$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: xG1A2HBjjlEz1f2j+EmRTfu2uQAQNQRaERgPlKfbNos= Subject key identifier: AB:1A:90:E0:BB:78:7D:D1:2E:3E:2E:FB:D8:C4:F9:AE:67:EB:5B:87 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019D26962012DC2C37DB80FA32F66D3152DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 18AD Signing time: Wed 25 Mar 2026 20:01:05 +0000 Manifest this update: Wed 25 Mar 2026 20:01:05 +0000 Manifest next update: Thu 26 Mar 2026 20:01:05 +0000 Files and hashes: 1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=) 2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=) 3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=) 4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=) 5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=) 6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=) 7: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=) 8: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: 41Io4LFW5spyki+66gx+WIXqaGNRlKZgISc0ugov2U8=) 9: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=) 10: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=) 11: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=) 12: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=) 13: Y717qVS96YjYgAZkrscDp7OEvWY.roa (hash: bvdM3ELPzWVbs/s6wCevWXdZqt/DIba2BD86BPGfAIQ=) 14: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=) 15: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=) 16: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=) 17: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=) 18: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=) 19: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=) 20: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=) 21: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:96:20:12:dc:2c:37:db:80:fa:32:f6:6d:31:52:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Mar 25 20:01:05 2026 GMT Not After : Mar 26 20:01:05 2026 GMT Subject: CN=ab1a90e0bb787dd12e3e2efbd8c4f9ae67eb5b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:94:ca:09:a1:e1:d4:f1:60:6f:29:76:03:65: b4:2d:be:2c:fd:c6:df:b3:ff:29:bb:d9:60:9a:eb: 2b:8e:17:0d:2e:93:23:8a:77:15:be:ad:20:7a:3e: 9f:e9:05:91:4d:8b:c0:5d:3a:4e:ab:d9:26:14:10: af:8e:f2:5d:ab:1b:1a:78:57:09:29:23:52:3f:a9: 04:32:ba:4f:af:13:a1:f1:30:15:c7:0a:3a:7e:d3: 70:4c:b3:f2:c9:a0:6b:83:f4:35:24:2d:0d:2c:67: 80:b0:e5:63:6f:e4:a7:80:6b:c7:13:97:42:e7:d9: 68:fb:fe:01:ff:de:7a:ea:a5:48:ea:66:d2:88:bb: a3:cb:35:3d:33:a7:35:f8:9d:c7:a5:02:86:27:ff: 4d:b4:02:27:4f:44:72:89:aa:14:c5:07:9a:26:63: 67:39:dc:35:5e:17:a6:36:46:09:27:77:4e:d7:82: bc:00:81:62:a3:f9:11:08:89:db:2f:97:28:dc:da: 79:5e:cd:f4:6e:fe:61:6c:9b:61:a2:0d:d2:f4:e4: 71:4d:b0:e5:8d:bb:ad:e9:0c:2a:f1:4a:51:a5:59: 17:b3:d3:56:f2:ba:b8:0b:78:58:6f:94:23:ee:34: cb:f8:ad:01:8a:14:7b:62:3c:1e:b1:d7:fa:0a:40: be:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1A:90:E0:BB:78:7D:D1:2E:3E:2E:FB:D8:C4:F9:AE:67:EB:5B:87 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a8:26:82:17:e7:cb:d3:9f:36:32:36:a1:c8:57:75:d2:24: 5f:8c:30:79:36:d3:a9:3f:43:60:be:98:5b:eb:b1:2e:05:d7: 94:8e:17:19:15:34:3c:c2:c3:2b:ee:78:1c:ff:c8:e1:82:33: 52:43:31:32:c6:dd:49:89:7d:3a:be:8a:29:65:68:c2:32:cf: 6e:5a:a0:7f:62:27:e8:37:0d:82:c0:82:41:53:ee:49:b2:51: 92:79:12:7a:ad:0c:f7:4b:d8:66:80:99:d6:5d:73:fc:fa:82: fd:50:c9:f4:51:8b:d6:7a:04:38:15:d5:68:0e:00:34:f3:8c: 45:d8:de:64:c9:a3:c4:72:06:58:f2:7d:a7:0f:c3:12:97:d6: ef:ea:e4:cb:96:f6:34:81:d4:23:e9:d7:37:57:2a:f9:e6:61: 70:f0:38:25:22:27:ce:84:fd:c5:ac:71:c0:a6:71:f9:c5:43: fa:ab:f9:41:a4:b7:f2:3a:48:74:6f:08:4c:67:b6:58:06:a9: 30:4b:33:6f:fa:ef:87:e1:99:ad:55:f6:9c:32:fc:0a:0d:3a: 65:66:49:84:46:68:be:71:6d:37:47:a5:1c:99:4c:e0:cd:1d: f8:e7:96:2c:a3:99:41:ff:fe:7d:df:2c:17:e7:41:60:95:60: c8:cc:44:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mliAS3Cw324D6MvZtMVLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMzI1MjAwMTA1WhcNMjYwMzI2MjAwMTA1WjAzMTEwLwYDVQQD EyhhYjFhOTBlMGJiNzg3ZGQxMmUzZTJlZmJkOGM0ZjlhZTY3ZWI1Yjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15TKCaHh1PFgbyl2A2W0Lb4s/cbf s/8pu9lgmusrjhcNLpMjincVvq0gej6f6QWRTYvAXTpOq9kmFBCvjvJdqxsaeFcJ KSNSP6kEMrpPrxOh8TAVxwo6ftNwTLPyyaBrg/Q1JC0NLGeAsOVjb+SngGvHE5dC 59lo+/4B/9566qVI6mbSiLujyzU9M6c1+J3HpQKGJ/9NtAInT0RyiaoUxQeaJmNn Odw1XhemNkYJJ3dO14K8AIFio/kRCInbL5co3Np5Xs30bv5hbJthog3S9ORxTbDl jbut6Qwq8UpRpVkXs9NW8rq4C3hYb5Qj7jTL+K0BihR7Yjwesdf6CkC+MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsakOC7eH3RLj4u+9jE+a5n61uHMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6gmghfn y9OfNjI2ochXddIkX4wweTbTqT9DYL6YW+uxLgXXlI4XGRU0PMLDK+54HP/I4YIz UkMxMsbdSYl9Or6KKWVowjLPblqgf2In6DcNgsCCQVPuSbJRknkSeq0M90vYZoCZ 1l1z/PqC/VDJ9FGL1noEOBXVaA4ANPOMRdjeZMmjxHIGWPJ9pw/DEpfW7+rky5b2 NIHUI+nXN1cq+eZhcPA4JSInzoT9xaxxwKZx+cVD+qv5QaS38jpIdG8ITGe2WAap MEszb/rvh+GZrVX2nDL8Cg06ZWZJhEZovnFtN0elHJlM4M0d+OeWLKOZQf/+fd8s F+dBYJVgyMxEKw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:10:49 2026 by rpki-client