$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: eANCKRb5JiUhuUEd45OcEMfLk7JzQCKMoxcIkcwZsLA= Subject key identifier: A2:23:17:84:69:8E:94:0E:FA:53:94:B8:A0:E9:9B:B5:B3:35:79:55 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019CAEA35EB34E1A8F3DE9313BEA25CB4F39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 183F Signing time: Mon 02 Mar 2026 13:01:07 +0000 Manifest this update: Mon 02 Mar 2026 13:01:07 +0000 Manifest next update: Tue 03 Mar 2026 13:01:07 +0000 Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=) 2: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=) 3: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=) 4: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=) 5: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=) 6: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=) 7: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=) 8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: 0WUCffo9vrlEtfULeaTZpaKBhPlKmW0F/RIO9x6B5cE=) 9: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=) 10: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=) 11: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=) 12: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=) 13: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=) 14: jIciP85UIj70W740hLw1umDPl8U.roa (hash: wrY0tv/GkQoOFiGmbPrfGkCZnbqrkkaA3u07XZ08OZM=) 15: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=) 16: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=) 17: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=) 18: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=) 19: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=) 20: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ae:a3:5e:b3:4e:1a:8f:3d:e9:31:3b:ea:25:cb:4f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Mar 2 13:01:07 2026 GMT Not After : Mar 3 13:01:07 2026 GMT Subject: CN=a2231784698e940efa5394b8a0e99bb5b3357955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:92:16:0a:11:e6:c6:c8:b3:de:d1:f5:a3:af: 28:62:50:39:97:00:88:92:c0:3b:a1:c7:77:d0:ad: 48:34:2b:70:38:0d:b4:8c:cb:a4:3f:66:f7:69:c7: 87:99:09:ba:44:dc:15:7b:87:16:f5:b2:8d:ca:4a: 76:33:b4:7d:14:2f:a3:11:40:60:0d:4a:ab:d0:bb: f6:e0:3b:2d:e0:78:8b:42:19:d0:a1:44:13:b3:93: ac:8d:0c:07:42:4e:86:c9:72:cd:0d:96:7e:c2:88: e5:be:44:73:23:96:25:ac:a8:61:83:f8:c2:77:bc: 21:8b:4b:a0:2c:8c:46:c1:99:18:40:07:28:83:e5: 8b:ac:7b:03:3a:df:95:33:bf:83:6e:82:01:55:ce: 99:2f:a7:9e:76:81:95:98:bb:dc:53:c6:0f:a7:08: 8c:2f:3f:4e:a2:33:48:28:9a:08:99:05:64:6e:af: 9a:6f:81:5c:09:9e:0a:61:5d:58:59:71:ea:33:29: 5f:ac:6b:c2:38:5a:81:b6:5b:8a:75:1c:e2:d6:1e: 7c:d5:e1:b5:d0:da:20:8c:c9:fd:72:e0:48:e3:e8: 9d:5e:e2:c3:cb:c5:74:af:62:0a:9a:4a:6d:88:c0: 18:f4:bc:59:63:4b:19:3a:c0:1b:a7:f6:1a:8f:55: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:23:17:84:69:8E:94:0E:FA:53:94:B8:A0:E9:9B:B5:B3:35:79:55 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:63:2c:b7:47:7a:d9:59:45:ed:73:e5:96:ea:70:83:7a:f0: f1:72:87:02:a3:62:d2:bb:04:5e:55:e7:2c:e2:27:65:67:a6: 62:a1:ba:b7:90:cb:d2:b4:dd:92:55:80:c1:b9:75:0e:8a:2d: dc:be:7b:aa:a1:b5:2f:08:82:56:4d:de:af:9f:fb:11:90:a9: 1b:b2:77:3e:01:23:03:d4:22:83:bd:13:99:3a:93:2e:6f:26: 87:de:ad:af:42:1e:23:92:ba:02:cd:31:c9:72:35:3a:6b:94: 51:70:b9:1c:82:a3:76:7e:d5:2f:81:bb:1b:ea:da:04:b2:83: 4d:44:5a:81:32:fe:95:a9:28:4b:7d:1b:e9:93:b1:62:90:c9: 1f:c4:6d:4e:74:12:5f:43:7e:fa:77:6b:46:80:3e:71:34:d8: 25:05:a1:a4:1c:6a:d8:60:8f:b7:a5:b7:61:00:bf:08:b4:c3: af:e6:a0:eb:7f:f4:f1:cb:91:13:c6:b1:88:79:1f:47:f1:30: 4c:2f:2e:b7:12:7a:0d:f4:1d:95:62:15:37:e6:0f:bc:f0:e1: b0:a1:e6:2c:06:2e:c3:09:e7:39:63:45:d3:0a:76:56:7d:b1: a9:0f:18:42:ae:93:01:58:48:2f:7a:51:28:0f:22:87:51:2f: f1:fc:e8:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyuo16zThqPPekxO+oly085MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMzAyMTMwMTA3WhcNMjYwMzAzMTMwMTA3WjAzMTEwLwYDVQQD EyhhMjIzMTc4NDY5OGU5NDBlZmE1Mzk0YjhhMGU5OWJiNWIzMzU3OTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5IWChHmxsiz3tH1o68oYlA5lwCI ksA7ocd30K1INCtwOA20jMukP2b3aceHmQm6RNwVe4cW9bKNykp2M7R9FC+jEUBg DUqr0Lv24Dst4HiLQhnQoUQTs5OsjQwHQk6GyXLNDZZ+wojlvkRzI5YlrKhhg/jC d7whi0ugLIxGwZkYQAcog+WLrHsDOt+VM7+DboIBVc6ZL6eedoGVmLvcU8YPpwiM Lz9OojNIKJoImQVkbq+ab4FcCZ4KYV1YWXHqMylfrGvCOFqBtluKdRzi1h581eG1 0NogjMn9cuBI4+idXuLDy8V0r2IKmkptiMAY9LxZY0sZOsAbp/Yaj1V9ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIjF4RpjpQO+lOUuKDpm7WzNXlVMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs2Mst0d6 2VlF7XPllupwg3rw8XKHAqNi0rsEXlXnLOInZWemYqG6t5DL0rTdklWAwbl1Doot 3L57qqG1LwiCVk3er5/7EZCpG7J3PgEjA9Qig70TmTqTLm8mh96tr0IeI5K6As0x yXI1OmuUUXC5HIKjdn7VL4G7G+raBLKDTURagTL+lakoS30b6ZOxYpDJH8RtTnQS X0N++ndrRoA+cTTYJQWhpBxq2GCPt6W3YQC/CLTDr+ag63/08cuRE8axiHkfR/Ew TC8utxJ6DfQdlWIVN+YPvPDhsKHmLAYuwwnnOWNF0wp2Vn2xqQ8YQq6TAVhIL3pR KA8ih1Ev8fzoDA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:10:57 2026 by rpki-client