$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json) Hash identifier: uWKyEAc2zdzaePJs60dRtu5lQrNlvD0z4oay3ny49Ik= Subject key identifier: 4B:0F:8D:A2:E5:EE:C5:88:1C:0E:92:38:3D:59:8C:4B:DF:EF:02:EB Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019D2DE11C62FC54849256B743D0A87003A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft Manifest number: 18AA Signing time: Fri 27 Mar 2026 06:00:20 +0000 Manifest this update: Fri 27 Mar 2026 06:00:20 +0000 Manifest next update: Sat 28 Mar 2026 06:00:20 +0000 Files and hashes: 1: 1bmjaNGaI2UWie6zoQTb39HFS_s.roa (hash: +AxNVqmR9VnywOpnEpWpK60msZlPvTmRqEnJ2TvVddQ=) 2: 2UTsdBqwcGY6WLPGQu2AQnmmQaw.roa (hash: N0cgvop2VFVQVWMu1UTzJj1ZcUJzTX91lueVGv/YOHc=) 3: ByKSk6_PCk0jKVqec0OJjbAcRcU.roa (hash: t1f1S4C1okYWwtKH8np/6yMDAc9jaCyFzuNOyR5oQYc=) 4: E102IN0_Ach777PDZCjDRyGfr5s.roa (hash: P+fFTKuiYJQ7KTnCl15w1gtiWXSxbhhwZtpqSiAeOhM=) 5: KWyOaYXmmuGpMkmFhWfxqNZLpEQ.roa (hash: 6Db2CprWj64Ewe8dVzSinC3cNdAaSLoS6Dq+erianYM=) 6: LEiLLq9r1VO5_Ov5I6DYkNeJuIQ.roa (hash: mWIOH513v2gZLS9HWDfHNsxzxtZFG4eZXAkIgOJaQVg=) 7: N0ib0MGeP5d7uD5SMGNzR5xRzaA.roa (hash: wX5k06wd7UCg24rImU3sW3f/cm2llInrYc9+0zZZkLU=) 8: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: AEc1l6q4D+omNyqYTkV5eK7YNpt4yHsTdmMr1InAu4Q=) 9: TM5VkZiuCQFhlCTuTDiqt2hHOiI.roa (hash: Uj+s0ytc6HH2YJFkDxTD9d5q1+tOjVsh1FxTZk6i+wg=) 10: WqZxU21CXk9II8O2lF6Y-ketCJI.roa (hash: JoRrtKwoZC20Q/QLA/mOv68NwCQSWJ+6cWt4rKxvqxY=) 11: YUKRTZrZKbMQuj1koHZDnPDdKkc.roa (hash: 5JLtSmX5xrQ29vGLGR8NuSK/OU2HfwUbgSXICbmnR28=) 12: aiZn6kgS43qbYGzLkAmQKdo6gA4.roa (hash: G/KuL+VXWSSvavjd4cxqh2acdQDd5A1ry4sWQqi5S1E=) 13: cbo9ZPmxQz5ojNzo3NLp3qPAq5U.roa (hash: WhZWAza+BOUN2V/ul+PIwoOcyAHFyg4fNWTLRfkjfEQ=) 14: falskHkEzmFDpE1q8O1AQezFfTs.roa (hash: ZJ3mncJicjqu8JmD6aJ/BH6oEnyHrxSao3V9TboLsMI=) 15: k3ayP4DiWUp9a1MNUSDdf93Vz8M.roa (hash: QfCyKwRzJHu3kJc4+Hlfq/pjF8bZH2qQwXvmpvH6rS4=) 16: lIy9zQMHNpi1v4RKAbwfpcq16JY.roa (hash: GuxM6yqJlPjVIDlbR8g1Fv5lkMvj//jwJnCdhjFyz9M=) 17: pEACykvZyRBjnuYUwUstZ7_jCVk.roa (hash: G94UHZh9tGtYRGHSoldyBITvAVDdXDRBRDBjeMrYPmE=) 18: pQE_sWOxAXv4LzF_hnEEzRVKjkU.roa (hash: r8BJ41cxYxyL7WV91ylso2pXKBwYsMCQMjQeRq8IwbI=) 19: rVyXgVyYp5rnr4oV3loTRO-57j0.roa (hash: U1gvzfizC5IaJxRnfZJGhEooOdvqsMkE+qdUPQBcx04=) 20: sUzc4i-qF-Qw6c5EDaaa0l-fnQI.roa (hash: SGebinu36YaRTF6AF3Dm3RGfWPUH9spaYcSgX0QinqQ=) 21: xsb80TsEg5gDhvG_dHnY_wiD7IU.roa (hash: U+IWtUZRr/JdO94gP5xDKETp0qxV29NQDKF3SavkJR4=) 22: yEq1d-Y9jhIC-ExVD8i3JnQfKWI.roa (hash: v/lSe2YGn/r4aMCpDUpUTQFRfYfqsJBd8pftAtwMWz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2d:e1:1c:62:fc:54:84:92:56:b7:43:d0:a8:70:03:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Mar 27 06:00:20 2026 GMT Not After : Mar 28 06:00:20 2026 GMT Subject: CN=4b0f8da2e5eec5881c0e92383d598c4bdfef02eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:0d:a7:da:2c:25:60:84:c8:75:cf:b3:a1: 1e:d6:e4:33:9f:36:a1:72:7f:45:a1:bc:2f:d5:73: 66:a8:be:5b:66:9a:c4:ac:24:56:d4:ba:3a:bf:57: d7:8b:03:6e:31:e0:37:19:cb:1c:3a:1a:61:a9:f0: 71:f1:86:d3:63:89:13:f6:d2:a9:0a:15:aa:0b:fd: d0:76:6e:dd:54:e4:26:55:a7:12:e5:47:09:c4:e5: c5:01:37:55:77:67:bc:ce:1b:3a:68:e4:c6:ec:43: e2:bd:16:cb:e2:ac:e6:c0:91:fb:3c:41:17:cb:f4: c8:01:b8:66:5e:df:89:fd:da:91:dd:60:b5:cd:7f: d8:f1:f9:7f:59:47:40:ad:16:2d:6c:47:8b:18:ab: ec:51:d3:26:1c:23:0d:f6:bc:bd:a8:de:66:5d:7d: 72:8c:b4:87:7b:d5:4e:68:15:aa:a2:4e:a7:4f:b9: 61:10:10:b3:16:38:e7:78:05:1c:7d:7e:85:96:43: c1:d0:d5:3c:64:4b:46:10:60:dc:ca:65:75:26:60: 30:8e:41:c3:a0:41:c4:3c:6d:1d:c2:a8:c6:57:43: 1e:e6:71:5d:56:7c:a4:6b:46:75:ef:bf:d9:e3:ff: 14:29:2e:a5:c8:f4:8b:30:a6:9b:00:d0:3a:32:59: 18:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0F:8D:A2:E5:EE:C5:88:1C:0E:92:38:3D:59:8C:4B:DF:EF:02:EB X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:63:77:d2:7e:bb:e2:00:46:24:cf:92:27:27:db:bb:fa:21: e4:eb:f1:30:30:c9:4c:63:ff:b8:fa:9c:f3:61:ef:58:a9:a4: 4e:b8:16:33:eb:74:b3:3d:5b:e8:bd:bb:79:5d:98:82:fa:ad: 6d:13:06:bf:d6:48:01:69:5b:29:e4:18:fe:45:90:fa:11:ae: 4c:e8:58:fa:0a:dd:36:b0:ae:8f:36:03:29:59:0a:85:16:8e: bd:0d:e3:72:05:56:12:74:5c:c2:20:64:8a:2b:c2:cd:f6:c4: b3:b7:aa:9f:fa:5b:80:17:b1:b4:f4:92:bc:d8:d5:5d:10:0c: 84:24:d8:da:65:41:a4:e4:0a:23:b9:dc:ae:b9:3a:7e:e7:c1: 2a:8c:17:b0:09:41:dd:e7:e8:e5:31:af:0f:b4:6a:83:f3:f5: 85:7b:89:67:07:5b:3b:44:f6:85:fd:82:24:f5:ce:b4:5c:c4: 4b:6f:dc:78:37:1e:ca:51:16:ca:ef:6f:73:f7:59:b6:8c:af: 44:de:52:d7:4b:c9:7f:bc:cf:23:4c:0a:f6:88:00:98:2c:ed: dc:50:cb:3f:87:ee:c1:69:32:e5:13:90:de:75:43:42:58:c7: 55:7a:d5:9a:39:85:e7:fb:f1:ba:32:45:ee:86:75:4c:d1:0b: 39:d5:57:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0t4Rxi/FSEkla3Q9CocAOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjYwMzI3MDYwMDIwWhcNMjYwMzI4MDYwMDIwWjAzMTEwLwYDVQQD Eyg0YjBmOGRhMmU1ZWVjNTg4MWMwZTkyMzgzZDU5OGM0YmRmZWYwMmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHoNp9osJWCEyHXPs6Ee1uQznzah cn9Fobwv1XNmqL5bZprErCRW1Lo6v1fXiwNuMeA3GcscOhphqfBx8YbTY4kT9tKp ChWqC/3Qdm7dVOQmVacS5UcJxOXFATdVd2e8zhs6aOTG7EPivRbL4qzmwJH7PEEX y/TIAbhmXt+J/dqR3WC1zX/Y8fl/WUdArRYtbEeLGKvsUdMmHCMN9ry9qN5mXX1y jLSHe9VOaBWqok6nT7lhEBCzFjjneAUcfX6FlkPB0NU8ZEtGEGDcymV1JmAwjkHD oEHEPG0dwqjGV0Me5nFdVnyka0Z177/Z4/8UKS6lyPSLMKabANA6MlkY2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsPjaLl7sWIHA6SOD1ZjEvf7wLrMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWN30n67 4gBGJM+SJyfbu/oh5OvxMDDJTGP/uPqc82HvWKmkTrgWM+t0sz1b6L27eV2Ygvqt bRMGv9ZIAWlbKeQY/kWQ+hGuTOhY+grdNrCujzYDKVkKhRaOvQ3jcgVWEnRcwiBk iivCzfbEs7eqn/pbgBextPSSvNjVXRAMhCTY2mVBpOQKI7ncrrk6fufBKowXsAlB 3efo5TGvD7Rqg/P1hXuJZwdbO0T2hf2CJPXOtFzES2/ceDceylEWyu9vc/dZtoyv RN5S10vJf7zPI0wK9ogAmCzt3FDLP4fuwWky5ROQ3nVDQljHVXrVmjmF5/vxujJF 7oZ1TNELOdVXNg== -----END CERTIFICATE-----Generated at Fri Mar 27 10:37:35 2026 by rpki-client