$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: 8+LnilmCpITqrOtdGnZG22CR87v6WZq7LYkvpIrQySU= Subject key identifier: 89:0F:EC:C3:B8:84:AF:5F:E9:50:9E:26:6F:28:7B:80:3D:EC:52:18 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019D984FD9CADEE63340A843547AC7380718 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 15FC Signing time: Thu 16 Apr 2026 22:01:03 +0000 Manifest this update: Thu 16 Apr 2026 22:01:03 +0000 Manifest next update: Fri 17 Apr 2026 22:01:03 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: xriigsShd7/VR4AsLOpilNwiU9T+jr16zqch5x+mcaM=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:4f:d9:ca:de:e6:33:40:a8:43:54:7a:c7:38:07:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Apr 16 22:01:03 2026 GMT Not After : Apr 17 22:01:03 2026 GMT Subject: CN=890fecc3b884af5fe9509e266f287b803dec5218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:d4:1a:95:cb:6f:21:de:b3:f6:22:9a:e9: 56:76:8f:c1:fd:8c:f7:f4:db:4c:d9:b9:0b:b7:c2: 84:a3:37:f0:4e:71:80:af:87:4e:4d:08:13:fb:84: 11:a2:a5:f7:b1:ab:24:3d:fb:c6:2b:26:19:10:9c: 60:b2:4d:b1:ca:68:d1:56:3e:e1:11:a7:1a:a8:9f: b5:a9:29:d5:14:b7:6a:3a:70:6f:5b:d4:74:87:f5: 0c:00:92:43:d7:99:18:af:2c:15:06:73:45:5e:fa: 74:b9:57:4c:53:7b:d8:e5:89:a4:4f:2d:0c:b4:fb: da:e9:f3:5f:28:c7:0c:e1:00:6b:a8:92:aa:71:65: 09:81:47:53:8e:a1:71:3d:69:51:26:24:5b:16:36: c4:dc:39:a3:8d:9b:c4:bb:97:95:5d:53:91:fa:ad: f0:8d:f0:ce:4d:96:2d:b6:7b:6e:a9:f1:7e:e4:8a: 0d:51:01:e9:4d:60:74:c1:eb:33:2d:3c:5c:65:52: e5:ae:0f:8e:3b:e7:e5:fc:61:7f:96:42:5f:65:d9: be:f4:63:3e:84:06:f0:f0:81:44:4a:4b:3b:79:98: c0:d1:82:d2:86:85:e9:cd:d4:54:7c:f1:b4:89:25: 98:79:cc:a1:11:79:40:2c:01:ca:a2:e2:06:ee:04: 79:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0F:EC:C3:B8:84:AF:5F:E9:50:9E:26:6F:28:7B:80:3D:EC:52:18 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:46:81:08:66:00:57:50:82:d0:ef:ef:2f:d3:e1:02:95:62: ae:65:95:67:d2:0d:1e:c5:32:a4:7e:73:75:13:6a:da:8e:df: 9d:db:a6:dc:5a:f7:aa:97:d2:f4:4c:b6:4f:0a:d0:9f:d2:82: 86:a7:05:f7:87:5c:ce:74:70:50:20:1d:b5:7e:ab:c9:47:be: 0d:af:d1:4f:79:1a:e5:36:f4:d1:35:e7:3c:0e:13:09:4a:3c: 00:3a:14:69:0a:44:17:a8:d3:31:10:d6:09:0f:4f:23:9e:ef: 95:71:b7:61:23:92:90:86:e6:c4:59:78:f4:f3:8b:01:f2:32: 3d:1d:43:31:cc:d4:90:08:8a:6f:a3:34:49:95:a5:5f:af:0f: 4c:bd:70:e9:cf:30:a2:a7:87:16:a2:56:14:2e:eb:8a:c1:2b: e9:d3:45:db:c5:e0:05:fa:b7:91:d1:12:ae:ac:93:82:03:74: 82:e0:b8:50:46:a9:3c:e3:19:82:35:4e:a6:14:fc:ff:56:c2: 0a:ef:37:84:0c:b3:86:18:7c:35:0c:09:27:5f:eb:03:60:cb: a9:1e:2f:bf:a1:e3:7a:08:dc:70:b6:f6:ef:be:83:6d:0f:3d: a2:97:b3:29:2a:d3:f3:3c:ed:16:19:70:b7:ec:ae:47:fe:ea: a6:7c:a0:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2YT9nK3uYzQKhDVHrHOAcYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwNDE2MjIwMTAzWhcNMjYwNDE3MjIwMTAzWjAzMTEwLwYDVQQD Eyg4OTBmZWNjM2I4ODRhZjVmZTk1MDllMjY2ZjI4N2I4MDNkZWM1MjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphvUGpXLbyHes/YimulWdo/B/Yz3 9NtM2bkLt8KEozfwTnGAr4dOTQgT+4QRoqX3saskPfvGKyYZEJxgsk2xymjRVj7h EacaqJ+1qSnVFLdqOnBvW9R0h/UMAJJD15kYrywVBnNFXvp0uVdMU3vY5YmkTy0M tPva6fNfKMcM4QBrqJKqcWUJgUdTjqFxPWlRJiRbFjbE3DmjjZvEu5eVXVOR+q3w jfDOTZYttntuqfF+5IoNUQHpTWB0weszLTxcZVLlrg+OO+fl/GF/lkJfZdm+9GM+ hAbw8IFESks7eZjA0YLShoXpzdRUfPG0iSWYecyhEXlALAHKouIG7gR5cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkP7MO4hK9f6VCeJm8oe4A97FIYMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0aBCGYA V1CC0O/vL9PhApVirmWVZ9INHsUypH5zdRNq2o7fndum3Fr3qpfS9Ey2TwrQn9KC hqcF94dcznRwUCAdtX6ryUe+Da/RT3ka5Tb00TXnPA4TCUo8ADoUaQpEF6jTMRDW CQ9PI57vlXG3YSOSkIbmxFl49POLAfIyPR1DMczUkAiKb6M0SZWlX68PTL1w6c8w oqeHFqJWFC7risEr6dNF28XgBfq3kdESrqyTggN0guC4UEapPOMZgjVOphT8/1bC Cu83hAyzhhh8NQwJJ1/rA2DLqR4vv6HjegjccLb2776DbQ89opezKSrT8zztFhlw t+yuR/7qpnygxw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:23:39 2026 by rpki-client