$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: LrBMJuIy0w9RFwxfb8eEK3nVbluUI8NsED107EwBJNM= Subject key identifier: 20:3C:B1:62:67:C7:09:F2:3A:84:F8:06:B6:EB:AC:BE:20:BB:51:EB Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019CE4B54E87A3E394829B57D51B7F2F07B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 185B Signing time: Fri 13 Mar 2026 01:00:13 +0000 Manifest this update: Fri 13 Mar 2026 01:00:13 +0000 Manifest next update: Sat 14 Mar 2026 01:00:13 +0000 Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=) 2: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=) 3: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=) 4: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=) 5: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=) 6: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=) 7: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=) 8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: VNKBGZ8a8mKW4lZA8b7NcXwXlCv6htmc4diNUpZ2h3I=) 9: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=) 10: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=) 11: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=) 12: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=) 13: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=) 14: jIciP85UIj70W740hLw1umDPl8U.roa (hash: wrY0tv/GkQoOFiGmbPrfGkCZnbqrkkaA3u07XZ08OZM=) 15: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=) 16: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=) 17: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=) 18: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=) 19: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=) 20: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e4:b5:4e:87:a3:e3:94:82:9b:57:d5:1b:7f:2f:07:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Mar 13 01:00:13 2026 GMT Not After : Mar 14 01:00:13 2026 GMT Subject: CN=203cb16267c709f23a84f806b6ebacbe20bb51eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c4:24:df:ca:5a:ba:50:3b:73:6a:2d:29:62: 35:a2:9a:6f:0a:13:a5:e9:2a:ff:af:b6:16:36:c4: 59:24:fa:04:82:c8:8e:73:3b:0d:7c:a4:a0:7b:8b: 84:11:4e:4b:8b:60:67:fa:0e:8e:90:08:af:f9:2a: 5a:7f:18:59:cf:0c:6a:5d:2d:1f:ef:ab:86:b6:25: 62:07:1f:42:cd:14:14:ac:00:45:82:ef:77:76:64: 2e:09:38:cb:39:bd:13:bc:0e:2c:6e:99:1b:8c:18: 72:bd:b4:b1:c3:6d:47:02:41:cb:ba:e8:d8:a6:07: 12:1a:38:b8:93:7f:13:01:d2:4e:1c:07:9d:a5:10: f7:0b:61:50:81:6e:4e:6b:5b:14:e9:83:02:de:2f: c8:0f:85:af:f3:4d:fd:e3:1e:b4:2d:5a:57:56:0c: 35:b0:1a:82:89:9a:f3:15:88:74:92:8b:22:08:fc: ab:42:9d:56:35:37:e2:59:6f:a9:b2:d8:bd:af:82: f9:ed:e3:ea:a4:04:7b:d5:64:b1:b5:ea:f4:81:39: 7e:94:fc:69:6f:30:75:a9:68:97:b0:c5:54:6b:05: 0e:c5:54:87:5b:29:ee:ff:12:6e:d3:2b:f5:40:06: 6f:cf:66:13:76:93:5a:a5:76:42:70:9a:62:6c:05: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3C:B1:62:67:C7:09:F2:3A:84:F8:06:B6:EB:AC:BE:20:BB:51:EB X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:22:e8:99:ea:d9:8e:ed:72:cd:49:6f:8d:ae:6d:23:57:45: 14:c2:72:88:8b:be:cd:75:45:65:d3:32:b4:bb:d1:be:c7:ce: ac:dc:54:35:f9:73:47:0b:32:84:5b:a0:27:37:f8:26:9d:a5: e7:af:ea:3e:8f:42:23:33:19:4d:30:10:12:69:63:ea:79:a2: ce:ef:cb:cf:2e:1d:e7:c0:8f:74:17:8f:c5:7b:69:ac:ad:2f: d7:ed:d8:ea:5b:ee:d2:70:80:a0:41:0f:58:83:79:02:a3:c8: 9b:25:d8:ba:9d:7d:8b:c1:86:6a:52:04:2e:30:f7:b7:c1:13: 71:31:be:e7:8c:b8:ee:f9:f9:85:d8:88:e1:06:72:7e:d7:91: d5:bf:20:96:4f:d4:84:3b:bd:e3:05:59:44:79:bc:10:3d:02: 1f:b7:f5:f6:4e:d7:8b:3f:e2:e7:d7:b3:df:70:61:18:78:4b: 1a:ed:02:88:41:d9:6b:32:ab:6a:90:a1:01:a4:7c:04:39:39: da:73:d5:a4:64:7e:32:2b:e6:ba:64:3a:b0:8a:45:c9:d3:c5: 2a:e1:d0:c8:cf:38:89:31:08:9c:c5:1a:31:06:25:69:31:6f: 3e:a7:79:e5:40:4d:f8:e7:86:91:9f:e6:8b:f6:83:16:9d:a4: 6d:22:cd:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzktU6Ho+OUgptX1Rt/Lwe0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMzEzMDEwMDEzWhcNMjYwMzE0MDEwMDEzWjAzMTEwLwYDVQQD EygyMDNjYjE2MjY3YzcwOWYyM2E4NGY4MDZiNmViYWNiZTIwYmI1MWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sQk38paulA7c2otKWI1oppvChOl 6Sr/r7YWNsRZJPoEgsiOczsNfKSge4uEEU5Li2Bn+g6OkAiv+SpafxhZzwxqXS0f 76uGtiViBx9CzRQUrABFgu93dmQuCTjLOb0TvA4sbpkbjBhyvbSxw21HAkHLuujY pgcSGji4k38TAdJOHAedpRD3C2FQgW5Oa1sU6YMC3i/ID4Wv80394x60LVpXVgw1 sBqCiZrzFYh0kosiCPyrQp1WNTfiWW+psti9r4L57ePqpAR71WSxter0gTl+lPxp bzB1qWiXsMVUawUOxVSHWynu/xJu0yv1QAZvz2YTdpNapXZCcJpibAVRzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCA8sWJnxwnyOoT4BrbrrL4gu1HrMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyLomerZ ju1yzUlvja5tI1dFFMJyiIu+zXVFZdMytLvRvsfOrNxUNflzRwsyhFugJzf4Jp2l 56/qPo9CIzMZTTAQEmlj6nmizu/Lzy4d58CPdBePxXtprK0v1+3Y6lvu0nCAoEEP WIN5AqPImyXYup19i8GGalIELjD3t8ETcTG+54y47vn5hdiI4QZyfteR1b8glk/U hDu94wVZRHm8ED0CH7f19k7Xiz/i59ez33BhGHhLGu0CiEHZazKrapChAaR8BDk5 2nPVpGR+MivmumQ6sIpFydPFKuHQyM84iTEInMUaMQYlaTFvPqd55UBN+OeGkZ/m i/aDFp2kbSLNbA== -----END CERTIFICATE-----Generated at Fri Mar 13 08:51:45 2026 by rpki-client