$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json) Hash identifier: vDaZwBD0olKqkRUBFDiUsldQIRhjIcKQcHvZiSku0SE= Subject key identifier: 19:4C:3A:35:5D:06:62:87:4D:54:E9:03:F3:AC:DC:ED:EB:00:88:9E Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 019D26CD81DB1F767D999F625DB56956ADAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft Manifest number: 047E Signing time: Wed 25 Mar 2026 21:01:35 +0000 Manifest this update: Wed 25 Mar 2026 21:01:35 +0000 Manifest next update: Thu 26 Mar 2026 21:01:35 +0000 Files and hashes: 1: 1-lGH1nu7CvzHWYEiuO1j3MNSzJY.roa (hash: 9/b6BBId/Kn5DB9SmUCWKxBwcAQLvltddZcgBj268UQ=) 2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: BTwC4SXSCEkFETsXccVJRNnT+z+qbFjIT1WSvtwy4aw=) 3: 40ZCLfu-hf54aZk4vS6thtcaz6Y.roa (hash: 6qlfEyZyTsr1GU+JJmssokqBIx7S6uv3hfgnFxarKbc=) 4: H4L-qt_BxEvihq_o1Xaqz-fkvFE.roa (hash: VEe/jw2PB8S6n9CGD2VAh3zIwGdGkRNshlPXiJ7ysA0=) 5: R-5w2OhY85ahLOn9d9XARIf0WJE.roa (hash: ZrntMgUNbnCcVCqd80hEXtJhbHPgRihn20AF29/vEO8=) 6: SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa (hash: kRtJ8SNMjyDbUxu98aNT/p/eOM2tAQZf30u+RPiQ1f8=) 7: _msrPFl7j-h-scWfwUUyG5vmI0Q.roa (hash: C0U0oHsxASzeTthWbTeZAy4SqW+0azDdamHmVesAW1U=) 8: gA8K0uCGARt0iMHybj1fl0_l9iM.roa (hash: oF5vhF0FQd0hgOhUSqj7/e1FPt2MEHPpP+wGYckBTNY=) 9: koXw3LvEwrzn9qCWrcZnQPR8iMs.roa (hash: gNqdDH2AralOcsOhDuMpE5EfKzaR6A0T5YWUJwlNSmY=) 10: l8TSNwU2prw2gsntuaJ9QdkRHKw.roa (hash: gb+3/D4Y4zC34TYQcD7+qVWbJgAtu0xBM1r/dmFP8pw=) 11: lF-NQYjHwP7LXQFX0OJCARB0Jts.roa (hash: YQcmPFpdxVDION1toykp/aMiRv2UpsJ26lx7u41JNkI=) 12: mnp_uzPNuPiUK3TrUmFNgiNmNY8.roa (hash: 9S7aILwvPQVBbceAkPURmV9yU8Bufrpsa3/9WSfefOI=) 13: tevOSAyMp-1DHWOc8A6PPAJZLUs.roa (hash: /4F2MJ2YCwSX6I/W4Ebbet4QyTAZ6jd4w/oq57g4Qcw=) 14: xUHiwbmdxyG7zhauG_jIHmi1gno.roa (hash: 03dvwh0NeW2YpGtwR7ObeLzcikhW32DldU3aMDZzsfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:81:db:1f:76:7d:99:9f:62:5d:b5:69:56:ad:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Mar 25 21:01:35 2026 GMT Not After : Mar 26 21:01:35 2026 GMT Subject: CN=194c3a355d0662874d54e903f3acdcedeb00889e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c5:48:d2:3c:69:47:f0:d9:8a:9c:88:91:f4: c8:0f:ea:2e:4b:a6:e4:0b:28:7c:eb:2f:eb:1b:9b: c8:ff:c1:ed:0d:1b:4b:43:72:b0:e3:35:7f:a4:93: 76:30:71:41:7f:09:e0:4a:3c:5c:8c:a5:e6:b6:72: 15:b4:29:5b:29:df:fb:0d:39:05:35:52:98:54:f9: 66:44:23:3d:d2:06:7d:56:22:b1:94:65:2a:59:84: 92:c3:6f:1c:12:db:ed:a2:d4:4c:bd:f6:14:0e:ab: f9:03:76:d3:ce:e5:13:fa:23:f6:e5:34:da:15:f8: 05:c2:d1:87:21:40:66:09:9a:48:b7:0b:d1:e1:f5: 42:96:c9:d8:d1:7c:f6:37:34:c3:13:1b:ac:0a:ce: d8:df:e3:78:5d:17:88:7b:74:91:54:3e:28:a8:48: 05:68:4c:7a:e0:c8:2d:9a:72:4b:2d:5f:64:bc:84: aa:62:f4:cb:9e:a1:d2:47:af:48:c0:f8:a6:59:a6: 18:97:f4:9b:07:3f:32:56:58:1a:58:86:d7:a7:bb: bf:95:b1:f4:f8:f4:aa:16:be:c0:c7:6c:bc:b9:3a: 05:7b:ae:82:33:4a:9c:19:23:3c:1f:a8:c0:44:57: 7f:26:0a:81:43:9a:de:a9:19:0d:6a:84:be:2b:7e: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4C:3A:35:5D:06:62:87:4D:54:E9:03:F3:AC:DC:ED:EB:00:88:9E X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:4a:28:c9:61:9d:0d:3d:92:ed:72:97:e2:d7:99:9c:3a:b8: b2:66:82:0d:47:cf:06:09:5b:c3:dc:b4:11:70:e6:47:74:93: 8f:6a:a9:9d:93:b0:f6:0f:5c:83:e0:b8:79:71:99:c0:ec:aa: 98:cf:85:51:54:b2:41:b4:fc:c7:b0:d9:a9:c6:53:67:88:25: 15:a2:8b:18:c7:e9:22:62:f8:47:7f:ec:48:0b:bf:b5:c3:a3: 52:3f:cd:bc:f3:91:91:cb:49:28:82:5d:1f:bd:b1:36:b4:6e: 3a:03:ae:f9:15:4a:86:b7:e5:95:2e:51:42:f9:39:63:c6:1b: f9:2a:02:36:6e:c9:e2:35:49:e8:f2:6c:10:2a:3c:48:08:36: 92:d9:34:4f:ec:20:f0:41:3b:ac:57:c3:8f:92:2a:a7:90:3e: e3:fb:6d:26:2c:4c:b8:f6:26:10:fa:69:7e:4e:94:ea:40:4a: d3:a1:f1:15:e1:51:91:3e:bf:ed:03:74:31:7f:64:df:3e:4f: 7f:3f:fb:94:81:76:36:51:bc:20:62:ea:da:4e:5e:60:80:e5: c3:17:9b:0f:99:08:68:bf:c9:df:db:f3:71:d1:97:3b:2d:60: 65:1e:63:4c:8b:42:9a:e7:72:b7:71:a2:ae:d8:ff:84:ca:42: 08:aa:62:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzYHbH3Z9mZ9iXbVpVq2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYwMzI1MjEwMTM1WhcNMjYwMzI2MjEwMTM1WjAzMTEwLwYDVQQD EygxOTRjM2EzNTVkMDY2Mjg3NGQ1NGU5MDNmM2FjZGNlZGViMDA4ODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksVI0jxpR/DZipyIkfTID+ouS6bk Cyh86y/rG5vI/8HtDRtLQ3Kw4zV/pJN2MHFBfwngSjxcjKXmtnIVtClbKd/7DTkF NVKYVPlmRCM90gZ9ViKxlGUqWYSSw28cEtvtotRMvfYUDqv5A3bTzuUT+iP25TTa FfgFwtGHIUBmCZpItwvR4fVClsnY0Xz2NzTDExusCs7Y3+N4XReIe3SRVD4oqEgF aEx64MgtmnJLLV9kvISqYvTLnqHSR69IwPimWaYYl/SbBz8yVlgaWIbXp7u/lbH0 +PSqFr7Ax2y8uToFe66CM0qcGSM8H6jARFd/JgqBQ5reqRkNaoS+K361JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlMOjVdBmKHTVTpA/Os3O3rAIieMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEooyWGd DT2S7XKX4teZnDq4smaCDUfPBglbw9y0EXDmR3STj2qpnZOw9g9cg+C4eXGZwOyq mM+FUVSyQbT8x7DZqcZTZ4glFaKLGMfpImL4R3/sSAu/tcOjUj/NvPORkctJKIJd H72xNrRuOgOu+RVKhrfllS5RQvk5Y8Yb+SoCNm7J4jVJ6PJsECo8SAg2ktk0T+wg 8EE7rFfDj5Iqp5A+4/ttJixMuPYmEPppfk6U6kBK06HxFeFRkT6/7QN0MX9k3z5P fz/7lIF2NlG8IGLq2k5eYIDlwxebD5kIaL/J39vzcdGXOy1gZR5jTItCmudyt3Gi rtj/hMpCCKpi1g== -----END CERTIFICATE-----Generated at Thu Mar 26 05:19:39 2026 by rpki-client