$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json) Hash identifier: ifa4YdK6dT/kwb56YfFUXoPpkhKbve6vn+5HsYg3Ys0= Subject key identifier: 39:8E:43:47:0B:E2:C9:90:B0:3D:1C:BA:91:E4:44:9D:32:30:53:98 Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 019E1D59B58EC49D78A28D6CC2C51C2B25B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft Manifest number: 0505 Signing time: Tue 12 May 2026 18:01:18 +0000 Manifest this update: Tue 12 May 2026 18:01:18 +0000 Manifest next update: Wed 13 May 2026 18:01:18 +0000 Files and hashes: 1: 1-lGH1nu7CvzHWYEiuO1j3MNSzJY.roa (hash: 9/b6BBId/Kn5DB9SmUCWKxBwcAQLvltddZcgBj268UQ=) 2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: cEL0bJkCanRJyxmusrSG+NtkTGoRmo5/35yNTvfu6nk=) 3: 4vxZx7uBqQQ6FyEF2MVBFY1WSaQ.roa (hash: yT8MYmQtVQnTBHZPhbP/WPtpcUBRa3XEcKCSlPgpz98=) 4: AfpxLvj3BiyLwMcA6kKVrdFgW6Y.roa (hash: KKSEdsLLrws/RATwLIqwcq742JLEElRzqndIEau2IyI=) 5: H4L-qt_BxEvihq_o1Xaqz-fkvFE.roa (hash: VEe/jw2PB8S6n9CGD2VAh3zIwGdGkRNshlPXiJ7ysA0=) 6: QxbU9vvhcA75ENS1lZHkpNyfErk.roa (hash: yv8oGh8GGZWvW+9jiR8h6piajHrkuA5egN2MppGfk+w=) 7: SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa (hash: kRtJ8SNMjyDbUxu98aNT/p/eOM2tAQZf30u+RPiQ1f8=) 8: _msrPFl7j-h-scWfwUUyG5vmI0Q.roa (hash: C0U0oHsxASzeTthWbTeZAy4SqW+0azDdamHmVesAW1U=) 9: gA8K0uCGARt0iMHybj1fl0_l9iM.roa (hash: oF5vhF0FQd0hgOhUSqj7/e1FPt2MEHPpP+wGYckBTNY=) 10: hdMhRXPkqOxd6xFDrB9U7Fci7VY.roa (hash: hb72Wv3Ty8NGqhQVsA+e2PBxO1ogzpMNtaMedfjgyDI=) 11: koXw3LvEwrzn9qCWrcZnQPR8iMs.roa (hash: gNqdDH2AralOcsOhDuMpE5EfKzaR6A0T5YWUJwlNSmY=) 12: l8TSNwU2prw2gsntuaJ9QdkRHKw.roa (hash: gb+3/D4Y4zC34TYQcD7+qVWbJgAtu0xBM1r/dmFP8pw=) 13: lF-NQYjHwP7LXQFX0OJCARB0Jts.roa (hash: YQcmPFpdxVDION1toykp/aMiRv2UpsJ26lx7u41JNkI=) 14: mnp_uzPNuPiUK3TrUmFNgiNmNY8.roa (hash: 9S7aILwvPQVBbceAkPURmV9yU8Bufrpsa3/9WSfefOI=) 15: nmunvZ8NjUAQxyXLc7q3E6asADA.roa (hash: bcuDcNnBDq7F5VI75bQ3a3MYz4yXIjZXvHo8ZRs1H3g=) 16: tUYOdiUxF4HxrSVOg847WMoBqws.roa (hash: N6nWp89HDr0pIhLLPi1oB+mkzKMLsBnFNGgdLRBYN30=) 17: tevOSAyMp-1DHWOc8A6PPAJZLUs.roa (hash: /4F2MJ2YCwSX6I/W4Ebbet4QyTAZ6jd4w/oq57g4Qcw=) 18: xOtKmGFOQ0Si4ry-DnEnpbMZzfw.roa (hash: uloNgiaPX4XD2hk6wXEnVMKHkzySU+UwLh3IKRIIyAY=) 19: xUHiwbmdxyG7zhauG_jIHmi1gno.roa (hash: 03dvwh0NeW2YpGtwR7ObeLzcikhW32DldU3aMDZzsfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:b5:8e:c4:9d:78:a2:8d:6c:c2:c5:1c:2b:25:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: May 12 18:01:18 2026 GMT Not After : May 13 18:01:18 2026 GMT Subject: CN=398e43470be2c990b03d1cba91e4449d32305398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:85:15:f8:d5:49:44:82:6c:d6:b9:34:9a: 48:18:7e:78:e2:14:9b:94:b4:1d:c8:13:b0:b4:65: 6f:c7:f5:3f:a7:74:13:ed:a2:de:ef:73:0a:11:8a: 68:0a:b5:58:f3:45:d8:fe:ce:ba:bc:9d:2f:bb:dc: 3e:7f:31:01:70:0c:28:ba:54:f9:fb:20:ab:b4:30: 44:5e:3f:a4:1b:7a:f6:7b:38:eb:ca:d0:c9:8f:ea: 6d:65:52:15:9f:99:f0:45:f7:ea:38:4d:f9:f9:b4: 30:16:52:ab:f2:e3:13:27:cd:5d:99:15:18:9e:a0: cd:05:e1:4d:e0:09:2a:fc:09:40:94:ad:f0:18:79: 8d:61:ef:3b:09:17:a3:e0:91:e1:77:3a:81:0f:e5: 69:a3:72:a6:40:30:2f:65:d8:86:58:af:67:07:8a: 83:99:f1:41:d1:11:51:40:6c:b6:ce:1d:3b:f8:95: 82:5f:7f:c7:99:1d:04:bc:2f:e9:47:73:e5:e8:65: 80:bb:fa:88:67:87:f2:62:0c:85:9e:8e:78:22:fa: 71:d6:27:0c:16:f0:85:0b:1a:40:b7:35:c7:e6:bc: 3e:74:d7:35:2a:ed:f4:21:dd:e7:e6:47:2a:1a:5c: 62:69:7d:dd:8e:0a:17:f7:9b:30:4d:79:77:68:d4: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8E:43:47:0B:E2:C9:90:B0:3D:1C:BA:91:E4:44:9D:32:30:53:98 X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ed:e3:8c:89:8d:dc:c9:b2:a8:05:fd:f4:92:99:60:d2:a3: 4c:2e:9d:1a:54:2f:31:08:41:7e:dd:fe:28:53:48:16:82:2a: a2:99:eb:16:46:5e:f8:3e:d5:4c:83:55:87:bb:1d:9e:20:ae: 57:f6:04:21:77:7c:87:4c:81:d1:30:f9:6e:a8:b6:19:c0:33: fb:b2:79:a6:54:0b:c5:f6:3f:c9:5e:c4:b3:e0:51:39:ac:8f: 44:5e:c8:f9:2e:24:ce:30:9e:47:32:cd:28:52:10:22:ac:3c: 90:71:ee:db:f7:ff:74:90:9f:a0:44:b1:00:70:c4:82:7a:7a: 05:3d:12:5e:fa:61:0d:3c:7e:e9:39:da:ed:8d:c0:4e:77:e9: 59:be:6b:e3:59:3c:b3:7e:20:18:dc:07:c1:9a:32:a4:49:ad: 31:78:e3:ca:95:b7:d4:f7:16:a0:6e:17:a8:6d:48:58:00:7d: 48:3b:35:93:79:93:e1:37:58:ca:d1:27:8f:90:a4:9b:9d:09: da:86:ca:d5:a5:7a:2e:b7:c8:ec:4d:4a:52:7c:81:90:ae:0a: 49:d3:0b:84:83:5e:a8:c6:e7:1f:e3:55:7a:3c:91:b7:9c:d9: 90:95:65:4d:05:57:52:3c:ab:35:7e:5d:9e:27:57:02:0b:97: ca:0c:bd:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWbWOxJ14oo1swsUcKyW1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYwNTEyMTgwMTE4WhcNMjYwNTEzMTgwMTE4WjAzMTEwLwYDVQQD EygzOThlNDM0NzBiZTJjOTkwYjAzZDFjYmE5MWU0NDQ5ZDMyMzA1Mzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9+FFfjVSUSCbNa5NJpIGH544hSb lLQdyBOwtGVvx/U/p3QT7aLe73MKEYpoCrVY80XY/s66vJ0vu9w+fzEBcAwoulT5 +yCrtDBEXj+kG3r2ezjrytDJj+ptZVIVn5nwRffqOE35+bQwFlKr8uMTJ81dmRUY nqDNBeFN4Akq/AlAlK3wGHmNYe87CRej4JHhdzqBD+Vpo3KmQDAvZdiGWK9nB4qD mfFB0RFRQGy2zh07+JWCX3/HmR0EvC/pR3Pl6GWAu/qIZ4fyYgyFno54Ivpx1icM FvCFCxpAtzXH5rw+dNc1Ku30Id3n5kcqGlxiaX3djgoX95swTXl3aNTIIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmOQ0cL4smQsD0cupHkRJ0yMFOYMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvO3jjImN 3MmyqAX99JKZYNKjTC6dGlQvMQhBft3+KFNIFoIqopnrFkZe+D7VTINVh7sdniCu V/YEIXd8h0yB0TD5bqi2GcAz+7J5plQLxfY/yV7Es+BROayPRF7I+S4kzjCeRzLN KFIQIqw8kHHu2/f/dJCfoESxAHDEgnp6BT0SXvphDTx+6Tna7Y3ATnfpWb5r41k8 s34gGNwHwZoypEmtMXjjypW31PcWoG4XqG1IWAB9SDs1k3mT4TdYytEnj5Ckm50J 2obK1aV6LrfI7E1KUnyBkK4KSdMLhINeqMbnH+NVejyRt5zZkJVlTQVXUjyrNX5d nidXAguXygy97A== -----END CERTIFICATE-----Generated at Tue May 12 21:31:14 2026 by rpki-client