$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: A03E8F3BxU2yNrTB6FOslsNgNnypf8FBEeTHSq53FRc= Subject key identifier: B0:66:55:6A:73:8A:9A:55:DC:17:25:57:50:EE:EA:FF:94:F6:4C:FF Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019D992B4450104671D05BB5293B197C6582 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 15C5 Signing time: Fri 17 Apr 2026 02:00:42 +0000 Manifest this update: Fri 17 Apr 2026 02:00:42 +0000 Manifest next update: Sat 18 Apr 2026 02:00:42 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: gqj5nx28u2bmJmpxcQIikqi0q8mqSwq3UW8bPJDY/NU=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:2b:44:50:10:46:71:d0:5b:b5:29:3b:19:7c:65:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Apr 17 02:00:42 2026 GMT Not After : Apr 18 02:00:42 2026 GMT Subject: CN=b066556a738a9a55dc17255750eeeaff94f64cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1d:33:01:02:c8:b5:d7:28:f6:3b:29:6c:72: c9:d6:62:f4:26:e2:6e:a8:b0:44:4e:8d:01:ac:3a: 1e:52:f2:ab:94:59:87:3e:c5:0d:a3:29:48:04:b4: 1a:92:9f:a9:b6:d2:35:af:de:4b:54:84:89:7c:7c: 66:e5:c8:0d:c6:7d:9c:14:cf:a4:c7:a1:2f:19:df: d6:5f:a5:fc:cd:e2:b7:0e:99:46:06:36:ad:91:d7: ad:ca:4b:f7:4d:d1:02:0e:f8:be:cb:74:dd:c9:ed: 53:09:08:98:08:ae:1b:28:8c:80:86:83:6c:a4:ea: 63:b0:8a:5d:4d:dd:5f:67:7d:6f:e7:26:c4:e3:33: 5c:ab:20:5d:69:10:8a:47:d4:31:8a:39:80:d2:46: bd:f6:9f:51:17:2d:cc:dc:7d:78:ab:e3:e0:5c:b8: 44:b0:56:7a:29:71:1a:d1:03:81:92:1d:2c:d7:45: 36:99:41:e2:b4:26:54:c6:64:05:29:85:57:13:56: 84:55:47:73:21:eb:2c:34:d0:63:e0:d6:91:70:d6: c2:90:54:4d:38:18:e5:ad:df:50:79:ad:64:e1:12: 25:aa:e2:cc:f6:e5:c3:13:d8:26:61:bd:af:8f:44: 66:e1:75:d2:25:55:cd:a7:8f:45:7c:8a:62:24:3a: f1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:66:55:6A:73:8A:9A:55:DC:17:25:57:50:EE:EA:FF:94:F6:4C:FF X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:5e:7d:77:89:2b:9a:95:65:9b:6a:a4:6c:1e:73:ed:fd:57: be:8c:4e:b3:67:11:77:13:d7:18:7c:21:32:07:3a:47:c8:a4: 52:b3:b8:13:14:77:0f:c3:b0:4b:04:18:99:14:b4:1a:05:d4: 0d:6b:67:bf:8e:ba:6c:50:a1:55:91:f4:ac:40:e7:94:32:a0: 9b:e6:fe:32:20:96:16:29:1a:05:01:8d:66:fb:6d:71:94:2b: d7:3c:06:59:72:43:27:e0:3b:cb:a9:c5:bb:52:72:23:64:c5: 07:d1:38:c2:b7:a6:2e:c6:3c:58:b7:aa:ba:54:5f:ff:b1:b8: a2:a6:33:36:dd:f8:be:80:cb:fb:3d:bf:57:14:ba:ff:7f:8e: f8:e0:55:74:18:1a:71:1d:a5:b1:e7:14:23:3c:62:6e:4f:e2: 14:8c:82:15:21:18:bb:42:b2:31:30:59:0e:3b:08:06:4a:aa: d2:38:9e:2c:d9:3a:4e:80:d3:af:d0:7b:0c:f4:93:b0:f9:02: 48:3c:d8:a6:30:2d:a8:69:d6:70:85:33:65:3f:d1:9f:fa:ac: de:ba:57:57:21:5a:38:e7:6d:bd:e8:7b:cf:3a:5f:34:e5:b5: 6f:43:83:4b:db:9c:af:39:a1:22:25:fe:4a:ee:d6:b3:22:c2: e4:39:82:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZK0RQEEZx0Fu1KTsZfGWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNDE3MDIwMDQyWhcNMjYwNDE4MDIwMDQyWjAzMTEwLwYDVQQD EyhiMDY2NTU2YTczOGE5YTU1ZGMxNzI1NTc1MGVlZWFmZjk0ZjY0Y2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R0zAQLItdco9jspbHLJ1mL0JuJu qLBETo0BrDoeUvKrlFmHPsUNoylIBLQakp+pttI1r95LVISJfHxm5cgNxn2cFM+k x6EvGd/WX6X8zeK3DplGBjatkdetykv3TdECDvi+y3Tdye1TCQiYCK4bKIyAhoNs pOpjsIpdTd1fZ31v5ybE4zNcqyBdaRCKR9QxijmA0ka99p9RFy3M3H14q+PgXLhE sFZ6KXEa0QOBkh0s10U2mUHitCZUxmQFKYVXE1aEVUdzIessNNBj4NaRcNbCkFRN OBjlrd9Qea1k4RIlquLM9uXDE9gmYb2vj0Rm4XXSJVXNp49FfIpiJDrxjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBmVWpzippV3BclV1Du6v+U9kz/MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwl59d4kr mpVlm2qkbB5z7f1XvoxOs2cRdxPXGHwhMgc6R8ikUrO4ExR3D8OwSwQYmRS0GgXU DWtnv466bFChVZH0rEDnlDKgm+b+MiCWFikaBQGNZvttcZQr1zwGWXJDJ+A7y6nF u1JyI2TFB9E4wremLsY8WLequlRf/7G4oqYzNt34voDL+z2/VxS6/3+O+OBVdBga cR2lsecUIzxibk/iFIyCFSEYu0KyMTBZDjsIBkqq0jieLNk6ToDTr9B7DPSTsPkC SDzYpjAtqGnWcIUzZT/Rn/qs3rpXVyFaOOdtveh7zzpfNOW1b0ODS9ucrzmhIiX+ Su7WsyLC5DmCTw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:59:25 2026 by rpki-client