$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: GYn9sXlNkz8KqAVtsOXfdouRSQWcAvI2Fum8bKrFRMA= Subject key identifier: 4A:A5:B3:0E:C5:D0:22:F2:EE:5F:D4:07:B4:34:AF:93:6A:49:DC:32 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 01A0E69AF0C9F1510D53D59616E2B54FDC71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 1A71 Signing time: Mon 28 Sep 2026 06:01:48 +0000 Manifest this update: Mon 28 Sep 2026 06:01:48 +0000 Manifest next update: Tue 29 Sep 2026 06:01:48 +0000 Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=) 2: 4KhhGZX4PWjUQYpl6SjJvfil8R8.roa (hash: NcodsY717TYNNKDjkC9G80EurSBxppwYgSyODBkbvvM=) 3: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=) 4: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=) 5: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=) 6: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=) 7: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=) 8: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: 7sNX5YsrBywqgKIN8q8yTHfABKE4HgopHxWNRGCrivM=) 10: QCih5l8ms9ZT9yQSt5C9uapsYYM.roa (hash: /QPJzCsQ+24ZR6+p5oNE2OgeX+eucsMYEmdpUXhs184=) 11: QceFKAB4kI1h3y2cqErIv8Hv4rw.roa (hash: UDlYs0IX2g9lgiSFVYGg7GDtdoJREyShW9ksWrzv5jY=) 12: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=) 13: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=) 14: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=) 15: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=) 16: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=) 17: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=) 18: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=) 19: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=) 20: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=) 21: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=) 22: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 06:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e6:9a:f0:c9:f1:51:0d:53:d5:96:16:e2:b5:4f:dc:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Sep 28 06:01:48 2026 GMT Not After : Sep 29 06:01:48 2026 GMT Subject: CN=4aa5b30ec5d022f2ee5fd407b434af936a49dc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e9:ef:ef:d3:06:1e:ac:2e:4c:df:bb:6c:0e: 45:7c:f2:2f:d3:94:23:bf:e4:a7:2f:a8:81:dd:6d: f0:c5:ef:cd:4d:7a:a2:eb:59:9b:dd:ab:cc:c7:53: bb:ef:38:9c:08:bf:71:e9:3b:23:3d:84:a3:50:2b: 37:d8:74:95:98:d0:9e:f9:bb:cd:7b:8b:33:60:cc: 11:3c:77:ce:fb:b5:2f:1a:e5:4f:a2:11:e0:7d:3f: 2c:a9:a2:77:57:83:da:64:a6:af:38:a0:a8:bb:2b: df:33:3c:86:7f:4d:4b:c4:0e:25:d6:8d:9a:35:4a: 1a:fe:8f:9f:c4:4e:1f:b0:64:45:d9:f3:ab:e5:50: 5c:b9:db:ff:18:10:f4:1e:17:2c:ff:bc:04:5c:85: 45:e9:70:64:70:c7:bc:91:d6:5e:e1:51:b4:96:d5: 3c:96:0c:88:71:74:0d:a6:94:08:65:cb:25:d4:72: 69:20:81:0e:5d:f8:1d:99:66:07:1e:f0:f4:7c:74: e6:b7:74:24:39:5e:22:79:95:3c:e5:a1:ce:62:68: a4:ed:b3:00:29:89:c0:4b:e1:75:56:c7:85:d4:52: e0:4f:3d:4f:77:0e:be:fb:3e:58:7e:e7:2d:ce:c0: 41:11:78:b8:e9:c5:fa:33:58:e5:63:bc:54:7c:7a: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A5:B3:0E:C5:D0:22:F2:EE:5F:D4:07:B4:34:AF:93:6A:49:DC:32 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:98:b4:73:f7:78:6e:75:bd:a7:db:fb:aa:41:36:0a:39:7f: b2:be:01:f6:7d:39:32:07:a0:5d:4e:f2:38:34:dc:68:7e:7e: 62:6f:04:18:0c:0a:d6:cc:5d:c5:e4:58:7d:bd:cc:1c:38:ad: 8d:96:b7:24:35:61:77:1a:c4:1d:ae:7f:c1:ae:90:43:c3:9f: 6c:1a:28:e7:b7:87:26:1d:d1:6b:6a:c4:62:71:f5:59:ba:d8: 0f:c4:c8:ad:95:52:a3:f0:0d:79:99:b8:19:28:17:dc:e5:b0: b1:3b:e3:b6:d5:d7:3c:4b:a1:1c:98:04:53:e1:ce:ff:5e:a9: 27:e5:9d:eb:ea:6e:66:3f:37:a9:8e:c3:30:77:df:79:9d:7f: 75:f6:73:e2:05:6a:2a:18:0f:3a:4e:48:e4:c2:8a:44:7e:a5: 9f:86:31:94:e7:9f:bf:29:03:65:c6:f4:bf:8d:6e:5a:51:74: 49:1e:fb:3e:f6:0e:00:45:f5:55:84:93:3f:34:85:7a:6e:e5: d9:03:90:72:44:34:09:09:d8:a7:ce:23:a2:fb:00:a0:e3:a8: 5a:38:ea:fb:31:91:71:b7:d1:f7:35:e2:cd:05:96:2a:5d:09: be:99:37:a5:6a:12:c6:f9:df:85:82:25:61:9e:44:aa:7e:58: f1:04:b7:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDmmvDJ8VENU9WWFuK1T9xxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwOTI4MDYwMTQ4WhcNMjYwOTI5MDYwMTQ4WjAzMTEwLwYDVQQD Eyg0YWE1YjMwZWM1ZDAyMmYyZWU1ZmQ0MDdiNDM0YWY5MzZhNDlkYzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+nv79MGHqwuTN+7bA5FfPIv05Qj v+SnL6iB3W3wxe/NTXqi61mb3avMx1O77zicCL9x6TsjPYSjUCs32HSVmNCe+bvN e4szYMwRPHfO+7UvGuVPohHgfT8sqaJ3V4PaZKavOKCouyvfMzyGf01LxA4l1o2a NUoa/o+fxE4fsGRF2fOr5VBcudv/GBD0Hhcs/7wEXIVF6XBkcMe8kdZe4VG0ltU8 lgyIcXQNppQIZcsl1HJpIIEOXfgdmWYHHvD0fHTmt3QkOV4ieZU85aHOYmik7bMA KYnAS+F1VseF1FLgTz1Pdw6++z5YfuctzsBBEXi46cX6M1jlY7xUfHr5swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqlsw7F0CLy7l/UB7Q0r5NqSdwyMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZi0c/d4 bnW9p9v7qkE2Cjl/sr4B9n05MgegXU7yODTcaH5+Ym8EGAwK1sxdxeRYfb3MHDit jZa3JDVhdxrEHa5/wa6QQ8OfbBoo57eHJh3Ra2rEYnH1WbrYD8TIrZVSo/ANeZm4 GSgX3OWwsTvjttXXPEuhHJgEU+HO/16pJ+Wd6+puZj83qY7DMHffeZ1/dfZz4gVq KhgPOk5I5MKKRH6ln4YxlOefvykDZcb0v41uWlF0SR77PvYOAEX1VYSTPzSFem7l 2QOQckQ0CQnYp84jovsAoOOoWjjq+zGRcbfR9zXizQWWKl0Jvpk3pWoSxvnfhYIl YZ5Eqn5Y8QS3vQ== -----END CERTIFICATE-----Generated at Mon Sep 28 15:18:22 2026 by rpki-client