$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: cBm10EIbUeNhqt740wuQPZTCUBMK8KN2ymbfgHvwqlY= Subject key identifier: 58:F5:61:5E:EB:EA:D3:59:EE:3E:67:C2:45:67:99:C3:CA:2A:E1:A4 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 01A0889E10360C0F717B42A4C66408FA9966 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 1A40 Signing time: Thu 10 Sep 2026 00:00:55 +0000 Manifest this update: Thu 10 Sep 2026 00:00:55 +0000 Manifest next update: Fri 11 Sep 2026 00:00:55 +0000 Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=) 2: 4KhhGZX4PWjUQYpl6SjJvfil8R8.roa (hash: NcodsY717TYNNKDjkC9G80EurSBxppwYgSyODBkbvvM=) 3: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=) 4: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=) 5: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=) 6: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=) 7: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=) 8: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: RBgz7ySKcC79SKXclu7nXLdcQnAtMAQ6KB9WZ9ZTZwQ=) 10: QCih5l8ms9ZT9yQSt5C9uapsYYM.roa (hash: /QPJzCsQ+24ZR6+p5oNE2OgeX+eucsMYEmdpUXhs184=) 11: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=) 12: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=) 13: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=) 14: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=) 15: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=) 16: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=) 17: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=) 18: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=) 19: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=) 20: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=) 21: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 21:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:88:9e:10:36:0c:0f:71:7b:42:a4:c6:64:08:fa:99:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Sep 10 00:00:55 2026 GMT Not After : Sep 11 00:00:55 2026 GMT Subject: CN=58f5615eebead359ee3e67c2456799c3ca2ae1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:78:5e:5a:42:a1:11:ea:b9:0d:0b:65:5e:b6: 18:78:f7:32:4a:62:e2:c5:f0:74:ea:58:04:23:67: 96:6a:0a:c2:15:33:22:39:04:01:75:ec:ad:0f:85: 2d:a8:d8:b8:b2:c4:4c:ab:c7:2a:6b:54:1b:ac:6d: b8:34:15:4b:d3:09:ca:fc:50:5b:1b:b5:47:ad:22: 3a:74:4d:67:51:3d:47:72:3d:06:89:23:b8:f4:f0: b1:97:90:1c:63:19:e8:35:32:22:da:e4:74:f7:05: d7:a5:a6:44:15:2b:82:e5:23:c1:64:d4:4f:95:3c: 69:b8:41:ef:81:d9:a7:f4:da:d8:82:2c:dd:33:4d: 29:a4:92:a1:ed:dd:1b:e3:34:17:23:2d:32:3b:8e: e7:8e:c7:f2:e1:53:a7:63:ce:5f:3b:3b:5b:e4:77: d6:2f:d1:0a:6e:c3:97:67:a7:9c:b4:09:a0:40:75: 67:8b:dc:38:03:74:38:0a:a5:5f:3b:02:b0:e7:d3: a4:2b:1c:90:52:78:bf:06:1f:81:18:3f:61:94:74: db:50:a3:3d:2c:bd:20:01:e9:65:63:54:dc:0e:74: 91:2f:35:8e:f8:4d:9e:e8:99:ac:1c:3d:18:6e:5a: 5c:36:39:e9:a5:54:15:24:4e:20:91:12:e2:eb:5d: 8c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F5:61:5E:EB:EA:D3:59:EE:3E:67:C2:45:67:99:C3:CA:2A:E1:A4 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:04:de:09:b4:04:1c:91:27:fe:08:c4:10:cd:03:ec:4e:9b: c3:69:14:a3:a2:00:33:d8:3b:93:6d:2d:71:bd:23:dd:70:e7: d4:d7:2c:1f:68:97:7b:a0:4b:a3:3c:9e:05:f9:5b:97:22:0d: cd:1e:c5:eb:ff:35:c2:d2:9e:2d:de:66:95:56:a7:0c:17:fc: c2:90:7d:7e:a9:54:cc:7b:33:e0:31:e8:80:93:74:89:87:52: 3a:e8:41:f1:82:79:a7:d4:21:d0:44:e0:3d:72:57:7d:30:47: c1:3a:ed:e0:98:d1:cd:28:75:2f:e4:c0:86:be:ce:af:ec:6f: a1:bd:20:c4:14:43:b2:5f:ae:d3:76:52:69:ac:29:e2:c8:79: c6:32:56:87:b0:89:92:8c:fc:80:5a:6d:bf:fe:a9:37:30:17: 34:68:81:df:63:fb:a2:c7:e2:15:3b:a3:da:70:89:14:7e:3c: f8:85:79:29:15:6c:cb:79:3b:4f:8d:5a:74:11:d1:36:d0:cb: b3:5f:f4:b2:de:24:9f:9f:b1:10:23:16:21:6d:8a:6c:45:8e: 8a:6e:87:3e:04:12:5f:5d:ab:c2:b1:a2:43:29:e5:62:a0:d2: 6a:54:49:3b:00:59:f3:a9:b1:ee:7b:08:4e:66:df:65:d0:5a: 87:25:43:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCInhA2DA9xe0KkxmQI+plmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwOTEwMDAwMDU1WhcNMjYwOTExMDAwMDU1WjAzMTEwLwYDVQQD Eyg1OGY1NjE1ZWViZWFkMzU5ZWUzZTY3YzI0NTY3OTljM2NhMmFlMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HheWkKhEeq5DQtlXrYYePcySmLi xfB06lgEI2eWagrCFTMiOQQBdeytD4UtqNi4ssRMq8cqa1QbrG24NBVL0wnK/FBb G7VHrSI6dE1nUT1Hcj0GiSO49PCxl5AcYxnoNTIi2uR09wXXpaZEFSuC5SPBZNRP lTxpuEHvgdmn9NrYgizdM00ppJKh7d0b4zQXIy0yO47njsfy4VOnY85fOztb5HfW L9EKbsOXZ6ectAmgQHVni9w4A3Q4CqVfOwKw59OkKxyQUni/Bh+BGD9hlHTbUKM9 LL0gAellY1TcDnSRLzWO+E2e6JmsHD0YblpcNjnppVQVJE4gkRLi612M4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFj1YV7r6tNZ7j5nwkVnmcPKKuGkMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawTeCbQE HJEn/gjEEM0D7E6bw2kUo6IAM9g7k20tcb0j3XDn1NcsH2iXe6BLozyeBflblyIN zR7F6/81wtKeLd5mlVanDBf8wpB9fqlUzHsz4DHogJN0iYdSOuhB8YJ5p9Qh0ETg PXJXfTBHwTrt4JjRzSh1L+TAhr7Or+xvob0gxBRDsl+u03ZSaawp4sh5xjJWh7CJ koz8gFptv/6pNzAXNGiB32P7osfiFTuj2nCJFH48+IV5KRVsy3k7T41adBHRNtDL s1/0st4kn5+xECMWIW2KbEWOim6HPgQSX12rwrGiQynlYqDSalRJOwBZ86mx7nsI TmbfZdBahyVDeQ== -----END CERTIFICATE-----Generated at Thu Sep 10 05:21:17 2026 by rpki-client