$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json) Hash identifier: Q5MBGK4yqWAfxRSoufo7y6Xpd4DbCas+vFgKPsAwYPw= Subject key identifier: 60:B1:BD:A1:03:32:DF:8D:63:C3:2D:BB:B9:EC:69:C0:47:B5:FD:D0 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019D2816F243697E12882B651537E8E7F4CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft Manifest number: 18A7 Signing time: Thu 26 Mar 2026 03:01:25 +0000 Manifest this update: Thu 26 Mar 2026 03:01:25 +0000 Manifest next update: Fri 27 Mar 2026 03:01:25 +0000 Files and hashes: 1: 1bmjaNGaI2UWie6zoQTb39HFS_s.roa (hash: +AxNVqmR9VnywOpnEpWpK60msZlPvTmRqEnJ2TvVddQ=) 2: 2UTsdBqwcGY6WLPGQu2AQnmmQaw.roa (hash: N0cgvop2VFVQVWMu1UTzJj1ZcUJzTX91lueVGv/YOHc=) 3: ByKSk6_PCk0jKVqec0OJjbAcRcU.roa (hash: t1f1S4C1okYWwtKH8np/6yMDAc9jaCyFzuNOyR5oQYc=) 4: E102IN0_Ach777PDZCjDRyGfr5s.roa (hash: P+fFTKuiYJQ7KTnCl15w1gtiWXSxbhhwZtpqSiAeOhM=) 5: KWyOaYXmmuGpMkmFhWfxqNZLpEQ.roa (hash: 6Db2CprWj64Ewe8dVzSinC3cNdAaSLoS6Dq+erianYM=) 6: LEiLLq9r1VO5_Ov5I6DYkNeJuIQ.roa (hash: mWIOH513v2gZLS9HWDfHNsxzxtZFG4eZXAkIgOJaQVg=) 7: N0ib0MGeP5d7uD5SMGNzR5xRzaA.roa (hash: wX5k06wd7UCg24rImU3sW3f/cm2llInrYc9+0zZZkLU=) 8: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: pNuJtxCEneKc9jJrDD59ob5wSBVEOpxNgg0cDzAq2xM=) 9: TM5VkZiuCQFhlCTuTDiqt2hHOiI.roa (hash: Uj+s0ytc6HH2YJFkDxTD9d5q1+tOjVsh1FxTZk6i+wg=) 10: WqZxU21CXk9II8O2lF6Y-ketCJI.roa (hash: JoRrtKwoZC20Q/QLA/mOv68NwCQSWJ+6cWt4rKxvqxY=) 11: YUKRTZrZKbMQuj1koHZDnPDdKkc.roa (hash: 5JLtSmX5xrQ29vGLGR8NuSK/OU2HfwUbgSXICbmnR28=) 12: aiZn6kgS43qbYGzLkAmQKdo6gA4.roa (hash: G/KuL+VXWSSvavjd4cxqh2acdQDd5A1ry4sWQqi5S1E=) 13: cbo9ZPmxQz5ojNzo3NLp3qPAq5U.roa (hash: WhZWAza+BOUN2V/ul+PIwoOcyAHFyg4fNWTLRfkjfEQ=) 14: falskHkEzmFDpE1q8O1AQezFfTs.roa (hash: ZJ3mncJicjqu8JmD6aJ/BH6oEnyHrxSao3V9TboLsMI=) 15: k3ayP4DiWUp9a1MNUSDdf93Vz8M.roa (hash: QfCyKwRzJHu3kJc4+Hlfq/pjF8bZH2qQwXvmpvH6rS4=) 16: lIy9zQMHNpi1v4RKAbwfpcq16JY.roa (hash: GuxM6yqJlPjVIDlbR8g1Fv5lkMvj//jwJnCdhjFyz9M=) 17: pEACykvZyRBjnuYUwUstZ7_jCVk.roa (hash: G94UHZh9tGtYRGHSoldyBITvAVDdXDRBRDBjeMrYPmE=) 18: pQE_sWOxAXv4LzF_hnEEzRVKjkU.roa (hash: r8BJ41cxYxyL7WV91ylso2pXKBwYsMCQMjQeRq8IwbI=) 19: rVyXgVyYp5rnr4oV3loTRO-57j0.roa (hash: U1gvzfizC5IaJxRnfZJGhEooOdvqsMkE+qdUPQBcx04=) 20: sUzc4i-qF-Qw6c5EDaaa0l-fnQI.roa (hash: SGebinu36YaRTF6AF3Dm3RGfWPUH9spaYcSgX0QinqQ=) 21: xsb80TsEg5gDhvG_dHnY_wiD7IU.roa (hash: U+IWtUZRr/JdO94gP5xDKETp0qxV29NQDKF3SavkJR4=) 22: yEq1d-Y9jhIC-ExVD8i3JnQfKWI.roa (hash: v/lSe2YGn/r4aMCpDUpUTQFRfYfqsJBd8pftAtwMWz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:16:f2:43:69:7e:12:88:2b:65:15:37:e8:e7:f4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Mar 26 03:01:25 2026 GMT Not After : Mar 27 03:01:25 2026 GMT Subject: CN=60b1bda10332df8d63c32dbbb9ec69c047b5fdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:1e:b3:e1:8d:38:53:c2:7a:7c:4c:63:8d: f7:7f:58:5b:0e:89:39:9d:aa:8a:83:73:ba:f7:fa: cd:1d:05:ec:37:b3:db:db:a5:b5:c6:b9:f1:9a:d4: fc:c9:8f:ad:42:8a:42:e1:d4:11:73:55:ae:08:13: 93:f6:dd:bf:0e:67:4b:9a:ac:1c:ff:a2:01:a5:94: 28:c9:45:01:65:7c:3b:6b:57:55:95:7d:bf:a5:aa: a0:c4:e4:44:f7:37:03:58:8c:38:07:01:0d:7c:1b: 9f:31:a6:38:f5:d0:55:16:b7:6b:d4:a7:57:a6:f1: 01:6c:5a:44:1d:c2:47:1f:a5:5e:45:a3:86:37:76: 05:1b:94:33:c8:e9:9d:27:6f:34:32:a1:6e:ec:7a: 0e:d3:1a:40:8d:e8:04:31:1b:59:eb:d0:ea:94:48: ca:d2:33:4e:c9:3e:38:24:2c:44:2a:d3:a9:ba:be: 4e:a8:fd:5b:ec:45:0c:60:31:f9:6e:76:87:5e:06: 27:2a:fe:27:7b:54:f6:88:cc:eb:89:26:a7:f1:d5: 37:16:ab:30:1c:6d:40:ac:d7:31:94:ec:a4:44:66: ba:8b:90:0c:6f:a0:d2:7d:bc:a8:47:fe:d0:a3:07: 6d:38:8c:c5:0c:f6:cc:83:2a:00:50:6b:e6:92:e8: 6f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B1:BD:A1:03:32:DF:8D:63:C3:2D:BB:B9:EC:69:C0:47:B5:FD:D0 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:24:fa:f8:f6:3e:17:72:52:21:a2:9c:f0:bd:2f:37:6f:df: ea:c1:b9:86:3f:fc:81:48:8f:32:83:af:6d:3c:64:c6:93:c5: 2d:9b:26:55:79:64:7d:79:f7:c7:dc:da:99:10:72:ca:a0:49: 8f:25:03:da:12:a4:e2:41:53:dd:f7:06:32:f4:78:78:ad:59: 49:db:70:07:37:72:5c:fa:3b:91:8f:d5:f5:d0:91:d0:76:35: 32:82:56:85:50:91:a0:d5:b0:be:0c:4f:8e:dc:13:44:4b:5f: 9e:89:67:3e:b1:9e:ef:29:83:72:76:80:86:ee:66:8b:9b:f6: f1:07:37:db:a6:a3:21:7f:e1:5b:d8:d2:6e:4c:2f:0d:eb:9d: 9a:b3:71:7a:3c:6d:eb:68:d2:dc:6a:80:ef:b4:5f:b2:b4:ef: 50:76:fd:7b:1d:cf:a2:ae:b3:db:05:b0:7d:fc:97:21:b5:7e: 9a:06:f0:63:00:d6:ad:2b:28:18:04:67:e0:bf:f3:2b:7e:ea: 0b:9e:7f:9b:00:33:dd:e1:90:78:f2:e6:5c:9e:72:da:fb:41: 25:78:15:d1:f1:a6:bd:78:e2:cf:d3:f4:a4:e4:66:10:50:a2: a7:c4:8f:55:4d:ac:3e:8a:f7:a4:c6:56:95:e0:0b:83:61:fb: c0:ea:b7:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oFvJDaX4SiCtlFTfo5/TNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjYwMzI2MDMwMTI1WhcNMjYwMzI3MDMwMTI1WjAzMTEwLwYDVQQD Eyg2MGIxYmRhMTAzMzJkZjhkNjNjMzJkYmJiOWVjNjljMDQ3YjVmZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBces+GNOFPCenxMY433f1hbDok5 naqKg3O69/rNHQXsN7Pb26W1xrnxmtT8yY+tQopC4dQRc1WuCBOT9t2/DmdLmqwc /6IBpZQoyUUBZXw7a1dVlX2/paqgxORE9zcDWIw4BwENfBufMaY49dBVFrdr1KdX pvEBbFpEHcJHH6VeRaOGN3YFG5QzyOmdJ280MqFu7HoO0xpAjegEMRtZ69DqlEjK 0jNOyT44JCxEKtOpur5OqP1b7EUMYDH5bnaHXgYnKv4ne1T2iMzriSan8dU3Fqsw HG1ArNcxlOykRGa6i5AMb6DSfbyoR/7QowdtOIzFDPbMgyoAUGvmkuhvzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCxvaEDMt+NY8Mtu7nsacBHtf3QMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyT6+PY+ F3JSIaKc8L0vN2/f6sG5hj/8gUiPMoOvbTxkxpPFLZsmVXlkfXn3x9zamRByyqBJ jyUD2hKk4kFT3fcGMvR4eK1ZSdtwBzdyXPo7kY/V9dCR0HY1MoJWhVCRoNWwvgxP jtwTREtfnolnPrGe7ymDcnaAhu5mi5v28Qc326ajIX/hW9jSbkwvDeudmrNxejxt 62jS3GqA77RfsrTvUHb9ex3Poq6z2wWwffyXIbV+mgbwYwDWrSsoGARn4L/zK37q C55/mwAz3eGQePLmXJ5y2vtBJXgV0fGmvXjiz9P0pORmEFCip8SPVU2sPor3pMZW leALg2H7wOq3zg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:45:32 2026 by rpki-client