$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json) Hash identifier: PLMyWdg4e2pfZuBSK85CcyZ1U3C5rqb+/4ASoN1XD5M= Subject key identifier: 0C:34:27:A5:E8:87:BA:F0:09:6A:4D:44:37:0D:BF:25:D7:90:51:AF Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4 Certificate serial: 01A127307958DCA59E3162E76943A59B6F5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft Manifest number: 1A9D Signing time: Sat 10 Oct 2026 19:00:50 +0000 Manifest this update: Sat 10 Oct 2026 19:00:50 +0000 Manifest next update: Sun 11 Oct 2026 19:00:50 +0000 Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=) 2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=) 3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=) 4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=) 5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=) 6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: oas48ht1TELYvqBEMCvVCCxkhGW9jfIxylZeqjatLyA=) 7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=) 8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=) 9: vzidGM-MJjldkGGDVWaxyGxbVlE.roa (hash: yoJENfRbWs+TKZhJt2OSgIUYi9IpVHltrW6bYU1ft9s=) 10: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:27:30:79:58:dc:a5:9e:31:62:e7:69:43:a5:9b:6f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4 Validity Not Before: Oct 10 19:00:50 2026 GMT Not After : Oct 11 19:00:50 2026 GMT Subject: CN=0c3427a5e887baf0096a4d44370dbf25d79051af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:12:f9:56:a8:14:e8:cf:77:1e:a8:78:00:c3: 82:26:b3:ca:2d:62:8b:53:e4:f1:d7:90:8a:0e:78: 19:b7:34:96:d3:d2:73:f2:36:16:04:38:26:6a:9e: 92:d1:85:81:2c:f9:b6:50:4c:a2:c6:4f:18:23:17: dc:8a:94:00:57:a3:bc:d1:5c:56:9f:38:f7:70:85: 1d:c6:30:05:e6:df:63:7c:e1:d8:2b:c0:33:9d:d7: 11:40:e9:7a:9c:e8:42:ca:66:c7:e3:ac:69:23:2a: 08:f3:80:01:cb:0a:61:3b:e1:6d:c2:74:03:47:fd: d5:1b:89:4e:91:48:ec:c3:d4:89:ea:bd:ce:ba:a4: 04:37:59:57:82:06:78:9f:be:aa:eb:e7:f2:33:fb: a1:01:35:5f:e0:7f:65:ee:f2:2e:63:ab:a4:48:73: 37:80:bd:81:e4:7e:ff:06:19:3e:fd:2f:45:a4:f2: eb:2d:a8:1c:ad:15:d6:48:0d:3b:1a:e0:41:57:a9: 0a:ec:be:43:4e:88:10:75:92:03:be:77:0d:2f:fc: 03:ca:9a:b9:09:7b:06:a0:ca:aa:8f:90:a6:14:a2: ed:fd:49:7d:43:1e:eb:d8:1a:1b:61:b0:53:43:50: 52:01:2a:3e:01:43:23:03:39:dd:48:b7:f2:7d:ab: 61:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:34:27:A5:E8:87:BA:F0:09:6A:4D:44:37:0D:BF:25:D7:90:51:AF X509v3 Authority Key Identifier: keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c2:9b:e0:90:e3:4e:ae:74:2e:b7:b1:93:01:71:d8:7c:7e: 77:aa:df:4d:4f:3c:5b:91:79:a4:78:46:d5:8e:19:cf:77:06: 0a:0e:31:80:c1:70:38:ec:55:d1:02:c5:8f:fa:da:0b:74:9e: e0:a6:fa:10:9f:ec:7a:52:99:df:e9:04:50:09:24:ea:d5:be: 6e:ec:b0:4f:0c:a8:17:28:cb:16:b6:57:51:61:c5:6b:16:16: bf:49:0a:4f:be:3e:a9:d5:a0:ad:bd:e3:70:ca:c1:71:08:34: b8:e2:4c:f3:98:99:c2:54:ea:93:3b:ea:c4:c1:c3:83:b6:3f: c9:7a:20:ca:8b:41:ec:a7:59:d3:d5:0f:17:46:64:23:69:43: a6:af:8a:69:03:5f:f7:45:d7:76:4b:d6:b6:0c:1a:fe:86:20: 8c:26:af:88:6a:b6:d2:64:a1:a3:de:bb:6a:2d:91:4c:91:e5: a4:ae:a2:1d:83:24:e8:bb:31:d4:20:cc:5d:4a:ed:64:ce:00: 4d:0f:3b:a2:7a:72:ca:31:c2:eb:6f:71:66:50:03:43:62:54: 44:ed:fb:58:b2:2a:f3:7e:b8:e1:67:1c:90:23:e2:1a:e8:19: 17:1f:6d:49:9d:66:a5:e3:20:41:62:88:9a:d6:bc:b5:ce:d7: b6:6d:10:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEnMHlY3KWeMWLnaUOlm29bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWExNGNlOWQyNTIzOWI5MmZlNWFiY2U1MzI1MTUwNDRj MWFiYTQwHhcNMjYxMDEwMTkwMDUwWhcNMjYxMDExMTkwMDUwWjAzMTEwLwYDVQQD EygwYzM0MjdhNWU4ODdiYWYwMDk2YTRkNDQzNzBkYmYyNWQ3OTA1MWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBL5VqgU6M93Hqh4AMOCJrPKLWKL U+Tx15CKDngZtzSW09Jz8jYWBDgmap6S0YWBLPm2UEyixk8YIxfcipQAV6O80VxW nzj3cIUdxjAF5t9jfOHYK8AzndcRQOl6nOhCymbH46xpIyoI84ABywphO+FtwnQD R/3VG4lOkUjsw9SJ6r3OuqQEN1lXggZ4n76q6+fyM/uhATVf4H9l7vIuY6ukSHM3 gL2B5H7/Bhk+/S9FpPLrLagcrRXWSA07GuBBV6kK7L5DTogQdZIDvncNL/wDypq5 CXsGoMqqj5CmFKLt/Ul9Qx7r2BobYbBTQ1BSASo+AUMjAzndSLfyfathzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAw0J6Xoh7rwCWpNRDcNvyXXkFGvMB8GA1UdIwQY MBaAFDUaFM6dJSObkv5avOUyUVBEwaukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEt Mjk1Mzg5NGIxZjZkLzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEtMjk1Mzg5NGIxZjZk LzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcKb4JDj Tq50LrexkwFx2Hx+d6rfTU88W5F5pHhG1Y4Zz3cGCg4xgMFwOOxV0QLFj/raC3Se 4Kb6EJ/selKZ3+kEUAkk6tW+buywTwyoFyjLFrZXUWHFaxYWv0kKT74+qdWgrb3j cMrBcQg0uOJM85iZwlTqkzvqxMHDg7Y/yXogyotB7KdZ09UPF0ZkI2lDpq+KaQNf 90XXdkvWtgwa/oYgjCaviGq20mSho967ai2RTJHlpK6iHYMk6Lsx1CDMXUrtZM4A TQ87onpyyjHC629xZlADQ2JURO37WLIq83644WcckCPiGugZFx9tSZ1mpeMgQWKI mta8tc7Xtm0QDg== -----END CERTIFICATE-----Generated at Sat Oct 10 21:53:18 2026 by rpki-client