$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: +8/5PdWGQhcNxikXLRF6IQfMfpcz5R/sFo80m1arexo= Subject key identifier: 05:A6:8D:82:DB:B7:C5:2C:B5:75:F9:22:EF:77:73:FD:11:2B:74:02 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 01A12C2071952ABB74045D6CC7FD848FF671 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 1A95 Signing time: Sun 11 Oct 2026 18:01:26 +0000 Manifest this update: Sun 11 Oct 2026 18:01:26 +0000 Manifest next update: Mon 12 Oct 2026 18:01:26 +0000 Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=) 2: 4KhhGZX4PWjUQYpl6SjJvfil8R8.roa (hash: NcodsY717TYNNKDjkC9G80EurSBxppwYgSyODBkbvvM=) 3: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=) 4: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=) 5: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=) 6: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=) 7: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=) 8: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: +RC6zmXOymals3LPnfiiAUJkeF1plEjto7NH0XX5Ydk=) 10: QCih5l8ms9ZT9yQSt5C9uapsYYM.roa (hash: /QPJzCsQ+24ZR6+p5oNE2OgeX+eucsMYEmdpUXhs184=) 11: QceFKAB4kI1h3y2cqErIv8Hv4rw.roa (hash: UDlYs0IX2g9lgiSFVYGg7GDtdoJREyShW9ksWrzv5jY=) 12: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=) 13: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=) 14: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=) 15: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=) 16: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=) 17: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=) 18: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=) 19: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=) 20: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=) 21: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=) 22: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 18:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:2c:20:71:95:2a:bb:74:04:5d:6c:c7:fd:84:8f:f6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Oct 11 18:01:26 2026 GMT Not After : Oct 12 18:01:26 2026 GMT Subject: CN=05a68d82dbb7c52cb575f922ef7773fd112b7402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:32:5b:5c:ad:ef:db:7d:b3:f0:37:54:41:89: 3f:f0:21:6e:13:b5:b4:f1:97:29:a8:bf:0e:45:69: 1d:bd:82:aa:f6:35:70:bf:5a:08:80:7d:ca:1e:f8: 05:d8:85:b2:c2:0f:17:7c:e0:05:7b:93:05:f2:b8: 58:bc:e7:b5:96:0f:86:74:ac:74:7c:25:15:34:f0: d8:30:30:54:54:d8:3c:e8:62:d8:46:a8:8b:98:7c: 6d:b7:6a:f3:5c:af:cb:9a:67:17:fe:11:40:7c:be: 7a:55:f1:c9:ce:b0:63:4c:7d:7b:9c:c9:ad:d3:83: ac:6e:16:bc:c4:d2:ad:aa:09:ae:0f:35:f8:da:12: 2c:cb:19:48:9d:20:79:bc:9e:9d:7e:e6:f4:d9:48: 74:b3:ff:3a:57:93:ea:d5:c6:ce:53:8e:2f:db:ef: dd:19:a1:6a:0e:a3:7d:4a:59:aa:94:ee:e8:64:97: 4b:84:5c:df:06:f3:4b:93:ce:83:cc:a3:5f:4b:30: 30:fa:ae:9c:8d:e1:4e:2f:9a:f9:ef:f5:ea:ab:8d: a8:1b:3f:82:6a:e1:8a:b9:d1:2d:cd:05:43:fe:e9: e5:fc:97:b1:f6:e2:ba:ef:81:9b:fd:f9:0c:e8:87: 91:35:ea:8e:5e:ec:07:1c:be:98:f6:4a:63:0b:92: 86:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A6:8D:82:DB:B7:C5:2C:B5:75:F9:22:EF:77:73:FD:11:2B:74:02 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:88:b7:3b:18:69:b7:e8:1f:6b:d8:71:e4:53:5d:50:cf:b3: ff:10:37:3e:11:78:1d:d1:25:90:29:5f:77:84:6a:ff:d1:de: aa:37:20:3f:bc:21:67:9e:48:15:fa:0e:52:6c:a5:e3:84:d1: 82:37:28:76:28:ba:48:68:7d:7b:56:03:92:9f:0c:de:95:3c: 62:db:ae:5a:84:8e:79:8d:52:d1:6f:c9:fe:f9:28:ae:ef:2f: 16:3d:81:92:b2:82:5f:ed:6b:e8:e7:87:1f:f3:f6:26:7e:de: 9d:54:74:71:b7:ab:c9:4b:4b:5c:f4:56:07:d7:64:72:8f:38: 98:91:1c:f0:d2:19:cf:c8:1f:32:a1:02:9a:97:88:f1:94:51: b9:14:bd:5c:17:c4:03:f0:b5:7c:57:d4:46:2b:a3:29:3c:c8: 1d:45:e2:c0:aa:b7:5a:fc:84:f6:e9:97:25:e0:1e:f0:e9:e6: 31:99:e1:09:88:cf:c5:d7:b7:ba:c2:6e:0f:8b:e0:70:ae:ae: 8e:99:03:21:7b:b7:c8:54:ca:55:a7:f4:ae:d9:27:37:91:f6: f3:6c:bb:a8:8a:ab:7c:83:9e:2d:f0:29:51:49:0e:bd:92:74: 12:bd:00:55:a0:2d:22:29:cc:64:d8:1c:bf:7d:be:22:aa:5f: b5:50:69:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEsIHGVKrt0BF1sx/2Ej/ZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYxMDExMTgwMTI2WhcNMjYxMDEyMTgwMTI2WjAzMTEwLwYDVQQD EygwNWE2OGQ4MmRiYjdjNTJjYjU3NWY5MjJlZjc3NzNmZDExMmI3NDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zJbXK3v232z8DdUQYk/8CFuE7W0 8ZcpqL8ORWkdvYKq9jVwv1oIgH3KHvgF2IWywg8XfOAFe5MF8rhYvOe1lg+GdKx0 fCUVNPDYMDBUVNg86GLYRqiLmHxtt2rzXK/LmmcX/hFAfL56VfHJzrBjTH17nMmt 04Osbha8xNKtqgmuDzX42hIsyxlInSB5vJ6dfub02Uh0s/86V5Pq1cbOU44v2+/d GaFqDqN9SlmqlO7oZJdLhFzfBvNLk86DzKNfSzAw+q6cjeFOL5r57/Xqq42oGz+C auGKudEtzQVD/unl/Jex9uK674Gb/fkM6IeRNeqOXuwHHL6Y9kpjC5KGOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWmjYLbt8UstXX5Iu93c/0RK3QCMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtoi3Oxhp t+gfa9hx5FNdUM+z/xA3PhF4HdElkClfd4Rq/9HeqjcgP7whZ55IFfoOUmyl44TR gjcodii6SGh9e1YDkp8M3pU8YtuuWoSOeY1S0W/J/vkoru8vFj2BkrKCX+1r6OeH H/P2Jn7enVR0cberyUtLXPRWB9dkco84mJEc8NIZz8gfMqECmpeI8ZRRuRS9XBfE A/C1fFfURiujKTzIHUXiwKq3WvyE9umXJeAe8OnmMZnhCYjPxde3usJuD4vgcK6u jpkDIXu3yFTKVaf0rtknN5H282y7qIqrfIOeLfApUUkOvZJ0Er0AVaAtIinMZNgc v32+IqpftVBpPA== -----END CERTIFICATE-----Generated at Mon Oct 12 04:58:16 2026 by rpki-client