
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json)
Hash identifier: dfDRFtXbU4aaLBlOyUDv2PpE9nxehdV5Z61lElAitqI=
Subject key identifier: 88:B7:9D:FB:92:7C:98:F5:E2:37:68:46:A1:98:6C:75:A6:B3:A5:DB
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 019F129CCFFAA3356415AAC179142E8C98F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
Manifest number: 19A5
Signing time: Mon 29 Jun 2026 09:01:34 +0000
Manifest this update: Mon 29 Jun 2026 09:01:34 +0000
Manifest next update: Tue 30 Jun 2026 09:01:34 +0000
Files and hashes: 1: 1bmjaNGaI2UWie6zoQTb39HFS_s.roa (hash: +AxNVqmR9VnywOpnEpWpK60msZlPvTmRqEnJ2TvVddQ=)
2: 2UTsdBqwcGY6WLPGQu2AQnmmQaw.roa (hash: N0cgvop2VFVQVWMu1UTzJj1ZcUJzTX91lueVGv/YOHc=)
3: ByKSk6_PCk0jKVqec0OJjbAcRcU.roa (hash: t1f1S4C1okYWwtKH8np/6yMDAc9jaCyFzuNOyR5oQYc=)
4: E102IN0_Ach777PDZCjDRyGfr5s.roa (hash: P+fFTKuiYJQ7KTnCl15w1gtiWXSxbhhwZtpqSiAeOhM=)
5: KWyOaYXmmuGpMkmFhWfxqNZLpEQ.roa (hash: 6Db2CprWj64Ewe8dVzSinC3cNdAaSLoS6Dq+erianYM=)
6: LEiLLq9r1VO5_Ov5I6DYkNeJuIQ.roa (hash: mWIOH513v2gZLS9HWDfHNsxzxtZFG4eZXAkIgOJaQVg=)
7: N0ib0MGeP5d7uD5SMGNzR5xRzaA.roa (hash: wX5k06wd7UCg24rImU3sW3f/cm2llInrYc9+0zZZkLU=)
8: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: hR/PR04zCBQv0Vet8ODdH7n65AH2UTjkNm06UhwTUs8=)
9: TM5VkZiuCQFhlCTuTDiqt2hHOiI.roa (hash: Uj+s0ytc6HH2YJFkDxTD9d5q1+tOjVsh1FxTZk6i+wg=)
10: WqZxU21CXk9II8O2lF6Y-ketCJI.roa (hash: JoRrtKwoZC20Q/QLA/mOv68NwCQSWJ+6cWt4rKxvqxY=)
11: YUKRTZrZKbMQuj1koHZDnPDdKkc.roa (hash: 5JLtSmX5xrQ29vGLGR8NuSK/OU2HfwUbgSXICbmnR28=)
12: aiZn6kgS43qbYGzLkAmQKdo6gA4.roa (hash: G/KuL+VXWSSvavjd4cxqh2acdQDd5A1ry4sWQqi5S1E=)
13: cbo9ZPmxQz5ojNzo3NLp3qPAq5U.roa (hash: WhZWAza+BOUN2V/ul+PIwoOcyAHFyg4fNWTLRfkjfEQ=)
14: falskHkEzmFDpE1q8O1AQezFfTs.roa (hash: ZJ3mncJicjqu8JmD6aJ/BH6oEnyHrxSao3V9TboLsMI=)
15: k3ayP4DiWUp9a1MNUSDdf93Vz8M.roa (hash: QfCyKwRzJHu3kJc4+Hlfq/pjF8bZH2qQwXvmpvH6rS4=)
16: lIy9zQMHNpi1v4RKAbwfpcq16JY.roa (hash: GuxM6yqJlPjVIDlbR8g1Fv5lkMvj//jwJnCdhjFyz9M=)
17: pEACykvZyRBjnuYUwUstZ7_jCVk.roa (hash: G94UHZh9tGtYRGHSoldyBITvAVDdXDRBRDBjeMrYPmE=)
18: pQE_sWOxAXv4LzF_hnEEzRVKjkU.roa (hash: r8BJ41cxYxyL7WV91ylso2pXKBwYsMCQMjQeRq8IwbI=)
19: rVyXgVyYp5rnr4oV3loTRO-57j0.roa (hash: U1gvzfizC5IaJxRnfZJGhEooOdvqsMkE+qdUPQBcx04=)
20: sUzc4i-qF-Qw6c5EDaaa0l-fnQI.roa (hash: SGebinu36YaRTF6AF3Dm3RGfWPUH9spaYcSgX0QinqQ=)
21: xsb80TsEg5gDhvG_dHnY_wiD7IU.roa (hash: U+IWtUZRr/JdO94gP5xDKETp0qxV29NQDKF3SavkJR4=)
22: yEq1d-Y9jhIC-ExVD8i3JnQfKWI.roa (hash: v/lSe2YGn/r4aMCpDUpUTQFRfYfqsJBd8pftAtwMWz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:cf:fa:a3:35:64:15:aa:c1:79:14:2e:8c:98:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jun 29 09:01:34 2026 GMT
Not After : Jun 30 09:01:34 2026 GMT
Subject: CN=88b79dfb927c98f5e2376846a1986c75a6b3a5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:92:69:fa:43:0a:63:fa:b6:66:7f:b7:fd:b4:
bb:4c:ce:62:42:0d:1e:ec:9a:ff:86:ba:96:47:61:
2d:15:7f:c3:c9:64:29:74:2a:38:6c:03:db:16:8f:
1c:8e:eb:2f:02:26:73:93:2f:07:37:9b:0c:60:34:
42:c9:28:cd:48:2f:ab:8c:bb:38:2a:a9:b8:bb:0f:
32:04:21:12:db:e6:1c:f7:bd:bf:3f:eb:9b:8b:bf:
7a:66:a7:e4:83:ff:3a:02:e3:2a:21:9e:0b:03:15:
f7:04:5f:51:c1:4c:1e:87:29:7d:7e:1b:cd:c6:4c:
0c:8a:ca:f7:2d:d1:fe:9f:70:c4:13:8c:43:74:fc:
f3:6f:ff:e0:6f:df:3a:4e:e9:ea:4c:54:66:b2:10:
66:d3:af:43:43:05:06:bd:58:54:cb:21:0c:88:71:
fd:4d:16:73:ad:6f:ba:b2:7e:47:97:8f:2e:a1:e9:
26:48:df:b1:28:5d:7d:75:c1:be:42:53:42:e6:86:
24:8a:93:58:e7:45:52:49:84:fc:85:32:10:3b:54:
17:1a:59:e0:18:b4:d5:a0:5b:12:4b:d0:47:a7:5b:
c0:57:5c:64:77:dd:7a:14:65:6b:73:21:89:ab:02:
11:fc:cc:ce:b2:3d:29:ee:e4:ca:48:30:66:13:e3:
ef:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B7:9D:FB:92:7C:98:F5:E2:37:68:46:A1:98:6C:75:A6:B3:A5:DB
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c3:ff:3e:e0:2a:88:be:cb:bf:08:a6:92:5a:a5:0e:e4:53:
c2:48:0d:2d:f6:61:45:16:4c:0d:c1:d0:78:b3:5f:d7:8e:45:
67:c4:84:e6:17:fb:f3:a9:9c:e8:27:86:8c:f9:00:af:a6:13:
e8:53:07:e7:03:2f:70:66:d6:66:a2:c6:7c:7a:88:8c:45:6d:
b7:40:d7:6e:4c:86:28:17:a0:0c:70:fd:dd:e1:21:0d:26:eb:
5f:e2:3c:c7:4e:4d:85:54:d4:2d:53:ed:bf:0d:0a:81:4b:fd:
b0:81:bd:3b:41:cb:66:ce:76:83:9e:fb:03:29:f0:d2:20:de:
46:63:70:56:fa:18:be:40:73:c6:63:f0:20:9d:22:85:2c:94:
b8:31:40:7a:9d:e2:f2:e0:c5:92:a2:54:af:96:c7:2c:23:ab:
1a:ab:d4:b1:7f:1d:03:14:f0:60:a7:cc:ab:16:71:15:f9:0d:
26:f8:bb:a7:5f:04:21:47:06:ab:3b:44:86:7b:b1:aa:6f:6f:
31:1b:12:91:11:60:2c:80:1d:c0:88:a8:55:de:b2:f2:a5:8d:
81:f9:df:16:8c:62:df:38:9a:e4:42:9d:67:fe:88:fb:c2:f9:
7c:02:37:c0:16:67:27:fe:f3:a2:28:a9:34:ed:74:93:d1:34:
fb:05:9c:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SnM/6ozVkFarBeRQujJj3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2
MGY2ZjMwHhcNMjYwNjI5MDkwMTM0WhcNMjYwNjMwMDkwMTM0WjAzMTEwLwYDVQQD
Eyg4OGI3OWRmYjkyN2M5OGY1ZTIzNzY4NDZhMTk4NmM3NWE2YjNhNWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pJp+kMKY/q2Zn+3/bS7TM5iQg0e
7Jr/hrqWR2EtFX/DyWQpdCo4bAPbFo8cjusvAiZzky8HN5sMYDRCySjNSC+rjLs4
Kqm4uw8yBCES2+Yc972/P+ubi796Zqfkg/86AuMqIZ4LAxX3BF9RwUwehyl9fhvN
xkwMisr3LdH+n3DEE4xDdPzzb//gb986TunqTFRmshBm069DQwUGvVhUyyEMiHH9
TRZzrW+6sn5Hl48uoekmSN+xKF19dcG+QlNC5oYkipNY50VSSYT8hTIQO1QXGlng
GLTVoFsSS9BHp1vAV1xkd916FGVrcyGJqwIR/MzOsj0p7uTKSDBmE+PvwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIi3nfuSfJj14jdoRqGYbHWms6XbMB8GA1UdIwQY
MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It
ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi
LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsP/PuAq
iL7LvwimklqlDuRTwkgNLfZhRRZMDcHQeLNf145FZ8SE5hf786mc6CeGjPkAr6YT
6FMH5wMvcGbWZqLGfHqIjEVtt0DXbkyGKBegDHD93eEhDSbrX+I8x05NhVTULVPt
vw0KgUv9sIG9O0HLZs52g577Aynw0iDeRmNwVvoYvkBzxmPwIJ0ihSyUuDFAep3i
8uDFkqJUr5bHLCOrGqvUsX8dAxTwYKfMqxZxFfkNJvi7p18EIUcGqztEhnuxqm9v
MRsSkRFgLIAdwIioVd6y8qWNgfnfFoxi3zia5EKdZ/6I+8L5fAI3wBZnJ/7zoiip
NO10k9E0+wWc2w==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:12 2026 by rpki-client