$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: Su4oZwwwVDskO/k2klutp4DXi3N5+RQhiV2oS4babOw= Subject key identifier: C7:C9:60:C7:87:0F:6C:13:69:06:E6:1D:79:C7:D0:B6:20:20:F4:CB Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019CACB52FA7BB007C1F39C33747EA2DFDA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 183E Signing time: Mon 02 Mar 2026 04:01:21 +0000 Manifest this update: Mon 02 Mar 2026 04:01:21 +0000 Manifest next update: Tue 03 Mar 2026 04:01:21 +0000 Files and hashes: 1: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (hash: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow=) 2: 5rb_gdr_18InEoK9oBGPigLWsUU.roa (hash: p4S/HYMryWz0TiRcC0WYFB+Q46mGR28bojh5mjov+eA=) 3: 9kKHpOhtBjezk9yFRy3s1CnUzCs.roa (hash: QSt/YnCVmn0FcbGN3iyh0NHED7YUEP7jyMqq1w8Dldw=) 4: DfbASphlahLNrwts99_6lIeg5es.roa (hash: zL5VmvhQFmv2lwWz2Fw9d22g6IstnBgobdonQEiQWiE=) 5: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (hash: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE=) 6: MUIHl-Fsh8We6GFXLmx35khoTEY.roa (hash: pEdoUTkjBemyLaurIbfbrfCDQS7dpMcaaEVDwlX8HwM=) 7: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (hash: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE=) 8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: qWiI6YsQsHVxAuwlhtPy2jt26+9sLPEI3lFXqNgVfUE=) 9: UuhuRG3t0beQeM3SanzcH2at_G8.roa (hash: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0=) 10: XW5LVb9LNrtO6jdEH26TXvkdFnw.roa (hash: tRXiDcN0Chk8qzzYc1rDT1NZ+Ap5GJUMsKOnNMIHQXI=) 11: dl-axVZBNT2S2AVqq4VMy6ChvWw.roa (hash: 2vk0yMOZ6FOkePV9piQMN/wPC82gVBjRJ8M1zk6BgNo=) 12: eZnbOaWyUU8qYq_o9kkd8phkDY8.roa (hash: MD/JlIaHZx48dm7+HSAnMRvJeNF5GVhVV35UTt9y5MU=) 13: iSA_YAY5iFLTdJZOTXus0Ai-o_s.roa (hash: C1lIo+EeLF6gsGe0gv3RTGuRyyEgO5RKKRKvoVsJdVw=) 14: jIciP85UIj70W740hLw1umDPl8U.roa (hash: wrY0tv/GkQoOFiGmbPrfGkCZnbqrkkaA3u07XZ08OZM=) 15: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (hash: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo=) 16: pH4b3fMjLouUhkKsmyKmLszYD1s.roa (hash: o3Cfd5JXDYsmQI7zlI6aZL8owGQLChjRNW4inPv4y8s=) 17: q-tGkn68JX1iQNUAcoaav1O9DAY.roa (hash: mJUUTb4OWlSpjDRCx3qVRgRZAaIDDrJog20ANOTrCK4=) 18: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (hash: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ=) 19: wn83iLSE9WBjpaqkLj8JwBf0jfg.roa (hash: PMAGkAKkXOAgko2I4AnQhrFBjf2Qxoi2Y8ZDJ8W15/Y=) 20: yqsy0Xz11f8jVjNNKQk2GCjWnPI.roa (hash: ci+2sOrUoN9O/HRwXnIdXT2mkytFRNcvyi7A2sMYwg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:b5:2f:a7:bb:00:7c:1f:39:c3:37:47:ea:2d:fd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Mar 2 04:01:21 2026 GMT Not After : Mar 3 04:01:21 2026 GMT Subject: CN=c7c960c7870f6c136906e61d79c7d0b62020f4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3d:03:9a:e4:87:06:ba:bf:74:1a:ba:96:da: 0f:b1:3b:13:2e:f1:25:45:2e:48:b0:c8:4e:f5:63: 02:ca:38:81:8a:72:c3:63:22:01:99:e1:7b:b6:23: ef:fb:9b:cf:ef:18:75:ec:88:fe:de:bd:be:8d:90: 76:a5:4c:30:f7:4c:38:3b:02:92:b4:eb:39:34:ed: d9:78:79:d8:0b:57:54:d5:f2:47:82:82:0c:76:b2: 63:bb:af:3e:ce:5d:57:f3:03:69:87:b1:de:86:4a: 6c:98:7d:81:0f:cc:3f:8d:c2:bb:29:34:7e:2a:86: 8d:9d:9f:1e:a8:06:0d:fa:dc:1d:08:e6:87:7c:da: a3:5a:0b:fd:4c:3f:2b:b9:6b:58:5c:a0:10:8f:eb: aa:27:bd:44:69:a3:c1:5c:11:98:95:7b:22:c2:75: 61:13:70:f4:fa:56:2b:f7:4d:cf:af:14:f4:c9:8b: fc:d8:a9:11:72:40:27:45:fd:fb:1d:24:21:25:34: 3b:94:08:84:35:dc:82:a7:02:e3:77:6b:e2:29:5b: cb:72:a6:7c:7b:a3:05:a1:ad:06:55:cb:19:38:4e: 2f:b5:ea:47:47:a3:10:f5:ba:65:64:6a:e9:f6:d2: 9f:19:d1:42:dc:93:5c:0c:34:90:f8:ca:8f:48:1f: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C9:60:C7:87:0F:6C:13:69:06:E6:1D:79:C7:D0:B6:20:20:F4:CB X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:30:e7:d2:db:54:cf:34:36:10:ce:59:82:4b:9a:07:1d:ad: 1a:fe:fe:61:6b:4e:12:ea:c5:15:0a:a5:30:bf:f4:d9:1a:07: 4d:c8:63:66:8b:95:99:5d:f8:30:8c:34:ec:83:33:98:1f:f6: 91:85:4e:55:3a:da:9c:ef:af:23:98:d7:b7:7a:2e:4c:f2:02: 83:bd:b1:ef:7d:fd:a7:bd:7b:9d:b9:6c:6f:f2:0d:a2:f6:15: df:1d:b9:8e:e3:d5:81:fb:08:af:ef:fa:41:e0:31:a6:54:93: 2c:01:db:5e:94:bc:a9:d8:5e:54:18:4c:10:74:72:5b:e5:34: 8f:82:4d:53:0c:e6:25:4d:e2:95:e7:23:b7:cd:9f:a3:3a:8b: 49:41:ae:ad:b8:89:93:4a:29:5c:4e:cd:d1:48:67:eb:09:66: af:41:f9:13:d1:71:18:2c:20:74:4d:09:12:0c:d9:5c:27:07: 50:34:60:dd:fd:17:3c:b6:7a:8f:d3:ef:08:b8:a6:2c:25:8a: e9:00:0c:5a:5f:6f:ae:ac:91:81:70:b0:39:c2:ca:92:23:f2: ba:cd:57:43:b5:85:c9:d0:1e:d5:6c:a2:6b:af:75:fa:2d:a1: a5:4f:7f:d1:47:39:cf:b9:6e:9c:67:42:52:24:42:90:be:35: bf:b6:9c:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZystS+nuwB8HznDN0fqLf2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMzAyMDQwMTIxWhcNMjYwMzAzMDQwMTIxWjAzMTEwLwYDVQQD EyhjN2M5NjBjNzg3MGY2YzEzNjkwNmU2MWQ3OWM3ZDBiNjIwMjBmNGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD0DmuSHBrq/dBq6ltoPsTsTLvEl RS5IsMhO9WMCyjiBinLDYyIBmeF7tiPv+5vP7xh17Ij+3r2+jZB2pUww90w4OwKS tOs5NO3ZeHnYC1dU1fJHgoIMdrJju68+zl1X8wNph7HehkpsmH2BD8w/jcK7KTR+ KoaNnZ8eqAYN+twdCOaHfNqjWgv9TD8ruWtYXKAQj+uqJ71EaaPBXBGYlXsiwnVh E3D0+lYr903PrxT0yYv82KkRckAnRf37HSQhJTQ7lAiENdyCpwLjd2viKVvLcqZ8 e6MFoa0GVcsZOE4vtepHR6MQ9bplZGrp9tKfGdFC3JNcDDSQ+MqPSB90xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfJYMeHD2wTaQbmHXnH0LYgIPTLMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtjDn0ttU zzQ2EM5ZgkuaBx2tGv7+YWtOEurFFQqlML/02RoHTchjZouVmV34MIw07IMzmB/2 kYVOVTranO+vI5jXt3ouTPICg72x7339p717nblsb/INovYV3x25juPVgfsIr+/6 QeAxplSTLAHbXpS8qdheVBhMEHRyW+U0j4JNUwzmJU3ilecjt82fozqLSUGurbiJ k0opXE7N0Uhn6wlmr0H5E9FxGCwgdE0JEgzZXCcHUDRg3f0XPLZ6j9PvCLimLCWK 6QAMWl9vrqyRgXCwOcLKkiPyus1XQ7WFydAe1Wyia691+i2hpU9/0Uc5z7lunGdC UiRCkL41v7acNQ== -----END CERTIFICATE-----Generated at Mon Mar 2 14:11:20 2026 by rpki-client