$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: Kgf7fl4f/WAc9u7RoEKQCGVkPw9Ch2G199UAptYHpjg= Subject key identifier: 2F:A7:9D:DE:29:0F:8A:CE:96:2A:14:EB:53:38:E5:1C:60:D0:86:5C Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 01A0D0EE12A404C80C7A12C256B72914C4DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 17A7 Signing time: Thu 24 Sep 2026 01:00:58 +0000 Manifest this update: Thu 24 Sep 2026 01:00:58 +0000 Manifest next update: Fri 25 Sep 2026 01:00:58 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: E1pGfUHD+LOnT6xVh73B9717rdPcarNJ5k2P20H7TmE=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:ee:12:a4:04:c8:0c:7a:12:c2:56:b7:29:14:c4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Sep 24 01:00:58 2026 GMT Not After : Sep 25 01:00:58 2026 GMT Subject: CN=2fa79dde290f8ace962a14eb5338e51c60d0865c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:1d:c6:df:94:23:e1:df:fa:64:65:ea:25: a8:32:05:d9:f9:3f:3b:1e:21:cc:c9:b6:15:76:6d: 4c:4e:73:2b:68:ff:a6:0d:13:f9:ab:a2:a7:b6:9e: d2:1c:23:26:58:23:53:31:eb:37:4c:59:0b:3f:d8: 89:a1:52:86:cb:4d:37:52:b9:13:e1:ab:01:bc:61: 75:7a:a8:a5:da:15:70:d9:15:02:cd:d8:94:6f:42: 1c:39:cc:a4:c3:eb:cc:be:9f:e8:cb:30:68:e2:e4: b7:ce:9c:0a:33:fb:fe:0e:c6:34:cc:11:9e:93:53: 32:60:30:1c:35:f5:bf:96:ee:85:a4:bb:fd:9e:e6: 79:8f:dc:1e:54:5e:50:30:0e:d0:3b:3f:e8:0f:01: bc:c0:77:4b:b2:a9:51:99:ae:69:7f:eb:53:d5:de: 58:38:d6:0e:57:d9:36:d1:07:1c:25:a4:84:e4:5f: 0a:35:54:ca:c5:11:ce:3d:05:4c:9d:9d:2c:6c:d3: b2:cb:47:ed:e2:de:73:c2:70:ad:45:c0:5d:90:3e: c7:6e:b4:78:d0:64:da:56:5f:10:af:76:76:e5:85: e7:2c:83:90:9e:ad:14:1c:23:ac:cd:09:d8:d5:31: b0:e7:22:1e:e6:20:f0:69:d7:08:01:87:90:03:12: 44:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A7:9D:DE:29:0F:8A:CE:96:2A:14:EB:53:38:E5:1C:60:D0:86:5C X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:12:cf:c3:6c:90:e1:51:bb:a6:4c:9b:be:5c:48:13:d6:72: ca:f7:25:da:6d:77:04:6d:4a:a8:6d:80:73:ea:c9:fa:2d:e0: d4:ee:90:5f:c8:c3:b3:fd:84:6b:1c:83:a1:bb:7f:fd:ed:f5: bf:88:5c:6a:3e:5b:e9:49:f7:34:12:ef:4f:69:d3:39:58:7e: b1:e0:5b:a4:66:a3:10:58:17:45:fe:5d:5c:14:da:f1:7d:c3: 62:4e:1d:1c:c8:0a:92:7f:ec:c6:35:85:e6:16:b2:8a:78:d5: 97:18:60:b3:d7:21:03:a9:67:33:6b:6b:fe:b3:ef:f7:e8:3d: 4c:a3:7f:a3:5d:0e:46:2f:1f:92:fa:56:3d:91:3c:df:48:6a: 6a:f8:1d:f4:e6:19:c7:49:8c:4a:c4:b1:42:e6:1d:c9:f0:d7: 5c:40:01:da:5a:97:e4:ac:d7:77:0a:c4:5d:0b:9e:2d:90:ed: aa:b4:9d:a1:46:c5:6d:53:99:4d:27:35:7f:14:e2:5b:74:e3: 88:d6:34:a9:48:2c:0d:0c:75:f0:c8:b3:7f:03:07:1e:d5:c9: 5e:f9:84:09:82:b8:88:95:96:71:e0:62:01:77:78:f0:c5:97: c1:45:b6:61:5c:34:42:46:06:bb:95:89:02:b2:05:93:25:c2: 7b:90:56:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQ7hKkBMgMehLCVrcpFMTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwOTI0MDEwMDU4WhcNMjYwOTI1MDEwMDU4WjAzMTEwLwYDVQQD EygyZmE3OWRkZTI5MGY4YWNlOTYyYTE0ZWI1MzM4ZTUxYzYwZDA4NjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5cdxt+UI+Hf+mRl6iWoMgXZ+T87 HiHMybYVdm1MTnMraP+mDRP5q6Kntp7SHCMmWCNTMes3TFkLP9iJoVKGy003UrkT 4asBvGF1eqil2hVw2RUCzdiUb0IcOcykw+vMvp/oyzBo4uS3zpwKM/v+DsY0zBGe k1MyYDAcNfW/lu6FpLv9nuZ5j9weVF5QMA7QOz/oDwG8wHdLsqlRma5pf+tT1d5Y ONYOV9k20QccJaSE5F8KNVTKxRHOPQVMnZ0sbNOyy0ft4t5zwnCtRcBdkD7HbrR4 0GTaVl8Qr3Z25YXnLIOQnq0UHCOszQnY1TGw5yIe5iDwadcIAYeQAxJEKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+nnd4pD4rOlioU61M45Rxg0IZcMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShLPw2yQ 4VG7pkybvlxIE9Zyyvcl2m13BG1KqG2Ac+rJ+i3g1O6QX8jDs/2EaxyDobt//e31 v4hcaj5b6Un3NBLvT2nTOVh+seBbpGajEFgXRf5dXBTa8X3DYk4dHMgKkn/sxjWF 5hayinjVlxhgs9chA6lnM2tr/rPv9+g9TKN/o10ORi8fkvpWPZE830hqavgd9OYZ x0mMSsSxQuYdyfDXXEAB2lqX5KzXdwrEXQueLZDtqrSdoUbFbVOZTSc1fxTiW3Tj iNY0qUgsDQx18MizfwMHHtXJXvmECYK4iJWWceBiAXd48MWXwUW2YVw0QkYGu5WJ ArIFkyXCe5BWhw== -----END CERTIFICATE-----Generated at Thu Sep 24 06:01:54 2026 by rpki-client