$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: vMXmZzjzMC6JaVJL8zWOyNSrr2/KqHBUg8PiW+NPzqU= Subject key identifier: 88:CA:A3:40:E3:ED:49:AC:EF:20:D0:E2:9C:D9:61:68:0E:1C:94:2F Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019FA229A15C234B39169E93956FA0B15E48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 19F8 Signing time: Mon 27 Jul 2026 06:01:04 +0000 Manifest this update: Mon 27 Jul 2026 06:01:04 +0000 Manifest next update: Tue 28 Jul 2026 06:01:04 +0000 Files and hashes: 1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=) 2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=) 3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=) 4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=) 5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=) 6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=) 7: II1ZVg6fHe7M0vm2TA9v3X8mC6o.roa (hash: p68UHIrzry/3qZoSeb+eQcb4FEiW01aytTp+ib7BRMg=) 8: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=) 9: Lh10WlvwLo5FMBkJ865-yYzNORs.roa (hash: KP2ztC96HoIm1Q+cl0xK6rS5NQtKIaU1qUzrl8/B9+s=) 10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: q4FODYPdtOKKaS/LRUyj+SDxrEI2wlZpz/kmbHGO+yI=) 11: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=) 12: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=) 13: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=) 14: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=) 15: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=) 16: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=) 17: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=) 18: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=) 19: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=) 20: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=) 21: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=) 22: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a2:29:a1:5c:23:4b:39:16:9e:93:95:6f:a0:b1:5e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jul 27 06:01:04 2026 GMT Not After : Jul 28 06:01:04 2026 GMT Subject: CN=88caa340e3ed49acef20d0e29cd961680e1c942f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:7f:39:07:f2:96:a7:0a:59:3d:c4:9c:63: ea:0f:1d:58:3b:a4:a2:9a:f3:33:45:c4:ed:a0:0f: 1e:ad:7d:b5:8e:8c:1b:8d:90:a5:ed:30:70:1e:dc: d9:d6:87:20:e6:92:8a:0c:14:b9:41:6f:20:0b:3f: 47:02:36:f1:2f:65:2e:c0:56:bc:c7:91:f8:1f:69: 10:7d:ee:6f:56:e2:02:d1:4b:67:7f:fb:bd:0b:fb: f2:a8:89:7b:26:a5:c1:c6:ee:95:6f:89:b9:4f:b3: 6c:d2:23:72:b0:47:d6:22:c2:f1:69:8a:bc:28:5a: 88:32:0f:f7:f1:db:c1:b2:2f:ba:45:bf:94:b4:9e: ce:42:65:6c:8d:6b:52:72:f5:97:3f:50:2a:9a:fd: 9d:04:dd:33:cc:4a:fb:cb:c2:a1:2b:9b:1e:25:6e: a7:b6:27:98:b5:79:f2:19:f5:85:c8:9d:58:44:0f: c3:84:81:4f:0a:9c:13:ee:aa:75:61:20:2a:3e:67: 27:0b:8e:9a:dc:fb:ab:7b:d7:76:7d:56:18:62:3c: 5b:b6:b7:26:5e:99:9a:34:89:cc:72:aa:52:41:01: 9f:2f:e5:c7:3c:37:6e:73:40:11:9f:0a:20:cb:9b: 7a:02:b2:1c:ec:8e:fc:8d:19:a2:47:36:bc:e9:f6: 2a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CA:A3:40:E3:ED:49:AC:EF:20:D0:E2:9C:D9:61:68:0E:1C:94:2F X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:45:c9:ae:40:99:37:d6:93:79:93:87:c0:52:c9:5a:f9:85: 8a:42:a1:61:77:8b:5b:c0:b8:b4:68:3b:14:b1:ce:82:f3:1b: fd:3b:0a:89:1d:ad:01:38:6c:4a:55:eb:7f:f1:c4:29:11:e7: 85:65:21:00:47:6a:d1:e4:13:2f:fc:e9:c6:8f:5c:99:cf:94: 36:fa:22:8f:62:46:4c:2f:96:1f:41:aa:53:30:68:06:d4:19: e8:a4:de:2d:20:10:f8:71:6a:19:4c:d4:46:6a:d1:2f:a0:13: 84:0d:07:cd:62:c9:c8:e2:c2:1e:9d:9f:e4:72:bb:4b:61:fd: 69:e3:6e:3f:ce:86:8c:c9:e5:2c:60:b6:3f:52:8c:2e:b4:56: 06:38:f8:56:d9:73:29:4a:2d:f4:8c:72:1c:97:80:c9:26:71: 97:9e:56:a8:c9:3d:c7:39:b9:9a:4e:5b:70:ef:57:48:e1:fe: 42:e9:95:4b:91:19:a6:c9:e4:4e:c2:ca:49:a4:d4:43:ed:bf: 51:c9:6e:56:06:72:2b:8e:75:e0:80:3c:bf:4d:db:96:3f:db: c7:7a:8b:1a:22:61:72:eb:a0:00:af:90:7e:24:5b:af:67:b6: ee:f3:65:f7:48:40:d9:4e:9f:da:79:cb:77:da:bf:f8:41:e9: 0e:78:d9:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+iKaFcI0s5Fp6TlW+gsV5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwNzI3MDYwMTA0WhcNMjYwNzI4MDYwMTA0WjAzMTEwLwYDVQQD Eyg4OGNhYTM0MGUzZWQ0OWFjZWYyMGQwZTI5Y2Q5NjE2ODBlMWM5NDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFZ/OQfylqcKWT3EnGPqDx1YO6Si mvMzRcTtoA8erX21jowbjZCl7TBwHtzZ1ocg5pKKDBS5QW8gCz9HAjbxL2UuwFa8 x5H4H2kQfe5vVuIC0Utnf/u9C/vyqIl7JqXBxu6Vb4m5T7Ns0iNysEfWIsLxaYq8 KFqIMg/38dvBsi+6Rb+UtJ7OQmVsjWtScvWXP1Aqmv2dBN0zzEr7y8KhK5seJW6n tieYtXnyGfWFyJ1YRA/DhIFPCpwT7qp1YSAqPmcnC46a3Pure9d2fVYYYjxbtrcm XpmaNInMcqpSQQGfL+XHPDduc0ARnwogy5t6ArIc7I78jRmiRza86fYqowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjKo0Dj7Ums7yDQ4pzZYWgOHJQvMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0XJrkCZ N9aTeZOHwFLJWvmFikKhYXeLW8C4tGg7FLHOgvMb/TsKiR2tAThsSlXrf/HEKRHn hWUhAEdq0eQTL/zpxo9cmc+UNvoij2JGTC+WH0GqUzBoBtQZ6KTeLSAQ+HFqGUzU RmrRL6AThA0HzWLJyOLCHp2f5HK7S2H9aeNuP86GjMnlLGC2P1KMLrRWBjj4Vtlz KUot9IxyHJeAySZxl55WqMk9xzm5mk5bcO9XSOH+QumVS5EZpsnkTsLKSaTUQ+2/ UcluVgZyK4514IA8v03blj/bx3qLGiJhcuugAK+QfiRbr2e27vNl90hA2U6f2nnL d9q/+EHpDnjZZg== -----END CERTIFICATE-----Generated at Mon Jul 27 08:30:28 2026 by rpki-client