
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: Qo3PElLMr7e0liqwnCGP8XI+rR6TZAliRU96IMgj4JI=
Subject key identifier: 8C:92:34:3C:CA:A0:3C:DB:93:9E:B4:00:3D:19:F5:B2:AD:AA:A6:75
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019DCF3E1245675019ECA0A59C1CFA1A1F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 15E1
Signing time: Mon 27 Apr 2026 14:00:44 +0000
Manifest this update: Mon 27 Apr 2026 14:00:44 +0000
Manifest next update: Tue 28 Apr 2026 14:00:44 +0000
Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: gaGjiw3u9CczW5wn32HEFQ31yBzTcxlYznG6OmvJE10=)
13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=)
18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:12:45:67:50:19:ec:a0:a5:9c:1c:fa:1a:1f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 27 14:00:44 2026 GMT
Not After : Apr 28 14:00:44 2026 GMT
Subject: CN=8c92343ccaa03cdb939eb4003d19f5b2adaaa675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:a7:13:9d:17:8c:e7:aa:91:74:d5:7b:5e:
69:e3:05:11:6d:93:b7:d3:57:d9:4a:b5:73:00:c7:
69:3e:50:72:6a:51:52:6f:5f:aa:59:c6:96:91:a1:
3f:aa:78:ca:01:ce:f3:f5:51:8e:59:6d:4a:7e:45:
b1:9f:57:c7:b6:c0:de:0e:43:20:f3:ce:b1:b5:95:
7b:a6:30:d0:87:01:4e:cc:a7:49:95:a4:43:d7:64:
e3:74:5b:8b:b9:ff:c8:9f:4b:9d:e1:c3:19:c2:47:
8c:10:b4:9e:4b:a7:0b:1c:f0:21:7f:ac:64:e8:07:
45:60:59:2a:a8:28:7e:68:30:47:c8:9c:87:8d:74:
97:5d:6f:de:9e:bd:6b:d1:ae:53:c2:c7:97:b3:8f:
d5:7d:62:b9:53:18:1a:eb:10:e1:7e:12:a3:90:d5:
79:fc:75:1f:9c:a6:00:4b:4f:c6:4a:cc:a7:31:3d:
90:61:6a:c6:a4:f1:ba:7e:44:fc:37:10:e6:b0:24:
51:52:8d:6e:6a:3c:1c:48:89:e8:d1:0e:bd:b7:4d:
ed:f5:30:6b:e9:f9:81:a4:4b:91:76:b8:0c:33:cf:
04:e7:12:e3:50:41:69:2c:bf:af:93:6c:2d:d0:4d:
4b:97:52:c3:47:78:16:fa:b9:17:52:e6:f4:b2:53:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:92:34:3C:CA:A0:3C:DB:93:9E:B4:00:3D:19:F5:B2:AD:AA:A6:75
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:33:97:2b:5a:e8:68:fb:be:75:d4:0d:9b:13:db:bd:37:eb:
4d:93:c7:38:d9:22:9a:9b:82:1d:27:b2:82:f3:10:50:1b:f5:
8b:10:a9:c4:50:0b:62:34:96:4d:7c:df:37:b8:86:16:7a:c6:
77:fd:57:6b:ad:15:2c:a4:98:4b:f2:b2:17:90:bf:23:8c:df:
dc:05:71:26:5f:dd:69:08:34:c1:5c:50:48:13:37:ef:ec:66:
9a:a8:ce:65:ab:c9:ab:85:27:fc:76:f5:aa:31:fb:99:c5:1f:
a5:8e:6b:f7:c1:b9:10:58:40:bf:5f:6f:8b:52:9c:59:f6:36:
06:d8:ca:98:df:a5:c6:d5:8a:e1:b7:f6:3c:e2:71:69:7f:6f:
9f:27:07:36:c6:ce:c6:76:f4:04:f5:a0:04:9d:60:5b:cd:51:
c6:b2:f0:e3:75:60:4b:53:7d:94:21:66:d0:7b:2f:b4:9e:ca:
a6:77:50:8f:c9:78:df:8c:0c:ea:cb:ac:e1:35:76:7e:db:20:
fc:7c:61:6f:bd:6a:9b:0a:22:b9:ca:3c:1b:7b:02:11:67:5c:
d4:0b:f7:36:ce:b9:6f:ca:92:e1:aa:43:1f:f0:80:b7:99:3a:
d6:42:35:aa:43:41:c7:c0:aa:46:4e:be:ce:bf:36:68:01:e0:
f4:9b:85:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PPhJFZ1AZ7KClnBz6Gh8NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYwNDI3MTQwMDQ0WhcNMjYwNDI4MTQwMDQ0WjAzMTEwLwYDVQQD
Eyg4YzkyMzQzY2NhYTAzY2RiOTM5ZWI0MDAzZDE5ZjViMmFkYWFhNjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHWnE50XjOeqkXTVe15p4wURbZO3
01fZSrVzAMdpPlByalFSb1+qWcaWkaE/qnjKAc7z9VGOWW1KfkWxn1fHtsDeDkMg
886xtZV7pjDQhwFOzKdJlaRD12TjdFuLuf/In0ud4cMZwkeMELSeS6cLHPAhf6xk
6AdFYFkqqCh+aDBHyJyHjXSXXW/enr1r0a5TwseXs4/VfWK5Uxga6xDhfhKjkNV5
/HUfnKYAS0/GSsynMT2QYWrGpPG6fkT8NxDmsCRRUo1uajwcSIno0Q69t03t9TBr
6fmBpEuRdrgMM88E5xLjUEFpLL+vk2wt0E1Ll1LDR3gW+rkXUub0slMS0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIySNDzKoDzbk560AD0Z9bKtqqZ1MB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTOXK1ro
aPu+ddQNmxPbvTfrTZPHONkimpuCHSeygvMQUBv1ixCpxFALYjSWTXzfN7iGFnrG
d/1Xa60VLKSYS/KyF5C/I4zf3AVxJl/daQg0wVxQSBM37+xmmqjOZavJq4Un/Hb1
qjH7mcUfpY5r98G5EFhAv19vi1KcWfY2BtjKmN+lxtWK4bf2POJxaX9vnycHNsbO
xnb0BPWgBJ1gW81RxrLw43VgS1N9lCFm0HsvtJ7KpndQj8l434wM6sus4TV2ftsg
/Hxhb71qmwoiuco8G3sCEWdc1Av3Ns65b8qS4apDH/CAt5k61kI1qkNBx8CqRk6+
zr82aAHg9JuF+w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 20:43:12 2026 by rpki-client