$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: rFh12r6DaBMFY6KuP09HR/J74RLnenhoxw0ynEjPZZ4= Subject key identifier: B7:93:45:38:74:22:F3:05:36:2C:C8:24:5E:00:1E:97:FD:55:2B:78 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 01A01B65C6C4105DFDE5D0CA0AF50CFA8B05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 1749 Signing time: Wed 19 Aug 2026 19:00:49 +0000 Manifest this update: Wed 19 Aug 2026 19:00:49 +0000 Manifest next update: Thu 20 Aug 2026 19:00:49 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: QF2fHGxnpBEY4Txu6EM8UCTjHQN3CFVD2gmIXT+ZL10=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Aug 2026 13:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:1b:65:c6:c4:10:5d:fd:e5:d0:ca:0a:f5:0c:fa:8b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Aug 19 19:00:49 2026 GMT Not After : Aug 20 19:00:49 2026 GMT Subject: CN=b79345387422f305362cc8245e001e97fd552b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:42:2e:c3:80:e3:7d:97:af:af:95:3c:1c: f5:c3:f2:7c:12:1b:e0:19:d9:a1:c5:7c:a3:31:23: ac:5a:dc:64:a3:0c:bb:29:81:1f:6f:7a:be:86:b2: 3b:df:8f:41:90:ca:e5:59:22:d0:b4:50:16:a6:e2: 5e:ea:7a:7e:71:8e:5a:a9:68:54:8c:d1:51:01:89: 22:69:2c:c3:e5:5b:3a:94:eb:53:0d:bb:ce:a3:d3: 23:d2:82:a4:2a:29:4c:4f:f3:2d:bb:40:46:fc:51: 75:0a:ba:a4:a9:68:9b:11:af:33:a1:e5:4c:7e:ff: 67:6d:86:08:93:ba:c9:b6:ca:4a:39:7d:49:81:6c: d9:21:2c:d6:3b:d8:7d:15:9e:c9:e2:64:81:f5:9a: be:34:87:fd:b2:24:41:e5:36:8a:ec:cb:fd:fe:7c: e0:e5:67:cb:0c:4d:46:9c:a6:fc:f3:ae:ed:79:37: 6c:ae:49:e5:b6:cd:c0:db:9b:86:e5:29:0d:e2:71: 0f:cc:4c:55:93:d9:ba:a6:63:4d:27:bb:99:7a:fb: e1:05:00:35:d2:8f:ba:28:5f:e8:cd:a9:09:5a:b4: 66:f6:a0:33:a7:07:20:ab:22:31:61:d5:3f:02:cb: 4c:48:38:90:16:ab:24:f5:e7:0e:0a:5a:d4:cc:e1: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:93:45:38:74:22:F3:05:36:2C:C8:24:5E:00:1E:97:FD:55:2B:78 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:36:ef:c2:d3:f5:71:30:62:a1:21:e8:59:c4:a3:ee:0c:d0: 97:c2:43:2e:10:31:df:30:c9:a2:b5:24:0e:2c:9d:b0:c2:db: a7:43:b1:20:4b:cd:37:fc:f2:8c:10:b2:a6:1b:6b:6f:73:71: 26:85:5e:1a:44:85:3c:b5:03:c5:4d:c3:d0:9d:30:1f:c2:38: 69:83:a6:a2:3d:12:21:32:79:d3:5e:ef:b9:8d:bd:68:e8:66: 1e:8a:41:68:01:1e:48:81:dc:26:48:dc:1a:af:59:d0:6b:14: 7c:9b:ff:ab:ff:1d:0a:2c:48:cf:cf:75:4c:f3:d6:47:ae:53: ee:57:95:b9:1f:9c:6e:ce:ff:50:f2:10:a3:71:d3:1a:77:8f: 77:c1:45:f4:7d:f4:4d:00:95:92:de:6d:a0:cf:eb:e4:65:ee: e0:39:b9:99:d8:1c:9d:d3:a2:71:5a:6c:6b:74:3e:45:1b:f0: 32:95:99:35:67:01:55:ef:58:51:23:02:eb:28:91:8b:50:2a: 07:43:ce:f9:b4:ce:ce:66:c1:7e:33:03:74:69:d0:95:dd:f9: 86:5a:f4:65:3d:2c:70:3d:9a:0d:f4:6d:29:8d:96:b9:2c:b7: 17:e7:25:6c:aa:b5:75:8f:30:c3:7b:e1:b4:8b:cd:8e:70:7d: 9c:29:4f:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAbZcbEEF395dDKCvUM+osFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwODE5MTkwMDQ5WhcNMjYwODIwMTkwMDQ5WjAzMTEwLwYDVQQD EyhiNzkzNDUzODc0MjJmMzA1MzYyY2M4MjQ1ZTAwMWU5N2ZkNTUyYjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+RCLsOA432Xr6+VPBz1w/J8Ehvg GdmhxXyjMSOsWtxkowy7KYEfb3q+hrI7349BkMrlWSLQtFAWpuJe6np+cY5aqWhU jNFRAYkiaSzD5Vs6lOtTDbvOo9Mj0oKkKilMT/Mtu0BG/FF1CrqkqWibEa8zoeVM fv9nbYYIk7rJtspKOX1JgWzZISzWO9h9FZ7J4mSB9Zq+NIf9siRB5TaK7Mv9/nzg 5WfLDE1GnKb8867teTdsrknlts3A25uG5SkN4nEPzExVk9m6pmNNJ7uZevvhBQA1 0o+6KF/ozakJWrRm9qAzpwcgqyIxYdU/AstMSDiQFqsk9ecOClrUzOFeqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLeTRTh0IvMFNizIJF4AHpf9VSt4MB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDbvwtP1 cTBioSHoWcSj7gzQl8JDLhAx3zDJorUkDiydsMLbp0OxIEvNN/zyjBCyphtrb3Nx JoVeGkSFPLUDxU3D0J0wH8I4aYOmoj0SITJ5017vuY29aOhmHopBaAEeSIHcJkjc Gq9Z0GsUfJv/q/8dCixIz891TPPWR65T7leVuR+cbs7/UPIQo3HTGnePd8FF9H30 TQCVkt5toM/r5GXu4Dm5mdgcndOicVpsa3Q+RRvwMpWZNWcBVe9YUSMC6yiRi1Aq B0PO+bTOzmbBfjMDdGnQld35hlr0ZT0scD2aDfRtKY2WuSy3F+clbKq1dY8ww3vh tIvNjnB9nClPpw== -----END CERTIFICATE-----Generated at Wed Aug 19 21:39:47 2026 by rpki-client