$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: KjI+IjeEWCAQjRcP0I0ozaxNnOhnjn+wFm1btsUzrNQ= Subject key identifier: D6:5B:2C:55:55:2F:E0:00:FA:78:38:DA:CF:46:86:1B:CC:53:3F:27 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019EC36E31E517417E187227A0493CCB1484 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 1954 Signing time: Sun 14 Jun 2026 00:00:39 +0000 Manifest this update: Sun 14 Jun 2026 00:00:39 +0000 Manifest next update: Mon 15 Jun 2026 00:00:39 +0000 Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=) 2: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=) 3: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=) 4: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=) 5: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=) 6: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=) 7: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=) 8: NS1ZBrUo9cL2RzJl2DoZEtlJIgU.roa (hash: WlCP3A2g4WxvOy7MlXQKTM7lTwf6ExPkVhpn2oHTNY0=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: L46vXiRwNkHQnIeU3PdyOXlcwLp+DG+Bs+KMBS0EUb0=) 10: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=) 11: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=) 12: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=) 13: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=) 14: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=) 15: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=) 16: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=) 17: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=) 18: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=) 19: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=) 20: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Jun 2026 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c3:6e:31:e5:17:41:7e:18:72:27:a0:49:3c:cb:14:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jun 14 00:00:39 2026 GMT Not After : Jun 15 00:00:39 2026 GMT Subject: CN=d65b2c55552fe000fa7838dacf46861bcc533f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:49:d5:7a:fc:40:d2:ad:9b:57:ec:4d:a0:96: 1d:10:ba:cd:f7:5c:0a:c0:f8:7e:d6:cf:c6:10:0a: bb:19:94:3b:e0:30:cb:00:80:ac:7c:b1:1f:36:01: eb:fd:b6:c1:b5:00:85:89:a7:90:ce:9c:4f:e7:23: 37:f7:97:b5:e3:05:4c:66:c4:c5:f2:db:5d:06:4e: f7:37:4a:52:dd:41:25:4f:60:e8:bc:51:83:ee:74: de:b9:a9:4e:f7:65:2c:ec:db:b2:79:dd:1d:0e:b1: 10:17:1b:1a:ad:24:88:70:92:44:4b:14:b9:15:a9: 2f:20:fc:d1:db:ae:39:7a:63:82:8c:a2:13:65:b1: cc:a1:06:61:5f:f0:06:86:6c:ec:62:f5:20:75:76: a8:b9:98:0b:01:63:2d:73:42:40:6d:dd:16:3b:9b: 59:1e:14:75:66:93:3e:92:72:d9:2d:be:90:fb:f4: d9:83:f1:fe:31:cd:47:74:00:32:41:12:47:75:f9: a7:05:e4:11:ad:db:30:b3:47:64:7f:6f:ff:22:9a: 26:5c:52:3c:66:b5:f5:6f:11:c7:26:b7:2a:7c:bb: 4a:42:db:38:af:c9:50:e8:83:a4:b9:20:8a:92:4b: 8b:7a:88:f1:4f:8e:d7:03:c7:b8:90:9e:1c:3d:36: bd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5B:2C:55:55:2F:E0:00:FA:78:38:DA:CF:46:86:1B:CC:53:3F:27 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:fb:29:3b:44:3c:a2:72:18:0f:0c:e6:13:ad:be:cb:92:c1: 05:93:33:da:cb:47:82:48:c4:17:32:6d:8b:67:74:99:91:b8: ab:29:ef:3f:df:e3:92:fc:91:9d:16:42:68:9d:85:65:96:53: 31:c8:5e:07:37:32:eb:84:cb:42:a6:66:f2:43:e3:e3:df:c4: 2e:93:6e:7f:6d:af:6f:b6:d7:ab:67:91:4a:a8:e3:35:ed:5c: b6:53:7d:99:96:f9:d0:61:ad:7d:09:14:58:12:47:b9:97:f1: cc:ff:91:0b:db:85:31:f9:15:ab:78:a9:16:2e:2f:d7:b1:a8: 59:f6:51:b9:45:a8:00:8b:6e:9b:8c:91:6f:5d:6d:24:fe:76: ce:95:ef:d3:d7:48:de:f4:cc:8a:3f:c7:88:9b:e6:c3:52:96: d9:e2:26:2f:6d:c0:70:9f:e0:48:17:3a:34:28:1e:74:d1:90: 2a:e2:21:98:49:79:67:51:a5:a0:4a:f0:18:e2:23:24:2c:8e: 4c:35:9c:a7:73:96:79:11:98:f0:fe:cf:1c:da:1e:68:15:2a: 7f:40:51:ae:ee:2a:84:c7:28:94:93:69:79:49:40:35:74:26: 5a:c0:8a:93:2d:2c:32:21:b2:77:40:b1:41:ea:f9:aa:59:69: c3:41:55:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7DbjHlF0F+GHInoEk8yxSEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwNjE0MDAwMDM5WhcNMjYwNjE1MDAwMDM5WjAzMTEwLwYDVQQD EyhkNjViMmM1NTU1MmZlMDAwZmE3ODM4ZGFjZjQ2ODYxYmNjNTMzZjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9knVevxA0q2bV+xNoJYdELrN91wK wPh+1s/GEAq7GZQ74DDLAICsfLEfNgHr/bbBtQCFiaeQzpxP5yM395e14wVMZsTF 8ttdBk73N0pS3UElT2DovFGD7nTeualO92Us7Nuyed0dDrEQFxsarSSIcJJESxS5 FakvIPzR2645emOCjKITZbHMoQZhX/AGhmzsYvUgdXaouZgLAWMtc0JAbd0WO5tZ HhR1ZpM+knLZLb6Q+/TZg/H+Mc1HdAAyQRJHdfmnBeQRrdsws0dkf2//IpomXFI8 ZrX1bxHHJrcqfLtKQts4r8lQ6IOkuSCKkkuLeojxT47XA8e4kJ4cPTa9VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZbLFVVL+AA+ng42s9GhhvMUz8nMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufspO0Q8 onIYDwzmE62+y5LBBZMz2stHgkjEFzJti2d0mZG4qynvP9/jkvyRnRZCaJ2FZZZT McheBzcy64TLQqZm8kPj49/ELpNuf22vb7bXq2eRSqjjNe1ctlN9mZb50GGtfQkU WBJHuZfxzP+RC9uFMfkVq3ipFi4v17GoWfZRuUWoAItum4yRb11tJP52zpXv09dI 3vTMij/HiJvmw1KW2eImL23AcJ/gSBc6NCgedNGQKuIhmEl5Z1GloErwGOIjJCyO TDWcp3OWeRGY8P7PHNoeaBUqf0BRru4qhMcolJNpeUlANXQmWsCKky0sMiGyd0Cx Qer5qllpw0FVug== -----END CERTIFICATE-----Generated at Sun Jun 14 07:10:03 2026 by rpki-client