$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json) Hash identifier: H8RfhTg0ddyo31mFmfmDNDcxG01DM/kElK7X1p8VX7k= Subject key identifier: 8F:65:82:7D:10:FA:BB:12:91:59:34:1D:73:17:F3:4B:BF:15:F4:97 Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 019FA8D027F0184F1A4085A66515D88D27AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft Manifest number: 19E3 Signing time: Tue 28 Jul 2026 13:00:41 +0000 Manifest this update: Tue 28 Jul 2026 13:00:41 +0000 Manifest next update: Wed 29 Jul 2026 13:00:41 +0000 Files and hashes: 1: 9XLB2pGNOPbljEVUBZRkKE3gDsg.roa (hash: yFaKRkjlVIE/J3Dt9Swl2M9fjwmRRjL86LSGNcqFa2o=) 2: FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa (hash: xP/yiKvXIB14qyF8rqguFru71C1q8PJ2Qa43mcie0iQ=) 3: MZB1UqbipBpVhmhIAAIPCSUm9tE.roa (hash: zYMw6mBm4z/9+C34n4tABKKlDK/AXIGy+SsUTUFBU8w=) 4: TaW1xof2_FS-y1oMd64DHywlLM8.roa (hash: wpTtq6XsXybW5bFqRgDMjejQMJ2CiWnuwczXgfVlZ+M=) 5: fXpzmIEAnbtmNcx0rqptqG5QnQg.roa (hash: 5iU3booTwnLztG+lAWV3dZKWKwiQOKD5sGh5Wy5gwWk=) 6: foj3wxZ-vtEq-ZNGaHXGXJBPPZ4.roa (hash: YKATndLpT6xlZT8C0s4iCTzEsBCAnIUWa7dwMMehpso=) 7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: aSEd6o9jEwLPoa+/lnlPJgXzObNThkUC1aLmSnIxtKc=) 8: hTBE-AfXHoIR0eXyurn7fldr3Uw.roa (hash: h5l8+NwGnElycHcZimGiomdSgVS5UzfYH7eaKNxeRxk=) 9: mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa (hash: HG8VsquQ+FnSEapJw68ywW3TpFwS/T5f8VjxgSgr5P4=) 10: o1g6d4IpK0z2pKch2obiVEvKpo0.roa (hash: ogKpeh7KtOQ7CbX8yF/mDVAEfUbLY6d/B58Q/R7K4YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:d0:27:f0:18:4f:1a:40:85:a6:65:15:d8:8d:27:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Jul 28 13:00:41 2026 GMT Not After : Jul 29 13:00:41 2026 GMT Subject: CN=8f65827d10fabb129159341d7317f34bbf15f497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:bc:10:ca:a6:74:60:cc:56:bc:ce:0d:43: ba:95:d9:d7:90:d6:47:b3:b8:08:60:79:f3:88:3f: 97:b1:a1:60:49:48:a9:ae:a5:9a:66:70:e2:4f:e4: c6:e4:19:65:53:fa:2d:1a:d3:7a:63:42:29:2d:90: 36:7a:e0:cb:a0:04:63:6d:64:48:0a:07:2c:5f:cf: 9b:ff:14:e9:89:cf:e4:15:47:93:67:11:8c:63:9d: 61:a7:7d:93:aa:f4:aa:10:85:12:46:2e:eb:83:a8: 81:a0:2d:3c:6d:ee:85:38:2e:8c:cf:07:84:6c:37: ac:64:f2:6d:15:b9:07:46:e3:b4:a3:86:c8:52:e8: d8:12:95:2e:62:b5:13:6e:54:59:ef:b5:f5:89:e8: 33:2d:ea:70:3e:80:44:31:0b:54:01:1b:09:14:7f: 61:b8:e3:64:82:90:3f:31:a0:e8:64:48:5a:1d:b1: 33:5d:11:36:a5:79:32:28:33:57:99:85:8c:d6:f5: 95:86:de:de:63:09:2c:ef:4d:a3:dd:b5:28:c2:f5: e6:5f:1f:79:c7:e1:d5:86:c3:78:1c:9c:9f:c7:e9: c5:69:e1:ec:3e:8c:e4:f0:1c:76:93:a4:f7:49:89: d0:cd:b5:84:49:76:cd:63:63:ec:f1:6e:4e:4b:02: 6e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:65:82:7D:10:FA:BB:12:91:59:34:1D:73:17:F3:4B:BF:15:F4:97 X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:bf:38:b9:1a:e1:94:0e:34:f6:74:34:a0:34:46:d8:c1:78: ea:5c:d6:b3:14:ac:83:39:be:c2:9c:54:c0:e9:ae:1b:40:06: 68:a5:7b:0d:f7:f3:9e:bd:d7:87:e0:26:03:3a:04:9b:35:89: a6:93:cd:6b:c0:ff:ea:e0:c5:a1:8d:25:17:76:5d:71:2a:44: c5:68:fd:45:4d:83:1a:83:7f:08:3c:01:c7:2e:6d:fd:0f:95: c6:24:b6:d8:73:5b:d7:b7:b0:58:4a:60:c0:21:91:f6:6b:b8: f3:d9:6d:85:06:68:a4:fc:a9:d6:b5:0c:4f:55:c0:d9:e9:23: fc:de:85:ae:ae:1b:0e:79:a3:58:9e:93:6b:8a:23:46:f6:f8: 79:f6:bc:1c:51:3e:8b:93:4d:d4:b5:09:ad:a8:b5:03:a1:b9: 23:25:7a:74:89:db:d0:90:2e:fb:da:f1:57:5c:86:ec:d0:f6: bd:98:ba:d4:8a:7f:2a:4f:b2:a1:a7:f8:73:24:6d:e1:9e:a5: ee:e1:c1:05:67:72:60:2d:47:4c:a4:c1:3b:64:d0:af:e7:a4: 0e:59:cd:d3:63:54:e4:c6:fb:63:46:8e:e8:54:ed:78:79:a1: 32:b6:9b:36:a2:4e:99:e7:5a:51:ab:7f:6a:fb:7a:4d:1b:ae: 8e:0a:0e:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+o0CfwGE8aQIWmZRXYjSevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwNzI4MTMwMDQxWhcNMjYwNzI5MTMwMDQxWjAzMTEwLwYDVQQD Eyg4ZjY1ODI3ZDEwZmFiYjEyOTE1OTM0MWQ3MzE3ZjM0YmJmMTVmNDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqa8EMqmdGDMVrzODUO6ldnXkNZH s7gIYHnziD+XsaFgSUiprqWaZnDiT+TG5BllU/otGtN6Y0IpLZA2euDLoARjbWRI CgcsX8+b/xTpic/kFUeTZxGMY51hp32TqvSqEIUSRi7rg6iBoC08be6FOC6MzweE bDesZPJtFbkHRuO0o4bIUujYEpUuYrUTblRZ77X1iegzLepwPoBEMQtUARsJFH9h uONkgpA/MaDoZEhaHbEzXRE2pXkyKDNXmYWM1vWVht7eYwks702j3bUowvXmXx95 x+HVhsN4HJyfx+nFaeHsPozk8Bx2k6T3SYnQzbWESXbNY2Ps8W5OSwJuOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9lgn0Q+rsSkVk0HXMX80u/FfSXMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0L84uRrh lA409nQ0oDRG2MF46lzWsxSsgzm+wpxUwOmuG0AGaKV7Dffznr3Xh+AmAzoEmzWJ ppPNa8D/6uDFoY0lF3ZdcSpExWj9RU2DGoN/CDwBxy5t/Q+VxiS22HNb17ewWEpg wCGR9mu489lthQZopPyp1rUMT1XA2ekj/N6Frq4bDnmjWJ6Ta4ojRvb4efa8HFE+ i5NN1LUJrai1A6G5IyV6dInb0JAu+9rxV1yG7ND2vZi61Ip/Kk+yoaf4cyRt4Z6l 7uHBBWdyYC1HTKTBO2TQr+ekDlnN02NU5Mb7Y0aO6FTteHmhMrabNqJOmedaUat/ avt6TRuujgoOyQ== -----END CERTIFICATE-----Generated at Tue Jul 28 17:13:23 2026 by rpki-client