tvjbXABDG0jZGSy1zjQBvIo7FTHrALO z4/E6nDiw84XOfPGEkXbD3GrDPpyWuNapxp6Fbm5OXLCANnGU8jDBM7AS7Bu3qav 0nONPE3mu04Y2g== -----END CERTIFICATE-----Generated at Tue Sep 22 01:23:47 2026 by rpki-client