$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: +UFFUw9JqJ20EkuCWbWGaSuAp09eAZ/HxzOe+q9XV7Y= Subject key identifier: A6:12:A8:CD:05:81:C9:60:F9:D0:59:70:35:FE:41:12:34:86:EB:6B Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019F9E159A9119EC37FD4351E034DD8A69C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 19C6 Signing time: Sun 26 Jul 2026 11:00:43 +0000 Manifest this update: Sun 26 Jul 2026 11:00:43 +0000 Manifest next update: Mon 27 Jul 2026 11:00:43 +0000 Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=) 2: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=) 3: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=) 4: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=) 5: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=) 6: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=) 7: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=) 8: NS1ZBrUo9cL2RzJl2DoZEtlJIgU.roa (hash: WlCP3A2g4WxvOy7MlXQKTM7lTwf6ExPkVhpn2oHTNY0=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: BZ6pb7NcW/k5bR2IM3OCOwafFKx78qWGonClstSmPGs=) 10: QCih5l8ms9ZT9yQSt5C9uapsYYM.roa (hash: /QPJzCsQ+24ZR6+p5oNE2OgeX+eucsMYEmdpUXhs184=) 11: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=) 12: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=) 13: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=) 14: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=) 15: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=) 16: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=) 17: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=) 18: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=) 19: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=) 20: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=) 21: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9e:15:9a:91:19:ec:37:fd:43:51:e0:34:dd:8a:69:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jul 26 11:00:43 2026 GMT Not After : Jul 27 11:00:43 2026 GMT Subject: CN=a612a8cd0581c960f9d0597035fe41123486eb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:2f:13:be:3c:f8:14:da:ad:c5:4c:35:52: 53:d7:61:c0:d4:57:80:d7:65:93:0e:53:e0:16:9f: 6e:96:ca:48:ee:96:a6:43:91:c8:25:ca:11:e0:bb: 17:69:36:6f:6e:c7:f7:84:40:c5:84:97:d5:ba:37: 78:53:e4:a2:25:a2:d7:6b:51:e1:b3:e8:50:00:64: 34:c9:2a:7a:18:3c:8f:5f:75:b2:dc:8b:62:a3:a9: 88:cd:be:e0:52:bc:5b:67:ee:a6:83:12:07:e6:10: ad:a5:8e:e3:e5:b3:c9:30:58:18:58:23:73:31:aa: 64:7b:83:43:aa:07:7b:03:d0:6c:76:7c:d8:8f:3d: f4:88:e7:e3:da:a0:88:c5:ac:85:a6:16:71:18:37: 31:e9:33:e4:e6:3a:a0:48:3a:ed:b2:e2:1e:c6:fd: 25:36:01:62:20:8d:c7:a0:bf:10:85:3a:59:23:03: 4a:34:ff:b6:c3:8e:17:dd:99:7d:f3:1b:1d:ca:43: bf:82:e6:fc:a4:06:f8:e7:06:b3:84:e6:6f:27:4d: ce:da:44:85:ac:a2:3e:f4:59:f4:7e:72:ba:03:05: 65:f3:7b:d5:45:fc:7a:98:8a:f4:fa:cc:85:ec:1f: e3:ae:33:d8:dd:c1:b7:fb:d6:38:69:d9:2b:5c:59: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:12:A8:CD:05:81:C9:60:F9:D0:59:70:35:FE:41:12:34:86:EB:6B X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:a8:f5:b6:09:ee:17:a7:e2:f8:90:4c:85:b5:73:74:11:6c: 05:df:55:da:6d:05:c9:00:bc:69:ff:e8:80:98:af:11:93:8f: 73:c1:74:64:a4:94:92:38:aa:72:bd:c3:f7:ca:94:a9:f8:56: e9:15:f0:cf:e9:60:cc:d4:7e:f3:9e:79:82:5a:bf:cb:45:70: 1d:a5:fc:3d:bb:f2:2b:58:e5:b4:78:58:a2:52:00:2c:d0:53: 76:67:b7:31:09:50:92:7f:3c:1e:4d:c8:e0:87:02:8e:27:e4: 6d:f5:cb:36:42:2c:91:ea:61:14:62:c5:64:52:0a:f8:db:d3: 08:17:3f:ed:d8:b5:a6:86:0e:72:c6:5f:b8:83:8a:6d:e4:05: 44:a6:c6:93:76:bd:69:30:c5:45:c4:d6:70:43:e0:6d:44:54: 97:7a:b8:89:d0:70:fe:76:b1:68:eb:9b:8e:35:58:1a:c1:66: b5:01:e9:8f:20:be:1a:3c:0b:cb:a1:82:28:c6:89:53:0c:e0: d5:2f:9b:90:53:28:9e:cf:fd:0b:c2:47:85:02:3b:84:74:2a: 7b:9d:ed:19:a6:88:16:d0:09:7c:b3:03:a7:bf:dc:d1:29:a8: 88:0e:d5:39:e2:1a:0a:c9:51:b1:15:07:79:89:3b:e9:b6:b0: 54:8f:35:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+eFZqRGew3/UNR4DTdimnHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwNzI2MTEwMDQzWhcNMjYwNzI3MTEwMDQzWjAzMTEwLwYDVQQD EyhhNjEyYThjZDA1ODFjOTYwZjlkMDU5NzAzNWZlNDExMjM0ODZlYjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnAvE748+BTarcVMNVJT12HA1FeA 12WTDlPgFp9ulspI7pamQ5HIJcoR4LsXaTZvbsf3hEDFhJfVujd4U+SiJaLXa1Hh s+hQAGQ0ySp6GDyPX3Wy3Itio6mIzb7gUrxbZ+6mgxIH5hCtpY7j5bPJMFgYWCNz Mapke4NDqgd7A9BsdnzYjz30iOfj2qCIxayFphZxGDcx6TPk5jqgSDrtsuIexv0l NgFiII3HoL8QhTpZIwNKNP+2w44X3Zl98xsdykO/gub8pAb45wazhOZvJ03O2kSF rKI+9Fn0fnK6AwVl83vVRfx6mIr0+syF7B/jrjPY3cG3+9Y4adkrXFnuZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYSqM0Fgclg+dBZcDX+QRI0hutrMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuqj1tgnu F6fi+JBMhbVzdBFsBd9V2m0FyQC8af/ogJivEZOPc8F0ZKSUkjiqcr3D98qUqfhW 6RXwz+lgzNR+8555glq/y0VwHaX8PbvyK1jltHhYolIALNBTdme3MQlQkn88Hk3I 4IcCjifkbfXLNkIskephFGLFZFIK+NvTCBc/7di1poYOcsZfuIOKbeQFRKbGk3a9 aTDFRcTWcEPgbURUl3q4idBw/naxaOubjjVYGsFmtQHpjyC+GjwLy6GCKMaJUwzg 1S+bkFMons/9C8JHhQI7hHQqe53tGaaIFtAJfLMDp7/c0SmoiA7VOeIaCslRsRUH eYk76bawVI816A== -----END CERTIFICATE-----Generated at Sun Jul 26 20:23:08 2026 by rpki-client