$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: 1uMHTb+p5ET/FgRi0GIdJnQL6qMg06mVkRDhJJq1caA= Subject key identifier: A7:17:DD:CA:ED:FA:48:09:8D:E4:6C:42:A9:3F:A5:A3:E1:8B:00:DE Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019DDAD51ED27E0FF17FB4CFA67EDAD4D435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 15E7 Signing time: Wed 29 Apr 2026 20:01:33 +0000 Manifest this update: Wed 29 Apr 2026 20:01:33 +0000 Manifest next update: Thu 30 Apr 2026 20:01:33 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: lg9gkJZF4ei79lXefmLHkLbbNY6H+2LZ/SA61YrmY1k=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Apr 2026 20:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:da:d5:1e:d2:7e:0f:f1:7f:b4:cf:a6:7e:da:d4:d4:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Apr 29 20:01:33 2026 GMT Not After : Apr 30 20:01:33 2026 GMT Subject: CN=a717ddcaedfa48098de46c42a93fa5a3e18b00de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:db:c8:e4:d9:9c:b7:b5:83:4b:6e:ab:c0: b0:5a:5d:90:5c:c8:9d:22:36:0d:97:d1:1c:b7:ad: fd:05:45:54:cd:73:4d:f6:35:a3:fa:a7:be:99:de: 83:57:cc:60:c3:25:56:f7:1b:87:9b:c9:c3:a8:91: 6b:be:0d:a7:d1:08:0b:9e:9d:31:93:87:4a:fe:01: 12:59:0c:d1:13:f8:34:72:5b:36:00:90:00:5a:a6: 73:5c:f8:b3:ad:00:a9:cd:be:a4:e6:9f:97:a7:fc: 95:5d:0a:5b:8f:be:78:e5:ac:82:64:2d:60:64:f7: df:97:3c:c0:9b:44:5d:35:7b:2b:91:4a:4f:42:83: 17:d4:15:25:d7:7b:d9:6c:08:8d:a9:63:50:08:fc: bf:27:51:b8:f4:b9:63:a3:de:f9:e9:e9:af:19:ba: 2b:8d:f5:73:f2:c6:ad:19:31:3d:dc:4d:66:a7:6f: 3f:40:15:18:38:aa:b5:ae:8c:aa:4f:90:37:34:16: 27:72:bb:f2:fd:25:3e:74:6e:2b:67:0d:7e:40:e0: 6e:dd:42:d6:e1:7f:c2:28:e7:65:67:1e:f7:7d:18: 32:43:63:9a:e5:b6:1e:96:f1:d9:e8:bf:5d:7a:84: f4:4f:e0:27:06:05:d0:29:8f:5a:a1:4d:43:6c:cc: fa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:17:DD:CA:ED:FA:48:09:8D:E4:6C:42:A9:3F:A5:A3:E1:8B:00:DE X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:1e:a2:a7:b9:e8:00:be:86:11:7f:a1:7c:7d:73:fb:d2:7f: 05:a2:cd:26:5e:91:fa:b7:7f:dd:76:7c:03:0a:47:6f:5f:18: 01:4d:26:d8:b0:38:5f:4a:7a:7c:31:6d:58:2d:e2:22:97:db: 77:2c:d3:6a:7d:d6:5c:72:8f:71:e6:47:d8:e7:e6:e3:87:1b: e6:ea:ed:d4:e8:23:de:0c:5b:37:78:19:2e:ed:aa:23:65:dc: 33:70:33:08:2d:d4:5f:d1:a3:ad:b7:5d:f5:e9:25:16:37:28: 1e:34:db:28:e8:58:ce:a0:fd:43:c4:95:e8:d0:46:af:9d:ef: f5:03:1f:53:58:ca:5e:5e:46:fb:ab:10:fe:b0:8a:43:04:f3: 75:06:6d:7b:48:8e:40:f7:58:06:8f:00:50:5c:b5:37:21:10: d5:af:36:16:ef:05:bf:74:00:aa:3d:c6:f3:a5:19:d4:15:ab: 5c:c1:03:f6:a6:ce:09:86:bc:04:46:e9:e6:f9:08:0f:07:51: 43:6e:b7:3a:2a:58:05:f0:aa:9f:1a:81:62:da:d0:17:b3:60: cf:a6:7f:7a:d3:51:ce:75:25:e6:a3:0d:0b:83:7e:24:4e:6a: 80:29:c8:3f:30:26:cd:88:c6:ea:9b:ea:2e:7a:d1:55:60:af: ae:84:46:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3a1R7Sfg/xf7TPpn7a1NQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNDI5MjAwMTMzWhcNMjYwNDMwMjAwMTMzWjAzMTEwLwYDVQQD EyhhNzE3ZGRjYWVkZmE0ODA5OGRlNDZjNDJhOTNmYTVhM2UxOGIwMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8DbyOTZnLe1g0tuq8CwWl2QXMid IjYNl9Ect639BUVUzXNN9jWj+qe+md6DV8xgwyVW9xuHm8nDqJFrvg2n0QgLnp0x k4dK/gESWQzRE/g0cls2AJAAWqZzXPizrQCpzb6k5p+Xp/yVXQpbj7545ayCZC1g ZPfflzzAm0RdNXsrkUpPQoMX1BUl13vZbAiNqWNQCPy/J1G49Lljo9756emvGbor jfVz8satGTE93E1mp28/QBUYOKq1royqT5A3NBYncrvy/SU+dG4rZw1+QOBu3ULW 4X/CKOdlZx73fRgyQ2Oa5bYelvHZ6L9deoT0T+AnBgXQKY9aoU1DbMz6YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcX3crt+kgJjeRsQqk/paPhiwDeMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASB6ip7no AL6GEX+hfH1z+9J/BaLNJl6R+rd/3XZ8AwpHb18YAU0m2LA4X0p6fDFtWC3iIpfb dyzTan3WXHKPceZH2Ofm44cb5urt1Ogj3gxbN3gZLu2qI2XcM3AzCC3UX9Gjrbdd 9eklFjcoHjTbKOhYzqD9Q8SV6NBGr53v9QMfU1jKXl5G+6sQ/rCKQwTzdQZte0iO QPdYBo8AUFy1NyEQ1a82Fu8Fv3QAqj3G86UZ1BWrXMED9qbOCYa8BEbp5vkIDwdR Q263OipYBfCqnxqBYtrQF7Ngz6Z/etNRznUl5qMNC4N+JE5qgCnIPzAmzYjG6pvq LnrRVWCvroRGNA== -----END CERTIFICATE-----Generated at Thu Apr 30 05:48:41 2026 by rpki-client