$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft File: Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json) Hash identifier: MK4X+9e6TA+iMfFcalf2fE5rj96p+3IOgYmp+Dv5odw= Subject key identifier: A6:ED:FE:27:89:15:24:0A:2B:2F:05:A8:B2:44:FB:94:62:7A:D5:85 Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019CA9EAF761984105700156A6BEFBBE3278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft Manifest number: 149B Signing time: Sun 01 Mar 2026 15:01:14 +0000 Manifest this update: Sun 01 Mar 2026 15:01:14 +0000 Manifest next update: Mon 02 Mar 2026 15:01:14 +0000 Files and hashes: 1: 1Tp5jbagpbP3bBosGJzl-vHNwTQ.roa (hash: i9HeQV78oqCuZb5raO//KiH1IAj0HTvvTkgPI31BqfQ=) 2: Cmua0yPNEROUYE9gWO0boVFBqqI.roa (hash: QtNaoAAFNyuhV0lOAnmbW4QSviWCbgXg1PPnGvF92BA=) 3: Gd4dGKjLUsVU7VozTNgX24oGjDQ.roa (hash: wJKyMf9dQCbz6ez7Pqptgxmy4B0HOw9mW+eIDY2Cw3U=) 4: LivM5lzLDSqnTiCIS8JQUOg-kPY.roa (hash: vHdlRvY+/RNvoYO8n7qGZrjxG/8e8ox6/YqQnek6wG4=) 5: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: VtcdzTxX+mCNApDtrnld1v7JQQEuLDOnm0gOthygzkU=) 6: O5osv3DjuzH13zfgVnDH1QiAYBs.roa (hash: g4/oo0ufVfbT9VkbjHiy8bTeHsZgO5XCr3NOXd63NBY=) 7: Sq2F_2MHygjFpi07suhBUa1R_68.roa (hash: ZG5062dDlxQJwdav6+4ilTyJp7ZFq4AHU9MeUnd4pII=) 8: TTCwApiEQAeKWTc5BiOUMPL6Ik0.roa (hash: fI6BVqo8RniHbiOVWZbTUBpJZ0C+Wx1WVAjNDB9Eti8=) 9: Udbfecd9OCCIBZn1ZpoY9Waxspc.roa (hash: xbUJKuEDdKtNd3Br7CaZ0f5SjgbV6Mekx30bWNFgp2Q=) 10: VHn5fbgK9TT163CBWJTv5V844m4.roa (hash: TPUdDfw5uVSRkDAl0XMbSNV4hlR+3H658TMXtO+hKqQ=) 11: c4YRVrrYx--dsVjGMZzmOagHjlw.roa (hash: hrL5enlq2a1V/HselJlnzGeZ8x6quh8vP1eKrV5uojA=) 12: eUOZgV76QaRXLmPL7aDDL3sUxZk.roa (hash: kGucB56GSQLPJJxVequzzGvYl0NeOQ53k+5PEv+Z9RM=) 13: fYaeUMWEkAvz96xxBdazFB21sEA.roa (hash: L6NiwK6X5YK9VisN8/EtYmbWZywh9IQ9ZUBfOb02fSY=) 14: fhyLY9yJmwIhlgdl0r_eC4s6raM.roa (hash: oTh1Q6WnZkhhrxgjEjjzthbMNdzSpywy2PEB3YpQ5UM=) 15: igwMdaPVeZq3u3a2W5jJS_b0L5M.roa (hash: C9ttpwY5RPzDqWX4XDQVwla5pbbO0G/VsUYqR1jcOSI=) 16: p6jyfQcKh_7urtZCXFFZHxQLNAU.roa (hash: 17hXAcCpVFiA3XxPVxSAF84J11pXBVVEl5UnV5vUWt0=) 17: piiqlTI956md5esUYEMv2zHnNtM.roa (hash: Nk456LdgPEgcZyErXy4N8gG+NYFmzf8zfElBf1LUQWo=) 18: rK5QYt727S_N217kOz5a7i6vJ3I.roa (hash: oTY6skhXO9LqbfVvKq/PNI/5wPYntdfhba8E6tbWr80=) 19: v-byi7__tAGSfpc0KLzrbUQNmHM.roa (hash: LsA0lCodRUKqd0B/Z87PBzTIKKAf5j4kKwJmm6jdV3o=) 20: yHA0HvBqPYWnWTRkB4ImgxFstEw.roa (hash: xadPdgKWj0tNuPjFa+N1kM0Efwyv535SVC0Xmv8Ej3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:ea:f7:61:98:41:05:70:01:56:a6:be:fb:be:32:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Mar 1 15:01:14 2026 GMT Not After : Mar 2 15:01:14 2026 GMT Subject: CN=a6edfe278915240a2b2f05a8b244fb94627ad585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:a4:ed:64:1c:eb:00:b6:7d:f9:b5:0f:5b: ba:54:d2:cd:28:6f:d1:1e:0d:51:a2:89:90:53:44: f1:bb:7e:fd:30:5c:c3:18:67:a7:12:46:c1:b3:99: 49:f4:83:f8:a9:78:d7:5c:0c:0a:7d:66:41:f0:1e: 25:c1:3a:48:f6:54:0b:97:6c:84:ad:05:5c:41:e7: c2:84:63:de:b0:1e:ed:a0:ce:7d:e6:78:7e:e9:67: 20:e9:c2:41:30:9b:00:0b:0b:ba:6c:65:cb:4e:60: 10:a4:10:01:13:87:2b:cd:0b:f7:cc:33:a7:47:70: 20:51:c8:cc:a9:d1:09:6e:41:7f:38:3c:41:3a:6e: 13:14:3c:95:71:c3:5b:dc:4b:1f:1c:94:24:d1:51: 2b:de:75:b1:50:f7:8b:a7:a0:3d:b3:be:2c:36:75: 79:a1:ed:f8:d1:c5:90:1c:da:a3:c9:ba:07:d0:08: 49:7a:c5:18:57:57:e6:c4:e7:e9:bf:c3:86:f3:50: 1e:67:6d:bb:6a:96:6a:65:33:bf:1c:3f:11:76:b1: 1a:3d:8b:f9:f8:f8:14:6c:d9:05:84:45:97:32:72: bc:81:76:8e:a7:11:e4:16:2a:fc:c5:6c:a1:8f:54: ee:08:5e:1f:32:ed:3c:37:35:43:3f:30:5b:23:dc: 38:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:ED:FE:27:89:15:24:0A:2B:2F:05:A8:B2:44:FB:94:62:7A:D5:85 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:34:fb:47:07:b0:ba:ff:89:c0:76:6e:29:65:9b:0a:ce:3b: 65:3f:dd:c4:0f:48:9d:ce:09:57:98:de:ad:8a:5f:64:fe:44: 95:c4:c3:36:d2:1c:09:07:9f:fb:a8:56:ee:ac:9c:3c:8b:16: db:89:b5:08:7c:49:60:52:b5:87:fa:e9:44:42:93:60:46:69: 21:dd:b6:8d:70:47:69:c8:ea:ea:9c:db:bf:fc:98:97:7c:15: 3c:dd:84:82:ce:cf:1e:96:fe:48:25:92:63:cd:96:d5:f2:3e: 98:15:c5:3e:2b:4e:0b:e7:cf:57:e4:a5:21:cd:e5:a4:b1:ea: 7b:66:d9:b3:65:8b:29:62:23:f4:bc:65:ff:90:ba:34:11:92: 2b:6e:05:92:30:72:f9:5b:f0:fe:e2:c9:a4:6a:c8:ea:9b:52: d7:84:2b:40:c0:1b:6b:59:6b:69:ab:4e:e0:6f:af:55:9f:d5: 17:d7:4b:3e:12:fd:10:a7:00:7f:76:2c:23:29:fa:7a:23:cc: a1:23:90:e4:dc:f0:ce:ad:6d:21:07:1a:22:ee:78:c7:06:94: b5:06:3d:d3:08:9e:d3:54:9b:fe:21:fc:28:21:ac:a4:7b:43: d4:c8:6c:19:08:d3:85:a5:6f:ea:29:44:83:5d:0a:6b:57:03: c8:b1:d6:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyp6vdhmEEFcAFWpr77vjJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjYwMzAxMTUwMTE0WhcNMjYwMzAyMTUwMTE0WjAzMTEwLwYDVQQD EyhhNmVkZmUyNzg5MTUyNDBhMmIyZjA1YThiMjQ0ZmI5NDYyN2FkNTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkmk7WQc6wC2ffm1D1u6VNLNKG/R Hg1RoomQU0Txu379MFzDGGenEkbBs5lJ9IP4qXjXXAwKfWZB8B4lwTpI9lQLl2yE rQVcQefChGPesB7toM595nh+6Wcg6cJBMJsACwu6bGXLTmAQpBABE4crzQv3zDOn R3AgUcjMqdEJbkF/ODxBOm4TFDyVccNb3EsfHJQk0VEr3nWxUPeLp6A9s74sNnV5 oe340cWQHNqjyboH0AhJesUYV1fmxOfpv8OG81AeZ227apZqZTO/HD8RdrEaPYv5 +PgUbNkFhEWXMnK8gXaOpxHkFir8xWyhj1TuCF4fMu08NzVDPzBbI9w40wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbt/ieJFSQKKy8FqLJE+5RietWFMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTT7Rwew uv+JwHZuKWWbCs47ZT/dxA9Inc4JV5jerYpfZP5ElcTDNtIcCQef+6hW7qycPIsW 24m1CHxJYFK1h/rpREKTYEZpId22jXBHacjq6pzbv/yYl3wVPN2Egs7PHpb+SCWS Y82W1fI+mBXFPitOC+fPV+SlIc3lpLHqe2bZs2WLKWIj9Lxl/5C6NBGSK24FkjBy +Vvw/uLJpGrI6ptS14QrQMAba1lraatO4G+vVZ/VF9dLPhL9EKcAf3YsIyn6eiPM oSOQ5Nzwzq1tIQcaIu54xwaUtQY90wie01Sb/iH8KCGspHtD1MhsGQjThaVv6ilE g10Ka1cDyLHW3Q== -----END CERTIFICATE-----Generated at Sun Mar 1 23:43:59 2026 by rpki-client