$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: AhSwPYXiR4aqN9Lzc+tlFBlbfxpdBR/3LVCSAq6dLN8= Subject key identifier: 8E:8A:C4:48:74:D1:DD:41:E3:2F:58:86:B9:E5:55:08:8B:36:CD:5E Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019DA3E66A232C7BB343B8CDB580E46F7DFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 1602 Signing time: Sun 19 Apr 2026 04:01:19 +0000 Manifest this update: Sun 19 Apr 2026 04:01:19 +0000 Manifest next update: Mon 20 Apr 2026 04:01:19 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: 9tfgPuYVkO76i7GRutYPcWBvGkBKoKpXscPKcuSScz4=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:e6:6a:23:2c:7b:b3:43:b8:cd:b5:80:e4:6f:7d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Apr 19 04:01:19 2026 GMT Not After : Apr 20 04:01:19 2026 GMT Subject: CN=8e8ac44874d1dd41e32f5886b9e555088b36cd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:94:6c:84:14:bc:b2:c5:d9:8c:9a:26:3b:82: f7:da:53:77:67:d2:19:3a:37:38:67:af:63:ff:57: 28:94:07:36:1b:ea:2e:dc:3b:dc:49:10:00:71:df: 1b:53:36:71:25:b6:0f:bd:46:f0:20:ba:77:7a:aa: 32:35:2a:36:4f:27:41:4f:44:55:38:69:a3:33:52: 65:8f:3b:0b:7d:e1:f2:89:2e:64:03:3f:74:91:e9: 36:d9:13:ac:e8:c1:cf:a5:36:45:c2:0b:4d:38:14: 7f:34:85:4d:38:9f:a4:82:6c:f5:0a:1f:99:99:9b: 84:39:8f:0b:d4:f7:3c:4a:8e:8e:65:eb:40:bc:21: 93:79:58:23:a2:64:8b:c9:1e:a6:de:b9:11:01:af: 49:d3:bb:be:78:67:61:fe:87:36:15:60:4d:09:c7: 5e:1a:ff:f8:73:bb:5c:ff:a3:4c:d9:59:a2:7c:a6: fe:46:65:93:7c:6b:48:d8:e2:43:a3:1a:db:49:2e: b7:ff:ff:35:56:84:71:d4:65:c5:e3:e9:f8:75:c2: 54:c6:cd:fc:f9:e7:a8:2f:7f:55:ca:23:50:39:c9: d6:09:96:2f:17:91:69:c6:26:71:91:f2:ff:42:61: 1b:97:4e:28:5d:d9:d1:54:d8:1a:93:24:58:fd:6a: 3d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8A:C4:48:74:D1:DD:41:E3:2F:58:86:B9:E5:55:08:8B:36:CD:5E X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:64:e5:81:41:bf:d2:14:a5:0e:00:45:ba:f5:bf:a7:bd:c8: 3d:19:1f:d1:df:ea:63:4f:9b:30:53:ce:1a:9c:c8:c6:06:c0: cf:52:08:34:cb:b5:3b:4e:60:bb:a7:5b:e7:4a:f2:3f:92:52: 61:43:8d:4a:85:66:13:f7:a2:c5:d8:9c:ac:2b:98:88:25:73: bd:ef:5f:5d:a8:80:00:ef:86:56:2e:dd:0d:56:ba:7b:a1:cc: 89:bd:42:92:00:e0:ca:1d:24:d9:36:ea:7a:76:e8:77:f5:e4: 35:08:42:32:9d:30:d3:f4:0c:9b:08:e3:fa:7f:de:d3:df:e6: 43:72:6a:e2:1e:c8:c0:68:76:3b:27:9f:14:01:c8:1a:a7:f7: 9d:98:54:5e:12:aa:04:d5:ad:41:e0:50:aa:02:b0:75:d7:0e: 08:af:7a:19:f4:db:30:f3:7f:4a:fa:2c:2e:2d:fc:6d:65:9d: 8f:08:4c:8a:d0:0a:ce:79:4a:42:f6:e5:2d:27:a1:3f:0c:ec: dd:b0:2e:5d:86:e8:c5:88:61:f0:e5:88:fd:49:7e:66:a3:50: 2d:d1:df:3a:f8:c7:83:35:e2:f3:1f:37:fc:58:d5:cb:78:ed: 69:94:b7:4c:dc:e7:68:7a:85:94:4e:55:77:da:c8:61:87:de: b8:f6:4d:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2j5mojLHuzQ7jNtYDkb339MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwNDE5MDQwMTE5WhcNMjYwNDIwMDQwMTE5WjAzMTEwLwYDVQQD Eyg4ZThhYzQ0ODc0ZDFkZDQxZTMyZjU4ODZiOWU1NTUwODhiMzZjZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZRshBS8ssXZjJomO4L32lN3Z9IZ Ojc4Z69j/1colAc2G+ou3DvcSRAAcd8bUzZxJbYPvUbwILp3eqoyNSo2TydBT0RV OGmjM1JljzsLfeHyiS5kAz90kek22ROs6MHPpTZFwgtNOBR/NIVNOJ+kgmz1Ch+Z mZuEOY8L1Pc8So6OZetAvCGTeVgjomSLyR6m3rkRAa9J07u+eGdh/oc2FWBNCcde Gv/4c7tc/6NM2VmifKb+RmWTfGtI2OJDoxrbSS63//81VoRx1GXF4+n4dcJUxs38 +eeoL39VyiNQOcnWCZYvF5FpxiZxkfL/QmEbl04oXdnRVNgakyRY/Wo9IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6KxEh00d1B4y9YhrnlVQiLNs1eMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2TlgUG/ 0hSlDgBFuvW/p73IPRkf0d/qY0+bMFPOGpzIxgbAz1IINMu1O05gu6db50ryP5JS YUONSoVmE/eixdicrCuYiCVzve9fXaiAAO+GVi7dDVa6e6HMib1CkgDgyh0k2Tbq enbod/XkNQhCMp0w0/QMmwjj+n/e09/mQ3Jq4h7IwGh2OyefFAHIGqf3nZhUXhKq BNWtQeBQqgKwddcOCK96GfTbMPN/SvosLi38bWWdjwhMitAKznlKQvblLSehPwzs 3bAuXYboxYhh8OWI/Ul+ZqNQLdHfOvjHgzXi8x83/FjVy3jtaZS3TNznaHqFlE5V d9rIYYfeuPZNGg== -----END CERTIFICATE-----Generated at Sun Apr 19 11:29:19 2026 by rpki-client