$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: /z1k7tr6X95r5AVDEd9ZUrRUVuVCeGhDnWNkg5M5ghI= Subject key identifier: CF:5D:D6:BD:82:C4:2F:D9:04:20:94:2C:CB:D2:70:24:B2:C6:CB:D1 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 01A0E02A6927B63CC9EC4D7EF3946A751D90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 1A9D Signing time: Sun 27 Sep 2026 00:01:10 +0000 Manifest this update: Sun 27 Sep 2026 00:01:10 +0000 Manifest next update: Mon 28 Sep 2026 00:01:10 +0000 Files and hashes: 1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=) 2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=) 3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=) 4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=) 5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=) 6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=) 7: II1ZVg6fHe7M0vm2TA9v3X8mC6o.roa (hash: p68UHIrzry/3qZoSeb+eQcb4FEiW01aytTp+ib7BRMg=) 8: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=) 9: Lh10WlvwLo5FMBkJ865-yYzNORs.roa (hash: KP2ztC96HoIm1Q+cl0xK6rS5NQtKIaU1qUzrl8/B9+s=) 10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: dLdWXeek6st0vvZ46UaE+ypa0+U++YY9qWej5JLpxx0=) 11: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=) 12: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=) 13: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=) 14: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=) 15: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=) 16: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=) 17: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=) 18: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=) 19: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=) 20: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=) 21: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 00:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e0:2a:69:27:b6:3c:c9:ec:4d:7e:f3:94:6a:75:1d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Sep 27 00:01:10 2026 GMT Not After : Sep 28 00:01:10 2026 GMT Subject: CN=cf5dd6bd82c42fd90420942ccbd27024b2c6cbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8a:60:a6:9f:78:93:c0:ce:7d:6a:22:14:09: 9a:d0:91:6f:0a:17:4c:93:a2:ba:52:46:ef:24:c0: d5:90:10:47:34:5f:ae:f3:57:ec:2b:38:18:11:ad: 33:fb:db:aa:ce:47:b4:3d:f1:e0:33:35:44:10:c1: f7:62:ae:ec:36:7f:2d:cd:89:ed:d0:6b:60:4f:d6: 65:2c:e1:52:b9:1c:0b:d0:9f:4a:a5:65:53:7c:8d: 65:8e:cd:db:4d:dc:28:02:d2:9e:49:6b:30:a3:1e: 88:52:a9:0b:fc:08:ff:f7:89:80:7e:e5:81:c2:98: 04:b2:fb:f5:62:56:99:96:39:98:ef:34:06:d2:95: 4c:61:4a:79:60:92:bb:c6:27:8e:8b:2e:b9:0e:07: 62:94:06:32:8e:db:d4:ab:d3:2d:41:f7:50:6b:5a: 12:36:c9:5e:54:1f:b6:55:04:d4:11:18:c0:ec:ef: ee:99:4a:c2:8c:0e:1a:c6:70:b8:70:1c:a2:4b:cd: c3:98:f2:1b:f8:8f:aa:aa:97:c3:0a:e6:b6:42:02: d9:5d:bc:f2:e6:43:42:7c:d1:27:33:b9:08:5a:0b: fd:9a:29:a0:2f:cf:5a:e4:70:9b:06:af:bd:37:e5: fc:fa:e3:42:a7:80:76:ad:59:0e:e1:b8:bd:91:30: ba:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5D:D6:BD:82:C4:2F:D9:04:20:94:2C:CB:D2:70:24:B2:C6:CB:D1 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ad:ee:6e:74:ee:7d:3c:e6:23:b6:d0:e4:11:76:ac:b2:1a: f6:c6:8b:ca:44:e4:77:db:6a:68:00:3a:fa:f3:a3:8d:b9:b1: 64:ae:dd:3d:60:a2:e8:12:2e:4e:6e:8c:e6:a1:73:fd:ff:6d: ec:00:91:fc:6c:2b:5d:0d:84:98:6a:0a:da:fe:c6:4c:cd:d1: a0:54:ca:5e:9b:d4:46:3a:32:c1:36:17:83:02:2e:2c:24:a3: 53:c3:ec:3f:b9:6e:bb:fa:b4:cc:51:fb:db:ea:9c:81:84:1b: ca:20:0d:3f:90:c6:f9:b9:7c:b8:a1:df:90:38:b5:32:e0:13: d1:38:92:e2:52:90:f2:b4:48:af:a1:36:96:17:5e:5c:4e:50: c5:2b:0d:4b:d8:30:b5:8e:7c:b5:44:94:23:71:b4:c7:60:ed: 8c:15:39:ca:f2:4d:30:e7:0a:06:d4:ac:96:fb:39:c8:a7:a5: b0:87:0f:31:1f:a2:17:48:e9:7c:32:b3:37:18:21:26:0e:47: b3:78:64:24:e7:09:9d:c6:f5:01:5e:a0:c3:9b:ae:50:fb:47: 8b:a9:c7:de:97:d5:81:9a:74:fa:b4:a7:c4:52:44:37:f7:8b: a6:fe:36:a8:88:d9:d5:35:59:45:ea:d1:65:ec:f8:2a:4a:b4: 77:17:4c:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDgKmkntjzJ7E1+85RqdR2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwOTI3MDAwMTEwWhcNMjYwOTI4MDAwMTEwWjAzMTEwLwYDVQQD EyhjZjVkZDZiZDgyYzQyZmQ5MDQyMDk0MmNjYmQyNzAyNGIyYzZjYmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1opgpp94k8DOfWoiFAma0JFvChdM k6K6UkbvJMDVkBBHNF+u81fsKzgYEa0z+9uqzke0PfHgMzVEEMH3Yq7sNn8tzYnt 0GtgT9ZlLOFSuRwL0J9KpWVTfI1ljs3bTdwoAtKeSWswox6IUqkL/Aj/94mAfuWB wpgEsvv1YlaZljmY7zQG0pVMYUp5YJK7xieOiy65DgdilAYyjtvUq9MtQfdQa1oS NsleVB+2VQTUERjA7O/umUrCjA4axnC4cByiS83DmPIb+I+qqpfDCua2QgLZXbzy 5kNCfNEnM7kIWgv9mimgL89a5HCbBq+9N+X8+uNCp4B2rVkO4bi9kTC6cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9d1r2CxC/ZBCCULMvScCSyxsvRMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnq3ubnTu fTzmI7bQ5BF2rLIa9saLykTkd9tqaAA6+vOjjbmxZK7dPWCi6BIuTm6M5qFz/f9t 7ACR/GwrXQ2EmGoK2v7GTM3RoFTKXpvURjoywTYXgwIuLCSjU8PsP7luu/q0zFH7 2+qcgYQbyiANP5DG+bl8uKHfkDi1MuAT0TiS4lKQ8rRIr6E2lhdeXE5QxSsNS9gw tY58tUSUI3G0x2DtjBU5yvJNMOcKBtSslvs5yKelsIcPMR+iF0jpfDKzNxghJg5H s3hkJOcJncb1AV6gw5uuUPtHi6nH3pfVgZp0+rSnxFJEN/eLpv42qIjZ1TVZRerR Zez4Kkq0dxdMTg== -----END CERTIFICATE-----Generated at Sun Sep 27 10:44:30 2026 by rpki-client