$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: lUi/3je4lhacFvPyHzfomakyzWR/AL0AGAKHlrSsJBc= Subject key identifier: C6:56:F1:F7:7B:F8:81:55:CB:F3:26:27:12:FF:3F:F1:69:27:00:0A Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 01A17AE004F50313564CA974C20B48FC70A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 1AEF Signing time: Tue 27 Oct 2026 01:01:04 +0000 Manifest this update: Tue 27 Oct 2026 01:01:04 +0000 Manifest next update: Wed 28 Oct 2026 01:01:04 +0000 Files and hashes: 1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=) 2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=) 3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=) 4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=) 5: 8lWN4QDt9-kKu64ySfRwVN76H-s.roa (hash: fsvIawpv60opfIRqs/4wEwhb7YsuNbtHT/NWrAb2g9Y=) 6: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=) 7: E-5k8AuzfOcX3SqS9OTgr4Y2cGc.roa (hash: VD5MiP6Qbnp3v86PVP+7qPjjEvY1HQm23e4B10bhx0o=) 8: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=) 9: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=) 10: Lh10WlvwLo5FMBkJ865-yYzNORs.roa (hash: KP2ztC96HoIm1Q+cl0xK6rS5NQtKIaU1qUzrl8/B9+s=) 11: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: 5v7vVayisGjYJed9X+mcGL1LCjaz0Hvsj6Q7zfrbXx8=) 12: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=) 13: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=) 14: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=) 15: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=) 16: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=) 17: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=) 18: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=) 19: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=) 20: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=) 21: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=) 22: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7a:e0:04:f5:03:13:56:4c:a9:74:c2:0b:48:fc:70:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Oct 27 01:01:04 2026 GMT Not After : Oct 28 01:01:04 2026 GMT Subject: CN=c656f1f77bf88155cbf3262712ff3ff16927000a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:81:08:c9:34:51:33:5a:15:33:0c:95:4b:e6: 0d:40:94:ad:7e:4d:d8:2c:5e:60:d3:8a:58:5f:f4: 70:97:51:17:5a:58:cf:fb:fe:c7:65:fd:9b:a7:59: 83:8d:13:e4:8a:e7:ae:49:78:f0:3c:1a:ea:27:a2: 62:1d:19:ae:4d:0d:cc:4d:37:ab:e2:09:59:de:58: c3:e8:83:91:1e:2d:39:d6:8a:5b:b5:00:a6:36:fc: 59:84:45:4d:c2:cb:00:20:f1:47:78:06:d8:d0:d3: 70:a5:3c:f3:59:37:33:a8:b6:98:e5:c8:8e:57:eb: 54:c8:56:59:20:d4:62:07:0c:bf:ad:67:c7:c7:4b: 4c:a2:61:8b:11:ad:ed:71:54:02:b2:cc:5d:c7:44: 99:43:47:7d:3a:d2:74:c3:00:fb:4a:cf:f3:9a:59: 26:12:09:71:e3:49:69:f7:4d:9b:f4:52:c7:ed:20: 1f:cb:68:7e:9a:60:40:4c:05:b4:c6:76:ea:a9:fe: 03:9e:37:8c:3b:5a:e4:e3:a8:cc:48:b1:3a:21:03: 15:dd:30:7a:9a:d0:fe:da:96:4d:45:6a:e1:27:0c: da:56:ce:9f:58:0e:38:94:f3:50:78:c0:6f:2a:ca: 93:26:7b:ac:9e:4c:8e:98:d8:29:a3:bd:09:97:bd: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:56:F1:F7:7B:F8:81:55:CB:F3:26:27:12:FF:3F:F1:69:27:00:0A X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b5:d0:67:3c:be:bc:e1:3d:bd:9c:f6:ff:1b:91:02:83:6d: 76:db:e8:34:a2:1e:d9:ca:55:29:cc:08:d3:e9:1a:01:90:53: 89:86:d0:c2:15:3b:4c:60:1c:b3:90:0a:d8:67:76:3a:f7:48: 74:7a:83:0c:12:35:e7:82:12:87:cd:b7:99:35:e0:39:8f:c5: 2c:04:92:7e:f3:e9:43:96:eb:a7:ff:fc:6b:25:1f:2b:b4:6a: ea:04:b1:d2:90:b1:63:9e:41:64:d2:54:97:8b:71:9a:79:26: 07:97:38:56:e7:c5:3e:82:c4:82:40:9e:41:9c:0f:23:d8:2b: 23:76:eb:f9:6e:f8:17:ad:52:47:20:d2:df:a1:e3:db:1b:d8: bb:67:58:8b:3a:04:e5:93:e1:23:22:2c:07:10:b3:ea:f6:0f: e2:f6:82:a0:ae:bf:71:3b:ab:4f:b1:d2:96:55:57:7c:96:de: fa:5a:50:a6:ca:d1:61:67:6e:03:bc:3d:58:b7:95:0a:1f:32: e8:22:1b:59:18:bb:c2:4b:1e:08:8f:05:c5:61:a2:5e:e3:34: b1:bb:dc:a0:bf:d6:c6:46:01:de:33:c8:a7:f5:01:88:a7:79: f8:4e:76:dc:92:00:bc:38:a4:79:c9:2a:3a:1b:31:ee:db:d2: 54:fa:b3:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF64AT1AxNWTKl0wgtI/HChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYxMDI3MDEwMTA0WhcNMjYxMDI4MDEwMTA0WjAzMTEwLwYDVQQD EyhjNjU2ZjFmNzdiZjg4MTU1Y2JmMzI2MjcxMmZmM2ZmMTY5MjcwMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YEIyTRRM1oVMwyVS+YNQJStfk3Y LF5g04pYX/Rwl1EXWljP+/7HZf2bp1mDjRPkiueuSXjwPBrqJ6JiHRmuTQ3MTTer 4glZ3ljD6IORHi051opbtQCmNvxZhEVNwssAIPFHeAbY0NNwpTzzWTczqLaY5ciO V+tUyFZZINRiBwy/rWfHx0tMomGLEa3tcVQCssxdx0SZQ0d9OtJ0wwD7Ss/zmlkm Eglx40lp902b9FLH7SAfy2h+mmBATAW0xnbqqf4DnjeMO1rk46jMSLE6IQMV3TB6 mtD+2pZNRWrhJwzaVs6fWA44lPNQeMBvKsqTJnusnkyOmNgpo70Jl71KtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZW8fd7+IFVy/MmJxL/P/FpJwAKMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLXQZzy+ vOE9vZz2/xuRAoNtdtvoNKIe2cpVKcwI0+kaAZBTiYbQwhU7TGAcs5AK2Gd2OvdI dHqDDBI154ISh823mTXgOY/FLASSfvPpQ5brp//8ayUfK7Rq6gSx0pCxY55BZNJU l4txmnkmB5c4VufFPoLEgkCeQZwPI9grI3br+W74F61SRyDS36Hj2xvYu2dYizoE 5ZPhIyIsBxCz6vYP4vaCoK6/cTurT7HSllVXfJbe+lpQpsrRYWduA7w9WLeVCh8y 6CIbWRi7wkseCI8FxWGiXuM0sbvcoL/WxkYB3jPIp/UBiKd5+E523JIAvDikeckq Ohsx7tvSVPqzYw== -----END CERTIFICATE-----Generated at Tue Oct 27 09:24:16 2026 by rpki-client