$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: tZMnHAcTS60BFe6pWi1ypXnN6Oo7SIpo52bWX5yDkrs= Subject key identifier: 79:F8:7D:69:57:2E:1D:E0:EC:F3:4A:99:D5:34:0D:B2:0B:3F:18:C0 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019D2A3C46F65104E193DDB81F4A801A2BE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 187F Signing time: Thu 26 Mar 2026 13:01:26 +0000 Manifest this update: Thu 26 Mar 2026 13:01:26 +0000 Manifest next update: Fri 27 Mar 2026 13:01:26 +0000 Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=) 2: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=) 3: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=) 4: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=) 5: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=) 6: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=) 7: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=) 8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: nrqbLF8Uz72lWeGKWO8M96ZGfPQpx8gOhRhuoVs0Moc=) 9: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=) 10: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=) 11: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=) 12: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=) 13: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=) 14: jIciP85UIj70W740hLw1umDPl8U.roa (hash: wrY0tv/GkQoOFiGmbPrfGkCZnbqrkkaA3u07XZ08OZM=) 15: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=) 16: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=) 17: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=) 18: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=) 19: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=) 20: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:3c:46:f6:51:04:e1:93:dd:b8:1f:4a:80:1a:2b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Mar 26 13:01:26 2026 GMT Not After : Mar 27 13:01:26 2026 GMT Subject: CN=79f87d69572e1de0ecf34a99d5340db20b3f18c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e9:aa:05:a5:6f:88:fb:1f:0e:e0:fa:3d:57: 96:92:c6:e3:e3:be:78:c5:3d:65:5c:1c:5f:b7:2d: 01:ee:62:55:64:42:a3:ae:be:cc:19:7d:1d:82:b4: bb:ef:32:73:2c:8c:09:b3:89:92:d5:c8:94:14:8a: 35:60:f5:16:f8:5b:ac:7e:f8:13:af:88:c1:24:39: 09:e9:58:dd:e0:f4:3b:f4:25:c6:ee:2e:5d:39:76: e6:e8:d0:c2:f1:35:80:bf:4c:dc:76:3b:b9:8f:8a: 7f:ca:e4:bd:ff:cb:37:17:41:a3:94:e0:2d:67:4a: f1:1c:aa:6b:c8:35:5e:47:14:6a:d7:2c:f1:13:d0: 25:ce:82:30:ab:fa:13:f2:dc:01:5d:9c:d7:9f:b2: e0:8d:58:d7:d6:f6:74:76:10:53:64:c3:9c:32:39: 67:1d:15:b5:fc:29:8e:1d:65:c4:98:e9:fe:21:f2: d1:15:5d:e6:f8:5f:d1:b1:b3:2c:dc:f6:a7:95:2b: 08:4e:e5:76:8e:0e:2a:d9:4e:b5:fb:72:bc:7d:0d: f5:42:4a:15:5f:92:93:38:b9:1a:aa:58:81:23:d0: 67:af:a1:1a:3f:ed:94:c9:1a:69:69:fa:e4:9f:60: 84:08:51:ea:e6:b7:93:4f:8c:1b:2c:58:4d:d0:7b: 2a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F8:7D:69:57:2E:1D:E0:EC:F3:4A:99:D5:34:0D:B2:0B:3F:18:C0 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:46:2e:52:26:47:43:26:38:be:43:0c:3e:fa:4a:96:4e:93: c6:fe:6b:50:83:3b:cf:6d:60:8e:87:ce:15:18:6f:e9:10:62: 03:0f:8f:7a:d9:fc:f0:20:a1:39:2d:76:69:6b:e4:c6:29:b7: 01:4b:97:fd:2c:4a:5b:25:34:15:b8:c4:cd:0e:df:3d:6c:3b: 07:f2:25:9a:7e:3e:cf:dc:b7:20:ef:29:22:b7:2c:80:3d:70: 5e:db:aa:e4:17:2b:76:69:51:9e:64:73:0c:0e:da:14:77:ee: 84:d4:3d:ac:d1:cb:d5:7d:77:18:4d:5e:f7:e1:58:3d:af:64: 59:fb:c8:e7:fe:a9:df:c4:5c:d9:ba:65:03:ad:3a:a3:df:01: 7a:59:9d:11:b6:c8:d5:b7:02:20:02:03:26:b5:b7:93:c5:50: f5:5b:4a:78:69:94:a3:7f:f7:e2:df:10:ac:b6:bd:04:6c:5a: 10:1e:f8:3c:79:15:5a:36:5a:c0:86:82:5c:e6:98:33:c9:4c: 66:3a:c2:97:82:70:ca:f6:1a:8c:c4:0e:9d:31:27:e3:dd:52: e3:64:ad:a8:e0:e7:68:32:ca:81:f8:94:63:b2:6f:fd:f3:d3: 4f:8b:e8:ce:63:f7:6d:c2:81:d9:8a:df:4e:e0:aa:ed:f2:29: cd:ad:b6:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qPEb2UQThk924H0qAGivgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMzI2MTMwMTI2WhcNMjYwMzI3MTMwMTI2WjAzMTEwLwYDVQQD Eyg3OWY4N2Q2OTU3MmUxZGUwZWNmMzRhOTlkNTM0MGRiMjBiM2YxOGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApemqBaVviPsfDuD6PVeWksbj4754 xT1lXBxfty0B7mJVZEKjrr7MGX0dgrS77zJzLIwJs4mS1ciUFIo1YPUW+FusfvgT r4jBJDkJ6Vjd4PQ79CXG7i5dOXbm6NDC8TWAv0zcdju5j4p/yuS9/8s3F0GjlOAt Z0rxHKpryDVeRxRq1yzxE9AlzoIwq/oT8twBXZzXn7LgjVjX1vZ0dhBTZMOcMjln HRW1/CmOHWXEmOn+IfLRFV3m+F/RsbMs3PanlSsITuV2jg4q2U61+3K8fQ31QkoV X5KTOLkaqliBI9Bnr6EaP+2UyRppafrkn2CECFHq5reTT4wbLFhN0HsqcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHn4fWlXLh3g7PNKmdU0DbILPxjAMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkYuUiZH QyY4vkMMPvpKlk6Txv5rUIM7z21gjofOFRhv6RBiAw+Petn88CChOS12aWvkxim3 AUuX/SxKWyU0FbjEzQ7fPWw7B/Ilmn4+z9y3IO8pIrcsgD1wXtuq5BcrdmlRnmRz DA7aFHfuhNQ9rNHL1X13GE1e9+FYPa9kWfvI5/6p38Rc2bplA606o98BelmdEbbI 1bcCIAIDJrW3k8VQ9VtKeGmUo3/34t8QrLa9BGxaEB74PHkVWjZawIaCXOaYM8lM ZjrCl4JwyvYajMQOnTEn491S42StqODnaDLKgfiUY7Jv/fPTT4vozmP3bcKB2Yrf TuCq7fIpza227w== -----END CERTIFICATE-----Generated at Thu Mar 26 18:31:42 2026 by rpki-client