$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: RF/ozZFmhqpxWtNDARZvBFw4ftw/BMQnp8rHOwDjrXI= Subject key identifier: A5:89:9B:7D:AB:55:1A:60:F5:49:1F:4F:B3:36:CB:B6:A7:9C:AF:01 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 01A08BD669B420A76AB0ED1A035E23CCFAED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 1A71 Signing time: Thu 10 Sep 2026 15:01:19 +0000 Manifest this update: Thu 10 Sep 2026 15:01:19 +0000 Manifest next update: Fri 11 Sep 2026 15:01:19 +0000 Files and hashes: 1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=) 2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=) 3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=) 4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=) 5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=) 6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=) 7: II1ZVg6fHe7M0vm2TA9v3X8mC6o.roa (hash: p68UHIrzry/3qZoSeb+eQcb4FEiW01aytTp+ib7BRMg=) 8: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=) 9: Lh10WlvwLo5FMBkJ865-yYzNORs.roa (hash: KP2ztC96HoIm1Q+cl0xK6rS5NQtKIaU1qUzrl8/B9+s=) 10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: U6DOPZFiiYs6cG3V691aDDww7IxBkcEGn7YRTs+/FR8=) 11: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=) 12: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=) 13: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=) 14: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=) 15: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=) 16: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=) 17: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=) 18: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=) 19: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=) 20: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=) 21: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=) 22: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8b:d6:69:b4:20:a7:6a:b0:ed:1a:03:5e:23:cc:fa:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Sep 10 15:01:19 2026 GMT Not After : Sep 11 15:01:19 2026 GMT Subject: CN=a5899b7dab551a60f5491f4fb336cbb6a79caf01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:5c:94:d4:f8:8d:b3:1a:40:2a:c0:e9:f0: e8:42:92:fe:07:f1:91:75:e1:91:a2:05:69:9b:e0: 43:7d:7f:d3:86:e0:51:47:65:f7:20:f5:7b:c6:dc: 1b:ee:ac:5c:0b:18:5f:7b:a8:e9:f2:57:e9:1d:57: 8a:17:87:2f:00:e3:94:d9:65:4a:d5:04:44:89:92: 34:b0:42:10:16:f9:17:f9:fd:a8:00:b2:00:23:26: 6b:10:34:09:2e:1e:71:53:49:45:c2:b8:10:05:22: 8b:5a:91:7a:77:da:21:1b:6c:5c:81:7c:df:ad:6a: 56:df:e5:e2:6b:43:f1:94:03:a9:a9:e6:e8:fa:56: 5e:81:94:91:30:9b:4d:23:ea:a7:89:6a:bc:eb:1b: 4f:c8:94:a4:31:a0:89:ba:4d:85:bb:b5:13:d8:77: 20:f1:bd:2f:a8:27:90:0d:d9:6a:e3:0d:64:12:1c: 8b:d2:2e:5d:fc:9e:d3:63:90:ba:85:e3:65:5a:19: 9f:70:5e:59:9f:af:c7:da:28:d5:d0:62:3f:87:49: fc:0d:e7:d7:94:a5:8c:be:b8:17:d4:dc:7a:9e:bb: 06:0d:67:0a:1c:33:e2:18:fa:e8:2f:75:c6:7d:01: 94:43:3b:77:1f:a1:f7:84:78:fe:fd:be:ec:c3:10: 1b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:89:9B:7D:AB:55:1A:60:F5:49:1F:4F:B3:36:CB:B6:A7:9C:AF:01 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d0:01:81:ec:82:5a:c7:03:b9:a0:80:52:9d:2b:e3:0e:d6: 4a:89:65:c8:c3:90:0a:ab:f1:b1:fe:42:3c:ff:7d:9a:54:b2: a5:78:4c:ec:df:46:8b:9e:65:95:2e:23:93:24:dc:01:fa:f0: 38:78:33:97:c8:10:c7:7c:60:2d:72:50:af:e5:1f:93:5c:ac: cd:5a:f3:db:e8:08:1d:9a:84:59:f2:d4:52:d3:0c:99:54:2f: f9:08:9f:f6:b2:8b:22:1a:a3:b0:69:d1:18:d7:40:74:9d:9a: b6:f1:e3:1d:1c:57:4c:ae:d9:75:08:23:f6:0e:fe:a2:fc:46: ed:ef:5a:e4:d6:b4:a4:fc:76:e1:6a:75:f8:84:48:a3:f5:04: 75:ba:d0:3c:ee:d7:73:af:95:96:5c:54:bc:c7:82:6c:53:e3: 6c:14:e4:25:75:56:fc:86:48:0b:9a:13:15:53:b6:08:26:1d: 41:83:e9:4d:31:32:85:6e:62:cf:f8:bd:d2:d8:2b:7d:a9:b9: d3:35:43:cb:20:ae:8c:de:46:db:fd:98:d3:50:42:d6:b8:f4: c0:89:6f:f1:08:18:05:c0:03:e9:93:1b:46:62:89:c0:fe:86: ed:e9:1c:21:76:9d:45:9b:af:31:53:97:cd:d1:1f:dd:18:75: 3f:0c:01:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCL1mm0IKdqsO0aA14jzPrtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwOTEwMTUwMTE5WhcNMjYwOTExMTUwMTE5WjAzMTEwLwYDVQQD EyhhNTg5OWI3ZGFiNTUxYTYwZjU0OTFmNGZiMzM2Y2JiNmE3OWNhZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5tclNT4jbMaQCrA6fDoQpL+B/GR deGRogVpm+BDfX/ThuBRR2X3IPV7xtwb7qxcCxhfe6jp8lfpHVeKF4cvAOOU2WVK 1QREiZI0sEIQFvkX+f2oALIAIyZrEDQJLh5xU0lFwrgQBSKLWpF6d9ohG2xcgXzf rWpW3+Xia0PxlAOpqebo+lZegZSRMJtNI+qniWq86xtPyJSkMaCJuk2Fu7UT2Hcg 8b0vqCeQDdlq4w1kEhyL0i5d/J7TY5C6heNlWhmfcF5Zn6/H2ijV0GI/h0n8DefX lKWMvrgX1Nx6nrsGDWcKHDPiGProL3XGfQGUQzt3H6H3hHj+/b7swxAbcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWJm32rVRpg9UkfT7M2y7annK8BMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9ABgeyC WscDuaCAUp0r4w7WSollyMOQCqvxsf5CPP99mlSypXhM7N9Gi55llS4jkyTcAfrw OHgzl8gQx3xgLXJQr+Ufk1yszVrz2+gIHZqEWfLUUtMMmVQv+Qif9rKLIhqjsGnR GNdAdJ2atvHjHRxXTK7ZdQgj9g7+ovxG7e9a5Na0pPx24Wp1+IRIo/UEdbrQPO7X c6+VllxUvMeCbFPjbBTkJXVW/IZIC5oTFVO2CCYdQYPpTTEyhW5iz/i90tgrfam5 0zVDyyCujN5G2/2Y01BC1rj0wIlv8QgYBcAD6ZMbRmKJwP6G7ekcIXadRZuvMVOX zdEf3Rh1PwwB2Q== -----END CERTIFICATE-----Generated at Thu Sep 10 18:40:32 2026 by rpki-client