$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: Bqs6Xi2JzZmCMJmyM1+QVZOiFEJgLmBKxYfkLvCaZDc= Subject key identifier: D2:40:4B:16:AC:BA:1A:44:04:46:02:C8:16:33:82:D3:7D:93:41:82 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019CE4EC53162B9AD360AA43409D967A65A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 188B Signing time: Fri 13 Mar 2026 02:00:18 +0000 Manifest this update: Fri 13 Mar 2026 02:00:18 +0000 Manifest next update: Sat 14 Mar 2026 02:00:18 +0000 Files and hashes: 1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=) 2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=) 3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=) 4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=) 5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=) 6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=) 7: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=) 8: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: 8yj/SM3CUGwsXTvmyJBirgfi1E2F73RgUtTG7oKy7mM=) 9: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=) 10: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=) 11: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=) 12: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=) 13: Y717qVS96YjYgAZkrscDp7OEvWY.roa (hash: bvdM3ELPzWVbs/s6wCevWXdZqt/DIba2BD86BPGfAIQ=) 14: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=) 15: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=) 16: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=) 17: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=) 18: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=) 19: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=) 20: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=) 21: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 02:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e4:ec:53:16:2b:9a:d3:60:aa:43:40:9d:96:7a:65:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Mar 13 02:00:18 2026 GMT Not After : Mar 14 02:00:18 2026 GMT Subject: CN=d2404b16acba1a44044602c8163382d37d934182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:ee:d3:e6:c2:0a:1e:73:ef:b1:70:cd:04: e8:25:61:1d:7c:93:2a:e5:76:35:04:c9:e1:15:5b: 08:02:7e:bb:a9:7c:76:40:31:87:6c:f1:e9:e6:32: e0:b0:c4:dc:b0:c9:46:4b:f1:b8:9a:a1:d4:03:0e: 8b:d7:98:71:45:d3:8d:86:3d:9c:ac:5c:fb:5e:aa: 39:91:8e:1a:0a:2f:0d:92:2d:d5:84:5f:48:15:ba: d8:08:7b:fd:54:6a:a8:d7:77:53:17:5a:8d:39:52: 0c:73:c1:0e:92:fd:fe:c7:19:58:61:8c:12:61:77: 4d:d3:86:74:7c:e7:ca:74:eb:26:12:e0:5c:42:28: 1d:87:1d:bc:32:23:cf:fc:93:32:e8:65:78:ce:6c: f2:8e:cf:bb:b9:d3:98:88:12:5c:9d:4e:4b:8b:11: 42:9c:7a:91:ee:50:c0:c3:83:62:e0:c3:9f:4a:06: e0:b9:84:3f:c5:31:db:b0:0a:e6:f9:60:1b:03:7f: 12:fe:95:71:b9:da:eb:f4:26:b4:93:11:90:87:10: fc:8b:ab:d6:ba:5c:5b:20:85:b6:b4:01:f7:86:bd: 61:95:76:45:64:93:d3:0d:40:b7:e5:2b:bf:ab:50: 95:fd:25:5f:74:14:52:1c:b5:c1:ec:ab:94:b2:c5: 83:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:40:4B:16:AC:BA:1A:44:04:46:02:C8:16:33:82:D3:7D:93:41:82 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:7a:b6:38:4c:15:28:19:2a:6f:1d:14:3d:0b:7c:1c:2d:15: 6f:e9:7e:5a:11:5e:60:ee:c9:df:23:6e:5d:e7:02:08:79:07: 21:e7:02:7c:2b:84:a3:b0:4e:61:dd:b9:d5:81:af:fd:cc:71: 98:d1:f8:62:7d:c3:7d:49:a4:f7:a4:93:0a:3e:e8:d1:6e:53: c0:de:fe:28:94:a5:9d:eb:7c:35:37:86:c5:71:95:10:bf:9c: e3:3f:c7:67:f0:e9:45:ea:af:3c:27:a6:26:3f:5f:b6:4f:4d: da:08:24:74:87:14:d8:95:95:bb:ae:73:75:d3:52:63:5b:67: 2c:19:81:46:4f:ba:d0:df:76:13:4b:02:79:42:0f:96:0c:91: d8:de:92:7c:8b:41:ba:2e:63:c4:12:80:af:f5:5b:c8:dc:b7: 42:6a:52:00:e2:2d:42:50:89:6d:90:d8:5e:c9:10:58:bc:f7: c0:b1:00:13:df:5a:21:ed:a7:3e:72:8c:f5:f7:5e:71:a4:91: ba:97:5a:74:24:d4:76:f8:4a:df:d8:16:48:72:bf:7f:72:7a: c9:0a:21:71:44:b1:6e:c6:83:7b:f2:1b:4b:9c:be:ef:60:f3: 21:47:6b:c2:e9:46:09:08:ed:fe:ae:9c:21:d0:ab:06:22:c9: e4:f6:70:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzk7FMWK5rTYKpDQJ2WemWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMzEzMDIwMDE4WhcNMjYwMzE0MDIwMDE4WjAzMTEwLwYDVQQD EyhkMjQwNGIxNmFjYmExYTQ0MDQ0NjAyYzgxNjMzODJkMzdkOTM0MTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRDu0+bCCh5z77FwzQToJWEdfJMq 5XY1BMnhFVsIAn67qXx2QDGHbPHp5jLgsMTcsMlGS/G4mqHUAw6L15hxRdONhj2c rFz7Xqo5kY4aCi8Nki3VhF9IFbrYCHv9VGqo13dTF1qNOVIMc8EOkv3+xxlYYYwS YXdN04Z0fOfKdOsmEuBcQigdhx28MiPP/JMy6GV4zmzyjs+7udOYiBJcnU5LixFC nHqR7lDAw4Ni4MOfSgbguYQ/xTHbsArm+WAbA38S/pVxudrr9Ca0kxGQhxD8i6vW ulxbIIW2tAH3hr1hlXZFZJPTDUC35Su/q1CV/SVfdBRSHLXB7KuUssWDNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJASxasuhpEBEYCyBYzgtN9k0GCMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXq2OEwV KBkqbx0UPQt8HC0Vb+l+WhFeYO7J3yNuXecCCHkHIecCfCuEo7BOYd251YGv/cxx mNH4Yn3DfUmk96STCj7o0W5TwN7+KJSlnet8NTeGxXGVEL+c4z/HZ/DpReqvPCem Jj9ftk9N2ggkdIcU2JWVu65zddNSY1tnLBmBRk+60N92E0sCeUIPlgyR2N6SfItB ui5jxBKAr/VbyNy3QmpSAOItQlCJbZDYXskQWLz3wLEAE99aIe2nPnKM9fdecaSR updadCTUdvhK39gWSHK/f3J6yQohcUSxbsaDe/IbS5y+72DzIUdrwulGCQjt/q6c IdCrBiLJ5PZwfg== -----END CERTIFICATE-----Generated at Fri Mar 13 12:30:40 2026 by rpki-client