$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json) Hash identifier: 3A9UJNLSGa4AukRYcxavrhqqAu889TmFnXRvgIEFpJ8= Subject key identifier: EC:69:4C:A4:23:77:AF:DE:33:F9:F0:36:2D:2F:A0:38:05:7E:F4:B3 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019D2A04F8AC5BAFC27D43C7C62C1A369984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft Manifest number: 18A8 Signing time: Thu 26 Mar 2026 12:01:02 +0000 Manifest this update: Thu 26 Mar 2026 12:01:02 +0000 Manifest next update: Fri 27 Mar 2026 12:01:02 +0000 Files and hashes: 1: 1bmjaNGaI2UWie6zoQTb39HFS_s.roa (hash: +AxNVqmR9VnywOpnEpWpK60msZlPvTmRqEnJ2TvVddQ=) 2: 2UTsdBqwcGY6WLPGQu2AQnmmQaw.roa (hash: N0cgvop2VFVQVWMu1UTzJj1ZcUJzTX91lueVGv/YOHc=) 3: ByKSk6_PCk0jKVqec0OJjbAcRcU.roa (hash: t1f1S4C1okYWwtKH8np/6yMDAc9jaCyFzuNOyR5oQYc=) 4: E102IN0_Ach777PDZCjDRyGfr5s.roa (hash: P+fFTKuiYJQ7KTnCl15w1gtiWXSxbhhwZtpqSiAeOhM=) 5: KWyOaYXmmuGpMkmFhWfxqNZLpEQ.roa (hash: 6Db2CprWj64Ewe8dVzSinC3cNdAaSLoS6Dq+erianYM=) 6: LEiLLq9r1VO5_Ov5I6DYkNeJuIQ.roa (hash: mWIOH513v2gZLS9HWDfHNsxzxtZFG4eZXAkIgOJaQVg=) 7: N0ib0MGeP5d7uD5SMGNzR5xRzaA.roa (hash: wX5k06wd7UCg24rImU3sW3f/cm2llInrYc9+0zZZkLU=) 8: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: 41mVbUVAJg+7DKbyG5D/sAcw9saDO3zm9Kdabppes64=) 9: TM5VkZiuCQFhlCTuTDiqt2hHOiI.roa (hash: Uj+s0ytc6HH2YJFkDxTD9d5q1+tOjVsh1FxTZk6i+wg=) 10: WqZxU21CXk9II8O2lF6Y-ketCJI.roa (hash: JoRrtKwoZC20Q/QLA/mOv68NwCQSWJ+6cWt4rKxvqxY=) 11: YUKRTZrZKbMQuj1koHZDnPDdKkc.roa (hash: 5JLtSmX5xrQ29vGLGR8NuSK/OU2HfwUbgSXICbmnR28=) 12: aiZn6kgS43qbYGzLkAmQKdo6gA4.roa (hash: G/KuL+VXWSSvavjd4cxqh2acdQDd5A1ry4sWQqi5S1E=) 13: cbo9ZPmxQz5ojNzo3NLp3qPAq5U.roa (hash: WhZWAza+BOUN2V/ul+PIwoOcyAHFyg4fNWTLRfkjfEQ=) 14: falskHkEzmFDpE1q8O1AQezFfTs.roa (hash: ZJ3mncJicjqu8JmD6aJ/BH6oEnyHrxSao3V9TboLsMI=) 15: k3ayP4DiWUp9a1MNUSDdf93Vz8M.roa (hash: QfCyKwRzJHu3kJc4+Hlfq/pjF8bZH2qQwXvmpvH6rS4=) 16: lIy9zQMHNpi1v4RKAbwfpcq16JY.roa (hash: GuxM6yqJlPjVIDlbR8g1Fv5lkMvj//jwJnCdhjFyz9M=) 17: pEACykvZyRBjnuYUwUstZ7_jCVk.roa (hash: G94UHZh9tGtYRGHSoldyBITvAVDdXDRBRDBjeMrYPmE=) 18: pQE_sWOxAXv4LzF_hnEEzRVKjkU.roa (hash: r8BJ41cxYxyL7WV91ylso2pXKBwYsMCQMjQeRq8IwbI=) 19: rVyXgVyYp5rnr4oV3loTRO-57j0.roa (hash: U1gvzfizC5IaJxRnfZJGhEooOdvqsMkE+qdUPQBcx04=) 20: sUzc4i-qF-Qw6c5EDaaa0l-fnQI.roa (hash: SGebinu36YaRTF6AF3Dm3RGfWPUH9spaYcSgX0QinqQ=) 21: xsb80TsEg5gDhvG_dHnY_wiD7IU.roa (hash: U+IWtUZRr/JdO94gP5xDKETp0qxV29NQDKF3SavkJR4=) 22: yEq1d-Y9jhIC-ExVD8i3JnQfKWI.roa (hash: v/lSe2YGn/r4aMCpDUpUTQFRfYfqsJBd8pftAtwMWz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:04:f8:ac:5b:af:c2:7d:43:c7:c6:2c:1a:36:99:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Mar 26 12:01:02 2026 GMT Not After : Mar 27 12:01:02 2026 GMT Subject: CN=ec694ca42377afde33f9f0362d2fa038057ef4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:5c:bb:18:f6:c1:13:45:93:0c:0e:3d:86: b5:22:92:aa:c7:f9:59:29:7f:48:1d:f9:89:22:1b: af:d0:23:00:e1:6b:a4:dc:82:f1:c0:fc:9d:71:b6: 09:f4:ae:58:48:cc:93:e7:c8:09:fb:94:8b:8d:86: 06:0b:f4:5b:97:bc:ae:b7:5c:3d:30:87:61:8c:49: 17:e3:58:97:0f:58:2c:9e:0a:c2:48:a3:7d:db:b6: 0f:53:0d:b7:60:ad:c2:92:d0:80:4b:35:db:1f:9b: 3f:78:36:81:9e:0f:3a:69:6a:8a:0e:35:2b:0e:ee: 13:e2:60:90:66:a8:92:04:d2:47:a8:f9:2c:ad:d8: 41:64:8c:1e:96:3e:4d:f4:85:ef:80:99:cd:88:37: 24:ec:2e:ee:64:ac:aa:ee:d5:55:5c:b5:bd:ea:c1: 49:0c:31:fa:ee:9d:e4:13:f6:48:35:59:bf:70:51: b2:0b:25:bf:22:aa:6e:93:32:a4:be:8d:45:ca:70: 2a:75:19:80:e9:b9:98:f1:54:7c:9a:04:ed:50:f4: 6e:36:3d:bc:db:2c:ab:78:54:07:d0:b4:ad:f3:34: e3:13:0d:51:69:95:29:ea:3b:e1:24:8d:34:cf:da: b4:4c:7f:ea:6c:db:39:d3:83:e5:53:92:bc:3a:60: 1e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:69:4C:A4:23:77:AF:DE:33:F9:F0:36:2D:2F:A0:38:05:7E:F4:B3 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:32:e5:de:ee:50:39:c1:63:1d:5f:87:55:0c:d3:21:e8:50: 82:02:a6:31:27:7c:05:84:98:7d:86:73:2e:a8:13:c2:53:22: ca:8f:be:49:9a:bc:6f:34:74:46:d1:32:c3:fa:ef:69:39:ce: a2:0a:6b:80:a4:62:23:77:34:ff:9d:e8:4e:0d:b5:30:74:30: 45:3b:6b:f5:78:6c:64:bf:26:89:97:fb:31:ee:d3:21:a4:c1: 76:b3:4c:52:13:67:71:1e:78:6d:f0:5f:01:12:c8:eb:82:41: c9:31:cb:07:2e:76:53:99:c8:a4:50:a8:12:24:14:34:cb:11: c1:a9:a0:09:b5:d5:fd:ae:ca:55:5c:4c:f4:c0:50:65:b1:fd: 28:26:ff:6f:c7:d1:d6:e1:84:2c:d9:c5:39:0f:44:18:82:24: 7f:a6:fb:cc:2e:c7:8f:41:13:c6:5c:88:ad:22:0a:14:8c:83: da:6a:0a:b7:6a:1e:c4:65:05:d7:1e:31:52:50:c8:e7:46:ce: 2a:09:b3:6d:b4:4d:a3:2f:1b:62:dd:cf:d1:41:66:9b:29:76: de:d9:32:12:eb:de:b5:5a:47:c6:36:c1:5e:40:1c:43:cf:00: ac:dd:b0:61:87:d6:4b:a2:04:84:5d:89:f5:10:1a:47:52:fc: 16:1a:33:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qBPisW6/CfUPHxiwaNpmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjYwMzI2MTIwMTAyWhcNMjYwMzI3MTIwMTAyWjAzMTEwLwYDVQQD EyhlYzY5NGNhNDIzNzdhZmRlMzNmOWYwMzYyZDJmYTAzODA1N2VmNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLhcuxj2wRNFkwwOPYa1IpKqx/lZ KX9IHfmJIhuv0CMA4Wuk3ILxwPydcbYJ9K5YSMyT58gJ+5SLjYYGC/Rbl7yut1w9 MIdhjEkX41iXD1gsngrCSKN927YPUw23YK3CktCASzXbH5s/eDaBng86aWqKDjUr Du4T4mCQZqiSBNJHqPksrdhBZIwelj5N9IXvgJnNiDck7C7uZKyq7tVVXLW96sFJ DDH67p3kE/ZINVm/cFGyCyW/IqpukzKkvo1FynAqdRmA6bmY8VR8mgTtUPRuNj28 2yyreFQH0LSt8zTjEw1RaZUp6jvhJI00z9q0TH/qbNs504PlU5K8OmAe5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxpTKQjd6/eM/nwNi0voDgFfvSzMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjLl3u5Q OcFjHV+HVQzTIehQggKmMSd8BYSYfYZzLqgTwlMiyo++SZq8bzR0RtEyw/rvaTnO ogprgKRiI3c0/53oTg21MHQwRTtr9XhsZL8miZf7Me7TIaTBdrNMUhNncR54bfBf ARLI64JByTHLBy52U5nIpFCoEiQUNMsRwamgCbXV/a7KVVxM9MBQZbH9KCb/b8fR 1uGELNnFOQ9EGIIkf6b7zC7Hj0ETxlyIrSIKFIyD2moKt2oexGUF1x4xUlDI50bO KgmzbbRNoy8bYt3P0UFmmyl23tkyEuvetVpHxjbBXkAcQ88ArN2wYYfWS6IEhF2J 9RAaR1L8Fhoz3w== -----END CERTIFICATE-----Generated at Thu Mar 26 18:24:24 2026 by rpki-client