$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: JqoD3ftVwMgJu60Pgxe5zIk8V04d922ZxBqExJGiXDY= Subject key identifier: 3B:14:29:71:EF:01:4A:21:11:F7:F3:C4:AF:69:76:8D:34:67:69:16 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019DCE9950999F01270A507885A040E67A9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 1904 Signing time: Mon 27 Apr 2026 11:00:47 +0000 Manifest this update: Mon 27 Apr 2026 11:00:47 +0000 Manifest next update: Tue 28 Apr 2026 11:00:47 +0000 Files and hashes: 1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=) 2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=) 3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=) 4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=) 5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=) 6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=) 7: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=) 8: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: cfAIpjcAwjKXfv9w9LT2hCOQTKSf4lyghZOkH8ajyjw=) 9: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=) 10: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=) 11: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=) 12: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=) 13: Y717qVS96YjYgAZkrscDp7OEvWY.roa (hash: bvdM3ELPzWVbs/s6wCevWXdZqt/DIba2BD86BPGfAIQ=) 14: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=) 15: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=) 16: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=) 17: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=) 18: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=) 19: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=) 20: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=) 21: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:99:50:99:9f:01:27:0a:50:78:85:a0:40:e6:7a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Apr 27 11:00:47 2026 GMT Not After : Apr 28 11:00:47 2026 GMT Subject: CN=3b142971ef014a2111f7f3c4af69768d34676916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:e5:94:7c:6a:93:43:aa:c7:c7:3d:b0:68: 99:5c:e5:be:b5:7b:cf:03:67:1a:bd:99:dc:de:45: a3:94:1a:3c:4e:10:17:17:7d:1b:93:ca:cf:d3:19: 55:55:af:75:7b:c0:53:3e:b4:d4:b7:ae:16:1f:d7: 5b:2d:75:74:6f:2a:69:c7:1f:40:dd:4e:c1:b1:54: 7b:47:94:1a:97:98:5f:87:8f:4c:84:71:ca:4a:40: c1:a3:38:cd:54:14:f2:4f:3d:df:dd:01:e8:cc:27: 02:e2:04:75:97:84:37:25:2f:0b:ef:84:f2:7d:89: 5e:ac:e2:3b:c8:34:ca:0a:17:fe:21:6f:ae:60:f6: 1b:f3:22:c8:e8:39:ab:12:84:b1:51:02:cf:7b:9c: 93:30:18:cd:fd:84:a2:27:4f:57:5e:f3:72:d6:b0: ad:3e:36:f7:01:07:b0:9f:7b:25:27:ba:3a:39:23: ce:a9:dc:31:d1:a5:5b:ae:ee:18:ab:86:b1:0d:3e: a8:1d:33:3b:b8:ca:01:c0:88:ed:8c:05:c3:5c:be: 4b:6b:83:31:e3:35:ba:85:d0:37:4a:2d:9c:38:30: 41:1c:dc:f7:b5:14:01:4f:3c:7b:8b:15:07:41:f9: 0f:cb:14:dc:68:42:c6:be:0f:ce:46:aa:49:05:ce: 52:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:14:29:71:EF:01:4A:21:11:F7:F3:C4:AF:69:76:8D:34:67:69:16 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:61:09:72:4f:be:54:47:9f:06:f0:6e:e5:ca:10:da:55:b5: 99:18:aa:ae:cc:e6:08:01:22:4c:bc:b0:ce:a3:f3:a9:0c:e8: 70:95:f9:a7:e8:d5:e1:0f:57:68:4b:73:cb:1f:79:d2:a1:90: 7e:50:a5:d7:ac:bc:b7:32:43:a5:21:54:b7:89:98:05:70:3a: 17:48:86:8f:70:2b:c7:aa:60:b0:2e:79:6c:84:12:d1:92:d0: 9b:56:f9:22:b0:5a:d4:b8:10:79:db:30:a5:c0:c1:c1:50:0b: 51:df:21:2b:33:ed:27:8f:6a:35:71:ba:5e:39:85:af:17:eb: c5:af:da:c7:03:38:9b:f7:39:7c:45:80:e2:51:ac:b6:87:fc: 2f:bf:d6:ad:20:89:79:b5:a9:01:bc:36:dc:0d:08:4c:43:40: 40:eb:00:2a:8b:e6:01:8a:9d:7d:51:64:9a:b9:f7:d0:b1:f1: 6a:27:ff:35:ee:c0:1e:3e:b1:39:71:0a:b6:a0:6e:8e:92:53: d5:40:f3:98:e8:62:c2:35:3c:6f:05:e3:2e:75:e0:e7:0e:02: fe:aa:4c:7c:48:1a:bd:3f:f0:17:3d:14:4a:d1:05:43:7a:b0: cf:5e:cf:d1:7a:e1:82:71:aa:1c:fd:c8:7a:54:72:e7:cd:ac: 66:c3:61:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OmVCZnwEnClB4haBA5nqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwNDI3MTEwMDQ3WhcNMjYwNDI4MTEwMDQ3WjAzMTEwLwYDVQQD EygzYjE0Mjk3MWVmMDE0YTIxMTFmN2YzYzRhZjY5NzY4ZDM0Njc2OTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr3llHxqk0Oqx8c9sGiZXOW+tXvP A2cavZnc3kWjlBo8ThAXF30bk8rP0xlVVa91e8BTPrTUt64WH9dbLXV0byppxx9A 3U7BsVR7R5Qal5hfh49MhHHKSkDBozjNVBTyTz3f3QHozCcC4gR1l4Q3JS8L74Ty fYlerOI7yDTKChf+IW+uYPYb8yLI6DmrEoSxUQLPe5yTMBjN/YSiJ09XXvNy1rCt Pjb3AQewn3slJ7o6OSPOqdwx0aVbru4Yq4axDT6oHTM7uMoBwIjtjAXDXL5La4Mx 4zW6hdA3Si2cODBBHNz3tRQBTzx7ixUHQfkPyxTcaELGvg/ORqpJBc5SVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsUKXHvAUohEffzxK9pdo00Z2kWMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGEJck++ VEefBvBu5coQ2lW1mRiqrszmCAEiTLywzqPzqQzocJX5p+jV4Q9XaEtzyx950qGQ flCl16y8tzJDpSFUt4mYBXA6F0iGj3Arx6pgsC55bIQS0ZLQm1b5IrBa1LgQedsw pcDBwVALUd8hKzPtJ49qNXG6XjmFrxfrxa/axwM4m/c5fEWA4lGstof8L7/WrSCJ ebWpAbw23A0ITENAQOsAKovmAYqdfVFkmrn30LHxaif/Ne7AHj6xOXEKtqBujpJT 1UDzmOhiwjU8bwXjLnXg5w4C/qpMfEgavT/wFz0UStEFQ3qwz17P0XrhgnGqHP3I elRy582sZsNhMw== -----END CERTIFICATE-----Generated at Mon Apr 27 16:06:02 2026 by rpki-client