$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: rBg/5ut32iO1ab2t7BUqqBZFILyA1TblSnhDfpHqjQM= Subject key identifier: 7D:50:E3:81:CB:93:86:E6:C3:60:C3:AF:17:F1:39:4B:EE:22:74:0B Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019D9C2D37729A505BCE7F917421683A9C4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 18BA Signing time: Fri 17 Apr 2026 16:01:42 +0000 Manifest this update: Fri 17 Apr 2026 16:01:42 +0000 Manifest next update: Sat 18 Apr 2026 16:01:42 +0000 Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=) 2: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=) 3: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=) 4: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=) 5: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=) 6: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=) 7: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=) 8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: QlXVx1bDuQWr49mLMhg3I8+QR6/cJ1opuSiONuWNep4=) 9: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=) 10: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=) 11: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=) 12: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=) 13: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=) 14: jIciP85UIj70W740hLw1umDPl8U.roa (hash: wrY0tv/GkQoOFiGmbPrfGkCZnbqrkkaA3u07XZ08OZM=) 15: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=) 16: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=) 17: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=) 18: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=) 19: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=) 20: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9c:2d:37:72:9a:50:5b:ce:7f:91:74:21:68:3a:9c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Apr 17 16:01:42 2026 GMT Not After : Apr 18 16:01:42 2026 GMT Subject: CN=7d50e381cb9386e6c360c3af17f1394bee22740b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:10:07:55:95:c4:16:19:6a:53:bd:1a:83: 24:7a:42:71:cd:5c:58:38:ac:f4:d6:b4:34:51:d0: 73:99:75:cb:20:0e:d9:c9:7a:bd:37:b3:e3:03:9e: 6b:d8:11:f9:8f:29:1f:df:08:29:c6:ec:ba:ad:99: 50:6a:db:a7:01:e4:91:18:11:ad:b3:39:1d:8e:d8: 20:ee:ab:3d:f3:13:8a:a8:65:20:bf:1a:21:1e:67: 6f:7d:27:ec:e8:c5:70:d6:48:a2:46:24:cb:36:14: 37:2c:90:fb:3f:9c:e2:86:24:5a:ca:de:7d:50:d4: 97:d5:00:57:dd:da:86:05:d5:14:47:42:07:f0:4f: 1e:ae:05:59:e8:f7:65:8e:b7:7c:b0:43:33:5e:76: b2:e2:f7:45:a0:9b:05:95:8f:bd:95:11:fd:52:c0: 58:49:02:63:f2:12:4d:0f:06:89:fb:8a:3c:68:1f: 6e:9a:6f:ee:de:57:af:78:f2:28:65:c0:f2:c3:0f: ad:1d:10:bd:fa:9e:31:6f:39:a3:90:a1:b2:0f:c4: 42:06:fb:0b:7b:4c:b7:ea:ba:1a:d5:56:c9:1c:f9: d0:38:fd:ba:58:83:89:37:e3:ab:83:68:8d:ea:ea: 65:a3:05:0f:1b:7e:dd:fd:05:8b:a1:f0:cb:67:10: e0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:50:E3:81:CB:93:86:E6:C3:60:C3:AF:17:F1:39:4B:EE:22:74:0B X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:61:cd:2b:23:94:7e:1e:06:e9:5d:7c:1a:27:5b:40:30:ee: 5a:9d:76:8b:94:fe:5d:18:6b:23:87:62:76:20:b1:94:92:07: 6a:22:ef:ab:d5:dd:4d:b1:1c:11:aa:da:69:8b:84:fc:0b:38: cd:45:d2:78:33:5f:56:73:70:26:7a:39:91:9d:87:3a:f3:bb: e0:4d:6c:43:b4:bc:17:ad:09:3e:28:ae:a2:c6:e4:aa:c2:f8: 8a:87:ac:97:64:a1:de:11:10:d1:9a:21:a0:70:1c:2a:dd:33: 0c:7e:99:0f:73:01:07:64:04:21:b6:32:89:52:e2:d5:06:17: 8e:e5:e0:7d:63:88:1e:c8:8b:8d:6f:a2:b1:8f:9e:e2:e3:a4: 8c:c8:90:5e:3f:a1:5e:47:d0:30:9a:18:33:16:77:e3:2b:c8: c1:25:4b:19:cf:19:78:2f:e4:8b:91:11:51:f2:62:33:63:7f: 90:ff:20:46:0d:19:90:55:e6:42:6b:c6:aa:ad:b0:3d:cb:ca: b8:fb:39:93:23:b5:e2:75:e8:cf:3f:7f:f2:97:df:a5:c6:dd: bb:ed:79:e9:cf:99:92:f8:d7:5d:b9:08:a1:e0:5b:56:a8:50: a6:35:19:2a:cd:6d:17:eb:e5:02:d7:be:25:98:33:df:ce:7a: 16:4f:b8:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2cLTdymlBbzn+RdCFoOpxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwNDE3MTYwMTQyWhcNMjYwNDE4MTYwMTQyWjAzMTEwLwYDVQQD Eyg3ZDUwZTM4MWNiOTM4NmU2YzM2MGMzYWYxN2YxMzk0YmVlMjI3NDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN4QB1WVxBYZalO9GoMkekJxzVxY OKz01rQ0UdBzmXXLIA7ZyXq9N7PjA55r2BH5jykf3wgpxuy6rZlQatunAeSRGBGt szkdjtgg7qs98xOKqGUgvxohHmdvfSfs6MVw1kiiRiTLNhQ3LJD7P5zihiRayt59 UNSX1QBX3dqGBdUUR0IH8E8ergVZ6Pdljrd8sEMzXnay4vdFoJsFlY+9lRH9UsBY SQJj8hJNDwaJ+4o8aB9umm/u3levePIoZcDyww+tHRC9+p4xbzmjkKGyD8RCBvsL e0y36roa1VbJHPnQOP26WIOJN+Org2iN6uplowUPG37d/QWLofDLZxDgpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1Q44HLk4bmw2DDrxfxOUvuInQLMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGHNKyOU fh4G6V18GidbQDDuWp12i5T+XRhrI4didiCxlJIHaiLvq9XdTbEcEaraaYuE/As4 zUXSeDNfVnNwJno5kZ2HOvO74E1sQ7S8F60JPiiuosbkqsL4ioesl2Sh3hEQ0Zoh oHAcKt0zDH6ZD3MBB2QEIbYyiVLi1QYXjuXgfWOIHsiLjW+isY+e4uOkjMiQXj+h XkfQMJoYMxZ34yvIwSVLGc8ZeC/ki5ERUfJiM2N/kP8gRg0ZkFXmQmvGqq2wPcvK uPs5kyO14nXozz9/8pffpcbdu+156c+ZkvjXXbkIoeBbVqhQpjUZKs1tF+vlAte+ JZgz3856Fk+4Tw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:55:49 2026 by rpki-client