$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: DtUrr+XhDGweUhfnOTdW9QzO40h3W7AnFYEUaLwbEtQ= Subject key identifier: C0:B3:35:17:27:71:FF:08:61:D7:7B:5E:C5:75:87:19:0B:24:D0:6A Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019DCC3CC51DEB0483E1654F4C16086BDAA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 0CF9 Signing time: Mon 27 Apr 2026 00:00:27 +0000 Manifest this update: Mon 27 Apr 2026 00:00:27 +0000 Manifest next update: Tue 28 Apr 2026 00:00:27 +0000 Files and hashes: 1: 1-SOCJvMJXIRmSmOPl6NPphF6_WM.roa (hash: vXugVxE98o8Z5wA/8D/Y9pi3M5AMGKyN8v2Sry/3Otg=) 2: 2j-9yNtktHt5v3A9Kl3uT69XxUQ.roa (hash: kN6K0JrXyJLwNWerB4QQmyVz1nrq+uVY4rleX2HuK30=) 3: 3thexKCs9mTJ-g3YYgHPDfOYcIc.roa (hash: Tadv/Gad986b9FjzLOZ4GUKa4pADLYS5J1VXhc5Jv3A=) 4: 5OcaW_u-IVVVs4vVhK7WkBglTgU.roa (hash: OGfPTP+KfzJ3exJYRBgK9TdIK/XRuaNfOoDR836pTHM=) 5: CxN6ZiBsNYNvAwSV2r1-B7b9BZA.roa (hash: omyqw+bz7nV39lBVXP33JrADRI4H4vosedUdoUfqv5Y=) 6: KcpEeJ8nphqsMHAWxtLdQf-SPD8.roa (hash: 6dGG4UMu3+4l5GE0LXyb/M9jtsTpoowfhHp1qayn3yo=) 7: NiGyen5sRKPPy9T8u3ygDrmXuQo.roa (hash: 8KqO2nLQjwwDARGlN3phFNsy1np9TqX6quA7+00LgFU=) 8: PnMPikrtO33Vh6NkdCxq2k4w26M.roa (hash: YMF2rN1VGNaxWyBvf9HrWuFu9uMYn/avu3bG9vwb7sc=) 9: RY-mbVhA4I89kNcmBsI8h8uXhiw.roa (hash: qgJoxMHmlU8CHkmRyFqNaxEYeU5S0JCmLUfKTUPCXsE=) 10: SUphdQJw-Hg0tkCTHAxdssxM7WU.roa (hash: K6sCasus5CCnYwQblrVqAaOdSMRGrcdNZpoyM5tiQkY=) 11: VMv0dRf33W1wrs_OpoB6KztNOWI.roa (hash: aWZFboenFph6+NpGEetbi88BDQtRIqEXfVrgP4t3tHI=) 12: VXPnJamYnp-2hfTErEBbK3WjJ8w.roa (hash: qfiGUULcvtQTBu8EUEep+iCfwW6E13oKl3US/kmkUJY=) 13: Wx-AiUKi8vXh2kBe3_SdHFDF1mg.roa (hash: LeeoUYduefs5gVVp9SgvEfhcjETEvrL0skum1dKRrfw=) 14: _7KTUyvraj0jLcJwWnYx49GI_Ws.roa (hash: uTbeQlp1sTHWF8RgjB3gPB+04hQuOuoqkYdDsifDeDQ=) 15: aXDclZHDVbTyfTZN939aF-svW60.roa (hash: /lQRpMwNPjkJnTsNV0aDEnWjG52zU26fI7Sp7mQlgUw=) 16: eta-cr0KHPJdXK1igAnSrrgYgKo.roa (hash: 46b7pv6tWdNF77DVmTz4RmmApLLdlfpeLeUB6iPbMJ8=) 17: jgrnqFUINh9yQSbIH4pj0x-gEk0.roa (hash: OpDUk5IpNIdyhSv3cFKH41Wn9xn35YaFqaFD71SLY3I=) 18: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: PX1dkuAznVrv2nadiHhNYEuqk5ckRX3sw0rBnlPK2bk=) 19: pxkX6Yph9uy4iGqYcnxkhKdhohQ.roa (hash: bifJOe/IS/0GcT2Z9iDNC5IwmSgJXexqKx52FOV+q98=) 20: tMgRfPFkf85axNNxn8QEdnO-WoY.roa (hash: HZTvV0+hdxoPX0EpNO2j0lRcXYZHcQUwXhCQeH87SF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:3c:c5:1d:eb:04:83:e1:65:4f:4c:16:08:6b:da:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Apr 27 00:00:27 2026 GMT Not After : Apr 28 00:00:27 2026 GMT Subject: CN=c0b335172771ff0861d77b5ec57587190b24d06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:e9:7b:18:62:56:46:40:e0:5b:43:06:ca: 97:d4:a1:0b:c2:26:a1:6f:0c:ae:2f:3d:a9:e9:8f: 24:9d:76:f6:48:c8:d8:50:4d:fc:72:01:1a:33:ae: 8e:49:42:97:94:9c:c5:5a:f6:18:d8:3d:59:6a:f4: de:e3:e7:b0:12:48:1e:bd:90:de:a4:a1:5a:b0:40: 41:00:2f:cd:99:38:bd:38:15:2f:f6:37:1e:44:79: 70:01:04:eb:47:d9:7a:b2:db:ac:d7:f3:84:cb:72: c9:a4:ce:e5:c5:b4:f1:92:58:42:3e:13:26:20:e5: b0:0d:1d:a1:67:a8:7e:ec:d2:db:13:9f:43:71:1c: fd:6b:34:01:f6:04:64:93:04:12:cc:9a:3c:6c:e6: 76:d0:ab:63:4b:22:97:07:3d:51:c8:84:3e:01:2e: 96:bd:e4:6d:3d:0d:55:d3:59:cc:e0:fe:d0:9f:06: 55:ac:0e:bc:9e:2d:42:1e:76:8a:fd:9e:ef:73:6b: f4:9e:16:6a:b8:56:36:ad:d8:98:50:33:8d:48:89: 82:bd:ee:ef:5c:0b:bb:db:1c:8a:a0:f1:46:10:53: 79:dc:d7:74:a6:73:fa:06:03:9f:4a:d0:91:91:0f: f9:49:a5:3d:f6:d6:92:cb:f0:ad:c6:12:46:00:da: 9b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B3:35:17:27:71:FF:08:61:D7:7B:5E:C5:75:87:19:0B:24:D0:6A X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:98:b7:c2:e8:db:51:b3:02:b0:77:11:0c:5c:1a:d3:95:8b: 56:2f:f3:d6:79:b8:4a:41:e3:a4:03:4d:19:40:22:75:8a:bd: b5:3d:6c:c0:ff:30:07:d8:74:b8:b6:24:f9:e7:8b:01:49:6f: 9c:87:04:c2:c0:7a:95:24:b7:d3:67:d6:8f:31:04:d7:67:e5: 61:e5:70:1a:d5:1f:82:46:08:4d:b8:77:fd:2e:cc:ca:cc:17: 0d:06:a6:86:35:ac:bc:27:eb:8c:63:e8:54:19:03:b5:91:cb: a7:4c:34:eb:4d:04:53:b4:74:4d:96:fd:45:98:37:9b:e2:c7: 67:1b:d4:c7:93:69:e0:38:38:27:b3:a7:7d:14:93:25:3a:fa: a6:35:9d:eb:4c:c2:03:5b:92:2d:9c:99:8b:09:a4:46:7b:17: 1d:73:af:8a:18:6a:a9:38:82:e7:2d:f2:13:a0:60:3c:8e:e7: ea:13:c3:e7:f3:1d:4b:dc:c5:a3:39:1f:27:02:ab:ab:1e:fe: 5d:2f:5c:ad:8f:fa:48:26:9d:1c:ac:c4:60:7a:7f:1d:32:e3: 2e:e9:3f:bc:30:cf:16:e9:f6:e0:4b:48:02:97:4b:cf:30:91: 8f:b9:76:89:69:aa:99:f1:5f:20:3e:79:ed:08:31:9e:10:32: e8:0f:8a:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MPMUd6wSD4WVPTBYIa9qjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwNDI3MDAwMDI3WhcNMjYwNDI4MDAwMDI3WjAzMTEwLwYDVQQD EyhjMGIzMzUxNzI3NzFmZjA4NjFkNzdiNWVjNTc1ODcxOTBiMjRkMDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pHpexhiVkZA4FtDBsqX1KELwiah bwyuLz2p6Y8knXb2SMjYUE38cgEaM66OSUKXlJzFWvYY2D1ZavTe4+ewEkgevZDe pKFasEBBAC/NmTi9OBUv9jceRHlwAQTrR9l6stus1/OEy3LJpM7lxbTxklhCPhMm IOWwDR2hZ6h+7NLbE59DcRz9azQB9gRkkwQSzJo8bOZ20KtjSyKXBz1RyIQ+AS6W veRtPQ1V01nM4P7QnwZVrA68ni1CHnaK/Z7vc2v0nhZquFY2rdiYUDONSImCve7v XAu72xyKoPFGEFN53Nd0pnP6BgOfStCRkQ/5SaU99taSy/CtxhJGANqbiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCzNRcncf8IYdd7XsV1hxkLJNBqMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpi3wujb UbMCsHcRDFwa05WLVi/z1nm4SkHjpANNGUAidYq9tT1swP8wB9h0uLYk+eeLAUlv nIcEwsB6lSS302fWjzEE12flYeVwGtUfgkYITbh3/S7MyswXDQamhjWsvCfrjGPo VBkDtZHLp0w0600EU7R0TZb9RZg3m+LHZxvUx5Np4Dg4J7OnfRSTJTr6pjWd60zC A1uSLZyZiwmkRnsXHXOvihhqqTiC5y3yE6BgPI7n6hPD5/MdS9zFozkfJwKrqx7+ XS9crY/6SCadHKzEYHp/HTLjLuk/vDDPFun24EtIApdLzzCRj7l2iWmqmfFfID55 7QgxnhAy6A+K7A== -----END CERTIFICATE-----Generated at Mon Apr 27 09:15:54 2026 by rpki-client