$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: 9VBlCmVs6ujc8RWITW8I3x69lf4GfSHKh0h3B/z2EGc= Subject key identifier: E8:FF:A9:A1:1F:47:12:43:9A:91:DC:EB:10:16:9C:AD:EB:47:B5:E4 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 01A116739EDD8D7ED1DA8B9976D6707EA390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 17CB Signing time: Wed 07 Oct 2026 13:00:38 +0000 Manifest this update: Wed 07 Oct 2026 13:00:38 +0000 Manifest next update: Thu 08 Oct 2026 13:00:38 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: 2j6FkOIW9R3k68Hs/P67EKZvLxICKSYmaBYVtdYRiZM=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:16:73:9e:dd:8d:7e:d1:da:8b:99:76:d6:70:7e:a3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Oct 7 13:00:38 2026 GMT Not After : Oct 8 13:00:38 2026 GMT Subject: CN=e8ffa9a11f4712439a91dceb10169cadeb47b5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7f:e6:69:6e:54:cc:7b:03:b8:bf:9f:33:8a: 83:54:07:08:8c:7b:81:3a:62:32:6a:62:6f:e7:60: 49:f5:67:5a:88:f8:0d:07:a8:d6:80:11:ac:95:c5: 2d:29:20:fe:13:44:9b:08:ba:ec:fc:a8:ea:1f:e3: e1:6d:e5:38:e2:15:47:d8:da:2c:97:ca:e5:f5:4b: 48:ac:ee:e5:b6:70:43:03:6a:51:46:0d:51:9e:4c: eb:d3:9a:91:2d:c6:38:00:53:cd:f2:f8:27:8b:66: f7:ec:2b:bd:cf:02:ef:3f:1b:75:86:d0:46:7d:7c: 6a:d0:e3:aa:fe:30:6a:7e:c2:49:a1:37:03:50:f8: b1:47:6d:f3:79:09:56:4a:75:9c:27:54:6d:8f:62: cb:25:aa:42:df:29:e7:61:6c:1e:06:26:3b:c4:cb: eb:c5:57:39:2d:57:25:6b:ff:bf:0c:25:01:8a:f8: 23:c3:0a:70:18:0a:c6:e1:6c:de:42:fa:43:bc:b2: 2b:f0:26:1b:48:e4:ba:07:93:23:52:b7:a9:a5:bd: 04:62:94:b5:1b:9c:8b:9a:fa:26:c5:30:2f:c7:e0: 8a:66:a0:58:35:cb:8d:9f:97:04:6b:1f:64:fd:c8: 50:58:e2:56:29:c0:4b:30:33:15:4a:84:cf:9c:54: 74:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FF:A9:A1:1F:47:12:43:9A:91:DC:EB:10:16:9C:AD:EB:47:B5:E4 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:fc:d5:a9:c9:d6:17:40:1b:e2:8e:9d:09:24:a8:f2:87:0b: 72:5c:62:fa:a2:8c:1f:b1:05:5e:42:01:83:d1:1d:15:33:6e: bb:05:86:2e:7e:85:27:00:ef:36:d4:ff:26:54:0c:27:b1:02: d9:16:58:b8:ee:e6:9e:a6:e5:b2:e0:79:6d:a0:69:75:fa:92: a3:91:76:7f:c5:24:a1:87:3a:e4:b8:89:e7:13:e4:6d:35:41: f7:c3:7e:73:46:df:7b:2b:56:11:18:e3:ea:df:c5:b8:09:ff: ff:ef:1c:3d:8c:b1:3f:8b:1c:39:0b:c0:d8:66:5f:dc:f1:1c: 4b:58:64:ea:0b:dc:b6:e1:87:0a:30:3f:75:d8:dc:11:81:cb: 71:2a:98:19:ef:9e:2d:9f:79:d8:46:d2:a6:9a:f7:ab:9b:38: 3a:ea:8a:3d:e4:4b:c0:2f:ff:61:fd:d3:0a:64:a7:22:35:e4: f5:8b:cc:bc:12:e5:15:b5:ae:23:4a:19:5c:cf:2e:1e:17:ef: 03:85:16:6e:9f:d8:8a:0e:32:65:61:62:03:5e:b5:23:c6:bd: fe:21:67:51:08:e3:2f:5f:fa:a7:77:e3:e5:ec:ae:ff:e8:53: b6:4a:f1:db:b3:bc:21:24:0f:74:54:bd:91:d1:d8:18:bf:4a: bb:2b:2a:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEWc57djX7R2ouZdtZwfqOQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYxMDA3MTMwMDM4WhcNMjYxMDA4MTMwMDM4WjAzMTEwLwYDVQQD EyhlOGZmYTlhMTFmNDcxMjQzOWE5MWRjZWIxMDE2OWNhZGViNDdiNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH/maW5UzHsDuL+fM4qDVAcIjHuB OmIyamJv52BJ9WdaiPgNB6jWgBGslcUtKSD+E0SbCLrs/KjqH+PhbeU44hVH2Nos l8rl9UtIrO7ltnBDA2pRRg1Rnkzr05qRLcY4AFPN8vgni2b37Cu9zwLvPxt1htBG fXxq0OOq/jBqfsJJoTcDUPixR23zeQlWSnWcJ1Rtj2LLJapC3ynnYWweBiY7xMvr xVc5LVcla/+/DCUBivgjwwpwGArG4WzeQvpDvLIr8CYbSOS6B5MjUreppb0EYpS1 G5yLmvomxTAvx+CKZqBYNcuNn5cEax9k/chQWOJWKcBLMDMVSoTPnFR0/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOj/qaEfRxJDmpHc6xAWnK3rR7XkMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvzVqcnW F0Ab4o6dCSSo8ocLclxi+qKMH7EFXkIBg9EdFTNuuwWGLn6FJwDvNtT/JlQMJ7EC 2RZYuO7mnqblsuB5baBpdfqSo5F2f8UkoYc65LiJ5xPkbTVB98N+c0bfeytWERjj 6t/FuAn//+8cPYyxP4scOQvA2GZf3PEcS1hk6gvctuGHCjA/ddjcEYHLcSqYGe+e LZ952EbSppr3q5s4OuqKPeRLwC//Yf3TCmSnIjXk9YvMvBLlFbWuI0oZXM8uHhfv A4UWbp/Yig4yZWFiA161I8a9/iFnUQjjL1/6p3fj5eyu/+hTtkrx27O8ISQPdFS9 kdHYGL9Kuysq1w== -----END CERTIFICATE-----Generated at Wed Oct 7 19:15:54 2026 by rpki-client