$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: Dn0IfgenMcKZJEvK+3eWzK+Jk/mPU99UwxGn3DIKbGg= Subject key identifier: 9D:B1:28:04:CF:B6:74:AE:CD:DA:10:16:A2:DC:AB:C8:22:A6:09:DB Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019D68E4795355F4FBF8C4A450ED51BFCA05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 15AC Signing time: Tue 07 Apr 2026 17:01:36 +0000 Manifest this update: Tue 07 Apr 2026 17:01:36 +0000 Manifest next update: Wed 08 Apr 2026 17:01:36 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: qoU58CklZyVW2dINnwlX5SnV2BJ3GHAX2O7xMzslJfw=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 08 Apr 2026 17:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:68:e4:79:53:55:f4:fb:f8:c4:a4:50:ed:51:bf:ca:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Apr 7 17:01:36 2026 GMT Not After : Apr 8 17:01:36 2026 GMT Subject: CN=9db12804cfb674aecdda1016a2dcabc822a609db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:8b:28:a8:16:a8:5b:42:82:77:49:f3:c9: 94:b6:a6:7b:2f:4f:71:f0:de:3e:df:c6:0f:07:be: 21:e5:c5:d6:68:f2:78:58:95:38:5f:22:41:e7:9e: 36:03:b6:78:48:01:d3:02:28:06:cc:57:32:8d:40: d3:84:7a:e8:88:b4:92:c3:ab:8e:a3:8d:92:8d:9e: df:4d:b9:0e:9f:b9:b0:e3:4d:43:10:50:e5:c6:80: 48:9f:9b:40:03:41:92:40:c1:11:04:3e:ed:8e:73: f7:dc:cc:16:c0:56:01:6d:3f:74:b6:7b:17:07:cf: 78:be:a8:1b:d5:3f:79:4d:6c:40:83:b5:38:b4:7c: 44:b1:e6:41:14:b4:74:11:28:c3:2a:15:b1:99:c1: 04:72:90:87:3c:20:46:75:06:87:e1:dc:c6:97:bb: bd:af:e1:f8:66:7c:7d:a5:da:8a:21:39:0a:4e:df: 45:da:86:6c:46:96:bb:dd:93:2e:15:bc:0c:91:eb: 59:6b:aa:85:9f:5f:3d:ad:04:a0:1e:08:10:b3:3f: cd:43:2e:57:ce:9f:85:6f:65:46:98:77:43:8e:65: eb:22:80:1e:d1:77:f0:e7:97:16:23:02:76:56:6d: 3c:5c:4c:08:38:58:f3:4a:d5:65:30:f2:25:de:1e: f6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B1:28:04:CF:B6:74:AE:CD:DA:10:16:A2:DC:AB:C8:22:A6:09:DB X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:f7:e5:bd:6d:5f:b2:66:93:e8:92:88:38:d5:ac:53:9e:35: 46:9e:0f:93:3d:a5:dc:3d:f4:e9:c5:9b:41:01:2d:a6:35:e0: e4:fe:b2:37:41:3c:65:99:13:6d:bb:8a:09:85:a0:48:14:c8: 2c:83:f2:17:8a:d9:95:6d:f1:c5:3a:b3:b5:29:a8:99:34:ab: 8c:bd:ea:8b:36:f9:66:e1:6e:d2:20:1a:de:13:ef:bf:81:44: 91:6a:fc:45:f4:d7:db:59:1e:f0:78:0f:3b:35:74:99:d5:3e: ba:69:03:89:47:59:a4:cf:b6:09:ca:7b:5e:22:be:91:d3:4f: 2c:d6:a0:7c:3c:70:11:8d:8d:37:0f:5e:5f:41:41:7b:60:71: 7d:d7:9c:ab:59:c3:3a:34:19:62:22:c0:09:b0:69:f4:c5:18: c5:e6:a8:c7:49:d7:55:6c:92:5a:d9:6e:52:13:a2:ae:47:12: 03:18:4f:bd:1a:0b:be:a1:7a:26:f1:bb:2f:bf:f2:c8:8b:46: ac:63:73:56:33:91:c1:17:d9:1b:88:b1:00:a2:90:8d:55:b9: 14:c8:6a:29:07:aa:a4:8b:68:25:6f:30:ee:fb:f6:3a:bb:98: 34:0d:4b:0f:12:0b:b5:4c:d9:24:46:58:73:06:c5:c9:bf:83: 90:ec:1d:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1o5HlTVfT7+MSkUO1Rv8oFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNDA3MTcwMTM2WhcNMjYwNDA4MTcwMTM2WjAzMTEwLwYDVQQD Eyg5ZGIxMjgwNGNmYjY3NGFlY2RkYTEwMTZhMmRjYWJjODIyYTYwOWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtliLKKgWqFtCgndJ88mUtqZ7L09x 8N4+38YPB74h5cXWaPJ4WJU4XyJB5542A7Z4SAHTAigGzFcyjUDThHroiLSSw6uO o42SjZ7fTbkOn7mw401DEFDlxoBIn5tAA0GSQMERBD7tjnP33MwWwFYBbT90tnsX B894vqgb1T95TWxAg7U4tHxEseZBFLR0ESjDKhWxmcEEcpCHPCBGdQaH4dzGl7u9 r+H4Znx9pdqKITkKTt9F2oZsRpa73ZMuFbwMketZa6qFn189rQSgHggQsz/NQy5X zp+Fb2VGmHdDjmXrIoAe0Xfw55cWIwJ2Vm08XEwIOFjzStVlMPIl3h728QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2xKATPtnSuzdoQFqLcq8gipgnbMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzfflvW1f smaT6JKIONWsU541Rp4Pkz2l3D306cWbQQEtpjXg5P6yN0E8ZZkTbbuKCYWgSBTI LIPyF4rZlW3xxTqztSmomTSrjL3qizb5ZuFu0iAa3hPvv4FEkWr8RfTX21ke8HgP OzV0mdU+umkDiUdZpM+2Ccp7XiK+kdNPLNagfDxwEY2NNw9eX0FBe2Bxfdecq1nD OjQZYiLACbBp9MUYxeaox0nXVWySWtluUhOirkcSAxhPvRoLvqF6JvG7L7/yyItG rGNzVjORwRfZG4ixAKKQjVW5FMhqKQeqpItoJW8w7vv2OruYNA1LDxILtUzZJEZY cwbFyb+DkOwdOA== -----END CERTIFICATE-----Generated at Wed Apr 8 03:39:15 2026 by rpki-client