$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft File: nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft (raw, json) Hash identifier: FVymwW4nPa2/FmwSgcHWiLEP19PWiJ5mjHZiSMh/BRw= Subject key identifier: C3:F0:F5:49:60:94:CE:D6:92:6C:46:D8:19:73:4B:E2:B3:E1:76:A7 Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019DB0FD3DD11BA8EBB7173BCED255115201 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft Manifest number: 18FC Signing time: Tue 21 Apr 2026 17:01:19 +0000 Manifest this update: Tue 21 Apr 2026 17:01:19 +0000 Manifest next update: Wed 22 Apr 2026 17:01:19 +0000 Files and hashes: 1: 0ZBaxsRuFuLvDM9Zab8lEIUBRiA.roa (hash: kstJet361baMNTD+/HClBmRUoGqWDXMhiuwcosanoZU=) 2: 4_Hs_qWX8LMFMBOdMWupc1COrZw.roa (hash: W+UOeuskG88MJklXzCx9HgorURDeXLbXHLC4PO76/y4=) 3: Eg3GqHXllqai--Ryqfs4LnsAQkw.roa (hash: VLqYkINKHVPdCU/Vh9maJ2+fkqMvSysdguW+i1/SBzQ=) 4: GNYsH8Ssdi0wuq0MtkzjAz5IOK8.roa (hash: YBipqhCas3UTGUmAt3vdoKG8URq62fHTpLk/b0OQbks=) 5: IbXAV8dAclhLJ9NqkoDq3WNSkG4.roa (hash: 73NFHvvBJWv79IwIgmIdvG/jVlcenKQG7sknk8zksd4=) 6: J4UnD7LRScbfxtXWDnuE42uhx3M.roa (hash: 3+wx2BbDUCCwJeiPSbBlAz3h3Fg2LYaejyKVPH0G+1A=) 7: JSSAL1uS2725f7uM8kvYMape7F8.roa (hash: RgB3TBZWhlYpz5IbsQEeSNtJJZhDZHeuEj6Sx1LMl58=) 8: KGIqjSOreH3H9__EWSgsv_q5UGo.roa (hash: ekCF76aUnH2+lo9DBtlOUYmHtEC+Vo7+j9MQd2Rw770=) 9: NlPnezqtHfIpfZoqnmdhIzGckaI.roa (hash: +cfe4vhdV+laJY8+wIRDrRq4GrUffZUp8zvBfj6ngPM=) 10: Qw8yTunOSm4ZfBN_EbpBqDPiY5Q.roa (hash: U5GJVvdUQBnMaqa4tufa/PxLgPBUjbU5mqB41CCObCk=) 11: VL1qKh4BlP9GtryA1MjUs_RCkN4.roa (hash: 0O6zfLdParBN9pC/SDk6TWRHgE09vv9wOrispk1Rajw=) 12: WYo1teZpvwvbF93D39MrwjDyB6c.roa (hash: W+jH5tYwcS0NpZ2S8iZldWokNLVCr4jwBp+ACPz7lxA=) 13: WZgHvahvby7Of6uM98jDNnd8Onw.roa (hash: IOGgpgLWwWoangGJpAZ0DVTAjAvi05KQDIslMiG0UK0=) 14: armHtzccUgM1BQgqFWfqXr6nmqw.roa (hash: DJ2wNaazpWR4mzxWyuTxAz1ZNGnET3QrOp9oGV9Pz5k=) 15: djh44NEuCspUjoveVO9WyVzbtyE.roa (hash: UhrDFHo4jOAfwIxgLYqPYJZDTHc3YAaB74ugwpPJYdc=) 16: e5cBlv_Bd6SNioE7OAj1ZQcVjDM.roa (hash: NhuCAZJByUFm+pGHUA58JcG57TSRQSaIovYFwWCKvGs=) 17: fDBKRmseNLtDoz2k-oOaLC8l7LY.roa (hash: n0i6gVg3IW17GGTZZ/RrukXurtJ0nF/r+HpmyPOhljs=) 18: hIBCTAF4jPl4w6CfRMM-f4mZ7kU.roa (hash: hkaJOUcZPZPAgS9PFSnb4vIYJ+knLjrEjTxc0J+IkfQ=) 19: luFncGoOqwf-cVbFDO3bIWW4Do8.roa (hash: x4PEjaapYEKgyJ/2Uzjynby5qWIm0JNE/bTW8Z3cae4=) 20: nAf5j-Sz6d7VGIIvAQslA8_ERdU.roa (hash: OsMa/ljKUFnHaNbmEsEwb+0CFUgxut3qjxPu54bY0kE=) 21: nYnGcrNHNDmSHxuC9fcAOrphpEY.roa (hash: NS8YlRDCZy54oHhATVKjlhlUkoGO6vV/w49zRtjpOTc=) 22: nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl (hash: PPP3hR8TvSJiiMfLxqos7AF2mRuyQ+gqsKR3l8Pwc1w=) 23: oIyDHrSU63T5_QeNiiA2CtszmCg.roa (hash: /AFuLZ9BJOgLw6Pd+8NkPnlgM3YxVhJzcU5H4pM6yvk=) 24: ph347tnTWIGgg-ume_myaaWDaLI.roa (hash: QshFHAUgJPhiQAsqFN+zLpGH5qrmvaGrvVCzAsW8GE0=) 25: syCImBDKif2bUtThCCVdzEwc7QE.roa (hash: 8y2FNl/f8a0Vfh4WRqYOLlLPLqOFqvfWKIKxsP9/a+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 14:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b0:fd:3d:d1:1b:a8:eb:b7:17:3b:ce:d2:55:11:52:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Apr 21 17:01:19 2026 GMT Not After : Apr 22 17:01:19 2026 GMT Subject: CN=c3f0f5496094ced6926c46d819734be2b3e176a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:de:43:0d:00:b0:80:91:48:3d:7e:b0:a2: 29:85:06:93:43:74:25:ef:c6:29:f3:06:80:46:e6: dd:54:3f:28:c2:28:2d:0c:62:bb:28:cc:90:59:44: 1f:96:96:bc:2b:c4:e7:2f:e7:65:31:29:89:fa:3f: fc:de:46:b1:52:ef:95:27:f4:69:ac:5c:55:05:77: 43:a4:86:c4:52:44:f0:27:2e:c0:ba:c9:a4:b2:b3: 16:f6:48:b9:6d:5b:54:d1:f6:46:4a:88:55:46:04: 55:64:9c:29:4e:4d:23:c5:d1:a4:02:79:9b:67:22: c0:55:25:53:45:5a:68:14:97:a8:d6:2c:52:0e:3f: 29:e6:53:f0:a9:9a:6a:dc:2e:26:0d:49:f4:7e:da: cd:ec:0f:e5:d9:80:dd:d4:a8:5b:74:3f:71:fd:33: c5:e9:c6:1c:90:db:ae:50:cf:4b:b9:ae:66:be:d2: ac:43:e8:b4:31:ae:91:a1:fa:cc:3c:f3:73:08:7d: 06:2f:ba:21:e3:c9:9d:d1:b9:69:b2:20:51:ae:83: 58:56:2f:a3:7e:bb:bd:6c:9f:ff:67:ba:a1:63:98: de:cc:48:f8:27:a4:07:41:39:d5:40:03:5f:46:b3: cd:4d:3d:e2:3e:a1:87:37:45:9b:ec:fa:a9:2a:c7: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F0:F5:49:60:94:CE:D6:92:6C:46:D8:19:73:4B:E2:B3:E1:76:A7 X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a6:7d:09:19:c0:6e:f7:54:54:43:2a:63:8b:a8:b4:c0:05: 95:7e:ee:d0:cc:46:0f:08:03:7e:45:da:ec:56:35:fe:60:ee: bf:78:ea:08:57:78:b9:51:8f:dc:a9:cb:7b:e0:87:fa:02:0c: 9e:86:6e:01:98:39:66:56:2e:69:03:9d:51:69:68:8a:f4:d0: aa:83:8c:58:a0:3c:5d:d9:b5:38:ea:2a:8b:1b:fe:31:50:00: 82:3d:8e:76:75:86:03:10:6e:54:b7:24:70:79:e7:76:17:ce: 9d:bb:86:d8:74:64:73:0d:8e:be:65:16:9d:95:c8:cf:75:d0: 34:28:d6:ae:fd:41:c9:e6:cc:6b:3a:53:2a:8d:8d:64:e8:cc: a7:bb:d9:c3:fa:00:f7:94:07:ca:74:1f:55:63:11:06:a6:97: 68:bc:19:1b:de:6f:eb:76:11:59:c9:ec:90:45:0a:04:68:d4: 6f:81:52:77:f7:be:14:34:22:02:3e:7b:9f:82:d9:6a:0a:51: 9c:1f:b6:25:a8:f7:ed:1b:1d:1f:31:31:1b:10:71:05:f7:6a: 33:59:76:88:ed:14:b4:cf:40:06:33:f5:2d:6b:58:16:4b:56: ad:96:bd:c0:eb:0b:6c:9c:cb:fd:57:50:b5:b0:da:e9:99:c2: 8d:06:77:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2w/T3RG6jrtxc7ztJVEVIBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjYwNDIxMTcwMTE5WhcNMjYwNDIyMTcwMTE5WjAzMTEwLwYDVQQD EyhjM2YwZjU0OTYwOTRjZWQ2OTI2YzQ2ZDgxOTczNGJlMmIzZTE3NmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOreQw0AsICRSD1+sKIphQaTQ3Ql 78Yp8waARubdVD8owigtDGK7KMyQWUQflpa8K8TnL+dlMSmJ+j/83kaxUu+VJ/Rp rFxVBXdDpIbEUkTwJy7AusmksrMW9ki5bVtU0fZGSohVRgRVZJwpTk0jxdGkAnmb ZyLAVSVTRVpoFJeo1ixSDj8p5lPwqZpq3C4mDUn0ftrN7A/l2YDd1KhbdD9x/TPF 6cYckNuuUM9Lua5mvtKsQ+i0Ma6RofrMPPNzCH0GL7oh48md0blpsiBRroNYVi+j fru9bJ//Z7qhY5jezEj4J6QHQTnVQANfRrPNTT3iPqGHN0Wb7PqpKsdkjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPw9UlglM7WkmxG2BlzS+Kz4XanMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKZ9CRnA bvdUVEMqY4uotMAFlX7u0MxGDwgDfkXa7FY1/mDuv3jqCFd4uVGP3KnLe+CH+gIM noZuAZg5ZlYuaQOdUWloivTQqoOMWKA8Xdm1OOoqixv+MVAAgj2OdnWGAxBuVLck cHnndhfOnbuG2HRkcw2OvmUWnZXIz3XQNCjWrv1ByebMazpTKo2NZOjMp7vZw/oA 95QHynQfVWMRBqaXaLwZG95v63YRWcnskEUKBGjUb4FSd/e+FDQiAj57n4LZagpR nB+2Jaj37RsdHzExGxBxBfdqM1l2iO0UtM9ABjP1LWtYFktWrZa9wOsLbJzL/VdQ tbDa6ZnCjQZ3Lw== -----END CERTIFICATE-----Generated at Wed Apr 22 00:25:29 2026 by rpki-client