$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json) Hash identifier: y/Lc/6Whk6zEv6gCNWLNiWa4yRtnbD9VR2Xj3YgBjlo= Subject key identifier: 45:27:26:25:90:C9:0B:7F:4B:61:A7:11:31:3D:21:B2:A6:A5:60:2F Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4 Certificate serial: 01A08AC36D4FCCBC440459425F7A69D62B28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft Manifest number: 1A4C Signing time: Thu 10 Sep 2026 10:00:58 +0000 Manifest this update: Thu 10 Sep 2026 10:00:58 +0000 Manifest next update: Fri 11 Sep 2026 10:00:58 +0000 Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=) 2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=) 3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=) 4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=) 5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=) 6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: A1QMNw/uY1pms2BPjCqsGB18Q/cFSuYd6dP+3YAkBsA=) 7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=) 8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=) 9: vzidGM-MJjldkGGDVWaxyGxbVlE.roa (hash: yoJENfRbWs+TKZhJt2OSgIUYi9IpVHltrW6bYU1ft9s=) 10: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:c3:6d:4f:cc:bc:44:04:59:42:5f:7a:69:d6:2b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4 Validity Not Before: Sep 10 10:00:58 2026 GMT Not After : Sep 11 10:00:58 2026 GMT Subject: CN=4527262590c90b7f4b61a711313d21b2a6a5602f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:dc:a2:06:57:39:fb:5b:4a:96:30:ce:a9: f1:44:ea:e1:a2:6d:82:53:b8:45:8e:c1:f7:b5:64: 16:a3:93:52:d4:3a:e2:0f:f0:c3:d7:f4:84:7f:6b: da:43:ff:b7:f9:3a:21:23:85:35:22:0f:97:90:c2: b1:6a:b6:eb:99:3a:62:f6:4a:a2:cb:b4:14:bd:ef: 7b:53:51:eb:54:df:26:b2:d0:49:2a:cd:9d:2e:b1: 8b:44:62:44:ca:18:b2:fe:f2:ad:0c:54:46:31:93: 67:d1:82:d4:14:06:9a:3b:e1:b5:c4:48:94:21:35: a1:da:f1:a8:12:a5:85:f7:b7:be:3e:e4:ce:dd:86: a4:7e:1c:fb:8f:65:df:1b:dd:1a:af:a0:0e:35:19: be:0e:86:d1:68:e0:55:6c:ad:14:32:06:bd:1f:68: 29:e7:2c:80:86:e7:7c:02:e2:fc:41:fb:4f:17:1b: 03:35:23:05:a5:fa:b0:cd:2f:e9:83:07:67:3b:ad: ca:11:b3:eb:96:11:b8:9b:29:00:5a:e0:1f:d9:fe: 77:da:4e:5a:06:2b:89:6f:b4:0d:e6:7e:fc:05:28: 3e:6e:e9:ce:37:e8:9c:54:b7:e1:32:cc:f2:e7:fa: 5f:80:66:80:53:6c:80:78:ac:dd:df:6b:de:a3:e8: 8d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:27:26:25:90:C9:0B:7F:4B:61:A7:11:31:3D:21:B2:A6:A5:60:2F X509v3 Authority Key Identifier: keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ed:01:42:ff:c5:cd:5c:76:3f:f1:ec:b6:99:af:30:f6:1c: 34:73:2b:ca:a0:0b:b1:9f:69:40:56:be:d3:b4:0b:90:00:92: 04:a9:26:4d:55:b0:63:57:88:b9:35:b5:0b:ec:25:1b:d0:16: ba:0f:4b:26:d0:c2:f7:a2:a0:60:52:a8:33:76:39:40:e3:06: b2:54:ea:75:fa:97:83:71:47:b1:03:6b:32:3b:26:a7:d8:79: 7a:30:a8:43:78:78:e7:9a:cf:1a:34:a6:7f:ee:a0:b1:45:46: 1f:3e:f6:67:da:a3:0a:5b:f9:8d:21:f3:17:ee:27:b1:e1:57: e6:8b:aa:ee:a0:c1:0e:c9:1a:0f:c7:de:66:42:e8:d8:4d:c7: f5:f5:27:80:9d:14:07:d2:05:1b:86:4f:bf:91:5a:00:74:cc: 58:63:35:32:56:5c:c4:d5:7b:c9:ca:cf:5d:fb:b5:72:fc:4c: 35:2a:bd:fc:0a:08:53:f7:fa:ed:45:e1:31:af:4d:79:b4:5e: 0f:ef:d4:29:d0:87:33:77:2b:84:93:3f:b5:d8:64:8c:6e:63: 1b:f7:51:44:7b:79:42:b7:6b:12:f2:dc:54:23:c7:94:d1:68: aa:a7:97:b1:eb:17:e5:31:d7:44:10:37:d8:ba:98:b9:12:e6: b3:a3:de:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKw21PzLxEBFlCX3pp1isoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWExNGNlOWQyNTIzOWI5MmZlNWFiY2U1MzI1MTUwNDRj MWFiYTQwHhcNMjYwOTEwMTAwMDU4WhcNMjYwOTExMTAwMDU4WjAzMTEwLwYDVQQD Eyg0NTI3MjYyNTkwYzkwYjdmNGI2MWE3MTEzMTNkMjFiMmE2YTU2MDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKfcogZXOftbSpYwzqnxROrhom2C U7hFjsH3tWQWo5NS1DriD/DD1/SEf2vaQ/+3+TohI4U1Ig+XkMKxarbrmTpi9kqi y7QUve97U1HrVN8mstBJKs2dLrGLRGJEyhiy/vKtDFRGMZNn0YLUFAaaO+G1xEiU ITWh2vGoEqWF97e+PuTO3Yakfhz7j2XfG90ar6AONRm+DobRaOBVbK0UMga9H2gp 5yyAhud8AuL8QftPFxsDNSMFpfqwzS/pgwdnO63KEbPrlhG4mykAWuAf2f532k5a BiuJb7QN5n78BSg+bunON+icVLfhMszy5/pfgGaAU2yAeKzd32veo+iNHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUnJiWQyQt/S2GnETE9IbKmpWAvMB8GA1UdIwQY MBaAFDUaFM6dJSObkv5avOUyUVBEwaukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEt Mjk1Mzg5NGIxZjZkLzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEtMjk1Mzg5NGIxZjZk LzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIu0BQv/F zVx2P/HstpmvMPYcNHMryqALsZ9pQFa+07QLkACSBKkmTVWwY1eIuTW1C+wlG9AW ug9LJtDC96KgYFKoM3Y5QOMGslTqdfqXg3FHsQNrMjsmp9h5ejCoQ3h455rPGjSm f+6gsUVGHz72Z9qjClv5jSHzF+4nseFX5ouq7qDBDskaD8feZkLo2E3H9fUngJ0U B9IFG4ZPv5FaAHTMWGM1MlZcxNV7ycrPXfu1cvxMNSq9/AoIU/f67UXhMa9NebRe D+/UKdCHM3crhJM/tdhkjG5jG/dRRHt5QrdrEvLcVCPHlNFoqqeXsesX5THXRBA3 2LqYuRLms6PeRg== -----END CERTIFICATE-----Generated at Thu Sep 10 16:15:06 2026 by rpki-client