$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: qqVqWJCXoGIYA57U2GN1vUqFdF/krBHgpQFSmHMpQiI= Subject key identifier: 02:85:E7:0B:1C:56:F0:85:81:31:99:1E:19:9C:9E:3F:1B:E8:D6:7F Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 01A11485B1564DFBCBC869F311D582D51DA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 17CA Signing time: Wed 07 Oct 2026 04:01:08 +0000 Manifest this update: Wed 07 Oct 2026 04:01:08 +0000 Manifest next update: Thu 08 Oct 2026 04:01:08 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: gTewcSk1t4X6lrpBxd2TpvPzSBrAMDpBkJSzPBhEDMc=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 22:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:14:85:b1:56:4d:fb:cb:c8:69:f3:11:d5:82:d5:1d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Oct 7 04:01:08 2026 GMT Not After : Oct 8 04:01:08 2026 GMT Subject: CN=0285e70b1c56f0858131991e199c9e3f1be8d67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:35:ee:37:0a:22:4c:cf:63:f6:57:b8:1f:5d: 26:ac:e7:e4:25:03:1e:6a:a7:58:dc:32:33:19:2b: f0:f7:47:d0:6d:5d:e1:be:df:dc:27:d3:a4:d8:6b: 8c:18:4c:16:de:3c:c3:3f:de:c0:1c:81:22:50:18: 09:58:87:35:3d:33:58:bf:a3:e3:77:c4:4e:75:97: a7:4e:6a:1a:01:42:51:27:9a:07:15:11:e2:1c:77: 3b:75:a5:14:d4:3d:5d:75:60:97:9d:97:99:06:97: d0:9c:e3:eb:d4:ca:05:b6:54:c4:42:5f:a4:52:3e: c8:8c:cd:e5:b6:9d:36:3d:e3:61:02:a0:c5:ab:f1: 52:b6:59:c9:06:cb:ec:04:74:e8:fd:07:8b:c6:b7: 69:a5:ba:5c:d4:66:6d:04:e0:fe:fd:95:3e:97:04: 74:ed:b4:cd:85:55:34:c7:d2:9f:a4:31:dc:2f:ee: 21:83:5e:66:cd:49:12:e0:aa:76:1e:6b:1f:82:0b: 70:ea:98:87:a2:12:75:c6:64:67:d6:87:64:64:b4: 1a:ae:a1:9f:cf:4f:34:25:33:d9:8d:b6:18:dd:09: 68:48:b4:b5:7b:f6:3b:3c:25:3c:e6:20:ce:47:bb: 05:8e:71:62:d4:c3:00:b4:59:3c:91:85:25:ea:fd: 75:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:85:E7:0B:1C:56:F0:85:81:31:99:1E:19:9C:9E:3F:1B:E8:D6:7F X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:44:3a:72:c5:06:b7:25:16:dd:da:ba:59:02:36:4d:83:6d: 2b:1e:e7:50:ac:e9:b0:57:1e:95:13:84:6b:d7:c7:a7:83:1a: 1d:c7:0e:e0:0e:41:77:b7:3c:cf:29:e6:0e:f5:11:85:86:21: af:61:26:3c:80:a8:08:a0:1f:4d:12:f1:97:1c:dd:93:1b:3c: f3:32:98:42:de:2d:d6:66:67:14:8a:14:51:84:20:55:0a:67: 0e:76:51:57:6c:62:da:f3:17:01:84:d7:24:6d:de:ed:12:be: 52:6c:d4:19:72:2c:be:e9:f3:8a:56:c2:44:8c:a8:e2:bf:8d: 21:5e:04:12:3e:c5:e1:03:50:79:e8:42:d4:87:c3:cd:d1:36: b1:e0:92:dd:51:bf:3c:ba:30:56:34:55:50:43:1b:81:94:43: 78:b6:43:10:88:28:f8:46:b0:b6:ee:75:ca:f1:08:f2:9e:a7: be:af:99:2c:4a:7b:b0:05:f0:7f:2b:38:0e:c3:52:85:5e:d0: ac:02:a4:d3:e7:94:6a:50:22:26:89:70:ae:75:73:15:b3:9e: 9b:a9:30:a2:7b:f1:92:22:25:51:85:39:67:79:d9:20:45:3e: 04:9f:da:85:59:d0:68:eb:17:3b:9c:57:a0:51:35:fc:8c:d7: a4:17:b2:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEUhbFWTfvLyGnzEdWC1R2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYxMDA3MDQwMTA4WhcNMjYxMDA4MDQwMTA4WjAzMTEwLwYDVQQD EygwMjg1ZTcwYjFjNTZmMDg1ODEzMTk5MWUxOTljOWUzZjFiZThkNjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jXuNwoiTM9j9le4H10mrOfkJQMe aqdY3DIzGSvw90fQbV3hvt/cJ9Ok2GuMGEwW3jzDP97AHIEiUBgJWIc1PTNYv6Pj d8ROdZenTmoaAUJRJ5oHFRHiHHc7daUU1D1ddWCXnZeZBpfQnOPr1MoFtlTEQl+k Uj7IjM3ltp02PeNhAqDFq/FStlnJBsvsBHTo/QeLxrdppbpc1GZtBOD+/ZU+lwR0 7bTNhVU0x9KfpDHcL+4hg15mzUkS4Kp2Hmsfggtw6piHohJ1xmRn1odkZLQarqGf z080JTPZjbYY3QloSLS1e/Y7PCU85iDOR7sFjnFi1MMAtFk8kYUl6v11lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKF5wscVvCFgTGZHhmcnj8b6NZ/MB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkQ6csUG tyUW3dq6WQI2TYNtKx7nUKzpsFcelROEa9fHp4MaHccO4A5Bd7c8zynmDvURhYYh r2EmPICoCKAfTRLxlxzdkxs88zKYQt4t1mZnFIoUUYQgVQpnDnZRV2xi2vMXAYTX JG3e7RK+UmzUGXIsvunzilbCRIyo4r+NIV4EEj7F4QNQeehC1IfDzdE2seCS3VG/ PLowVjRVUEMbgZRDeLZDEIgo+Eawtu51yvEI8p6nvq+ZLEp7sAXwfys4DsNShV7Q rAKk0+eUalAiJolwrnVzFbOem6kwonvxkiIlUYU5Z3nZIEU+BJ/ahVnQaOsXO5xX oFE1/IzXpBeyvw== -----END CERTIFICATE-----Generated at Wed Oct 7 06:21:00 2026 by rpki-client