$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: CJFAgcPYcY/PoO2j39fWfFaOfobIk02oOlCY21MKA2g= Subject key identifier: 1C:49:F4:C2:29:38:24:21:13:B6:2E:C1:C0:D6:7A:20:F3:1F:46:99 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 01A0BF8C988A425AB8186A6D8E5911C6CFA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 179E Signing time: Sun 20 Sep 2026 16:00:57 +0000 Manifest this update: Sun 20 Sep 2026 16:00:57 +0000 Manifest next update: Mon 21 Sep 2026 16:00:57 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: DjyYp5lzeaBzYqpiqSjP/kOS1B5z4BTeqwthEHq+gtc=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:8c:98:8a:42:5a:b8:18:6a:6d:8e:59:11:c6:cf:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Sep 20 16:00:57 2026 GMT Not After : Sep 21 16:00:57 2026 GMT Subject: CN=1c49f4c22938242113b62ec1c0d67a20f31f4699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:56:9c:20:f0:dc:2c:a5:df:22:dd:5d:8e:a9: c0:fd:ef:0e:c0:8d:d3:4f:ad:b5:2e:43:9d:eb:cc: ec:fc:7f:e2:06:ab:c7:ef:d9:3b:2d:5b:9d:0c:4b: 47:bd:c5:6d:3d:4c:44:84:17:df:4d:07:19:86:05: 0b:f1:bd:b0:0f:cb:11:cc:e4:a6:75:96:b5:43:c7: f4:1c:4c:dc:1c:e7:74:83:a3:de:d6:28:fa:c6:9e: 9e:4c:fb:8f:cd:b0:47:26:e3:08:25:3a:99:34:8c: a0:93:e6:77:98:23:70:24:8b:2d:e4:f2:91:f4:e8: 67:27:92:c0:68:03:66:be:de:7b:ac:a0:09:c2:e6: ce:64:90:69:83:42:92:61:81:80:04:a7:79:8e:d7: de:d0:1f:53:0e:2c:9a:0e:a3:45:21:ca:cc:41:65: fd:b6:17:ba:93:77:c5:4e:29:e2:36:b9:f6:24:23: 4d:fc:d5:c2:3a:7f:57:3e:a8:4c:e3:9f:12:38:07: 39:f2:9d:58:8f:6e:97:d7:52:5f:19:85:3d:37:8a: 43:35:61:7d:3a:d5:96:2f:cf:0a:ac:f8:15:0a:53: d3:8e:25:f3:79:79:1a:27:93:1e:e6:d4:da:6b:dd: c5:25:8c:ac:91:4e:1f:cb:7f:f3:68:f1:29:27:89: 8d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:49:F4:C2:29:38:24:21:13:B6:2E:C1:C0:D6:7A:20:F3:1F:46:99 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d7:1b:42:27:7d:72:89:9b:fa:1b:ef:45:55:97:1c:23:f2: 4c:8e:fa:e3:85:c8:52:56:c6:cd:4c:fe:cf:01:dc:3c:5d:a2: 08:45:d1:73:5d:b6:11:a7:7b:d4:71:7f:b4:0d:51:72:74:f2: eb:14:9f:a7:5d:af:29:b3:99:28:bc:5e:cd:e1:45:71:90:3d: b3:8a:88:1d:28:5e:86:e6:75:66:7c:9c:74:0a:4a:b2:16:95: 01:d9:fb:46:5c:9d:51:c6:14:93:27:58:cf:7e:a6:15:3e:be: a8:e0:b3:98:5d:24:cb:0c:b0:0b:99:75:80:41:64:8c:02:48: 67:88:4f:9e:b1:1c:ea:96:f5:cf:22:71:69:41:ea:1b:fa:f6: a9:85:33:c6:83:d0:82:9f:a9:02:ab:5b:1f:62:af:ea:49:34: 31:eb:36:e5:94:66:0f:cf:91:9a:70:ea:d9:98:ae:bb:b8:a6: 6f:93:b0:a5:23:12:df:46:34:f8:b4:b8:b6:33:ec:3d:7b:87: 6c:65:7c:ce:c1:4b:f3:b2:52:5f:00:cb:46:41:4c:3f:ff:08: 93:85:a0:da:57:ca:6c:dd:a9:86:21:8f:3b:4b:16:61:73:c5: 51:c3:0b:64:e7:20:f5:78:37:0a:3e:d2:a9:95:b1:02:f2:80: f8:0b:69:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/jJiKQlq4GGptjlkRxs+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwOTIwMTYwMDU3WhcNMjYwOTIxMTYwMDU3WjAzMTEwLwYDVQQD EygxYzQ5ZjRjMjI5MzgyNDIxMTNiNjJlYzFjMGQ2N2EyMGYzMWY0Njk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVacIPDcLKXfIt1djqnA/e8OwI3T T621LkOd68zs/H/iBqvH79k7LVudDEtHvcVtPUxEhBffTQcZhgUL8b2wD8sRzOSm dZa1Q8f0HEzcHOd0g6Pe1ij6xp6eTPuPzbBHJuMIJTqZNIygk+Z3mCNwJIst5PKR 9OhnJ5LAaANmvt57rKAJwubOZJBpg0KSYYGABKd5jtfe0B9TDiyaDqNFIcrMQWX9 the6k3fFTiniNrn2JCNN/NXCOn9XPqhM458SOAc58p1Yj26X11JfGYU9N4pDNWF9 OtWWL88KrPgVClPTjiXzeXkaJ5Me5tTaa93FJYyskU4fy3/zaPEpJ4mNRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxJ9MIpOCQhE7YuwcDWeiDzH0aZMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtcbQid9 comb+hvvRVWXHCPyTI7644XIUlbGzUz+zwHcPF2iCEXRc122Ead71HF/tA1RcnTy 6xSfp12vKbOZKLxezeFFcZA9s4qIHShehuZ1ZnycdApKshaVAdn7RlydUcYUkydY z36mFT6+qOCzmF0kywywC5l1gEFkjAJIZ4hPnrEc6pb1zyJxaUHqG/r2qYUzxoPQ gp+pAqtbH2Kv6kk0Mes25ZRmD8+RmnDq2Ziuu7imb5OwpSMS30Y0+LS4tjPsPXuH bGV8zsFL87JSXwDLRkFMP/8Ik4Wg2lfKbN2phiGPO0sWYXPFUcMLZOcg9Xg3Cj7S qZWxAvKA+AtpkA== -----END CERTIFICATE-----Generated at Mon Sep 21 02:53:47 2026 by rpki-client