$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: YRv4pPUzjKhP4KRDBmEAUU6wewoGtcerLDth/DkqGM4= Subject key identifier: D3:22:F6:B9:14:B2:90:F4:6C:A0:F8:AC:D6:C7:81:23:B3:74:81:7E Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 01A0CD1148B605A504D22F9E1E1427AE9619 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 17A5 Signing time: Wed 23 Sep 2026 07:00:56 +0000 Manifest this update: Wed 23 Sep 2026 07:00:56 +0000 Manifest next update: Thu 24 Sep 2026 07:00:56 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: JBknNoXY4zMme77toU+Sc8rRU5H4pANxAmPvZd7T/HE=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:11:48:b6:05:a5:04:d2:2f:9e:1e:14:27:ae:96:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Sep 23 07:00:56 2026 GMT Not After : Sep 24 07:00:56 2026 GMT Subject: CN=d322f6b914b290f46ca0f8acd6c78123b374817e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a9:8e:c1:1c:3f:43:5c:59:d1:0a:a7:cf:ce: a2:6e:d6:28:a9:94:48:29:a4:42:f4:dd:5a:00:0f: 14:ff:d5:98:f9:38:4a:42:92:e7:46:2e:92:47:ff: 7c:1e:a1:84:4a:d2:72:b4:1e:3b:fa:5b:25:39:6f: 6a:02:51:99:dd:fa:98:57:2e:48:03:3a:70:3b:c7: 17:61:e8:c3:86:e8:1b:65:f8:99:56:80:c0:a4:3c: a5:78:ab:c6:b9:3a:39:cf:31:11:b0:f4:37:44:e8: 12:74:b7:ee:58:3f:49:af:91:38:bf:28:b6:79:e4: 15:c3:e5:9f:2c:00:9c:d1:d9:29:36:49:2f:bf:8a: c6:b9:5d:4e:79:c2:de:22:20:51:ad:df:68:c2:f5: 3c:19:c7:68:36:94:3e:ea:59:5e:b4:8d:42:9f:be: 13:fa:6a:ec:27:ac:dd:9d:bb:54:e7:0e:0d:7f:07: 84:e6:27:d0:cd:f2:07:09:dc:44:47:9d:cd:48:d9: 5d:f8:70:3e:0d:c8:29:43:44:35:b0:b3:d6:47:a0: 7c:33:54:f1:a6:18:32:fa:8e:df:44:c2:e7:6a:8c: b4:41:a0:5b:03:fb:8d:12:78:bd:94:25:34:83:26: 38:e8:61:a0:7f:0b:ff:43:bc:0b:54:f9:6d:2d:76: ad:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:22:F6:B9:14:B2:90:F4:6C:A0:F8:AC:D6:C7:81:23:B3:74:81:7E X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:23:de:e5:58:aa:49:27:1f:f7:c6:43:0f:09:e8:6a:02:83: d1:09:79:97:e7:19:37:84:1d:f1:c1:4f:5d:5a:4d:16:b0:a2: b2:b8:32:84:ed:22:08:e3:e0:8b:b0:13:bf:31:f6:bf:37:21: c7:0c:f0:7c:db:cc:31:11:25:51:7f:31:ff:ba:a2:d2:2f:d0: d3:a4:da:7e:74:f7:71:63:5d:2c:b8:38:10:4f:03:0b:0c:17: 91:20:af:47:74:cd:e5:3f:8c:be:60:75:dd:af:30:3f:5c:55: 81:60:9f:82:21:34:3f:26:dd:58:22:b2:eb:d0:01:30:0d:58: 72:ce:87:e2:59:38:14:e8:57:e3:8a:62:2f:65:f9:02:48:da: 24:d8:0c:19:dd:b1:54:6b:00:1a:f8:b2:4f:1f:7d:6c:d0:4c: 60:63:d7:35:59:cb:e0:2e:9d:ac:76:27:fb:28:ef:a7:d5:40: 4a:48:c0:ef:1c:7b:53:cb:a6:93:ed:76:d3:8f:25:f8:15:c4: 7c:8f:3b:a8:34:b7:8d:58:cd:2f:13:93:9d:d3:bc:62:73:7c: ef:d6:77:15:c5:0a:7a:35:d0:59:eb:cc:64:44:40:95:a8:69: a5:cf:41:f3:68:49:66:e4:4c:33:4c:3f:49:fd:79:4c:7d:c6: 65:14:b1:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNEUi2BaUE0i+eHhQnrpYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwOTIzMDcwMDU2WhcNMjYwOTI0MDcwMDU2WjAzMTEwLwYDVQQD EyhkMzIyZjZiOTE0YjI5MGY0NmNhMGY4YWNkNmM3ODEyM2IzNzQ4MTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKmOwRw/Q1xZ0Qqnz86ibtYoqZRI KaRC9N1aAA8U/9WY+ThKQpLnRi6SR/98HqGEStJytB47+lslOW9qAlGZ3fqYVy5I AzpwO8cXYejDhugbZfiZVoDApDyleKvGuTo5zzERsPQ3ROgSdLfuWD9Jr5E4vyi2 eeQVw+WfLACc0dkpNkkvv4rGuV1OecLeIiBRrd9owvU8GcdoNpQ+6lletI1Cn74T +mrsJ6zdnbtU5w4NfweE5ifQzfIHCdxER53NSNld+HA+DcgpQ0Q1sLPWR6B8M1Tx phgy+o7fRMLnaoy0QaBbA/uNEni9lCU0gyY46GGgfwv/Q7wLVPltLXatjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMi9rkUspD0bKD4rNbHgSOzdIF+MB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCPe5Viq SScf98ZDDwnoagKD0Ql5l+cZN4Qd8cFPXVpNFrCisrgyhO0iCOPgi7ATvzH2vzch xwzwfNvMMRElUX8x/7qi0i/Q06TafnT3cWNdLLg4EE8DCwwXkSCvR3TN5T+MvmB1 3a8wP1xVgWCfgiE0PybdWCKy69ABMA1Ycs6H4lk4FOhX44piL2X5AkjaJNgMGd2x VGsAGviyTx99bNBMYGPXNVnL4C6drHYn+yjvp9VASkjA7xx7U8umk+12048l+BXE fI87qDS3jVjNLxOTndO8YnN879Z3FcUKejXQWevMZERAlahppc9B82hJZuRMM0w/ Sf15TH3GZRSxsg== -----END CERTIFICATE-----Generated at Wed Sep 23 19:12:12 2026 by rpki-client