$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft File: NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft (raw, json) Hash identifier: rdcuvBT53hl69QPT6x4vXSRmmjgAdjBaL4ucWW388Fg= Subject key identifier: F3:56:6E:6D:D5:22:A0:50:AA:59:59:09:4B:5E:21:70:A1:15:26:9D Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6 Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6 Certificate serial: 019FA8B8D28A32714F267763FC04C5A0FDCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft Manifest number: BC Signing time: Tue 28 Jul 2026 12:35:12 +0000 Manifest this update: Tue 28 Jul 2026 12:35:12 +0000 Manifest next update: Wed 29 Jul 2026 12:35:12 +0000 Files and hashes: 1: 0y3by7vrttBQ33nFxtmSxUGDWQA.roa (hash: yskrl2o2WvFQv0MLJ0YRc2QrdyAgKS3RiSkSxlcjALE=) 2: 3hGblXZHkfF0d3EHYGbTWnSiNQA.roa (hash: QJIZI7te5M7LXWjeDg4x4g3m7iNaESqw8YCnOYlGo0M=) 3: 5VTYF8RHuM9hcpAN3kwPNt4o2dA.roa (hash: Rd+pDgwOetwYm3BS2RYIzb2Wh7xKpHMttU38WFORi7g=) 4: 60bYQFIRxfiNZZtyrd8v132OhQo.roa (hash: yoh+4hIc2iMYV+qe0Nix7m4JiW6PSX9beruheEeiPEw=) 5: 7loHyHhPVpat4f9MglB51vsJoMM.roa (hash: yrqVhvEkaCCmAr5JwpBA5F/9OAaY7CpBz/lL4yE+mxI=) 6: B3bioRLbAVuR82UWFBCkWvTTCus.roa (hash: OfIk/DktZrTMIWs/c6M+Tk2imIiQjnhuduF8IZvnL3M=) 7: BVGtnyQZgRc-7rbdcsiLTPdcP5Q.roa (hash: N72INfSHSUGHX50eQ8hqjrtdk61/xPzA77YWindEdy4=) 8: J8Nu292jWRKPjq7q0neCyO9_j2A.roa (hash: s5eBVw7COyG6QNqTi8sSQVL4i8mVKcCaq0WtADvLryU=) 9: Mim9CmMQR3ozLGCE-Tgf11KxorA.roa (hash: dOIzZQ99FYcO+06vOL0/z+/bioujv1F4xxKsnMDaHCA=) 10: NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl (hash: sn0eMTzRfKrY4lMqP2c5un/Ojo71bacUscgLVBKzr2I=) 11: QSu8RTBS_GeHC7vNPlkN8FoxyTA.roa (hash: HcKvfKMp+RjVDwb3JERnNNpq1J/LEdftWRuUkuEkLrQ=) 12: RXV0FkyrSSURuYKBNp97mfkTveU.roa (hash: 4XLzFBeAf1dzQtEYF/WORTvsT5QBqOnVV9gSjQgj5oQ=) 13: Sx3lD8t_1d5XN5YvVg5ooDUsYHY.roa (hash: MVIq2OMyU9/DCJe+SAOqCNWgxjau22pregso3ngLxcc=) 14: Ud21UgAkszMTN1VkhwH7y54HQls.roa (hash: TDiL5RYpZd5bkb4q9qfKhjcV0EPJz6ihmUZhWMEEhwA=) 15: Vc48rKL3rg5h-ZOkYPMqFhAt-nY.roa (hash: kggOhBvOEFBZS+rMyd+otPlcng38mjnoQvO7twIO76Q=) 16: df8fyZGgZ-MHftFhqfv8cp43YrI.roa (hash: 6b+ndI23XxYj6JqzyvYHphqWGIdD3cmhum/VBu59tcE=) 17: e_cXOrDWwR3TeN2c1Kr1PKuViBk.roa (hash: kqkj5A92+iThaqjqDCNYYmFmC0iddYkUAgisdKJ0pF4=) 18: hmpZvaBGorcwo_ralAJScd3sWh8.roa (hash: lO3WbcBjBpqfFUJQMuuBp8iE0hr0b0CpOm1IZoQZmOA=) 19: i8t87RlNI6MGUTcU6g-xRThzehU.roa (hash: u4oceMG8JRLaB+aN8Oa4Sqot84g/vb4Jm4YvpXVq1PY=) 20: jRdAeFmN0KBRFg-nGD-IJy-4ZJg.roa (hash: nQMC3hCRmQ4D1KBdRyKzmttIb877jjd5D7xgwAT2WdI=) 21: mof6xABa_nGqS79lZW3MEn80zPI.roa (hash: GWP6CyDwsuU6R2JSLP0qzlZxMJto6qHE9P2Mbf7sWk8=) 22: nI1n5z6H4QpqTIdE1CU51Zoj8Ug.roa (hash: pekKDXCoFGjGVOlGNhx761IGJHBeUQoSqOrucczOuwM=) 23: oiFGNGuEBoRxwV4tr_6ltQZUOyM.roa (hash: hE47UOJjAbNPBn6kqwspGJbsZURO2T/edGWHIkT04NQ=) 24: y_FCqy7P7gN_dqUlYOs7ITZzZm0.roa (hash: iKfJV06hDO3bUGR/X++44B2zKvdsDsdX0WIZV7QDd4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:b8:d2:8a:32:71:4f:26:77:63:fc:04:c5:a0:fd:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367160181739568e578e1b5f57976a60398062e6 Validity Not Before: Jul 28 12:35:12 2026 GMT Not After : Jul 29 12:35:12 2026 GMT Subject: CN=f3566e6dd522a050aa5959094b5e2170a115269d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:61:66:64:b6:5b:b0:69:b6:24:f8:0b:1c: ee:4b:fb:05:c6:c9:73:67:2e:ec:11:20:5a:c6:3a: 3b:d3:b0:a6:1a:6a:50:5e:c5:61:7e:34:4d:73:9b: e1:be:b6:74:8b:1e:e2:6d:ab:ba:ec:19:57:60:c2: c1:22:3f:d7:ee:9e:27:69:c4:1e:09:93:66:ca:a4: ef:25:df:53:75:ea:ca:35:81:15:42:96:4d:66:78: af:0f:f0:e3:41:84:72:f4:49:d9:86:bf:59:3b:d1: 21:70:3f:0e:8d:b1:b4:7b:7a:e1:5e:7b:e5:c6:c0: 17:92:87:0e:b0:62:64:5e:48:37:dd:cb:83:28:5f: f5:02:03:70:c1:06:90:52:c1:e7:4f:b5:3b:ff:3a: 35:0d:c6:42:ad:e9:6a:93:7b:df:2e:c9:f9:0b:b6: ca:9b:67:46:0c:47:f8:a9:0c:73:4b:4d:ea:45:19: b6:a4:42:dc:07:ab:e0:cb:76:6d:cc:c0:53:31:37: fb:9e:68:b4:f2:cf:24:80:9f:24:7c:7f:6d:10:f6: 77:58:30:e6:36:f8:9b:ff:0e:8f:33:99:32:06:e2: e2:55:69:db:f0:1c:98:89:b8:67:d8:6a:e8:8f:7e: cb:b3:ea:37:35:57:a4:fe:07:4f:ff:0f:8c:cd:0d: 93:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:56:6E:6D:D5:22:A0:50:AA:59:59:09:4B:5E:21:70:A1:15:26:9D X509v3 Authority Key Identifier: keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:97:33:76:f7:24:dd:b7:bb:33:1d:ef:7c:44:e1:1d:55:bb: a4:72:7e:6f:4f:80:c2:9e:6d:8e:50:3d:70:40:4e:7b:09:80: 99:73:2a:82:6b:d8:3d:b7:ce:ce:fd:21:57:d2:57:62:94:b0: 6e:01:61:2c:e4:23:c3:91:ea:2c:48:fa:5c:c6:28:9f:90:00: 56:58:59:43:bc:53:9b:ab:21:c8:3e:b3:87:00:9f:d1:e4:8d: 1d:cb:0c:bb:5f:28:cd:e0:22:5c:4a:cd:c2:f5:fb:ed:55:e5: ac:8c:57:01:de:ca:df:86:46:18:0e:9d:09:7d:85:36:92:80: d9:8e:d9:3e:8a:b5:74:ba:86:57:ce:0d:d9:00:62:61:dc:56: 3a:06:b1:14:f1:e2:fd:59:2f:a8:8c:d6:52:8e:6b:7d:e7:52: ee:ec:1d:5b:d3:e4:73:a1:9a:4d:08:d3:07:06:69:e1:b5:3e: 8f:d7:d2:52:08:4d:77:02:28:d4:58:2e:00:28:50:38:c2:47: 5f:e5:e7:db:a5:85:3f:9d:e7:00:44:43:2a:2a:09:14:04:6d: 97:9a:b7:d3:58:49:52:1e:01:26:2a:3d:a9:62:0d:3f:e1:5d: 63:3a:fd:cc:da:cd:80:f6:0a:41:1a:27:23:14:26:87:68:7b: 87:41:89:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+ouNKKMnFPJndj/ATFoP3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NzE2MDE4MTczOTU2OGU1NzhlMWI1ZjU3OTc2YTYwMzk4 MDYyZTYwHhcNMjYwNzI4MTIzNTEyWhcNMjYwNzI5MTIzNTEyWjAzMTEwLwYDVQQD EyhmMzU2NmU2ZGQ1MjJhMDUwYWE1OTU5MDk0YjVlMjE3MGExMTUyNjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstthZmS2W7BptiT4CxzuS/sFxslz Zy7sESBaxjo707CmGmpQXsVhfjRNc5vhvrZ0ix7ibau67BlXYMLBIj/X7p4nacQe CZNmyqTvJd9TderKNYEVQpZNZnivD/DjQYRy9EnZhr9ZO9EhcD8OjbG0e3rhXnvl xsAXkocOsGJkXkg33cuDKF/1AgNwwQaQUsHnT7U7/zo1DcZCrelqk3vfLsn5C7bK m2dGDEf4qQxzS03qRRm2pELcB6vgy3ZtzMBTMTf7nmi08s8kgJ8kfH9tEPZ3WDDm Nvib/w6PM5kyBuLiVWnb8ByYibhn2Groj37Ls+o3NVek/gdP/w+MzQ2TtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNWbm3VIqBQqllZCUteIXChFSadMB8GA1UdIwQY MBaAFDZxYBgXOVaOV44bX1eXamA5gGLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYt ZWU4Y2ZkZDJlZDk0LzEvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYtZWU4Y2ZkZDJlZDk0 LzEvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZczdvck 3be7Mx3vfEThHVW7pHJ+b0+Awp5tjlA9cEBOewmAmXMqgmvYPbfOzv0hV9JXYpSw bgFhLOQjw5HqLEj6XMYon5AAVlhZQ7xTm6shyD6zhwCf0eSNHcsMu18ozeAiXErN wvX77VXlrIxXAd7K34ZGGA6dCX2FNpKA2Y7ZPoq1dLqGV84N2QBiYdxWOgaxFPHi /VkvqIzWUo5rfedS7uwdW9Pkc6GaTQjTBwZp4bU+j9fSUghNdwIo1FguAChQOMJH X+Xn26WFP53nAERDKioJFARtl5q301hJUh4BJio9qWINP+FdYzr9zNrNgPYKQRon IxQmh2h7h0GJeg== -----END CERTIFICATE-----Generated at Tue Jul 28 16:47:22 2026 by rpki-client