$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: DdRjlD5w41PuslaIz80eeAql717YtHbHxoBOI+p9cXo= Subject key identifier: 51:00:33:DC:1F:5D:4C:D2:24:56:B7:7A:A3:20:50:21:8A:E0:AD:C9 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019D29972C4F6E8CF8754B66F136D44140D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 189A Signing time: Thu 26 Mar 2026 10:01:06 +0000 Manifest this update: Thu 26 Mar 2026 10:01:06 +0000 Manifest next update: Fri 27 Mar 2026 10:01:06 +0000 Files and hashes: 1: EUJR4oK_-qO6YAPuLUzPIGrtiic.roa (hash: YME5zAJYIJBkBPG7Ysa6vw+XFQl03WoNdtgDEh2gs4U=) 2: M36ECwRcj0TFTMeuL6oi_DsEnkQ.roa (hash: E7Nxan43SS/Yo752esXJfNN3COQpoHbafmeAiyBk1XI=) 3: Q0Jdhd0Xijh5Qg2MMx6tv_NFg0Y.roa (hash: e8/UdF909D8bl8btP6fz+eUx2PtucIwHXcMCcE3Yfss=) 4: S3R-qErkzc-IjOFmeTi4xHy4LpE.roa (hash: SNvSagqffcHVObamPtGGn26yO20xNO70CwB/KL8UDeA=) 5: VBZM83CovnXWWNAoSTmLuwtkvPA.roa (hash: zlKxjFuoWufhSPZybSMNIrhlFC4xMtEzi2DT6Mq8R4E=) 6: exXkKYTtUDjde_sRikIrk050twk.roa (hash: wS6gest7TLN8j3W6GI2oKTVveIMP3Ho87+QuUUyIfgc=) 7: i8iYm_0FW8CEhhGEtap9i1HCpbU.roa (hash: S62F8bLmRb8I4/DcdbRM8zS7BP7h1o24+JuRtSpKmdc=) 8: lISEedj5Gkre55GwsZjKu8moowA.roa (hash: S+Yq3Z38Og7alrPrHO1nngmVCOUzwCqJwWrOwsktrtM=) 9: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: Am67svtlrq9Ns8hurfaDpGYL8gzs6R9fcwcu3m5fCto=) 10: rWY90c2-byEiqpH-pAXqLcTVBl8.roa (hash: /cBf700BNhkKxHBETlqRX/grSyvQegr8+YbQwI/BM70=) 11: xVa6hi9wu8XjSdEwYmXJAx85FhU.roa (hash: 8J48r7Dcw/u08bxZJven18+8CJuosinNuC5v6bFRP4U=) 12: yyRW46EoiEZakH8xmbaVNYZzT7Y.roa (hash: kZjQSsJWQX8APsUvcm4SD5nZIwt5ENQAkgP42qqBCtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:97:2c:4f:6e:8c:f8:75:4b:66:f1:36:d4:41:40:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Mar 26 10:01:06 2026 GMT Not After : Mar 27 10:01:06 2026 GMT Subject: CN=510033dc1f5d4cd22456b77aa32050218ae0adc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ee:33:f8:0f:b9:e4:39:d1:58:da:a1:28:6a: dc:11:e3:a0:06:39:11:26:b7:37:12:a2:9a:9e:c9: fc:71:6c:2b:2b:ff:db:eb:31:cd:55:3b:af:01:ce: e8:26:d0:92:81:dc:72:2a:fe:a4:ed:34:2b:2b:27: d4:d3:08:f1:ec:bd:99:77:dd:8e:9d:b0:9d:cd:58: ff:d2:2c:50:67:81:47:82:77:1a:23:ab:b9:58:f1: f1:4d:72:23:d1:cb:7a:aa:5e:63:d0:75:17:98:c0: 8c:61:d4:58:78:f5:20:00:4c:b1:19:25:c9:79:8a: 65:d9:10:d1:78:fc:e2:fc:48:9d:b4:e6:7e:90:cb: c3:fc:b0:0e:73:d4:93:3d:e9:c5:8f:26:07:e0:75: 9b:9f:07:00:ff:06:3c:22:bd:f5:98:7a:99:dc:a9: 5d:46:bb:0b:6a:58:a7:be:9b:58:93:9f:3a:c5:c9: 6d:3a:bb:5c:9a:0c:e6:85:61:8f:5f:95:c3:fa:5c: b9:85:8f:f3:a8:0a:05:41:08:2f:32:1c:a9:5b:0b: 0f:f1:39:3d:f1:fd:e7:6a:ef:05:60:2f:76:8e:5e: 79:f5:3f:fe:9f:a8:27:30:99:07:70:97:05:75:8b: 8f:4a:1f:7a:f9:ba:b1:12:9a:40:89:00:7f:e4:22: f1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:00:33:DC:1F:5D:4C:D2:24:56:B7:7A:A3:20:50:21:8A:E0:AD:C9 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d7:e7:05:9a:b1:0f:82:32:9f:c6:90:cd:89:6e:8b:4c:08: 4a:32:0a:56:08:99:75:b2:11:6d:cd:43:dc:2d:7e:a4:81:9e: aa:02:c5:9d:32:a0:17:f2:9d:b8:01:07:18:63:6a:29:82:73: b1:de:ed:a0:15:70:18:8d:18:47:7c:63:92:f9:bc:3b:ca:cb: 5f:7f:b0:85:67:dd:55:dc:e7:ad:d0:ab:38:08:31:5c:a7:40: f8:ec:8b:03:7c:4f:4a:8d:95:97:24:6f:29:50:37:8e:8f:af: 52:29:5e:6b:78:73:6d:02:ae:70:42:4f:98:72:86:b0:e9:91: 69:82:ff:06:54:33:4f:e6:f5:a5:bb:98:0a:e4:06:9c:01:6f: 78:0d:0c:fd:db:fe:c9:5b:7e:f2:52:c1:47:51:39:f3:3e:df: 42:3c:5d:12:83:1a:86:9d:55:4f:29:a7:8c:73:39:c5:bf:f8: fc:9c:9a:7f:19:c0:91:af:ab:f5:45:e1:61:0a:2f:c1:e9:c0: 4c:01:3a:09:cf:48:48:94:8c:c9:ee:6f:0c:11:14:88:32:55: 6b:91:82:8c:9f:35:6a:70:24:21:1a:a0:17:ac:ef:27:fc:3a: f3:22:c2:6d:7e:ce:1d:e5:f2:49:a4:a9:c1:91:3b:3a:b9:fa: 0a:47:57:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0plyxPboz4dUtm8TbUQUDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjYwMzI2MTAwMTA2WhcNMjYwMzI3MTAwMTA2WjAzMTEwLwYDVQQD Eyg1MTAwMzNkYzFmNWQ0Y2QyMjQ1NmI3N2FhMzIwNTAyMThhZTBhZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu4z+A+55DnRWNqhKGrcEeOgBjkR Jrc3EqKansn8cWwrK//b6zHNVTuvAc7oJtCSgdxyKv6k7TQrKyfU0wjx7L2Zd92O nbCdzVj/0ixQZ4FHgncaI6u5WPHxTXIj0ct6ql5j0HUXmMCMYdRYePUgAEyxGSXJ eYpl2RDRePzi/EidtOZ+kMvD/LAOc9STPenFjyYH4HWbnwcA/wY8Ir31mHqZ3Kld RrsLalinvptYk586xcltOrtcmgzmhWGPX5XD+ly5hY/zqAoFQQgvMhypWwsP8Tk9 8f3nau8FYC92jl559T/+n6gnMJkHcJcFdYuPSh96+bqxEppAiQB/5CLxHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEAM9wfXUzSJFa3eqMgUCGK4K3JMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9fnBZqx D4Iyn8aQzYlui0wISjIKVgiZdbIRbc1D3C1+pIGeqgLFnTKgF/KduAEHGGNqKYJz sd7toBVwGI0YR3xjkvm8O8rLX3+whWfdVdznrdCrOAgxXKdA+OyLA3xPSo2VlyRv KVA3jo+vUilea3hzbQKucEJPmHKGsOmRaYL/BlQzT+b1pbuYCuQGnAFveA0M/dv+ yVt+8lLBR1E58z7fQjxdEoMahp1VTymnjHM5xb/4/JyafxnAka+r9UXhYQovwenA TAE6Cc9ISJSMye5vDBEUiDJVa5GCjJ81anAkIRqgF6zvJ/w68yLCbX7OHeXySaSp wZE7Orn6CkdXLQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:17 2026 by rpki-client