$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: eRf+ihpLYF3bKIED8BW0KREx0Juz2NZrFt9j/t5Xveg= Subject key identifier: 1D:0B:0C:96:DA:DF:1F:26:4C:F8:EE:BB:8C:BC:52:62:89:AD:5F:0D Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019DCE63625ABF0251F200C549727DD43223 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 18D4 Signing time: Mon 27 Apr 2026 10:01:52 +0000 Manifest this update: Mon 27 Apr 2026 10:01:52 +0000 Manifest next update: Tue 28 Apr 2026 10:01:52 +0000 Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=) 2: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=) 3: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=) 4: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=) 5: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=) 6: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=) 7: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=) 8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: Y1oNqvjV0fABkA5Hr2gfl5epj0fGIyF1DKZpp6hael0=) 9: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=) 10: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=) 11: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=) 12: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=) 13: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=) 14: jIciP85UIj70W740hLw1umDPl8U.roa (hash: wrY0tv/GkQoOFiGmbPrfGkCZnbqrkkaA3u07XZ08OZM=) 15: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=) 16: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=) 17: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=) 18: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=) 19: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=) 20: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:63:62:5a:bf:02:51:f2:00:c5:49:72:7d:d4:32:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Apr 27 10:01:52 2026 GMT Not After : Apr 28 10:01:52 2026 GMT Subject: CN=1d0b0c96dadf1f264cf8eebb8cbc526289ad5f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:1b:c8:4d:cf:20:17:52:1a:f1:f3:d5:70: df:6e:49:bb:f4:3e:ac:6c:1e:0c:44:c5:bc:b9:6f: f9:ad:c0:92:d7:e1:e6:ca:fa:f9:af:19:8c:7d:31: d0:11:91:b6:c1:1f:60:5d:19:1c:cf:72:20:49:48: 9a:82:12:57:5a:b9:08:83:92:c0:30:97:02:0b:09: d6:7a:90:26:a6:c8:b2:5f:b8:dc:1f:a2:b7:01:2e: 70:20:eb:1f:97:bc:b9:5b:f6:c6:b4:51:f5:0f:db: 1c:ef:2e:ce:c8:b5:ea:67:76:2d:00:fe:d0:21:a3: cd:05:63:c0:1c:f3:1a:27:00:de:ea:f8:96:3c:be: be:81:22:15:fa:ae:31:c7:82:2f:ed:26:05:f9:52: 14:05:cb:4f:8c:11:8c:ae:57:8e:22:65:c4:e3:e6: 10:bd:82:80:a4:e9:af:a0:ff:61:b6:55:71:c1:69: 98:44:f2:a0:cd:9a:a6:72:d4:1e:02:f0:44:13:cf: 47:0e:95:52:f1:3b:45:b5:96:5f:58:1e:c6:c8:51: 33:e5:dd:27:58:59:40:72:1d:50:72:0e:b2:34:9a: b5:d4:50:b6:d9:15:f4:10:b5:6f:a7:e9:20:12:3a: b2:63:57:a3:f4:2b:53:26:4d:84:75:7e:d1:0b:54: 2f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0B:0C:96:DA:DF:1F:26:4C:F8:EE:BB:8C:BC:52:62:89:AD:5F:0D X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e4:d9:bc:3f:14:63:1a:14:c0:92:00:44:23:65:56:76:e8: 93:32:9a:e6:39:15:60:6d:60:e3:2e:ee:35:02:60:30:a7:32: b2:40:fb:b6:de:6c:13:a3:c7:bb:04:44:d2:83:17:70:ee:f9: 85:13:5f:86:b1:1a:9b:45:e1:93:0d:43:43:69:14:2e:50:4c: 92:5e:0a:e7:c0:07:f7:5d:c8:3a:57:be:0b:39:1c:79:9a:59: ff:3c:d1:c4:3f:1a:c6:83:d0:34:22:d2:38:4f:67:16:f8:bc: 66:78:e9:7f:53:24:af:8f:65:0e:17:c6:48:6f:17:9e:ba:d0: 57:c5:4d:7d:20:97:ee:2e:a4:af:55:0f:a1:05:b7:12:37:e3: 41:77:c6:75:62:31:2d:bc:42:dd:c7:40:c5:30:70:4b:fd:b0: 74:f7:fa:9d:64:c1:47:c2:2a:a4:f1:b4:49:ae:11:77:79:67: 6a:8a:50:1b:33:b7:1c:1e:c8:a4:d3:cb:fb:e7:ab:4f:b3:a7: 2d:8f:67:62:df:61:ed:e7:8a:8e:74:d1:ca:56:d2:eb:a8:a8: 80:42:8c:55:8b:73:f8:b5:15:c9:9c:2d:af:6f:c2:5e:74:97: 31:79:b4:ac:ae:c8:96:9d:09:1e:c6:d1:14:a1:a1:17:4a:72: fd:00:1b:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OY2JavwJR8gDFSXJ91DIjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwNDI3MTAwMTUyWhcNMjYwNDI4MTAwMTUyWjAzMTEwLwYDVQQD EygxZDBiMGM5NmRhZGYxZjI2NGNmOGVlYmI4Y2JjNTI2Mjg5YWQ1ZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwwbyE3PIBdSGvHz1XDfbkm79D6s bB4MRMW8uW/5rcCS1+Hmyvr5rxmMfTHQEZG2wR9gXRkcz3IgSUiaghJXWrkIg5LA MJcCCwnWepAmpsiyX7jcH6K3AS5wIOsfl7y5W/bGtFH1D9sc7y7OyLXqZ3YtAP7Q IaPNBWPAHPMaJwDe6viWPL6+gSIV+q4xx4Iv7SYF+VIUBctPjBGMrleOImXE4+YQ vYKApOmvoP9htlVxwWmYRPKgzZqmctQeAvBEE89HDpVS8TtFtZZfWB7GyFEz5d0n WFlAch1Qcg6yNJq11FC22RX0ELVvp+kgEjqyY1ej9CtTJk2EdX7RC1QvYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0LDJba3x8mTPjuu4y8UmKJrV8NMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+TZvD8U YxoUwJIARCNlVnbokzKa5jkVYG1g4y7uNQJgMKcyskD7tt5sE6PHuwRE0oMXcO75 hRNfhrEam0Xhkw1DQ2kULlBMkl4K58AH913IOle+CzkceZpZ/zzRxD8axoPQNCLS OE9nFvi8Znjpf1Mkr49lDhfGSG8XnrrQV8VNfSCX7i6kr1UPoQW3EjfjQXfGdWIx LbxC3cdAxTBwS/2wdPf6nWTBR8IqpPG0Sa4Rd3lnaopQGzO3HB7IpNPL++erT7On LY9nYt9h7eeKjnTRylbS66iogEKMVYtz+LUVyZwtr2/CXnSXMXm0rK7Ilp0JHsbR FKGhF0py/QAbpg== -----END CERTIFICATE-----Generated at Mon Apr 27 14:39:47 2026 by rpki-client