$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: l1IfxdgG5DLM0uhd+5HqGw5OWXifxPRonwlAks563gk= Subject key identifier: 5E:9E:17:4A:79:EF:DE:AE:0A:EF:21:E6:16:A6:87:35:76:29:FB:9A Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019DA2D375037FD865A9DB7E3287BC854CAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 15CA Signing time: Sat 18 Apr 2026 23:01:00 +0000 Manifest this update: Sat 18 Apr 2026 23:01:00 +0000 Manifest next update: Sun 19 Apr 2026 23:01:00 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: AUDkosfSxHGpaXThWixVus9yi0Ky3VpmzxhtJlRLdi4=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a2:d3:75:03:7f:d8:65:a9:db:7e:32:87:bc:85:4c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Apr 18 23:01:00 2026 GMT Not After : Apr 19 23:01:00 2026 GMT Subject: CN=5e9e174a79efdeae0aef21e616a687357629fb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7a:ad:49:2d:68:92:d9:8e:5f:08:2c:5d:f3: aa:55:d5:e4:9a:25:8d:86:ef:c8:2a:86:e1:ab:f5: bb:5b:16:a8:5d:54:d7:b4:53:96:14:6d:04:fb:e5: 6e:94:08:f3:69:ee:53:53:9a:9d:00:8d:1c:ec:2d: 64:07:4d:e5:a1:60:ec:50:c2:95:53:79:c2:40:6a: a2:6b:22:1b:9f:b5:2e:45:9a:aa:ed:02:72:40:1b: 01:73:40:15:e3:1e:cf:f5:86:0a:d2:2a:d2:49:a1: 12:59:85:c9:6a:61:0e:f3:b1:90:3b:43:b5:10:75: c5:59:01:66:95:69:5e:2b:10:f4:ae:74:7c:6f:57: dc:86:9f:44:1d:8e:fb:a1:38:dc:cf:12:94:b1:93: 60:3b:c2:f6:88:fe:2e:67:a2:ef:ca:90:5d:6b:66: c7:cc:a9:2c:eb:d4:c1:66:38:eb:59:2a:46:95:3b: 73:de:6b:73:f2:e9:c8:50:56:cc:d5:12:d4:a6:91: 33:c7:8c:79:f8:2d:98:c8:7b:21:d5:78:b2:23:59: 08:9b:e5:81:c2:e7:9d:33:6f:2d:13:ba:40:30:db: 63:0a:d5:14:ee:09:f6:f9:5b:93:1c:59:f2:ce:f4: 09:ea:e8:16:d3:08:5b:cb:f3:21:ed:c0:2b:e1:63: 64:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9E:17:4A:79:EF:DE:AE:0A:EF:21:E6:16:A6:87:35:76:29:FB:9A X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:37:66:21:d7:21:23:b7:a7:6a:63:28:3c:6f:d3:b6:ee:03: e5:aa:eb:a6:bf:75:42:3c:12:ce:54:35:58:ab:fc:0e:57:3a: 1e:3e:4a:d4:77:0c:7b:1e:8a:08:84:88:db:fb:35:aa:70:65: 34:60:ef:64:b1:38:c1:47:e3:57:cc:23:09:aa:61:6e:6b:70: 49:71:61:6b:3e:87:30:5a:35:08:9a:d3:ac:04:13:ef:76:db: 3d:ec:46:4e:b6:57:7d:ca:c5:73:40:82:6f:7f:d2:27:d7:d8: ea:0b:a8:aa:f3:72:79:85:1a:26:b4:13:b6:91:8f:0b:ae:8a: 94:71:3b:df:0a:4c:37:d4:57:ca:3c:ff:03:0e:7c:f4:2b:fa: 4a:8b:81:88:c2:29:87:31:3a:72:41:a9:d4:34:2b:f0:e5:62: 8b:6e:85:e6:dd:35:8d:19:db:a6:b6:9b:00:2e:e1:61:59:d5: d3:9a:f0:77:fa:9f:15:aa:bd:fb:9e:70:e3:3b:26:d6:b8:eb: bc:c8:e8:99:f2:41:0a:b9:ad:1f:40:a6:a5:b7:fa:5b:67:b5: 81:78:62:b0:dd:df:9e:00:d2:c5:7d:ba:b5:98:ef:90:bf:08: f4:bc:3f:f3:7a:4c:3d:fa:4f:03:d1:dd:4a:93:f2:49:6e:18: 01:8c:12:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2i03UDf9hlqdt+Moe8hUyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNDE4MjMwMTAwWhcNMjYwNDE5MjMwMTAwWjAzMTEwLwYDVQQD Eyg1ZTllMTc0YTc5ZWZkZWFlMGFlZjIxZTYxNmE2ODczNTc2MjlmYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XqtSS1oktmOXwgsXfOqVdXkmiWN hu/IKobhq/W7WxaoXVTXtFOWFG0E++VulAjzae5TU5qdAI0c7C1kB03loWDsUMKV U3nCQGqiayIbn7UuRZqq7QJyQBsBc0AV4x7P9YYK0irSSaESWYXJamEO87GQO0O1 EHXFWQFmlWleKxD0rnR8b1fchp9EHY77oTjczxKUsZNgO8L2iP4uZ6LvypBda2bH zKks69TBZjjrWSpGlTtz3mtz8unIUFbM1RLUppEzx4x5+C2YyHsh1XiyI1kIm+WB wuedM28tE7pAMNtjCtUU7gn2+VuTHFnyzvQJ6ugW0whby/Mh7cAr4WNkUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6eF0p5796uCu8h5hamhzV2KfuaMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzdmIdch I7enamMoPG/Ttu4D5arrpr91QjwSzlQ1WKv8Dlc6Hj5K1HcMex6KCISI2/s1qnBl NGDvZLE4wUfjV8wjCaphbmtwSXFhaz6HMFo1CJrTrAQT73bbPexGTrZXfcrFc0CC b3/SJ9fY6guoqvNyeYUaJrQTtpGPC66KlHE73wpMN9RXyjz/Aw589Cv6SouBiMIp hzE6ckGp1DQr8OVii26F5t01jRnbprabAC7hYVnV05rwd/qfFaq9+55w4zsm1rjr vMjomfJBCrmtH0Cmpbf6W2e1gXhisN3fngDSxX26tZjvkL8I9Lw/83pMPfpPA9Hd SpPySW4YAYwS2Q== -----END CERTIFICATE-----Generated at Sun Apr 19 07:55:42 2026 by rpki-client