$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: 4g2EyO8o+EBOfHCBw21QuErusA03ldeyrPVqUGSMs3M= Subject key identifier: 6C:AF:A3:A5:1F:6D:24:04:CA:80:8E:D7:F6:4A:20:B6:0C:AD:AF:20 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019E1D903EAC094BFD539ED08E0E5A17A962 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 1641 Signing time: Tue 12 May 2026 19:00:52 +0000 Manifest this update: Tue 12 May 2026 19:00:52 +0000 Manifest next update: Wed 13 May 2026 19:00:52 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: dCBsC5NVWZN+WxEqFnz7A+Jmv9ZiWry6AJp1P9l3IOc=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:90:3e:ac:09:4b:fd:53:9e:d0:8e:0e:5a:17:a9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: May 12 19:00:52 2026 GMT Not After : May 13 19:00:52 2026 GMT Subject: CN=6cafa3a51f6d2404ca808ed7f64a20b60cadaf20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:b4:28:e5:86:54:97:58:dd:db:86:47:bd: ed:ea:c5:77:ee:8f:85:ef:46:9a:c8:39:8e:6a:37: 92:0b:2d:6a:51:b1:94:24:12:36:4c:81:98:ab:cd: cc:34:39:89:6b:85:93:1d:a7:3a:de:5c:29:9a:18: 71:0c:85:69:67:3e:e6:81:99:48:62:80:44:ad:97: 3a:1a:7b:00:e9:3a:58:9b:92:22:d7:f9:38:80:e6: 98:ba:32:c2:7c:ed:85:2e:17:b7:d9:bc:45:f6:58: 9e:d1:7a:44:1e:7d:c1:cb:e8:71:44:17:bf:1f:3b: 2d:f3:c4:16:79:2a:97:95:83:18:01:9a:8f:b0:1c: 4a:ee:24:f4:3e:cd:f9:78:17:a6:f4:14:5f:6d:08: d3:45:ab:44:2d:7f:35:99:8e:44:1b:f1:cb:4a:49: e0:0c:38:4d:2b:37:bd:64:d2:e8:2d:42:d2:9a:36: bd:a7:a4:2d:34:89:6e:e4:c5:68:56:5a:eb:38:06: c3:09:9f:70:6a:0b:9f:1a:19:f1:f8:a1:8d:3c:09: f5:a9:ee:a0:b6:54:ba:19:63:a3:2f:31:a5:c5:52: f0:a0:5e:7f:e6:1f:ff:70:94:f2:b1:c4:38:38:d7: 6f:d4:fd:4f:bc:ad:b9:4b:9a:f6:8a:01:48:ba:21: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AF:A3:A5:1F:6D:24:04:CA:80:8E:D7:F6:4A:20:B6:0C:AD:AF:20 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2d:6c:5b:1f:5f:3f:bd:45:9e:3e:27:a7:1f:07:09:87:68: c4:df:98:64:2d:6a:6d:7b:da:c1:2e:33:56:ab:21:a8:3d:65: 37:8b:8f:25:bd:b6:c3:6e:e8:63:66:ab:f6:e6:1a:24:27:d9: ad:7f:62:36:96:db:a3:75:b1:fa:5f:c3:8e:4e:f7:a0:22:c0: 70:52:3b:e3:57:e4:06:3d:99:98:4d:b8:64:6f:eb:62:06:77: 7e:2b:5a:79:53:60:35:6c:0c:1a:b4:a1:2a:a5:26:3b:18:88: f8:8e:77:44:45:e3:5c:9e:c7:5e:a7:f0:e1:4a:b5:b4:47:78: 56:56:05:ba:75:1f:a8:50:83:29:c5:c0:54:a5:24:5d:85:41: c1:e6:7a:c3:44:56:d0:c4:b0:ca:1a:92:a0:49:4d:50:d4:5a: 9d:57:e4:36:27:a8:4e:e7:ef:3d:e4:27:9a:cd:23:55:99:ec: 16:75:b4:49:95:bd:20:0f:ba:26:74:a2:d1:30:be:55:37:f7: 3d:83:94:e9:e0:67:6b:6d:41:ee:4e:cf:5c:07:34:23:cc:e6: 58:a3:40:15:3e:0f:b3:0c:c7:fa:ec:71:58:8a:2f:b5:0b:28: b8:48:9c:48:d7:d9:7e:97:51:5e:99:eb:07:c7:43:a0:5b:4b: 68:c8:36:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dkD6sCUv9U57Qjg5aF6liMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwNTEyMTkwMDUyWhcNMjYwNTEzMTkwMDUyWjAzMTEwLwYDVQQD Eyg2Y2FmYTNhNTFmNmQyNDA0Y2E4MDhlZDdmNjRhMjBiNjBjYWRhZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKm0KOWGVJdY3duGR73t6sV37o+F 70aayDmOajeSCy1qUbGUJBI2TIGYq83MNDmJa4WTHac63lwpmhhxDIVpZz7mgZlI YoBErZc6GnsA6TpYm5Ii1/k4gOaYujLCfO2FLhe32bxF9lie0XpEHn3By+hxRBe/ Hzst88QWeSqXlYMYAZqPsBxK7iT0Ps35eBem9BRfbQjTRatELX81mY5EG/HLSkng DDhNKze9ZNLoLULSmja9p6QtNIlu5MVoVlrrOAbDCZ9wagufGhnx+KGNPAn1qe6g tlS6GWOjLzGlxVLwoF5/5h//cJTyscQ4ONdv1P1PvK25S5r2igFIuiHdKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyvo6UfbSQEyoCO1/ZKILYMra8gMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALy1sWx9f P71Fnj4npx8HCYdoxN+YZC1qbXvawS4zVqshqD1lN4uPJb22w27oY2ar9uYaJCfZ rX9iNpbbo3Wx+l/Djk73oCLAcFI741fkBj2ZmE24ZG/rYgZ3fitaeVNgNWwMGrSh KqUmOxiI+I53REXjXJ7HXqfw4Uq1tEd4VlYFunUfqFCDKcXAVKUkXYVBweZ6w0RW 0MSwyhqSoElNUNRanVfkNieoTufvPeQnms0jVZnsFnW0SZW9IA+6JnSi0TC+VTf3 PYOU6eBna21B7k7PXAc0I8zmWKNAFT4PswzH+uxxWIovtQsouEicSNfZfpdRXpnr B8dDoFtLaMg2gQ== -----END CERTIFICATE-----Generated at Wed May 13 00:30:44 2026 by rpki-client