$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft File: NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json) Hash identifier: LXxYGk2yc1jzTd7+ubTjTbmVacvUZKlXxj8Y+uan27U= Subject key identifier: 6B:6B:A3:09:6A:B5:2C:E9:24:7C:A5:7C:99:56:84:B7:9C:75:07:97 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019D97AADCBA836648AC8FEAAC42A854A452 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft Manifest number: 1A6E Signing time: Thu 16 Apr 2026 19:00:50 +0000 Manifest this update: Thu 16 Apr 2026 19:00:50 +0000 Manifest next update: Fri 17 Apr 2026 19:00:50 +0000 Files and hashes: 1: 0_sA20PwpvlNaZkMADnVSmGAkR8.roa (hash: 6wh9b6GmF3z8gD+E8s8//e7R/HdUNKvFyQY2ioew+40=) 2: 1-WYkIdzKkj8TINRHVagZ4a-pJJw.roa (hash: cuvojjHdfFWhgViYfrdABCjH/GrYxt90mUjKR3SVJe0=) 3: 2seAXHyzsjxKcx9vONA5t8NDpKo.roa (hash: Ss780hXc9q/xSZtDwQf9FFDagk9C3ewnlo2owJwuyeM=) 4: 36Ig8KXXgR0Hlx81Dbivt2_KKB0.roa (hash: XmKDOfpv97+OK9767hQierWSri2mDMDLUz/VmA73yaE=) 5: 4aREn_htEzwNxW4Z_ze_U1SiWgg.roa (hash: 0wIkVh4NUPk/fqAOYTqdE+f13v3Gj6K5bPbVYoinhdk=) 6: 6bD6h1-onzkXBaAZM1hqhF9Bb2c.roa (hash: giCx0eVX291Dreg5SkuFj7Pkk9gcu9uSackcOGQwEUA=) 7: 7CU_Saf57sM-1yN004kvK8zmk90.roa (hash: 5bpO+sXcLPXisvn+5cMGZDrHN6oZNZR0ne9tf2cns+o=) 8: 9fkLcboDV5K8RkYKhccms358mIY.roa (hash: pbdhIi6MiVydNKAR2SbpSVV5HF+j7v+gpPuq/bft7UU=) 9: 9zHOxpyIXqRlDC726eMkIL_3in8.roa (hash: 5IwHDdTrqf8yPsGKKg1ULI3+RzopP4UflBbqS3upMps=) 10: EKCNCx3V2xF3VclZ7utIL40yaPg.roa (hash: K7KWgqrfq6YXduizKcr7xnLXbTxGjXC/k7/Tint9RHg=) 11: EMoPkX_a-X1Y6x2h3SqdsPV5rq4.roa (hash: hIZTV4maC/yVAgh1G3bbgkey5mVA7V6TvYPLh5uDEMk=) 12: Em7pM6LssXKO1GMawm5HobIjg0w.roa (hash: DbDxVhfNZgsFuUXgnBHHjMTFBOymplRBN3L8VW1JUTQ=) 13: FZKmtD-UKaibZ9zRkcn0AXz38jQ.roa (hash: lcged29v8IqNvfygirrGZPjQSlChjxHF9bRH0GjQsG4=) 14: G9XCoEEqmG6F8jKDbOEtKOEenMg.roa (hash: /j0h0z4BCzWyDUNUJ7Q+TvpGPHpbsnL1Xrpb74f78/8=) 15: IKE4CLlQcBFlE9ScVAvy_idMxEU.roa (hash: 6gmHjXx4JLDJRUdc8fU3OlLmdxkf8KNQJpv3y9A2lUo=) 16: Ia3WxJ4E9TqR5H8goAOL2URQgII.roa (hash: c7Sq9aBefC9FbsCEReCs8PjML6m8fkyaIUcwK37ZNC4=) 17: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: B0uFRIMovmTYa1NcXeVqJXtw33vvFzqtqTbzHk1JtuQ=) 18: NLkOwJ0HmcUpvjaaCfuKbwv3TYw.roa (hash: B2Uulfo1QIolDCD4U+lno53ILX+prTT/G34KahI6yFA=) 19: RGQPe1T8MeyQWsW4Fl1KwDODHYQ.roa (hash: oslfuWjZo2gABJUOk5sP8W0ctRygM1qKyUjzPS91gOA=) 20: RL2hMxLt8_7tP_oSaX71ZrVeYlU.roa (hash: WuW+kAVdi/p0IrSzhb4fa25p/RWfxuiBYYZTZl8qcwE=) 21: TY2edwLnnLqH5l1j4TBXgICCA8k.roa (hash: VYYAHhSRkyTo4Cm2JG0elCOvcEdrtRIUUl7ZbUK1FNs=) 22: XpZ5Lgqrcb8hh-ESR5GkV2cLlYk.roa (hash: gjwnOftX6s/jpe8bXicWK/CMaY8kCk+g+/5+gZ8Raxk=) 23: YGHRshzP7E3xrzqnk97S3WYr9W8.roa (hash: 95Dgw4ivjEo5sVG3WVF9wjEoITYvVf6my/+W1sj4/iM=) 24: ZGAMRL2LEVw7dCzCiQ32R3An9fA.roa (hash: 5GEuqlOEiYrp8xgMocuyP71e5nGVm9Lf42n7G60SwXw=) 25: ZhgFo8vJjypW853FGea_-uf50hg.roa (hash: WtV1iHQCdff6PMY3ugAhRxvlGjCUXcNcn2CkTq861BY=) 26: aUPHv82Bqhuun81grUdJW_UVgLM.roa (hash: GC6ehY/pZwrw30U0AFJsHvq5vW5Icu4QsaWDm7j6VFo=) 27: d7fttKbQaEBMM4pWwcBEUFN5DTA.roa (hash: Kr1gRui3uolObyy8BSptmtAQfNotYsTnJEgGbLvOibk=) 28: fb039wzgKrWTpo9UBKmMxEmU6lg.roa (hash: 1FyVtgYEfwkfvwt1Pma9rwhF0rhGjwyuVIeNxqwWhN0=) 29: fsQJcnWuwD2Xcd8eeK-QG8g2MbQ.roa (hash: OpfPA+dHb1RUv8oJj/SuD/47PIzkgKxK97TBT0p1+UY=) 30: h8WHPE-DLjC-fOR5gMRdseFV3jc.roa (hash: YQ88sWnqWVrNelZLFoTBX4eB7iIKZuZNquUMZZMKO9E=) 31: ignmWqVMjjkDQN5Y4qDeyeuZ_Ac.roa (hash: A6u9y5FYE7PBQc9qb3iiT8u1JhXp3QhjdHb1npZ1D9U=) 32: l6SM6ptT76dYR0t29i5gSk-UFyA.roa (hash: Opm4hqwU9LDFmKQW44d/WAHM+r1NrW68F7x/ZNHRjrc=) 33: n_65L3iBhAS8nTX_oI-jDuomJaI.roa (hash: oelUgRW5esSmGJ/6JOEyZ16/FbXRtDOw4ZL4wVs4j4o=) 34: ndlZT1RVv5Lim-1fHD9mGSZd5eQ.roa (hash: cCjtDCQeEswQW7ARKMVR+Qsmady+QzPg4SnlqpKDtiU=) 35: pdnZEzBIHzqwB0hRF0zciB4I5AQ.roa (hash: 4wKIdMhhOpixinv3B0GRH4iqbq2UNr/kEqwKvFPfjxQ=) 36: qgnJ6rleR1BLD9l4jRYO4wkNgPA.roa (hash: B+h7D3nmEJYVvQZsDHrV2hBfqxIy+VQ4OQ8EgALC36k=) 37: sj4WoR0pK3o9Cpa-Y1nrHOoXpkI.roa (hash: +woHvnKUvjlFOtldAvZbs9Ud6X9DPUWePpuRt9RpD6g=) 38: totemjld6kSUSAOsfxrB5I4cA20.roa (hash: kkFG6tpw3ltBlQqcrCwhTlI44EpzS3lf+yVUh05dYgM=) 39: uG2s2RZS4rlCLvYv5d0LRKF25KE.roa (hash: 11Qjv+Obpp8wz3r1eAnLIYMRHJ0o7ALLZxGFpcwmIVE=) 40: yAfSs3t-avJ35nOve-CJuiZ7-ho.roa (hash: gipYf09Mg+lZZ79yPz1ymuBTYnjsvP1+FOOgVHdC5z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:aa:dc:ba:83:66:48:ac:8f:ea:ac:42:a8:54:a4:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Apr 16 19:00:50 2026 GMT Not After : Apr 17 19:00:50 2026 GMT Subject: CN=6b6ba3096ab52ce9247ca57c995684b79c750797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:c5:a2:1d:9d:9a:6f:69:2b:ab:71:fc:6d: d9:2c:06:91:3d:75:2c:3b:9c:f0:7b:09:d8:c1:bd: ae:79:c1:90:b8:82:d5:3b:1f:54:25:e3:fc:03:aa: 61:c0:87:8d:a3:d6:99:b8:1a:ad:2b:fc:b0:fe:f2: 05:cd:19:be:08:54:7d:5d:bc:00:fd:fb:98:3c:91: c7:00:4e:65:55:59:c5:96:a8:32:9a:d7:35:a4:c7: 59:ad:00:52:e4:29:f3:99:3e:f9:41:96:a0:5a:9f: 79:d0:24:fc:08:12:95:a8:0d:e8:e6:16:78:7f:d2: a3:c9:0f:c8:7b:b4:c4:8a:44:ca:ab:87:37:21:26: 32:b4:7d:a4:81:c0:68:69:0e:ad:40:0f:4b:ba:ae: 50:41:5c:53:fa:10:63:8c:a7:d0:97:e5:15:66:a1: 74:bf:0b:9a:f5:f3:56:2c:d4:72:d6:55:d5:90:a2: 20:10:a3:2d:fd:56:e9:c5:3b:60:2b:da:eb:11:49: f3:a3:f1:49:e8:10:12:17:90:98:d7:05:61:1c:7a: 83:12:62:cf:e7:ad:cc:d2:9e:8e:69:bb:38:68:6b: 7e:ba:23:82:34:7b:da:13:d8:d7:f2:b3:64:ff:a1: 2e:30:02:0c:68:4c:82:53:1c:d9:e2:12:14:1e:9c: 6f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6B:A3:09:6A:B5:2C:E9:24:7C:A5:7C:99:56:84:B7:9C:75:07:97 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:bc:86:46:4b:65:ed:5c:13:1b:4d:58:fe:b0:6a:8e:dd:ec: 07:4f:31:2a:e8:55:1f:d7:4b:b5:a0:19:34:ac:92:22:79:c7: 35:2c:1e:b5:87:42:ba:7b:57:d1:ac:0b:60:ce:b1:0d:1d:00: 0b:8d:03:c7:7b:c7:d9:49:08:4d:3a:85:36:fb:8d:7e:5f:9b: bf:8c:ed:f1:6d:03:28:9f:90:e0:16:65:c5:68:fd:57:5b:28: f4:c3:cd:43:51:4e:b9:7b:f7:4a:05:6b:a7:52:ef:a7:6b:f5: c8:f9:45:50:22:8c:2f:0a:c5:39:ec:12:31:7d:4d:bc:03:74: 87:fd:5f:3e:e7:d1:a2:2d:20:77:21:dd:b6:85:e9:ee:0e:7e: 6f:95:2e:08:99:d3:96:96:01:53:5e:fd:a9:b1:cd:93:e9:69: a7:6d:40:f2:d1:f7:01:17:1d:ea:6b:2a:be:1b:72:dc:bd:86: ac:d6:fc:9f:18:3c:e1:6b:26:d8:f0:b4:e0:36:f0:7d:f2:73: 5d:e4:67:e2:c3:e5:d8:0b:e7:77:d1:e4:aa:9e:69:55:12:e7: 1a:2c:28:df:ac:b9:8a:d2:85:f1:0f:0b:f9:e5:3b:b5:af:86: e0:5e:d2:d9:ea:4a:40:ff:71:ee:fb:db:cc:34:1d:ec:cf:85: c7:33:bb:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Xqty6g2ZIrI/qrEKoVKRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwNDE2MTkwMDUwWhcNMjYwNDE3MTkwMDUwWjAzMTEwLwYDVQQD Eyg2YjZiYTMwOTZhYjUyY2U5MjQ3Y2E1N2M5OTU2ODRiNzljNzUwNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJzFoh2dmm9pK6tx/G3ZLAaRPXUs O5zwewnYwb2uecGQuILVOx9UJeP8A6phwIeNo9aZuBqtK/yw/vIFzRm+CFR9XbwA /fuYPJHHAE5lVVnFlqgymtc1pMdZrQBS5CnzmT75QZagWp950CT8CBKVqA3o5hZ4 f9KjyQ/Ie7TEikTKq4c3ISYytH2kgcBoaQ6tQA9Luq5QQVxT+hBjjKfQl+UVZqF0 vwua9fNWLNRy1lXVkKIgEKMt/VbpxTtgK9rrEUnzo/FJ6BASF5CY1wVhHHqDEmLP 563M0p6Oabs4aGt+uiOCNHvaE9jX8rNk/6EuMAIMaEyCUxzZ4hIUHpxvpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtrowlqtSzpJHylfJlWhLecdQeXMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbyGRktl 7VwTG01Y/rBqjt3sB08xKuhVH9dLtaAZNKySInnHNSwetYdCuntX0awLYM6xDR0A C40Dx3vH2UkITTqFNvuNfl+bv4zt8W0DKJ+Q4BZlxWj9V1so9MPNQ1FOuXv3SgVr p1Lvp2v1yPlFUCKMLwrFOewSMX1NvAN0h/1fPufRoi0gdyHdtoXp7g5+b5UuCJnT lpYBU179qbHNk+lpp21A8tH3ARcd6msqvhty3L2GrNb8nxg84Wsm2PC04DbwffJz XeRn4sPl2Avnd9Hkqp5pVRLnGiwo36y5itKF8Q8L+eU7ta+G4F7S2epKQP9x7vvb zDQd7M+FxzO7rg== -----END CERTIFICATE-----Generated at Fri Apr 17 03:40:21 2026 by rpki-client