
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier: x+BsbT4akwAYehvCTWoILUJ3+CzgE/VeUsbet3j7eTk=
Subject key identifier: AA:AE:E0:38:0E:B9:DA:99:84:4D:0E:DC:4E:5C:32:8D:B3:30:04:67
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019C910704DFBFAC2C61728E5CAE6C318DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number: 153B
Signing time: Tue 24 Feb 2026 19:01:22 +0000
Manifest this update: Tue 24 Feb 2026 19:01:22 +0000
Manifest next update: Wed 25 Feb 2026 19:01:22 +0000
Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=)
2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=)
3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=)
4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=)
5: 5lQ9rixfmqRXxii30JKkmR03sr8.roa (hash: iF1NyTDi0aWK3rGC4FTsYT+Tf9o3Dfjcwz99TIaRhHY=)
6: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=)
7: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=)
8: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=)
9: E2F8QJnesLz_AJ_idudS8beXQtA.roa (hash: Du6ux9WA5KEGcJVYYMPZ9Mo1WXuEbp8iOUzzcljxT9A=)
10: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=)
11: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=)
12: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=)
13: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=)
14: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: Hf3IstnIY/l4OU7Hbl/3xCH10Rx4RdfEWSqOvALDqTc=)
15: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=)
16: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=)
17: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=)
18: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=)
19: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=)
20: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=)
21: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=)
22: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=)
23: lX5sl-Bs9YPPelSQB3cgwK9Lslw.roa (hash: mnJpBrQabQ5UZ897yJplacc4MCQhCl2/8KWX6EqeD4k=)
24: niUr6FHPmgY6CtuAz4gWdWka0MA.roa (hash: IuoDMTxSe/qrJgdwIn4nlwn1wmvo4BWmMWaqX2zRdbA=)
25: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=)
26: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=)
27: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=)
28: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Feb 2026 15:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:91:07:04:df:bf:ac:2c:61:72:8e:5c:ae:6c:31:8d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Feb 24 19:01:22 2026 GMT
Not After : Feb 25 19:01:22 2026 GMT
Subject: CN=aaaee0380eb9da99844d0edc4e5c328db3300467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:1c:33:4d:6d:35:77:ee:17:ba:d2:5d:ac:
36:63:b8:6d:7d:23:bd:d2:86:66:2d:7b:8e:c1:e2:
cb:fa:a4:42:66:9b:c6:0f:b6:c8:8c:8a:99:1c:d6:
26:fb:63:3e:12:2e:9a:98:12:30:00:57:2b:38:70:
50:c6:86:2a:31:44:67:7b:6b:95:e9:88:dc:45:8a:
af:de:c6:96:0e:96:29:e4:85:7f:da:99:3c:67:13:
9f:c1:ca:69:55:b6:ee:df:d0:b1:4e:78:11:22:e3:
cb:b9:97:18:e0:f5:7f:71:b7:40:dc:d6:b1:72:87:
46:04:a9:52:d0:0a:6d:cf:64:85:c4:00:b0:41:9a:
09:61:1f:2e:cc:9d:80:2a:a6:96:1a:d6:9b:e5:af:
4c:ad:33:ba:a2:dd:cd:ab:f4:f2:7e:6c:a5:53:0e:
e9:ab:f4:9b:ef:95:11:4c:86:56:a8:34:6e:7c:4f:
0a:c2:6a:4d:db:99:ce:8f:2a:70:7d:8b:8b:25:af:
a4:43:2c:9a:c3:d8:49:aa:b7:15:f6:fe:ab:95:03:
ad:54:3a:0a:2e:08:5d:12:90:3e:7b:62:b1:97:95:
18:9d:b3:4d:5a:38:c5:9d:92:6b:cf:9a:5a:90:2a:
52:af:99:b7:31:99:11:2f:0c:70:ea:bd:a0:c4:fc:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AE:E0:38:0E:B9:DA:99:84:4D:0E:DC:4E:5C:32:8D:B3:30:04:67
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:16:10:46:ed:66:a1:8f:65:a0:06:5d:49:60:3a:fc:f3:2b:
cd:82:78:07:6e:bf:70:a7:08:11:ff:f6:19:b0:26:9f:bb:d7:
f7:8c:36:27:20:20:68:d4:e3:05:38:a1:82:2b:ec:b0:a5:fc:
bb:9b:e6:56:5d:31:34:45:9d:6f:af:24:e0:82:22:b1:5d:8a:
f2:bf:e2:86:0c:67:0f:db:e8:50:eb:35:6e:ed:ed:89:73:91:
3c:59:d6:07:90:3d:62:8f:99:77:a8:59:37:d0:ad:50:43:c8:
79:5d:6a:5a:8c:bc:a1:75:44:60:cb:96:99:f9:de:a4:bd:5b:
eb:df:60:ab:31:70:cd:03:23:36:28:4b:b6:30:20:00:14:a7:
9a:ac:04:8f:c5:d9:fc:89:ec:62:36:f0:62:cb:89:be:42:38:
fb:d7:ae:dd:e9:be:18:34:84:28:13:f1:d7:c4:02:f1:9d:69:
dc:ea:fe:58:70:5b:4d:09:10:c9:f5:55:30:60:4c:d7:71:83:
92:2f:ac:e9:6a:70:bb:12:0b:2b:d0:c2:c7:95:4d:8c:b4:d4:
5a:9d:f4:06:cd:c1:6d:c7:6c:6c:db:2d:85:12:f8:84:3c:86:
9e:c3:05:00:9b:6f:88:39:4a:f4:4d:20:e3:4a:df:18:40:fc:
6d:01:96:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyRBwTfv6wsYXKOXK5sMY3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjYwMjI0MTkwMTIyWhcNMjYwMjI1MTkwMTIyWjAzMTEwLwYDVQQD
EyhhYWFlZTAzODBlYjlkYTk5ODQ0ZDBlZGM0ZTVjMzI4ZGIzMzAwNDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7ocM01tNXfuF7rSXaw2Y7htfSO9
0oZmLXuOweLL+qRCZpvGD7bIjIqZHNYm+2M+Ei6amBIwAFcrOHBQxoYqMURne2uV
6YjcRYqv3saWDpYp5IV/2pk8ZxOfwcppVbbu39CxTngRIuPLuZcY4PV/cbdA3Nax
codGBKlS0Aptz2SFxACwQZoJYR8uzJ2AKqaWGtab5a9MrTO6ot3Nq/TyfmylUw7p
q/Sb75URTIZWqDRufE8KwmpN25nOjypwfYuLJa+kQyyaw9hJqrcV9v6rlQOtVDoK
LghdEpA+e2Kxl5UYnbNNWjjFnZJrz5pakCpSr5m3MZkRLwxw6r2gxPwXPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqu4DgOudqZhE0O3E5cMo2zMARnMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhYQRu1m
oY9loAZdSWA6/PMrzYJ4B26/cKcIEf/2GbAmn7vX94w2JyAgaNTjBTihgivssKX8
u5vmVl0xNEWdb68k4IIisV2K8r/ihgxnD9voUOs1bu3tiXORPFnWB5A9Yo+Zd6hZ
N9CtUEPIeV1qWoy8oXVEYMuWmfnepL1b699gqzFwzQMjNihLtjAgABSnmqwEj8XZ
/InsYjbwYsuJvkI4+9eu3em+GDSEKBPx18QC8Z1p3Or+WHBbTQkQyfVVMGBM13GD
ki+s6WpwuxILK9DCx5VNjLTUWp30Bs3BbcdsbNsthRL4hDyGnsMFAJtviDlK9E0g
40rfGED8bQGW2Q==
-----END CERTIFICATE-----
Generated at Wed Feb 25 00:54:44 2026 by rpki-client