$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: OVOPFYdDLGQecXqw/SLkMM7pGAlUnui0/79xTiw7B0c= Subject key identifier: 71:BE:0A:67:3E:90:E9:AF:D9:7F:11:BE:BB:59:7A:06:0D:49:51:E3 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019CAAC644F8C6A1FEF19BC3779B8D6B620D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 1581 Signing time: Sun 01 Mar 2026 19:00:46 +0000 Manifest this update: Sun 01 Mar 2026 19:00:46 +0000 Manifest next update: Mon 02 Mar 2026 19:00:46 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: 8XQlgwxy1QeEyO/Y3lvUm0Zy1bFHU1lflbK6ZY6FdSI=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:c6:44:f8:c6:a1:fe:f1:9b:c3:77:9b:8d:6b:62:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Mar 1 19:00:46 2026 GMT Not After : Mar 2 19:00:46 2026 GMT Subject: CN=71be0a673e90e9afd97f11bebb597a060d4951e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b2:23:23:44:e2:4c:1a:6a:eb:bd:62:4b:55: c4:10:1a:11:ec:e1:1c:61:74:62:36:b4:c5:ff:8e: 4d:b1:99:aa:f0:60:e9:26:a3:41:48:4f:86:0c:25: 5a:11:55:15:d0:24:65:94:48:4a:73:ab:c0:ff:01: 39:c8:4e:0f:61:6a:71:37:f6:2d:da:ed:96:71:59: be:d9:74:0f:34:1f:39:e1:f2:0f:b8:0b:fc:f1:e9: d0:96:7c:49:74:ad:48:ed:65:ba:5a:ae:04:e1:4b: 8f:38:bf:5d:73:70:bd:24:cc:70:7b:87:fc:37:04: 1e:14:c1:0a:26:81:9f:42:c3:87:db:e9:2e:68:f5: 41:01:9e:af:2e:9a:be:03:e9:1c:e8:3a:07:0b:4c: ac:ae:3e:aa:23:93:09:87:c6:44:a9:07:37:4e:e6: ce:3d:3b:e1:95:d9:75:7b:ef:e4:d0:7a:69:22:98: 6e:f5:81:91:b4:16:45:11:4e:d0:be:36:c6:70:2b: c6:1c:89:69:17:32:3f:80:9b:73:ec:55:2d:f8:04: 13:cc:2d:a9:03:97:c2:03:40:b9:29:e6:bb:6d:04: e9:30:70:39:10:6e:c3:55:d6:e9:f6:4d:25:d2:af: 24:ed:bc:02:96:10:60:bc:0a:37:d9:71:5a:ad:0d: 7a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BE:0A:67:3E:90:E9:AF:D9:7F:11:BE:BB:59:7A:06:0D:49:51:E3 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c4:9c:f8:74:31:df:09:39:71:fa:a6:94:c0:ec:04:0a:b3: a9:b2:df:1c:31:a1:9f:6d:e7:70:5e:57:cf:f4:95:bd:40:5f: c2:58:32:97:25:70:8e:e5:87:12:d8:f6:0b:c8:e9:bc:31:b8: d2:58:1c:bc:d3:fa:b6:be:f4:59:bc:70:68:79:78:a4:6a:be: 9b:84:1b:d1:dc:21:43:b7:86:e4:05:e4:a8:fb:ae:7b:52:fe: f4:41:c7:d3:7a:87:a9:5f:ad:24:58:70:4d:83:e4:f5:44:cd: 0d:1d:95:b8:59:8b:17:90:62:72:4e:15:d6:d6:68:8a:70:6b: 58:19:b0:fe:85:25:6d:f4:00:7e:05:c9:f1:ad:34:2f:6b:cc: 5b:71:23:34:3b:ad:41:02:15:05:fd:09:bd:c4:3c:4f:21:86: bc:e6:97:37:86:29:32:b3:a7:08:c7:d9:73:07:9d:39:d8:aa: b5:5a:b7:fd:6a:88:42:b5:94:d3:9c:4a:df:6b:c4:5b:8c:28: 04:03:3a:30:ab:91:8f:5e:44:c6:2c:b1:36:f0:f2:0e:87:99: 21:37:8c:00:f1:fe:8c:56:6e:10:32:80:4a:f9:04:02:af:98: f8:f9:91:79:6c:ae:2b:41:93:9c:48:aa:e1:6e:d7:50:24:39: 2b:03:ac:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqxkT4xqH+8ZvDd5uNa2INMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwMzAxMTkwMDQ2WhcNMjYwMzAyMTkwMDQ2WjAzMTEwLwYDVQQD Eyg3MWJlMGE2NzNlOTBlOWFmZDk3ZjExYmViYjU5N2EwNjBkNDk1MWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLIjI0TiTBpq671iS1XEEBoR7OEc YXRiNrTF/45NsZmq8GDpJqNBSE+GDCVaEVUV0CRllEhKc6vA/wE5yE4PYWpxN/Yt 2u2WcVm+2XQPNB854fIPuAv88enQlnxJdK1I7WW6Wq4E4UuPOL9dc3C9JMxwe4f8 NwQeFMEKJoGfQsOH2+kuaPVBAZ6vLpq+A+kc6DoHC0ysrj6qI5MJh8ZEqQc3TubO PTvhldl1e+/k0HppIphu9YGRtBZFEU7QvjbGcCvGHIlpFzI/gJtz7FUt+AQTzC2p A5fCA0C5Kea7bQTpMHA5EG7DVdbp9k0l0q8k7bwClhBgvAo32XFarQ16PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHG+Cmc+kOmv2X8RvrtZegYNSVHjMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8Sc+HQx 3wk5cfqmlMDsBAqzqbLfHDGhn23ncF5Xz/SVvUBfwlgylyVwjuWHEtj2C8jpvDG4 0lgcvNP6tr70WbxwaHl4pGq+m4Qb0dwhQ7eG5AXkqPuue1L+9EHH03qHqV+tJFhw TYPk9UTNDR2VuFmLF5Bick4V1tZoinBrWBmw/oUlbfQAfgXJ8a00L2vMW3EjNDut QQIVBf0JvcQ8TyGGvOaXN4YpMrOnCMfZcwedOdiqtVq3/WqIQrWU05xK32vEW4wo BAM6MKuRj15ExiyxNvDyDoeZITeMAPH+jFZuEDKASvkEAq+Y+PmReWyuK0GTnEiq 4W7XUCQ5KwOs4g== -----END CERTIFICATE-----Generated at Mon Mar 2 01:50:11 2026 by rpki-client