$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: 8MvmbWPNWqvsRaHVIpcs9Mb+4K33sTaDkVUMJbwwcZY= Subject key identifier: 6D:83:36:C4:9E:2F:BD:C6:4E:9C:AF:43:30:93:95:4F:B3:70:8D:C4 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019FA975A3BA57EF5AACE4F4C681F7F8AA7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 170E Signing time: Tue 28 Jul 2026 16:01:26 +0000 Manifest this update: Tue 28 Jul 2026 16:01:26 +0000 Manifest next update: Wed 29 Jul 2026 16:01:26 +0000 Files and hashes: 1: 6H7ZKy8ZXMYCQs1tJQU9HMeHDf8.roa (hash: Hi8ylLPtRW5cTPTLEZMSKMfBugZcDVTM9OMIUbfFA1Q=) 2: 9S4MfLquyh-qrUEKsjf9K5pPw-E.roa (hash: lDfP7Rw/AFVS5oiPjEygt8fOx4/sSpYeTHr+hNCy/Y8=) 3: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: VYuBzQTj3yf5XBfA/rEL50suKoUNFRdXvt9r3G4+p9U=) 4: eFOj6GS3QWx3LCTCCOeJMYOedz0.roa (hash: lFu71+7IA2r5yGUrDCeoEYffOjpuguSpQXtdqb7+Xe0=) 5: eklUJS2_Djtss2ru717v4kYti3g.roa (hash: xWdnp26vNQdhZX81YBA2whAixTtQ8EpVFLanadkwW6U=) 6: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (hash: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo=) 7: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (hash: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg=) 8: pPuYN3xv0sq-4zILngE0M1s1Mlc.roa (hash: l226Vj1q1kVjY3FHXrnuQl4C8mLmZwc1nh3ACqtnaGw=) 9: q19qERCShb-Y7JAltKkjwCPGd_M.roa (hash: yoUEi5A8cMILPVY4ZsR8L+GyUOqrJ2wvua2rTehpmZ8=) 10: u2LwB7JoPATisCyMgWUoyFBE2IM.roa (hash: zUkwX90Cn5pYIidpA9DzFJzrtYHxnLfOhDQRjwe5oPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:75:a3:ba:57:ef:5a:ac:e4:f4:c6:81:f7:f8:aa:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Jul 28 16:01:26 2026 GMT Not After : Jul 29 16:01:26 2026 GMT Subject: CN=6d8336c49e2fbdc64e9caf433093954fb3708dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1f:5c:b6:d4:66:eb:d1:62:f9:bd:cf:a2:d6: be:1e:f0:d7:3e:a1:06:f5:98:58:d7:6f:16:66:7c: a8:a9:c5:0d:7b:62:bb:d7:f9:4d:cd:50:7a:22:d6: c7:13:35:b7:2f:9d:7f:90:8e:8d:a8:ca:f9:78:0c: 6f:bc:87:58:2a:09:f6:e9:0b:5f:c5:e5:c2:4d:79: db:05:cd:6f:e8:3f:38:c2:27:e9:70:b6:71:0d:b6: 67:e4:cc:ac:cd:f7:bc:d1:30:15:d9:22:01:3d:6a: 52:84:c6:bb:0b:bc:a7:cb:15:f0:fb:43:7f:e1:fb: 96:5f:5a:49:94:0d:22:f8:fb:8c:43:b1:83:c4:3f: aa:f1:8a:2a:a5:29:99:e6:fa:48:2c:c6:c4:d7:1b: 2c:4f:22:af:8f:2f:b8:43:78:2e:68:34:7f:7f:37: 94:cc:30:f6:ed:43:40:af:26:f2:ee:4b:56:4e:a2: ec:3a:57:21:40:13:ce:8e:e1:ec:35:65:a5:ee:72: 52:41:0d:ed:9b:48:bc:66:62:86:b0:80:c9:1d:d5: 96:03:f7:2f:81:6d:1c:9e:a7:65:ba:49:54:01:04: 7f:5a:56:9a:bc:14:1e:82:0b:e7:cc:1b:63:0f:d2: 48:72:00:99:c7:c2:71:6f:bd:74:88:7c:10:22:ca: 9a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:83:36:C4:9E:2F:BD:C6:4E:9C:AF:43:30:93:95:4F:B3:70:8D:C4 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4a:c4:c3:3d:30:46:b4:42:72:77:1d:6c:75:57:4f:ba:c4: 97:1b:26:d4:1e:36:c3:ef:84:2a:d6:0a:0f:66:44:d0:26:d8: 0d:ad:8e:22:64:eb:5f:f2:b4:24:b9:c9:9f:61:55:91:48:92: fa:47:1e:b8:44:c2:d3:64:ac:05:d9:b7:e0:9f:c3:1c:87:37: 8f:e3:dd:51:6c:a0:3f:a9:3b:a6:bc:3d:82:8c:de:6d:86:5f: 2c:d2:75:19:92:7f:b5:84:bd:e2:a8:b8:09:a9:f7:42:a7:f1: 3e:a9:e8:bf:e3:61:f2:bb:14:4d:d1:a0:f3:fd:67:07:de:5f: 86:b1:da:d1:6e:a0:d3:f4:f7:d7:f4:92:f5:b7:f3:05:fc:20: a3:09:ea:a0:2d:d8:9a:8d:b3:36:0a:04:41:0c:9a:40:5c:d4: f2:5f:c5:52:68:9b:e8:b1:17:e3:c0:59:f0:1c:21:6b:c2:59: 78:ed:8c:4d:80:a4:6b:4e:76:8f:47:37:96:6f:32:06:f0:8d: bb:7d:78:50:1b:af:fa:c0:5e:d9:75:db:04:88:8b:92:19:8e: 7a:ae:5f:28:01:50:b5:63:fe:bd:a7:b3:01:1a:13:4d:31:4e: ed:fd:0d:4d:bb:fa:51:56:3e:4a:ef:54:57:fb:23:8d:ed:4d: 31:63:24:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pdaO6V+9arOT0xoH3+Kp/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwNzI4MTYwMTI2WhcNMjYwNzI5MTYwMTI2WjAzMTEwLwYDVQQD Eyg2ZDgzMzZjNDllMmZiZGM2NGU5Y2FmNDMzMDkzOTU0ZmIzNzA4ZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h9cttRm69Fi+b3Pota+HvDXPqEG 9ZhY128WZnyoqcUNe2K71/lNzVB6ItbHEzW3L51/kI6NqMr5eAxvvIdYKgn26Qtf xeXCTXnbBc1v6D84wifpcLZxDbZn5Myszfe80TAV2SIBPWpShMa7C7ynyxXw+0N/ 4fuWX1pJlA0i+PuMQ7GDxD+q8YoqpSmZ5vpILMbE1xssTyKvjy+4Q3guaDR/fzeU zDD27UNAryby7ktWTqLsOlchQBPOjuHsNWWl7nJSQQ3tm0i8ZmKGsIDJHdWWA/cv gW0cnqdluklUAQR/WlaavBQeggvnzBtjD9JIcgCZx8Jxb710iHwQIsqaXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2DNsSeL73GTpyvQzCTlU+zcI3EMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkrEwz0w RrRCcncdbHVXT7rElxsm1B42w++EKtYKD2ZE0CbYDa2OImTrX/K0JLnJn2FVkUiS +kceuETC02SsBdm34J/DHIc3j+PdUWygP6k7prw9gozebYZfLNJ1GZJ/tYS94qi4 Can3QqfxPqnov+Nh8rsUTdGg8/1nB95fhrHa0W6g0/T31/SS9bfzBfwgownqoC3Y mo2zNgoEQQyaQFzU8l/FUmib6LEX48BZ8Bwha8JZeO2MTYCka052j0c3lm8yBvCN u314UBuv+sBe2XXbBIiLkhmOeq5fKAFQtWP+vaezARoTTTFO7f0NTbv6UVY+Su9U V/sjje1NMWMkxA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:32:43 2026 by rpki-client