$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: 8xRAvWZc96W0thTHbZPTC2uWRtr5kt0yB4w7fpAU9ss= Subject key identifier: 16:A5:1B:EA:A4:77:31:D4:4B:84:0A:76:FA:21:DC:FE:3B:80:E6:95 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 01A0404DFC35C41EACCA34E1938E9CA48B3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 1A27 Signing time: Wed 26 Aug 2026 23:00:47 +0000 Manifest this update: Wed 26 Aug 2026 23:00:47 +0000 Manifest next update: Thu 27 Aug 2026 23:00:47 +0000 Files and hashes: 1: 1ms-U7GStIQWyhBvk39Pmz4mWvA.roa (hash: lEZsZW9Tv4rbrMsSytyM2px+I6/78sknyWxeRiHKwJM=) 2: 465Kcfdz-gCkfuGZh8doO_u-oWc.roa (hash: +omro3YFQE2sJ1eByZhKP6jW3x+UZ2ptJKtI+7UVFM8=) 3: FudhY_GW4msTOukhgnBFXzVYoiM.roa (hash: 7UgC+06y5UTQvkQ9UgPJMOjARzvFFXEio5n7Jvg4z+k=) 4: HK6BNNsWSLGubaZl3upPyutswvU.roa (hash: WzFjY3CdZWeDvACOL+XKBEMBzEj0lVc25php/SCslcU=) 5: IBvfpHlo0nhBmzHxQLjSRpI2BSY.roa (hash: DAVNHApbGflPu1pSl2KrRTguzWmq2zUGW0dSw+3gnZ8=) 6: LTfWXRthcASup-DyG7vEDraK0EY.roa (hash: whp6f+y/ya/1LAvlaxCVtUimjkVrV3wXO989ASjx2UI=) 7: PUPZ5PDa_TnnNK5CKrAamkbA9qg.roa (hash: mlGNam5OVbUbnfHBcyzvj7iTYMgBLkQF8bhZoX4e0R8=) 8: XZ_A9oOFh615-GWf-jG9mLRl_BA.roa (hash: IjFd4KfJkkTKhVMOqjReLPHCLFxiAiN7OyTxurp0L6k=) 9: cqQ13TfAA2f3o1iYd5u_zHjR1og.roa (hash: PPVmtCcOrF5jhwXK7aADjsl4uaCgfyEm1Gbo+31zhCo=) 10: kCm_uKpWKjhNUczVOAQvBZ4TtMQ.roa (hash: S9J7ulFMDCXhT6uUyj2J+Qhp8QQOqTeuNdKWWsuYDSA=) 11: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: jeVAYYEFWdmjETdC71VJTVfbMA5t+pAcGJDDydkqKSc=) 12: rEIw8icF5JeHNJs8hiRgw1rRnR0.roa (hash: ZktjBhuI012cqumaMif+o0oMdONZdwewIFYAJ7bf8FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:40:4d:fc:35:c4:1e:ac:ca:34:e1:93:8e:9c:a4:8b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Aug 26 23:00:47 2026 GMT Not After : Aug 27 23:00:47 2026 GMT Subject: CN=16a51beaa47731d44b840a76fa21dcfe3b80e695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:85:8b:e4:3a:6d:f4:7e:85:ff:e2:1b:78: 58:48:80:02:52:53:e1:58:ab:e9:68:96:c9:57:22: 5a:ac:18:ac:40:62:db:5d:ea:51:f6:26:cc:6f:8b: 29:c5:6f:b8:08:7f:c1:5f:3b:eb:59:38:03:ec:29: ab:e4:aa:60:27:c5:50:68:cc:33:28:84:88:fd:bc: 21:30:38:db:40:e1:7a:fe:29:96:56:4e:ae:19:59: e7:a6:48:78:79:94:b9:40:08:fd:95:21:93:0e:66: 11:87:0c:e1:31:dd:c5:27:44:08:11:32:c4:41:1a: 55:cb:8d:d5:a0:34:7d:35:0e:10:fa:dd:fb:3a:81: 0b:d0:b9:a3:60:17:05:2b:cc:8a:7b:f1:ff:e5:ce: 55:68:16:9f:34:d9:a0:11:53:05:c2:f8:96:7e:4e: fd:36:8b:2c:a3:15:5c:db:c6:24:88:dc:72:6c:dc: 29:57:89:11:a2:a9:bf:b7:67:19:56:46:3b:63:e1: e4:20:09:7b:c9:4f:ef:d4:6d:fa:4b:3d:80:33:3c: 06:61:1c:e3:5e:1b:6e:9f:01:84:16:2c:ee:bb:68: 20:28:ea:2e:7a:a4:4f:05:63:c8:7f:c2:4c:f0:00: f1:d9:ec:de:41:22:19:bf:a5:e0:d8:d9:1d:5e:31: 75:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A5:1B:EA:A4:77:31:D4:4B:84:0A:76:FA:21:DC:FE:3B:80:E6:95 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7d:4b:e2:72:71:74:d3:f6:3b:69:28:59:20:e5:d9:5e:b4: ed:15:ba:1e:a2:c5:75:7b:bc:06:d2:88:be:d5:f1:57:3e:59: a6:c0:38:2e:b5:d6:0e:d3:a3:0c:50:1a:09:5e:04:c3:89:a6: f7:71:52:ac:36:20:85:58:48:c6:b8:4f:3b:24:93:d9:f2:2c: 35:7a:ad:64:50:14:06:e4:b2:de:ca:32:73:2d:ce:6d:33:d7: 1b:8f:e5:90:9b:4e:5f:0a:5d:08:9a:68:ce:2e:18:fe:cc:7c: a9:2b:d0:68:cf:28:7a:29:b3:83:15:77:16:ba:17:95:0c:c0: cd:f9:21:22:fe:e4:f6:78:ec:ae:f1:93:0a:58:e9:ce:b7:45: 13:b1:5c:e7:4e:89:f1:6e:87:8b:cb:33:99:cb:4b:55:ac:34: ce:57:46:1d:f4:bc:81:24:3f:a8:d6:85:b6:66:7b:bd:4c:69: ff:0c:7f:6c:7c:61:25:c3:00:22:6a:d1:8c:4f:73:0e:db:87: 3b:d8:08:95:70:9b:ae:43:dd:6d:e0:82:b5:b7:58:e2:0f:0d: a0:da:d0:a4:53:33:fd:b5:30:cb:b6:a6:6c:08:87:88:02:5e: d5:49:67:5e:9a:c2:dd:7f:a4:82:40:3e:7d:f9:a0:17:22:d8: 84:80:c1:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBATfw1xB6syjThk46cpIs7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjYwODI2MjMwMDQ3WhcNMjYwODI3MjMwMDQ3WjAzMTEwLwYDVQQD EygxNmE1MWJlYWE0NzczMWQ0NGI4NDBhNzZmYTIxZGNmZTNiODBlNjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH6Fi+Q6bfR+hf/iG3hYSIACUlPh WKvpaJbJVyJarBisQGLbXepR9ibMb4spxW+4CH/BXzvrWTgD7Cmr5KpgJ8VQaMwz KISI/bwhMDjbQOF6/imWVk6uGVnnpkh4eZS5QAj9lSGTDmYRhwzhMd3FJ0QIETLE QRpVy43VoDR9NQ4Q+t37OoEL0LmjYBcFK8yKe/H/5c5VaBafNNmgEVMFwviWfk79 NossoxVc28YkiNxybNwpV4kRoqm/t2cZVkY7Y+HkIAl7yU/v1G36Sz2AMzwGYRzj XhtunwGEFizuu2ggKOoueqRPBWPIf8JM8ADx2ezeQSIZv6Xg2NkdXjF1YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBalG+qkdzHUS4QKdvoh3P47gOaVMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKH1L4nJx dNP2O2koWSDl2V607RW6HqLFdXu8BtKIvtXxVz5ZpsA4LrXWDtOjDFAaCV4Ew4mm 93FSrDYghVhIxrhPOyST2fIsNXqtZFAUBuSy3soycy3ObTPXG4/lkJtOXwpdCJpo zi4Y/sx8qSvQaM8oeimzgxV3FroXlQzAzfkhIv7k9njsrvGTCljpzrdFE7Fc506J 8W6Hi8szmctLVaw0zldGHfS8gSQ/qNaFtmZ7vUxp/wx/bHxhJcMAImrRjE9zDtuH O9gIlXCbrkPdbeCCtbdY4g8NoNrQpFMz/bUwy7ambAiHiAJe1UlnXprC3X+kgkA+ ffmgFyLYhIDB+g== -----END CERTIFICATE-----Generated at Thu Aug 27 09:36:57 2026 by rpki-client