$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: bjkMsN7rf3/fxyiRGCEnsnorxMqaiuWGJrSGonHr9eE= Subject key identifier: A1:1E:D0:53:9A:E3:66:B2:8D:BC:7D:BC:01:78:4B:17:6D:B9:FB:6C Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019F92B6993AFE2AE14D10D5033D7D27A9B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 19F0 Signing time: Fri 24 Jul 2026 06:01:08 +0000 Manifest this update: Fri 24 Jul 2026 06:01:08 +0000 Manifest next update: Sat 25 Jul 2026 06:01:08 +0000 Files and hashes: 1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=) 2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=) 3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=) 4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=) 5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=) 6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=) 7: II1ZVg6fHe7M0vm2TA9v3X8mC6o.roa (hash: p68UHIrzry/3qZoSeb+eQcb4FEiW01aytTp+ib7BRMg=) 8: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=) 9: Lh10WlvwLo5FMBkJ865-yYzNORs.roa (hash: KP2ztC96HoIm1Q+cl0xK6rS5NQtKIaU1qUzrl8/B9+s=) 10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: v6VCZaVim/DgRn/TalTZm1AD/R4XhrbuIKSJLrlLYKk=) 11: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=) 12: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=) 13: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=) 14: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=) 15: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=) 16: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=) 17: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=) 18: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=) 19: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=) 20: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=) 21: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=) 22: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 06:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:b6:99:3a:fe:2a:e1:4d:10:d5:03:3d:7d:27:a9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jul 24 06:01:08 2026 GMT Not After : Jul 25 06:01:08 2026 GMT Subject: CN=a11ed0539ae366b28dbc7dbc01784b176db9fb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:24:99:72:7f:10:43:30:94:48:b2:61:25: b6:ef:45:4a:16:74:de:ea:e3:38:0a:7b:00:b6:f0: 80:a0:c3:a9:e9:35:3e:18:96:35:d0:6d:06:97:8a: cc:c0:f1:4d:7d:d3:3a:e5:ac:b7:cd:a4:e3:8e:3c: 8a:fe:ed:ac:f4:23:76:c4:6e:78:88:df:ad:4a:cd: 87:3c:f1:8f:2f:f6:16:5d:7c:e0:74:e5:39:4e:79: da:29:7a:cd:78:73:12:87:3c:1c:fc:53:bb:36:4a: 80:eb:b7:73:cd:c9:87:60:0e:f6:92:15:8c:b0:80: 44:3d:e3:7b:11:84:1d:53:f9:ac:d5:45:3f:c2:ff: 48:01:2b:be:f4:f7:97:2b:91:e2:18:a5:2a:8d:6b: 74:ad:90:81:57:8a:b8:56:06:9c:a0:c7:fb:93:7b: 3c:2c:5f:0a:53:58:75:ab:26:17:22:0a:a2:1a:ae: e3:2c:83:3d:51:ca:ed:82:b0:0f:05:61:eb:99:99: 12:2f:26:f5:74:72:0d:b0:8b:06:a3:0e:91:6e:b7: a8:dd:5e:d6:fd:ab:a0:7a:a4:60:1f:8b:51:31:8d: 38:10:fb:ea:d8:72:61:a9:ce:73:c8:84:c1:df:4f: 69:f3:c6:4e:c0:1a:51:aa:ef:90:80:11:89:ec:a2: 3a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1E:D0:53:9A:E3:66:B2:8D:BC:7D:BC:01:78:4B:17:6D:B9:FB:6C X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:9d:5a:ac:93:4c:9e:5f:94:75:07:9c:a1:d8:91:2d:fc:3f: ee:72:71:6a:03:63:b2:a2:bf:08:0d:ab:57:34:38:d7:b2:28: 9c:40:a3:78:40:b9:6e:f9:a4:5d:d1:98:23:3a:2a:51:6d:34: 64:0c:b1:18:50:dc:eb:91:06:45:e9:6f:73:7e:79:4f:e5:18: 43:6a:79:e0:85:ee:70:86:79:23:cb:ef:db:19:62:0e:7a:de: 44:15:80:47:39:4f:91:d0:81:9f:b0:11:9d:41:02:4a:77:1a: 72:5d:b9:f6:d5:5d:6b:df:74:db:66:32:ac:9b:81:51:49:7c: 01:98:7a:3b:a0:b2:f7:7f:16:f4:5e:3d:04:d5:aa:6e:95:2f: c4:a5:b6:e8:75:be:a6:b6:6b:2e:6c:cd:ef:1a:8a:d7:98:2f: 88:5f:05:17:6c:16:20:68:35:08:cb:ba:fb:29:5e:2f:fd:1d: 6f:f0:9f:56:3a:ca:8c:a5:a6:2a:32:f4:42:94:73:25:1c:88: 1b:1e:06:c7:f5:6c:e9:61:a7:10:96:2b:bb:ca:6d:86:43:4a: 60:f4:41:c6:41:43:a3:c3:57:52:9e:89:2c:d4:7c:13:ca:48: e3:f1:20:80:b9:b0:79:9f:2c:68:18:2c:db:62:a9:88:50:10: eb:dd:20:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Stpk6/irhTRDVAz19J6m2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwNzI0MDYwMTA4WhcNMjYwNzI1MDYwMTA4WjAzMTEwLwYDVQQD EyhhMTFlZDA1MzlhZTM2NmIyOGRiYzdkYmMwMTc4NGIxNzZkYjlmYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQAkmXJ/EEMwlEiyYSW270VKFnTe 6uM4CnsAtvCAoMOp6TU+GJY10G0Gl4rMwPFNfdM65ay3zaTjjjyK/u2s9CN2xG54 iN+tSs2HPPGPL/YWXXzgdOU5TnnaKXrNeHMShzwc/FO7NkqA67dzzcmHYA72khWM sIBEPeN7EYQdU/ms1UU/wv9IASu+9PeXK5HiGKUqjWt0rZCBV4q4VgacoMf7k3s8 LF8KU1h1qyYXIgqiGq7jLIM9UcrtgrAPBWHrmZkSLyb1dHINsIsGow6Rbreo3V7W /augeqRgH4tRMY04EPvq2HJhqc5zyITB309p88ZOwBpRqu+QgBGJ7KI6zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEe0FOa42ayjbx9vAF4SxdtuftsMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZ1arJNM nl+UdQecodiRLfw/7nJxagNjsqK/CA2rVzQ417IonECjeEC5bvmkXdGYIzoqUW00 ZAyxGFDc65EGRelvc355T+UYQ2p54IXucIZ5I8vv2xliDnreRBWARzlPkdCBn7AR nUECSncacl259tVda99022YyrJuBUUl8AZh6O6Cy938W9F49BNWqbpUvxKW26HW+ prZrLmzN7xqK15gviF8FF2wWIGg1CMu6+yleL/0db/CfVjrKjKWmKjL0QpRzJRyI Gx4Gx/Vs6WGnEJYru8pthkNKYPRBxkFDo8NXUp6JLNR8E8pI4/EggLmweZ8saBgs 22KpiFAQ690gEA== -----END CERTIFICATE-----Generated at Fri Jul 24 16:20:16 2026 by rpki-client