$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: 2T4av23kIMpk9xvctKVzbu8NUWO2TzeMkJz5PF4e8f8= Subject key identifier: 2A:C1:BF:86:DE:F7:49:69:7C:74:ED:95:0F:B8:AE:58:EB:16:72:F2 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019E2D03FC1F406D6A4D2A005097C574D451 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 1649 Signing time: Fri 15 May 2026 19:01:36 +0000 Manifest this update: Fri 15 May 2026 19:01:36 +0000 Manifest next update: Sat 16 May 2026 19:01:36 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: 1ljCrwiHbDIdaA42OgueAPMxrAJC9fkf5aCssVH0WDM=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:2d:03:fc:1f:40:6d:6a:4d:2a:00:50:97:c5:74:d4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: May 15 19:01:36 2026 GMT Not After : May 16 19:01:36 2026 GMT Subject: CN=2ac1bf86def749697c74ed950fb8ae58eb1672f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:cd:c3:56:ab:fc:26:6f:cc:9b:9c:73:7a: 24:be:62:69:f3:12:9e:84:72:92:97:55:a9:13:d0: 08:fb:70:b8:b7:b5:c1:07:19:ae:e7:a4:4e:b8:3c: b9:09:2e:27:51:2f:b1:6a:40:32:cd:78:1c:99:27: b5:e9:14:44:1e:61:61:b8:53:48:c9:f1:f1:24:2e: 4c:eb:17:af:75:ff:f7:1c:04:bd:66:20:75:17:13: eb:be:9a:81:dd:61:3f:d9:2d:32:55:d8:b1:7d:3a: ae:b9:af:09:71:19:71:39:ce:40:2b:4c:5e:99:d9: c0:67:a4:9c:e9:77:ad:f4:18:96:c7:7c:8d:c3:72: f6:53:b6:77:ea:38:d3:aa:de:11:d0:fe:00:de:c5: ec:62:3a:18:91:6d:d5:e8:59:7e:a3:ac:54:30:16: 41:71:99:c4:35:4e:47:d6:a4:02:98:2d:35:2a:8b: 3f:f2:c0:8f:75:2c:d4:c8:ac:9a:e5:24:3a:df:ac: be:dd:ea:9d:99:58:c6:a9:b6:5b:35:aa:d5:30:12: a1:17:30:94:63:69:ee:10:ea:d4:7b:ab:43:38:0b: 54:e3:51:13:88:16:6b:86:1f:21:a3:cf:d9:64:f6: 42:7a:ac:13:02:b7:26:44:04:13:5b:6f:4b:b7:ad: 11:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C1:BF:86:DE:F7:49:69:7C:74:ED:95:0F:B8:AE:58:EB:16:72:F2 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5c:70:97:ff:1a:ae:40:83:28:71:47:60:ae:b4:61:33:e4: 5c:cb:bb:d8:ed:10:11:ec:41:29:39:e3:14:9d:13:10:16:03: 59:31:d8:82:7a:52:2f:13:ea:93:c6:e5:92:f0:82:f1:84:de: b1:65:ca:92:05:31:bc:8b:8f:d1:5d:cc:53:ff:04:2e:66:c6: 12:0a:24:09:f1:78:0d:37:16:28:78:94:2b:ac:cb:8b:42:bc: 1e:3b:5f:ef:42:5f:e0:d9:ab:dd:cb:40:a4:d5:f3:b6:35:1b: a9:b3:94:ff:59:d4:8f:c5:c0:d3:03:83:43:e6:9e:1e:6d:eb: 78:18:cf:39:2d:78:85:1a:05:54:b9:f4:e9:b1:c0:e5:f8:3b: c3:89:47:6a:47:e5:e6:d2:bf:43:fd:70:7e:04:38:5e:e0:8e: 3a:68:17:8e:2d:6a:4b:6a:82:b6:a2:e6:aa:93:d8:09:96:11: ea:5d:b3:c4:17:1d:cb:9e:39:c0:52:8b:f1:9d:ee:e2:74:a0: 69:01:05:2b:42:86:76:8a:97:86:b5:de:78:09:f1:9f:c2:04: ea:35:5c:31:8a:64:80:24:23:3c:34:7d:a7:05:c2:a7:d4:64: c5:08:df:2b:79:ff:17:80:8c:be:81:81:5f:92:68:e1:74:59: 8f:38:5c:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4tA/wfQG1qTSoAUJfFdNRRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwNTE1MTkwMTM2WhcNMjYwNTE2MTkwMTM2WjAzMTEwLwYDVQQD EygyYWMxYmY4NmRlZjc0OTY5N2M3NGVkOTUwZmI4YWU1OGViMTY3MmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi/Nw1ar/CZvzJucc3okvmJp8xKe hHKSl1WpE9AI+3C4t7XBBxmu56ROuDy5CS4nUS+xakAyzXgcmSe16RREHmFhuFNI yfHxJC5M6xevdf/3HAS9ZiB1FxPrvpqB3WE/2S0yVdixfTquua8JcRlxOc5AK0xe mdnAZ6Sc6Xet9BiWx3yNw3L2U7Z36jjTqt4R0P4A3sXsYjoYkW3V6Fl+o6xUMBZB cZnENU5H1qQCmC01Kos/8sCPdSzUyKya5SQ636y+3eqdmVjGqbZbNarVMBKhFzCU Y2nuEOrUe6tDOAtU41ETiBZrhh8ho8/ZZPZCeqwTArcmRAQTW29Lt60RmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrBv4be90lpfHTtlQ+4rljrFnLyMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlxwl/8a rkCDKHFHYK60YTPkXMu72O0QEexBKTnjFJ0TEBYDWTHYgnpSLxPqk8blkvCC8YTe sWXKkgUxvIuP0V3MU/8ELmbGEgokCfF4DTcWKHiUK6zLi0K8Hjtf70Jf4Nmr3ctA pNXztjUbqbOU/1nUj8XA0wODQ+aeHm3reBjPOS14hRoFVLn06bHA5fg7w4lHakfl 5tK/Q/1wfgQ4XuCOOmgXji1qS2qCtqLmqpPYCZYR6l2zxBcdy545wFKL8Z3u4nSg aQEFK0KGdoqXhrXeeAnxn8IE6jVcMYpkgCQjPDR9pwXCp9RkxQjfK3n/F4CMvoGB X5Jo4XRZjzhcdQ== -----END CERTIFICATE-----Generated at Fri May 15 20:43:48 2026 by rpki-client