$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: TQyOVxBGrlNlRVPcvXA1CzOliHRE1ezp232162ifbAs= Subject key identifier: 06:6C:77:B2:9D:FA:11:F7:56:2E:98:EF:D4:14:F3:76:97:9F:6F:9F Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019D480FA619855816E90FDAA3AF1FBFBF85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 159B Signing time: Wed 01 Apr 2026 08:01:18 +0000 Manifest this update: Wed 01 Apr 2026 08:01:18 +0000 Manifest next update: Thu 02 Apr 2026 08:01:18 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: emmB/nNOGU+L3vexdFzvZQAKjMHpQuRmSwjpPIOUNeg=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 Apr 2026 08:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:48:0f:a6:19:85:58:16:e9:0f:da:a3:af:1f:bf:bf:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Apr 1 08:01:18 2026 GMT Not After : Apr 2 08:01:18 2026 GMT Subject: CN=066c77b29dfa11f7562e98efd414f376979f6f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b2:9a:15:02:06:e6:35:ac:1b:f5:66:42:4f: 83:c3:0d:9f:31:c5:03:d8:97:2c:3b:9a:ed:f4:b1: 6f:f5:e5:aa:06:d6:0f:48:1c:d7:6e:8f:1e:8b:65: c2:2f:78:4f:59:e4:56:64:0f:ef:6b:1d:90:8c:da: 68:ec:f9:84:54:71:33:1a:4d:0a:f2:00:a4:0b:88: be:5d:c6:1d:b5:e7:53:f2:8c:04:08:53:6e:d0:9c: 71:73:4a:75:ad:b3:9f:b8:a9:2d:1a:5d:85:a9:c7: 62:66:72:e7:b5:54:05:ca:a0:89:e1:83:ce:f0:68: 00:78:4c:b1:43:30:e5:18:52:7d:57:78:6a:54:00: 90:b3:23:d1:ff:38:2d:2a:3c:e7:6f:2a:24:ea:fa: 50:4f:c6:a7:bb:60:5b:55:42:db:6a:ce:c8:d1:6f: e7:19:f6:7b:85:a1:59:9a:ef:93:a5:b9:2d:10:3c: 82:9c:ec:e5:54:5f:b1:50:12:7d:30:53:6c:ad:c6: 38:7b:db:9e:a8:46:94:82:5b:d8:6a:d9:c8:c6:06: f8:fc:b9:04:10:a4:df:6d:66:7f:9e:ec:56:54:b3: a2:3c:d1:01:0e:72:c5:23:e9:11:81:ce:e8:a7:59: 51:49:0a:10:ad:5e:11:bf:98:71:91:9f:29:8f:08: 05:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6C:77:B2:9D:FA:11:F7:56:2E:98:EF:D4:14:F3:76:97:9F:6F:9F X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f1:34:9f:ff:b6:34:fb:bd:c3:5a:90:a5:80:ed:36:76:17: cd:bf:35:9f:b4:bb:d8:25:f9:6a:85:f3:6c:50:56:c2:b1:0c: 46:9e:52:c8:af:df:a4:94:8b:be:4a:6b:30:d2:2c:4f:20:d7: a5:9c:0e:33:40:fc:ec:9d:43:5b:8a:08:8e:21:1b:6c:f6:65: 3c:98:d2:2d:f5:27:26:88:73:57:42:b0:0b:92:2d:c6:8d:00: 14:9a:59:84:2e:a0:cc:27:3b:ff:9e:a9:e8:69:2e:21:0a:46: 78:a2:74:2f:70:27:e8:6e:85:2c:dd:8e:41:4d:f4:5f:4c:aa: e1:13:1d:43:54:3f:8d:2c:6f:ab:e2:24:2c:84:4a:43:9c:7b: d1:d6:6c:5e:be:15:bd:97:d3:6e:1b:6c:33:f5:c1:09:de:c9: 93:fe:19:7e:27:84:fa:65:c3:ff:42:8c:1c:5f:a3:63:8e:e6: cd:30:dc:f6:a5:f0:10:74:7b:47:9f:60:6c:1a:28:fc:fa:b1: 57:c6:63:04:ca:8a:e4:55:b4:b8:fb:f1:bb:6c:da:33:16:89: 0c:9f:ef:07:3e:60:55:60:ec:b8:3c:b5:e2:b5:d5:55:bc:b7: bb:93:e7:65:93:42:77:db:cc:16:da:23:4d:29:5a:64:5f:a3: b9:ab:90:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ1ID6YZhVgW6Q/ao68fv7+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNDAxMDgwMTE4WhcNMjYwNDAyMDgwMTE4WjAzMTEwLwYDVQQD EygwNjZjNzdiMjlkZmExMWY3NTYyZTk4ZWZkNDE0ZjM3Njk3OWY2ZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rKaFQIG5jWsG/VmQk+Dww2fMcUD 2JcsO5rt9LFv9eWqBtYPSBzXbo8ei2XCL3hPWeRWZA/vax2QjNpo7PmEVHEzGk0K 8gCkC4i+XcYdtedT8owECFNu0Jxxc0p1rbOfuKktGl2FqcdiZnLntVQFyqCJ4YPO 8GgAeEyxQzDlGFJ9V3hqVACQsyPR/zgtKjznbyok6vpQT8anu2BbVULbas7I0W/n GfZ7haFZmu+TpbktEDyCnOzlVF+xUBJ9MFNsrcY4e9ueqEaUglvYatnIxgb4/LkE EKTfbWZ/nuxWVLOiPNEBDnLFI+kRgc7op1lRSQoQrV4Rv5hxkZ8pjwgFwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZsd7Kd+hH3Vi6Y79QU83aXn2+fMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPE0n/+2 NPu9w1qQpYDtNnYXzb81n7S72CX5aoXzbFBWwrEMRp5SyK/fpJSLvkprMNIsTyDX pZwOM0D87J1DW4oIjiEbbPZlPJjSLfUnJohzV0KwC5Itxo0AFJpZhC6gzCc7/56p 6GkuIQpGeKJ0L3An6G6FLN2OQU30X0yq4RMdQ1Q/jSxvq+IkLIRKQ5x70dZsXr4V vZfTbhtsM/XBCd7Jk/4ZfieE+mXD/0KMHF+jY47mzTDc9qXwEHR7R59gbBoo/Pqx V8ZjBMqK5FW0uPvxu2zaMxaJDJ/vBz5gVWDsuDy14rXVVby3u5PnZZNCd9vMFtoj TSlaZF+juauQyw== -----END CERTIFICATE-----Generated at Wed Apr 1 19:24:28 2026 by rpki-client