$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: vEy+egcs8rZ1EzWowxTI5wD6vAlCrASUj7ZIJfb9pDA= Subject key identifier: A6:A0:A8:E6:02:CE:58:66:CC:58:8C:D8:86:7B:43:D5:57:59:92:3E Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019D39AF93FD3B9A9EE035468AB4EAA450AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 15CB Signing time: Sun 29 Mar 2026 13:01:41 +0000 Manifest this update: Sun 29 Mar 2026 13:01:41 +0000 Manifest next update: Mon 30 Mar 2026 13:01:41 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: 2AS9xtUPGZPO6JeYV6EwJ6Jt7AZJpNpFk8I7Rlsgst8=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:39:af:93:fd:3b:9a:9e:e0:35:46:8a:b4:ea:a4:50:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Mar 29 13:01:41 2026 GMT Not After : Mar 30 13:01:41 2026 GMT Subject: CN=a6a0a8e602ce5866cc588cd8867b43d55759923e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:50:0d:85:51:af:6d:5e:8d:ff:84:54:5f: 18:b7:ad:75:00:f0:d7:10:d2:8e:74:b3:4c:b9:f0: f3:b3:af:64:6e:ef:9a:18:98:6e:98:4e:1b:ef:f5: da:0e:2d:31:07:ea:75:9f:e6:de:c1:b3:79:43:21: 1e:45:67:4a:d0:ca:9a:c8:86:45:9f:86:3b:92:f3: 19:14:aa:8a:d0:8a:89:6f:dd:2b:91:6a:be:cd:fc: 94:fd:f5:a7:33:5c:af:9d:9c:66:96:8b:0b:c6:f7: 89:29:e2:da:43:21:85:bb:18:e3:36:9f:3d:86:9d: c7:0f:7b:c3:9b:ec:53:90:b4:ce:fe:d6:6b:7b:e7: f6:6e:fc:5f:f6:99:da:fe:22:66:60:8d:61:11:30: 2d:70:8f:f8:61:95:66:68:e4:55:a4:a7:d7:f5:5b: 28:4c:6a:05:3f:9b:d9:b1:8e:54:7c:c6:52:c8:cf: 83:29:d5:40:be:02:8b:f7:a5:da:d4:13:d2:5a:41: 8a:3f:10:06:03:87:6e:9b:ad:a1:21:15:67:8d:d9: 33:b5:f7:07:57:20:43:1c:b6:db:6a:33:e7:e4:83: 83:39:38:34:f7:90:7d:48:e1:2f:14:a8:44:3b:bc: af:ab:95:9a:13:50:57:e2:1d:f3:ac:74:ca:fd:60: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A0:A8:E6:02:CE:58:66:CC:58:8C:D8:86:7B:43:D5:57:59:92:3E X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:01:12:b9:07:3a:89:85:da:ba:5a:0c:94:59:6e:38:da:75: 0c:7b:6d:78:a1:80:59:dc:93:07:f7:07:eb:0b:8b:5a:8d:f8: f6:9e:d2:b6:cc:cb:4f:5a:e9:7a:fc:df:17:2a:b9:44:af:08: dd:f2:5b:ce:51:e4:59:24:8e:03:db:2b:4a:1e:36:72:ff:ac: 8a:a3:9c:02:55:3d:28:e6:a7:d0:00:6a:ff:68:39:7c:d1:29: 2f:f3:39:44:70:bb:dd:5d:3e:78:69:2c:7f:89:70:18:19:96: 83:43:91:34:36:37:04:f7:ba:e2:87:35:dd:77:1d:40:c5:78: b4:74:28:a4:10:ea:79:96:4a:64:fd:07:93:1b:8e:d3:81:a2: 1e:f4:fd:85:34:5a:5d:2e:f1:0e:0f:b3:b1:10:d0:a4:bf:8d: 79:34:c9:bf:c5:fd:e6:8d:8f:3b:e8:67:35:9c:46:25:5f:7e: d4:4c:3b:7a:76:3b:75:95:80:42:4d:94:0c:9c:06:4b:b5:15: c9:e9:e4:ee:2f:a2:9c:ae:9a:cf:9a:13:84:ee:2c:f9:4e:dd: a5:03:d3:de:62:67:16:b9:d9:bd:87:fa:48:c4:95:44:31:1e: 94:fb:06:77:5d:d2:18:44:f2:23:5a:68:e1:11:a0:d6:1e:57: 3b:9d:69:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ05r5P9O5qe4DVGirTqpFCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwMzI5MTMwMTQxWhcNMjYwMzMwMTMwMTQxWjAzMTEwLwYDVQQD EyhhNmEwYThlNjAyY2U1ODY2Y2M1ODhjZDg4NjdiNDNkNTU3NTk5MjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaRQDYVRr21ejf+EVF8Yt611APDX ENKOdLNMufDzs69kbu+aGJhumE4b7/XaDi0xB+p1n+bewbN5QyEeRWdK0MqayIZF n4Y7kvMZFKqK0IqJb90rkWq+zfyU/fWnM1yvnZxmlosLxveJKeLaQyGFuxjjNp89 hp3HD3vDm+xTkLTO/tZre+f2bvxf9pna/iJmYI1hETAtcI/4YZVmaORVpKfX9Vso TGoFP5vZsY5UfMZSyM+DKdVAvgKL96Xa1BPSWkGKPxAGA4dum62hIRVnjdkztfcH VyBDHLbbajPn5IODOTg095B9SOEvFKhEO7yvq5WaE1BX4h3zrHTK/WAx3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKagqOYCzlhmzFiM2IZ7Q9VXWZI+MB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgESuQc6 iYXauloMlFluONp1DHtteKGAWdyTB/cH6wuLWo349p7StszLT1rpevzfFyq5RK8I 3fJbzlHkWSSOA9srSh42cv+siqOcAlU9KOan0ABq/2g5fNEpL/M5RHC73V0+eGks f4lwGBmWg0ORNDY3BPe64oc13XcdQMV4tHQopBDqeZZKZP0HkxuO04GiHvT9hTRa XS7xDg+zsRDQpL+NeTTJv8X95o2PO+hnNZxGJV9+1Ew7enY7dZWAQk2UDJwGS7UV yenk7i+inK6az5oThO4s+U7dpQPT3mJnFrnZvYf6SMSVRDEelPsGd13SGETyI1po 4RGg1h5XO51puw== -----END CERTIFICATE-----Generated at Sun Mar 29 16:58:33 2026 by rpki-client