$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: c/IYr5rxhDSZPXTBTl9WrtN7kETfj+CgHscWEcZRDfc= Subject key identifier: BD:F7:E4:96:44:DE:92:31:E9:E8:C8:86:1B:6D:1C:2D:AC:EF:69:DC Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019D8D94D09B8136A4C3338FA4776756C938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 15BF Signing time: Tue 14 Apr 2026 20:00:33 +0000 Manifest this update: Tue 14 Apr 2026 20:00:33 +0000 Manifest next update: Wed 15 Apr 2026 20:00:33 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: 0DQV3avNzYVq9r6NUvUcK/RKEwVBLbyP07dnFQp1i3E=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 15 Apr 2026 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:8d:94:d0:9b:81:36:a4:c3:33:8f:a4:77:67:56:c9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Apr 14 20:00:33 2026 GMT Not After : Apr 15 20:00:33 2026 GMT Subject: CN=bdf7e49644de9231e9e8c8861b6d1c2dacef69dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:60:76:92:6b:0d:43:21:87:d1:10:c2:f1:1c: c1:2d:cc:7e:c8:9a:0a:00:d8:32:ab:39:13:2d:d2: 58:ea:e1:bd:40:aa:97:49:22:bc:0a:00:34:e2:7f: f1:73:2e:f5:9b:f1:39:ab:72:3c:a8:00:25:98:1d: a2:84:e0:5c:f0:fb:bd:42:ab:91:da:20:bd:9f:57: bf:7d:bd:85:88:b0:ec:60:8b:60:4e:5e:21:b8:2e: b5:9e:46:e7:b7:dc:8b:9c:0e:69:5b:90:91:e1:f8: 9f:b4:31:1c:8b:4a:f7:62:e9:6f:fa:4c:a3:9e:c6: 87:bb:25:2b:6d:80:69:3f:3c:fd:b7:a3:45:4d:51: b6:a6:6f:14:92:b4:3a:de:ff:71:13:e4:b8:fb:ee: 59:5c:8f:a0:b6:55:6b:04:2b:a8:91:12:99:ad:e9: 3f:3c:23:47:a9:f3:95:cf:7a:32:ac:8d:e5:19:86: 8b:c8:eb:3a:cc:2b:fe:10:e6:50:0c:0d:48:d5:ae: e3:61:7a:81:35:6c:f2:2d:62:71:50:1e:2e:88:d5: 42:4c:4e:55:49:84:fc:46:ef:da:ca:62:0d:36:42: 6e:73:c0:45:68:3d:7d:3a:bc:86:4a:d4:ca:ba:17: 03:38:14:0d:16:ea:3a:8c:f9:21:5f:32:f7:5b:d5: 56:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F7:E4:96:44:DE:92:31:E9:E8:C8:86:1B:6D:1C:2D:AC:EF:69:DC X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:2c:ce:64:ed:a5:4e:0e:1a:95:5f:99:45:d0:a5:a1:99:01: af:80:8d:64:ad:f1:75:f6:40:6c:ab:81:61:cf:34:08:03:be: b1:a6:f1:4a:0f:d9:d8:a0:b9:70:4b:14:5f:10:85:23:54:91: f4:fa:65:ce:68:0e:3e:f2:09:48:84:de:d7:f0:00:ef:f3:a9: 17:ea:a0:88:c6:c1:4c:71:74:9a:8b:e4:17:90:ba:64:c5:c2: f0:bb:05:8d:86:aa:56:b1:ec:47:c5:7a:b7:7b:f8:bc:ab:67: 8c:07:73:f5:62:58:0a:f7:8a:b6:6b:27:dd:86:d6:ba:3c:ab: 6f:4e:48:62:c6:bd:3a:91:8e:ba:8d:3f:21:61:40:03:c9:06: 69:71:ed:b1:7b:d0:04:75:bc:4b:0f:da:5b:a9:e6:bb:08:41: d1:75:6c:f3:78:bf:42:bb:31:51:48:46:f4:24:26:1b:d0:61: d0:22:d7:fe:2a:b8:ab:d2:8a:2b:6f:85:3f:11:04:58:17:a0: 24:27:4a:16:09:2e:c7:43:6d:77:6e:fe:fb:65:e0:4f:5b:54: 7a:e6:ba:1f:0c:e5:8b:b5:36:85:3a:9f:be:75:64:89:9a:38: 0f:96:19:b1:91:fe:9b:fc:c0:eb:9d:4f:b8:fb:de:ff:e3:9f: 99:28:3d:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2NlNCbgTakwzOPpHdnVsk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNDE0MjAwMDMzWhcNMjYwNDE1MjAwMDMzWjAzMTEwLwYDVQQD EyhiZGY3ZTQ5NjQ0ZGU5MjMxZTllOGM4ODYxYjZkMWMyZGFjZWY2OWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWB2kmsNQyGH0RDC8RzBLcx+yJoK ANgyqzkTLdJY6uG9QKqXSSK8CgA04n/xcy71m/E5q3I8qAAlmB2ihOBc8Pu9QquR 2iC9n1e/fb2FiLDsYItgTl4huC61nkbnt9yLnA5pW5CR4fiftDEci0r3Yulv+kyj nsaHuyUrbYBpPzz9t6NFTVG2pm8UkrQ63v9xE+S4++5ZXI+gtlVrBCuokRKZrek/ PCNHqfOVz3oyrI3lGYaLyOs6zCv+EOZQDA1I1a7jYXqBNWzyLWJxUB4uiNVCTE5V SYT8Ru/aymINNkJuc8BFaD19OryGStTKuhcDOBQNFuo6jPkhXzL3W9VWSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL335JZE3pIx6ejIhhttHC2s72ncMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxyzOZO2l Tg4alV+ZRdCloZkBr4CNZK3xdfZAbKuBYc80CAO+sabxSg/Z2KC5cEsUXxCFI1SR 9PplzmgOPvIJSITe1/AA7/OpF+qgiMbBTHF0movkF5C6ZMXC8LsFjYaqVrHsR8V6 t3v4vKtnjAdz9WJYCveKtmsn3YbWujyrb05IYsa9OpGOuo0/IWFAA8kGaXHtsXvQ BHW8Sw/aW6nmuwhB0XVs83i/QrsxUUhG9CQmG9Bh0CLX/iq4q9KKK2+FPxEEWBeg JCdKFgkux0Ntd27++2XgT1tUeua6Hwzli7U2hTqfvnVkiZo4D5YZsZH+m/zA651P uPve/+OfmSg9JQ== -----END CERTIFICATE-----Generated at Wed Apr 15 06:16:21 2026 by rpki-client