$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: 8TRaCl+SyBKSLX64TLOVyzjdmxJT4CmsMSyV0oODS40= Subject key identifier: 4F:E3:35:7E:50:E5:C0:C1:E9:EA:66:B9:A5:5C:67:0A:53:D6:E8:71 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019FAB9AD34174E5D6E681C1E151EECCFF2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 19CD Signing time: Wed 29 Jul 2026 02:01:18 +0000 Manifest this update: Wed 29 Jul 2026 02:01:18 +0000 Manifest next update: Thu 30 Jul 2026 02:01:18 +0000 Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=) 2: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=) 3: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=) 4: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=) 5: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=) 6: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=) 7: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=) 8: NS1ZBrUo9cL2RzJl2DoZEtlJIgU.roa (hash: WlCP3A2g4WxvOy7MlXQKTM7lTwf6ExPkVhpn2oHTNY0=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: HMpGXbXyjFIuv2TGnhwh10pkkxFK8vgQHORiE7ZgYKc=) 10: QCih5l8ms9ZT9yQSt5C9uapsYYM.roa (hash: /QPJzCsQ+24ZR6+p5oNE2OgeX+eucsMYEmdpUXhs184=) 11: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=) 12: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=) 13: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=) 14: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=) 15: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=) 16: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=) 17: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=) 18: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=) 19: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=) 20: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=) 21: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:9a:d3:41:74:e5:d6:e6:81:c1:e1:51:ee:cc:ff:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jul 29 02:01:18 2026 GMT Not After : Jul 30 02:01:18 2026 GMT Subject: CN=4fe3357e50e5c0c1e9ea66b9a55c670a53d6e871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:fe:13:6c:b7:52:2e:f3:5d:e3:7f:b3:fa: 61:3f:a0:a2:36:b7:42:e8:09:90:e2:cf:99:25:20: 22:7e:27:66:4b:09:50:9e:2c:24:a6:68:4e:18:50: 73:e6:1b:2c:06:b2:99:55:0d:36:50:21:3f:4a:79: 36:b0:58:96:a4:6b:f9:3c:64:70:46:d2:5f:28:33: b1:89:5a:70:ec:16:96:11:4d:db:c1:66:0c:79:28: a7:ad:c5:80:42:fa:17:4a:e7:0f:6e:0c:f4:e4:e0: 2f:4b:20:ae:8a:ee:3a:2e:6f:0a:1c:ce:5d:16:25: 8b:5e:c2:f2:3f:f9:9e:2a:54:db:3c:96:57:f7:4b: ec:9f:a2:29:99:8d:3c:03:6f:ad:09:fb:43:15:7d: 6a:11:f3:16:98:f0:45:4d:8e:27:fa:ef:72:77:35: 2a:7b:2a:e1:08:36:f1:0b:90:41:a9:16:42:1c:03: 04:fc:11:89:5d:9e:b7:ba:a6:96:3e:97:90:44:e6: 35:58:9b:f6:c7:55:09:92:ad:6f:77:0a:0b:34:f9: 5a:cf:67:a5:d4:f2:74:b7:b1:e1:50:85:c8:16:8c: 70:cd:79:85:24:2c:e3:37:54:1a:4f:2f:2d:f7:70: e5:36:c2:e9:63:38:5e:74:84:a2:2b:1d:6f:69:7f: ef:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E3:35:7E:50:E5:C0:C1:E9:EA:66:B9:A5:5C:67:0A:53:D6:E8:71 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b0:fb:50:2a:c6:dc:8b:cd:5f:b1:41:84:4e:02:1e:5b:8b: b7:2e:31:3b:3c:70:a8:65:14:a2:cc:38:c7:98:71:9f:fa:ea: 5e:27:6c:86:17:bb:b9:c4:74:45:1c:20:a1:49:33:99:d2:59: 7d:e6:a7:a3:dc:ef:4e:1e:fd:1f:51:fe:a4:f8:c5:47:d6:14: 44:3c:0d:34:73:d5:3c:55:ef:3f:46:a6:67:d6:d7:80:0e:7f: 81:56:7a:96:01:44:35:c0:ed:0d:b7:65:4c:f4:7e:f7:14:7d: f1:47:98:44:79:4e:49:08:f7:cc:de:62:fa:c0:60:fd:05:2c: 63:41:82:7b:e9:fb:66:db:47:10:0e:96:1b:9a:9a:21:cb:71: 83:3d:25:a2:b0:88:75:89:47:69:d0:77:84:c7:05:46:09:ca: c1:bc:28:6f:3b:bc:f2:60:84:22:97:73:e5:1b:d0:99:bb:ec: e8:53:97:4d:5c:d4:c7:a6:cf:aa:9a:1e:b5:71:2c:b0:22:63: 71:f5:1a:65:83:8b:e0:e5:8a:0b:d7:9f:79:4b:65:61:99:0c: 94:2d:9f:10:4f:b2:46:b2:66:8a:f1:f0:ca:9e:09:d5:6a:73: 29:83:de:24:55:33:47:42:de:1a:6f:10:09:73:fe:e3:59:e1: 27:3d:be:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rmtNBdOXW5oHB4VHuzP8sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwNzI5MDIwMTE4WhcNMjYwNzMwMDIwMTE4WjAzMTEwLwYDVQQD Eyg0ZmUzMzU3ZTUwZTVjMGMxZTllYTY2YjlhNTVjNjcwYTUzZDZlODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKL+E2y3Ui7zXeN/s/phP6CiNrdC 6AmQ4s+ZJSAifidmSwlQniwkpmhOGFBz5hssBrKZVQ02UCE/Snk2sFiWpGv5PGRw RtJfKDOxiVpw7BaWEU3bwWYMeSinrcWAQvoXSucPbgz05OAvSyCuiu46Lm8KHM5d FiWLXsLyP/meKlTbPJZX90vsn6IpmY08A2+tCftDFX1qEfMWmPBFTY4n+u9ydzUq eyrhCDbxC5BBqRZCHAME/BGJXZ63uqaWPpeQROY1WJv2x1UJkq1vdwoLNPlaz2el 1PJ0t7HhUIXIFoxwzXmFJCzjN1QaTy8t93DlNsLpYzhedISiKx1vaX/v7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/jNX5Q5cDB6epmuaVcZwpT1uhxMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbD7UCrG 3IvNX7FBhE4CHluLty4xOzxwqGUUosw4x5hxn/rqXidshhe7ucR0RRwgoUkzmdJZ feano9zvTh79H1H+pPjFR9YURDwNNHPVPFXvP0amZ9bXgA5/gVZ6lgFENcDtDbdl TPR+9xR98UeYRHlOSQj3zN5i+sBg/QUsY0GCe+n7ZttHEA6WG5qaIctxgz0lorCI dYlHadB3hMcFRgnKwbwobzu88mCEIpdz5RvQmbvs6FOXTVzUx6bPqpoetXEssCJj cfUaZYOL4OWKC9efeUtlYZkMlC2fEE+yRrJmivHwyp4J1WpzKYPeJFUzR0LeGm8Q CXP+41nhJz2+2Q== -----END CERTIFICATE-----Generated at Wed Jul 29 09:52:37 2026 by rpki-client