$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft File: mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json) Hash identifier: owg19599YVBwPssSwJfrhdxtr+uQug/mmMwjhRchUsA= Subject key identifier: B1:93:34:B9:CB:06:A0:7A:9D:65:7A:1E:8D:8D:B8:EE:B4:AB:75:E9 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 01A0D7277B5B17FF47F4700516E70B82567C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft Manifest number: 1AA4 Signing time: Fri 25 Sep 2026 06:01:23 +0000 Manifest this update: Fri 25 Sep 2026 06:01:23 +0000 Manifest next update: Sat 26 Sep 2026 06:01:23 +0000 Files and hashes: 1: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (hash: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0=) 2: 2yaXAAUSdtsPMaSBJFquEdDTT6k.roa (hash: judwS/WZsJiXUyPGTQqvtLBMK0N9HxSeMb7YxOm0ElY=) 3: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (hash: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4=) 4: 6d_ENWzH-VQ6PZSxBVnrr_FPch4.roa (hash: nLEVzgKnOcDJKPh426JAlzQMVVXnAa8GP6UiExx+ycU=) 5: 877gblyC3fNplcxOQRcSVA_wkoU.roa (hash: FPmfqAGJMI/bwduEg7CvapHPJGcw4GGIWlU9wyWJ4Ns=) 6: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (hash: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU=) 7: CO3NGBtj6lvSDwNx7qgisnxcpZE.roa (hash: Ta+b1EmbPlRx8CBP3A/a0A01hRd22nzH/W3OVEU0ya4=) 8: DehND8NWso8fnWINtOcuecHBpxM.roa (hash: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg=) 9: Exzf4PskjTMc5LIyk1evDnbig4o.roa (hash: /XbM8Up/CzKNgL2qr7cqhEQox2OxF2jJdDjq9JA7I2M=) 10: F40rkkhDW3ybCB_12cIOKOyXk08.roa (hash: h+hLlHz7DDayf/In7Q6RDRACl8fHTXkiC3/X/Kl3h7E=) 11: Jtp72CS2jEm3lTCDgWP7039dKYg.roa (hash: Q1Hpm3kD459iodRBV3umbkyn+j4+wiimsCk0/+2lO84=) 12: Ke0VSjrkP1jgta_WS5ntQtfKR38.roa (hash: yxWTZVrICzskJJpD6AIg7gNqPSzszPgc+Bf6OnBQWQw=) 13: Kg06NaGezROeWtBK1qTOADXp_pQ.roa (hash: wmDFJ/5sVQtr4RNwEITHDUmCB7Qq4hdLVGdv9QNDX30=) 14: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (hash: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4=) 15: LnDxIxD-hluuct808CIO9EDyMIU.roa (hash: BcxRwhFwjkIGGKDrrvqL77SCEYThrU0rRvnjjzU14s8=) 16: MAhbKgRlvoF4_D9KUePJuDoAmS4.roa (hash: ZxoAbFForFx0WnVahVEJoAAhiXTlHQB8gaScqzkZ4UU=) 17: MOd1w7flMfCwv3SyFF--8p3elzE.roa (hash: EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=) 18: McPz5S5PBhTWxGifH8fs1_NS2jU.roa (hash: KEIARx1I4vqfMuZP+WJZ2f9AE00BEAWPF5jqTraiMB4=) 19: Rlj4VlWfwkfz6GkH-OueIIaSCuc.roa (hash: ii4MZTYhkg0ytZp/Vdsah05JAy4dduK8Ytc1ySn7mXs=) 20: SoVFcNc1lU_1SEfGUkw_ciUcpAQ.roa (hash: I90mbwCIchHVNf7BLD+pAvrY/vzh+76mAoOiyMR3xRk=) 21: Zkjg3hn61JFL00ei8OTWJjwR5z4.roa (hash: 588yrYLogN7emBldqJ08eH+eoXXQ8TYe9+BBfSEy2Vs=) 22: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (hash: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y=) 23: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (hash: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I=) 24: gwB8EQKBkF6rAUQregKYO8DR9DM.roa (hash: bkCyPXRCyEr0y70TR0Ql1njvG/oRBgnO+/E/e2UhPeQ=) 25: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (hash: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME=) 26: icBjslH5ERqmqpU1USzkMdhkEjI.roa (hash: wMYjLB/rE9ycsdnG1IDtuH3D8/HkxmDfxjH3cnkuOvM=) 27: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (hash: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU=) 28: kZx2IxBD5HOKLTGnyUCslhrff3s.roa (hash: Vt6Cc39kOpNIWweAmZd5zbwANosQpiB4xiB1jbdvahg=) 29: lSaiK2qUcsBb2SRVSSn0lBTLk8w.roa (hash: Jw4NGPd3f960D6rAt45BHw7wfutR5RSd+rPJNYNB2E0=) 30: lnpel8l0zvHfaReJqv_lxZ_B7Z0.roa (hash: kesVe4OXCvVFnF3zB6nMGPK6v8LEXAUi0VV82fdI66M=) 31: mW7TNNKOcx8Asff3LA5hFbwolus.roa (hash: C0qSa3VXz/TpxHHnVA5yQuQAXKAh2TZvyE/riAp87yc=) 32: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: Qio6DkGJgA7ZFvrp8Jgqr+t8j2CxLdwwXkD26xaFd+8=) 33: n50HYNvX301s5gEUcCw5M0DpFnA.roa (hash: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU=) 34: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (hash: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4=) 35: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (hash: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8=) 36: xEUKzOOkARoDjaObKTAU7gIkvJ0.roa (hash: 78z8Ey8iTFTJsB0kmSdbcd2syS5QWJtz2XrcMbWt2hA=) 37: xNY2gUvtLtxYfY6gU7_3js38DyA.roa (hash: 3CcNNA7q88gUr/9Ae4mjWpxXE8KozaNGoTSekGYA77Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d7:27:7b:5b:17:ff:47:f4:70:05:16:e7:0b:82:56:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Sep 25 06:01:23 2026 GMT Not After : Sep 26 06:01:23 2026 GMT Subject: CN=b19334b9cb06a07a9d657a1e8d8db8eeb4ab75e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:5b:41:ee:31:dc:d0:05:a1:1c:4a:86:b1: 0c:89:c4:ed:d3:29:12:f4:9f:56:60:95:fe:43:17: ce:b0:c1:1f:50:b6:d6:e0:9b:b0:57:75:3e:7c:12: 3e:e5:12:84:97:67:e2:a8:39:b6:55:24:14:14:74: f0:82:44:c6:d4:93:b1:f1:a2:86:6c:c8:57:c9:11: 38:5b:58:e7:1c:e5:fd:74:9a:f7:4a:f6:64:68:af: 0c:da:62:72:dc:f9:1b:7d:48:cb:a5:93:99:60:6b: e3:0a:64:3a:40:20:9a:12:0d:62:5c:a1:30:e5:7d: f5:50:2c:c9:53:44:9f:51:69:96:31:38:16:b2:2d: 3f:69:e6:cf:be:64:93:0d:3b:2e:6e:f1:82:c4:ea: 25:15:46:97:15:ba:ef:03:12:16:43:8f:19:c2:f0: 60:c3:d6:5a:bb:d5:c0:d6:cb:04:15:43:4e:34:c8: 43:44:f8:aa:3c:e3:0b:b5:19:c4:4f:5d:99:a8:63: 69:b8:56:eb:cd:fb:1e:83:28:9c:6f:d0:80:f4:86: ab:90:d9:16:9b:71:a0:93:53:6d:4c:98:f4:3f:7c: 7e:22:39:45:af:75:be:8c:d5:8a:26:48:25:da:6b: f0:c4:6f:bd:65:ba:43:28:51:68:46:ec:73:2f:78: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:93:34:B9:CB:06:A0:7A:9D:65:7A:1E:8D:8D:B8:EE:B4:AB:75:E9 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:bf:b1:18:c9:84:44:8b:ec:b8:86:45:5d:bf:70:b3:76:85: cb:e4:c8:98:4c:1a:66:4f:dd:26:c6:e2:2d:df:b4:88:18:49: e2:91:98:79:1f:25:f8:b5:05:0b:5f:11:af:7c:8e:42:07:0b: af:f6:0e:bb:9a:4f:0d:4f:e1:97:d7:73:6d:1d:0e:c0:84:c4: 58:90:9d:8b:20:df:ff:9e:e5:e3:f4:38:4f:fc:aa:e3:4a:2f: f5:66:8b:1d:dc:e5:f0:9f:76:c2:db:42:b1:69:e9:a3:bc:7c: 67:c6:24:05:84:0a:df:ee:29:60:7a:50:6c:51:c5:d7:97:c9: 28:20:18:46:0d:47:d9:9d:42:e4:d9:41:e1:c0:52:31:8f:ca: 51:55:69:96:73:21:38:be:d2:4b:48:f2:2c:eb:81:97:1b:e3: a0:04:93:b5:39:40:1d:87:bd:9c:ff:07:70:47:01:c7:f7:3c: 9d:3d:0e:94:ad:e3:e2:37:fb:2d:45:10:55:5c:07:84:a4:d3: cd:af:c8:75:37:02:4e:64:91:fd:cc:c7:99:ee:84:c1:34:39: 6b:e5:87:34:14:8f:42:59:ec:8c:d6:de:36:97:1d:77:21:48: b2:95:ad:1c:2b:11:c4:96:19:03:82:5e:7f:cf:38:33:97:51: c9:00:b0:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDXJ3tbF/9H9HAFFucLglZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwOTI1MDYwMTIzWhcNMjYwOTI2MDYwMTIzWjAzMTEwLwYDVQQD EyhiMTkzMzRiOWNiMDZhMDdhOWQ2NTdhMWU4ZDhkYjhlZWI0YWI3NWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxupbQe4x3NAFoRxKhrEMicTt0ykS 9J9WYJX+QxfOsMEfULbW4JuwV3U+fBI+5RKEl2fiqDm2VSQUFHTwgkTG1JOx8aKG bMhXyRE4W1jnHOX9dJr3SvZkaK8M2mJy3PkbfUjLpZOZYGvjCmQ6QCCaEg1iXKEw 5X31UCzJU0SfUWmWMTgWsi0/aebPvmSTDTsubvGCxOolFUaXFbrvAxIWQ48ZwvBg w9Zau9XA1ssEFUNONMhDRPiqPOMLtRnET12ZqGNpuFbrzfsegyicb9CA9IarkNkW m3Ggk1NtTJj0P3x+IjlFr3W+jNWKJkgl2mvwxG+9ZbpDKFFoRuxzL3iS0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGTNLnLBqB6nWV6Ho2NuO60q3XpMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXb+xGMmE RIvsuIZFXb9ws3aFy+TImEwaZk/dJsbiLd+0iBhJ4pGYeR8l+LUFC18Rr3yOQgcL r/YOu5pPDU/hl9dzbR0OwITEWJCdiyDf/57l4/Q4T/yq40ov9WaLHdzl8J92wttC sWnpo7x8Z8YkBYQK3+4pYHpQbFHF15fJKCAYRg1H2Z1C5NlB4cBSMY/KUVVplnMh OL7SS0jyLOuBlxvjoASTtTlAHYe9nP8HcEcBx/c8nT0OlK3j4jf7LUUQVVwHhKTT za/IdTcCTmSR/czHme6EwTQ5a+WHNBSPQlnsjNbeNpcddyFIspWtHCsRxJYZA4Je f884M5dRyQCwxg== -----END CERTIFICATE-----Generated at Fri Sep 25 16:11:59 2026 by rpki-client