$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: msaBTcWbqmGAagHzxEEqZKhqKJBZdNQofMfRY+s+Ycc= Subject key identifier: F8:71:70:43:7D:A4:7D:62:E5:EF:1F:88:25:EB:7F:D7:D8:32:85:F8 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019D284DE27ABB8A906B70C265E0C9DBD2B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 15C2 Signing time: Thu 26 Mar 2026 04:01:26 +0000 Manifest this update: Thu 26 Mar 2026 04:01:26 +0000 Manifest next update: Fri 27 Mar 2026 04:01:26 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: eWY9wRVLFYjoRhjuw05u3lAXLQ3Wn8VPGHn0iXZshcc=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4d:e2:7a:bb:8a:90:6b:70:c2:65:e0:c9:db:d2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Mar 26 04:01:26 2026 GMT Not After : Mar 27 04:01:26 2026 GMT Subject: CN=f87170437da47d62e5ef1f8825eb7fd7d83285f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:2e:c3:b1:22:29:43:8c:55:38:c8:1c:e6: 8c:48:d4:b5:e2:ce:56:23:f8:d6:8c:ba:20:c8:b7: b2:2f:1e:82:71:eb:f5:62:92:99:14:ec:8f:b0:53: 5c:d3:df:83:e8:57:63:d4:e0:21:21:45:5f:f6:09: 2b:8c:d6:11:8f:29:56:15:db:80:0f:96:85:f8:a2: c3:b8:ca:61:df:1d:c9:dc:a4:da:f5:fa:f5:29:91: 8d:30:b6:32:7f:6f:93:6a:34:4c:fd:0e:05:a9:86: 2b:6d:1b:38:52:8c:81:8a:d2:5d:68:6a:ae:c6:69: ec:1b:57:09:4c:7d:3c:5c:3e:b2:34:ab:67:d7:47: 67:d2:fa:d4:5f:d2:58:92:57:41:b0:d3:25:42:19: 69:39:a6:5a:0b:f3:37:e1:65:8c:5b:7d:b1:5e:09: e0:d7:0f:81:b4:3a:cc:32:46:bb:12:8a:87:a9:0c: 51:5f:de:67:08:83:97:47:96:a2:12:25:47:33:7c: 51:5b:89:02:6f:2f:25:1d:23:5c:36:b5:7b:34:41: 24:ea:22:f0:53:34:23:dc:bd:c5:85:3c:d4:de:93: d4:3c:e6:f8:4f:ba:11:cc:b8:29:f3:00:b9:7f:d8: cd:69:a3:4f:c7:20:63:c9:18:04:99:db:1f:38:fe: 1d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:71:70:43:7D:A4:7D:62:E5:EF:1F:88:25:EB:7F:D7:D8:32:85:F8 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d6:f1:7e:28:24:a6:06:bc:25:53:f8:a1:43:e6:f3:85:94: 46:1e:fb:c7:04:a8:e9:96:c9:58:60:c0:7e:41:7c:03:cf:74: bc:b1:73:e4:46:fd:02:ec:b4:0a:35:3d:a8:97:24:d3:dd:d5: 4e:35:da:cb:1c:32:81:f8:b7:79:0c:d7:fa:b6:f3:8d:c6:39: 9d:6c:6d:f8:e0:72:d3:4d:c0:ca:84:cf:65:59:99:a4:02:de: 58:05:40:8e:38:9a:47:c8:34:0f:b0:93:37:de:6a:f3:f1:2d: ee:ca:e1:21:cc:b3:64:f5:fe:0f:d1:ce:0e:e1:aa:fc:af:5c: 6e:5a:e1:e9:aa:7c:99:f8:4b:cf:d0:c0:ac:23:27:09:e9:4c: f7:2d:a7:22:9d:58:a6:c9:0d:a8:4b:a1:35:fe:32:0b:2c:7a: b0:1a:de:aa:9a:91:83:35:0e:79:8e:e5:c0:b4:bd:78:14:35: 52:68:15:df:42:5c:7d:32:af:9b:58:d5:0c:72:5c:27:7d:66: d7:68:fc:2b:5a:49:61:f7:82:d3:54:7b:e1:f4:cb:56:0c:cb: da:cb:d5:ac:6d:1b:cb:da:7b:3b:1d:5e:7e:ed:a5:4e:ea:2c: ca:f5:5f:cc:c9:49:61:d5:78:c6:2d:fe:95:60:6c:43:d0:9d: a4:f8:7e:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oTeJ6u4qQa3DCZeDJ29KxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwMzI2MDQwMTI2WhcNMjYwMzI3MDQwMTI2WjAzMTEwLwYDVQQD EyhmODcxNzA0MzdkYTQ3ZDYyZTVlZjFmODgyNWViN2ZkN2Q4MzI4NWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuEuw7EiKUOMVTjIHOaMSNS14s5W I/jWjLogyLeyLx6Ccev1YpKZFOyPsFNc09+D6Fdj1OAhIUVf9gkrjNYRjylWFduA D5aF+KLDuMph3x3J3KTa9fr1KZGNMLYyf2+TajRM/Q4FqYYrbRs4UoyBitJdaGqu xmnsG1cJTH08XD6yNKtn10dn0vrUX9JYkldBsNMlQhlpOaZaC/M34WWMW32xXgng 1w+BtDrMMka7EoqHqQxRX95nCIOXR5aiEiVHM3xRW4kCby8lHSNcNrV7NEEk6iLw UzQj3L3FhTzU3pPUPOb4T7oRzLgp8wC5f9jNaaNPxyBjyRgEmdsfOP4dJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhxcEN9pH1i5e8fiCXrf9fYMoX4MB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktbxfigk pga8JVP4oUPm84WURh77xwSo6ZbJWGDAfkF8A890vLFz5Eb9Auy0CjU9qJck093V TjXayxwygfi3eQzX+rbzjcY5nWxt+OBy003AyoTPZVmZpALeWAVAjjiaR8g0D7CT N95q8/Et7srhIcyzZPX+D9HODuGq/K9cblrh6ap8mfhLz9DArCMnCelM9y2nIp1Y pskNqEuhNf4yCyx6sBreqpqRgzUOeY7lwLS9eBQ1UmgV30JcfTKvm1jVDHJcJ31m 12j8K1pJYfeC01R74fTLVgzL2svVrG0by9p7Ox1efu2lTuosyvVfzMlJYdV4xi3+ lWBsQ9CdpPh+0w== -----END CERTIFICATE-----Generated at Thu Mar 26 15:57:33 2026 by rpki-client