$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: +NjnVJl+1KZP4ReLqTuZjxmoBzXglHooLJ8gcK1hKIo= Subject key identifier: 85:58:AD:94:84:F6:75:B4:E1:C5:99:08:4C:4D:BC:AB:8C:21:42:8A Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 01A1795F669B21FF58BEB6AF078F9FDB6F2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 1ABD Signing time: Mon 26 Oct 2026 18:00:57 +0000 Manifest this update: Mon 26 Oct 2026 18:00:57 +0000 Manifest next update: Tue 27 Oct 2026 18:00:57 +0000 Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=) 2: 4KhhGZX4PWjUQYpl6SjJvfil8R8.roa (hash: NcodsY717TYNNKDjkC9G80EurSBxppwYgSyODBkbvvM=) 3: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=) 4: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=) 5: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=) 6: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=) 7: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=) 8: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: c1nRPsU4M7OHdr68Oz53r2tza8oCWg2Qmqh/RIoCzoc=) 10: QCih5l8ms9ZT9yQSt5C9uapsYYM.roa (hash: /QPJzCsQ+24ZR6+p5oNE2OgeX+eucsMYEmdpUXhs184=) 11: QceFKAB4kI1h3y2cqErIv8Hv4rw.roa (hash: UDlYs0IX2g9lgiSFVYGg7GDtdoJREyShW9ksWrzv5jY=) 12: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=) 13: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=) 14: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=) 15: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=) 16: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=) 17: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=) 18: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=) 19: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=) 20: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=) 21: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=) 22: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 18:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:79:5f:66:9b:21:ff:58:be:b6:af:07:8f:9f:db:6f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Oct 26 18:00:57 2026 GMT Not After : Oct 27 18:00:57 2026 GMT Subject: CN=8558ad9484f675b4e1c599084c4dbcab8c21428a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:1f:f2:2d:01:8f:0f:91:6a:f8:ce:c4:1c: 24:c1:9a:eb:a0:5d:b4:79:1f:ae:3b:b6:2c:fa:dd: 5e:6b:60:42:3c:6c:8d:80:45:00:59:24:d3:1b:72: 4b:71:a8:ab:73:ac:3b:5e:51:1f:2a:90:db:f0:c8: 45:95:60:4c:ce:6a:aa:a1:84:25:c5:42:29:6b:93: c1:f3:9f:ce:14:e7:00:ef:40:67:07:34:98:b9:8c: 51:fb:98:49:bd:c0:69:56:63:7a:67:f1:d7:3f:23: c8:9d:51:b9:aa:e1:18:97:73:85:03:86:64:de:60: 81:40:b2:22:25:43:06:9b:b4:2a:1e:1d:5f:e8:de: 62:ca:f7:44:df:c2:11:0e:7e:fa:d3:1c:b1:91:68: 68:b2:e5:f4:e1:77:35:f8:96:ac:dc:31:ef:57:b3: 76:f4:79:29:97:f7:4e:fd:59:a7:66:30:21:31:c3: d7:d5:db:18:26:e2:01:fa:ae:4b:90:81:7b:9b:dc: 5f:eb:65:5c:39:dd:f9:93:b8:72:60:dc:05:e1:69: ed:c9:08:67:d4:e8:1e:f6:b6:8d:d8:83:99:5c:6e: 70:a1:b2:fd:2e:a7:fd:b5:b7:89:18:a3:f2:e0:ed: d5:a4:3f:f8:12:73:de:b1:82:c1:65:61:64:d0:d8: 5d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:58:AD:94:84:F6:75:B4:E1:C5:99:08:4C:4D:BC:AB:8C:21:42:8A X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:cc:33:f4:cb:1e:9d:22:c5:6a:c2:d9:47:79:53:99:76:db: 1f:0d:9a:ab:89:e2:0c:16:b4:f3:b5:f2:ae:a9:40:81:06:f4: 31:9c:8e:8a:be:3c:35:8d:54:44:65:6e:ec:37:33:6b:61:ab: 81:d8:28:ad:2c:cd:ee:a4:4e:db:ab:d3:48:59:fb:8b:ac:ea: cf:d2:a1:3f:3a:09:36:32:7b:9d:68:8d:dd:aa:dc:17:7c:14: f5:86:96:c3:0c:e6:e7:39:dc:80:6d:c3:8e:bf:ed:c8:50:ac: 02:fd:b0:34:b3:d3:e2:9c:e3:6c:eb:85:04:87:ad:a3:32:5c: 40:de:f4:b1:f6:b3:85:1e:92:9d:85:1f:a5:a3:0f:ba:08:d5: e1:5a:6e:f7:f3:bf:33:1c:92:ee:c6:08:7b:f9:4d:bd:39:c0: b2:f4:b5:de:96:5a:8a:44:36:92:12:64:42:1c:50:a5:c2:93: 94:37:c2:ff:e7:f5:4b:ca:b2:85:d8:7f:6b:0e:ed:6c:31:16: f8:64:6c:0e:79:06:ed:23:2e:7c:0e:0c:c0:46:36:d5:70:9b: f2:34:20:1c:a5:18:2d:4d:43:68:4c:65:42:a7:50:2b:ef:54: bc:8b:13:9f:df:df:94:50:c5:74:26:a6:61:f6:de:d6:9e:2e: 61:63:ca:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF5X2abIf9YvravB4+f228qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYxMDI2MTgwMDU3WhcNMjYxMDI3MTgwMDU3WjAzMTEwLwYDVQQD Eyg4NTU4YWQ5NDg0ZjY3NWI0ZTFjNTk5MDg0YzRkYmNhYjhjMjE0MjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy4f8i0Bjw+RavjOxBwkwZrroF20 eR+uO7Ys+t1ea2BCPGyNgEUAWSTTG3JLcairc6w7XlEfKpDb8MhFlWBMzmqqoYQl xUIpa5PB85/OFOcA70BnBzSYuYxR+5hJvcBpVmN6Z/HXPyPInVG5quEYl3OFA4Zk 3mCBQLIiJUMGm7QqHh1f6N5iyvdE38IRDn760xyxkWhosuX04Xc1+Jas3DHvV7N2 9Hkpl/dO/VmnZjAhMcPX1dsYJuIB+q5LkIF7m9xf62VcOd35k7hyYNwF4WntyQhn 1Oge9raN2IOZXG5wobL9Lqf9tbeJGKPy4O3VpD/4EnPesYLBZWFk0NhdvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVYrZSE9nW04cWZCExNvKuMIUKKMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMwz9Mse nSLFasLZR3lTmXbbHw2aq4niDBa087XyrqlAgQb0MZyOir48NY1URGVu7Dcza2Gr gdgorSzN7qRO26vTSFn7i6zqz9KhPzoJNjJ7nWiN3arcF3wU9YaWwwzm5zncgG3D jr/tyFCsAv2wNLPT4pzjbOuFBIetozJcQN70sfazhR6SnYUfpaMPugjV4Vpu9/O/ MxyS7sYIe/lNvTnAsvS13pZaikQ2khJkQhxQpcKTlDfC/+f1S8qyhdh/aw7tbDEW +GRsDnkG7SMufA4MwEY21XCb8jQgHKUYLU1DaExlQqdQK+9UvIsTn9/flFDFdCam Yfbe1p4uYWPKyA== -----END CERTIFICATE-----Generated at Tue Oct 27 04:50:47 2026 by rpki-client