$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: 4X0uPFWUv4k3i9Pf+ELMzDTDeiOm0S5t44YJuVuDuaU= Subject key identifier: ED:D8:D7:61:CC:24:2B:77:7D:1D:6E:AF:BB:78:95:80:B1:0B:71:6E Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019DCBCF28E1108F19721F83AD6EFF9C8008 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 18EE Signing time: Sun 26 Apr 2026 22:00:44 +0000 Manifest this update: Sun 26 Apr 2026 22:00:44 +0000 Manifest next update: Mon 27 Apr 2026 22:00:44 +0000 Files and hashes: 1: EUJR4oK_-qO6YAPuLUzPIGrtiic.roa (hash: YME5zAJYIJBkBPG7Ysa6vw+XFQl03WoNdtgDEh2gs4U=) 2: M36ECwRcj0TFTMeuL6oi_DsEnkQ.roa (hash: E7Nxan43SS/Yo752esXJfNN3COQpoHbafmeAiyBk1XI=) 3: Q0Jdhd0Xijh5Qg2MMx6tv_NFg0Y.roa (hash: e8/UdF909D8bl8btP6fz+eUx2PtucIwHXcMCcE3Yfss=) 4: S3R-qErkzc-IjOFmeTi4xHy4LpE.roa (hash: SNvSagqffcHVObamPtGGn26yO20xNO70CwB/KL8UDeA=) 5: VBZM83CovnXWWNAoSTmLuwtkvPA.roa (hash: zlKxjFuoWufhSPZybSMNIrhlFC4xMtEzi2DT6Mq8R4E=) 6: exXkKYTtUDjde_sRikIrk050twk.roa (hash: wS6gest7TLN8j3W6GI2oKTVveIMP3Ho87+QuUUyIfgc=) 7: i8iYm_0FW8CEhhGEtap9i1HCpbU.roa (hash: S62F8bLmRb8I4/DcdbRM8zS7BP7h1o24+JuRtSpKmdc=) 8: lISEedj5Gkre55GwsZjKu8moowA.roa (hash: S+Yq3Z38Og7alrPrHO1nngmVCOUzwCqJwWrOwsktrtM=) 9: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: VOmqanQGgMmAzJ9+wPNED1UZhmuTt76/pTggw2D+CkQ=) 10: rWY90c2-byEiqpH-pAXqLcTVBl8.roa (hash: /cBf700BNhkKxHBETlqRX/grSyvQegr8+YbQwI/BM70=) 11: xVa6hi9wu8XjSdEwYmXJAx85FhU.roa (hash: 8J48r7Dcw/u08bxZJven18+8CJuosinNuC5v6bFRP4U=) 12: yyRW46EoiEZakH8xmbaVNYZzT7Y.roa (hash: kZjQSsJWQX8APsUvcm4SD5nZIwt5ENQAkgP42qqBCtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cb:cf:28:e1:10:8f:19:72:1f:83:ad:6e:ff:9c:80:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Apr 26 22:00:44 2026 GMT Not After : Apr 27 22:00:44 2026 GMT Subject: CN=edd8d761cc242b777d1d6eafbb789580b10b716e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f7:d1:89:14:bb:7c:fc:d8:ee:13:fe:17:c6: 0a:0b:fc:07:76:84:eb:b3:4c:c3:af:3a:4e:38:3f: a2:45:03:04:02:80:82:61:85:37:f3:c4:0b:25:ec: cd:16:3b:26:b8:5d:87:49:e9:2e:9e:dc:80:52:bf: 6a:bd:7e:96:59:87:9f:02:3b:23:49:5f:2e:f3:fe: 52:cb:bb:6a:da:1f:c9:f5:80:35:f3:4e:f9:5e:55: 42:a9:4a:2a:05:4b:bc:00:06:03:7e:97:5b:bc:88: 47:fe:2c:76:15:65:49:fc:17:34:82:30:ac:78:3b: 5b:ab:a6:e6:ed:8a:cd:37:11:7d:28:84:f1:ee:55: 8c:c7:a0:3e:07:be:de:68:26:bf:b0:30:07:2c:50: 8b:fc:40:ab:61:25:8f:46:5b:43:c3:12:33:e3:17: 46:9d:c6:b0:70:7b:e9:cd:c5:dd:26:c9:b6:e6:cf: df:23:dc:35:72:b8:58:9f:ea:41:cc:89:64:7c:4f: b9:d5:8b:1e:d9:1b:fd:a1:96:3a:29:80:89:a6:65: 75:6f:51:92:55:bf:00:8d:54:aa:67:a3:ff:84:eb: 5b:0c:f9:51:2a:f9:56:d9:40:cf:81:7f:35:8a:83: 8d:c6:28:da:a9:dc:bf:32:d8:4f:28:0b:b9:57:28: c6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D8:D7:61:CC:24:2B:77:7D:1D:6E:AF:BB:78:95:80:B1:0B:71:6E X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:1f:76:d4:e3:7a:c9:39:c5:44:5a:01:5b:24:49:4b:47:f1: 32:56:f0:3e:48:3f:25:d5:24:c9:52:57:bf:d5:6d:31:50:26: 17:c7:18:53:45:4e:19:17:c1:b1:02:48:28:39:b3:68:67:2f: bb:38:cb:f1:90:e8:11:04:74:b6:5d:ee:d7:44:c6:19:c0:2d: cc:87:0d:9c:5f:93:34:7d:7d:14:81:57:d0:aa:1b:ac:95:8a: f2:e8:20:d7:bb:71:a6:68:bd:d9:e9:9f:3d:4e:3d:c8:08:2d: b8:8b:54:f4:62:54:be:1c:6f:e2:a4:13:52:a2:d8:cf:de:c6: b3:d0:64:e1:c8:51:29:f8:26:b4:ae:a6:44:46:9a:9d:a6:22: 52:33:65:f2:95:c1:bd:50:20:8f:c8:27:73:c1:0b:f9:4a:1c: 13:ab:ec:19:cb:62:ee:48:02:24:1d:da:92:53:a1:0c:79:bd: 86:b0:f8:72:e2:c4:d5:f7:e1:33:41:52:31:9f:5d:d0:b6:98: 97:75:ef:46:28:c3:e0:00:9b:ef:07:93:ce:79:57:b0:e6:10: 3a:ce:0e:1a:10:63:1f:b8:51:99:78:74:c8:3a:c9:4a:65:f7: 77:1c:80:55:4d:6b:52:54:1a:41:cf:e9:89:e1:d7:04:24:c1: bc:15:65:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3LzyjhEI8Zch+DrW7/nIAIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjYwNDI2MjIwMDQ0WhcNMjYwNDI3MjIwMDQ0WjAzMTEwLwYDVQQD EyhlZGQ4ZDc2MWNjMjQyYjc3N2QxZDZlYWZiYjc4OTU4MGIxMGI3MTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PfRiRS7fPzY7hP+F8YKC/wHdoTr s0zDrzpOOD+iRQMEAoCCYYU388QLJezNFjsmuF2HSekuntyAUr9qvX6WWYefAjsj SV8u8/5Sy7tq2h/J9YA18075XlVCqUoqBUu8AAYDfpdbvIhH/ix2FWVJ/Bc0gjCs eDtbq6bm7YrNNxF9KITx7lWMx6A+B77eaCa/sDAHLFCL/ECrYSWPRltDwxIz4xdG ncawcHvpzcXdJsm25s/fI9w1crhYn+pBzIlkfE+51Yse2Rv9oZY6KYCJpmV1b1GS Vb8AjVSqZ6P/hOtbDPlRKvlW2UDPgX81ioONxijaqdy/MthPKAu5VyjGUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3Y12HMJCt3fR1ur7t4lYCxC3FuMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASR921ON6 yTnFRFoBWyRJS0fxMlbwPkg/JdUkyVJXv9VtMVAmF8cYU0VOGRfBsQJIKDmzaGcv uzjL8ZDoEQR0tl3u10TGGcAtzIcNnF+TNH19FIFX0KobrJWK8ugg17txpmi92emf PU49yAgtuItU9GJUvhxv4qQTUqLYz97Gs9Bk4chRKfgmtK6mREaanaYiUjNl8pXB vVAgj8gnc8EL+UocE6vsGcti7kgCJB3aklOhDHm9hrD4cuLE1ffhM0FSMZ9d0LaY l3XvRijD4ACb7weTznlXsOYQOs4OGhBjH7hRmXh0yDrJSmX3dxyAVU1rUlQaQc/p ieHXBCTBvBVlyQ== -----END CERTIFICATE-----Generated at Mon Apr 27 04:18:11 2026 by rpki-client