$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json) Hash identifier: hrlZT5yE38L0fDP5WYSoHSLXwHO/qs+QpeJaIpK1q2c= Subject key identifier: E8:D2:62:68:7F:B0:D7:86:A7:B8:C5:23:BC:78:D2:EF:60:D1:26:E4 Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4 Certificate serial: 01A12CFB77C15813FCE542BF841F049C341D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft Manifest number: 1AA0 Signing time: Sun 11 Oct 2026 22:00:39 +0000 Manifest this update: Sun 11 Oct 2026 22:00:39 +0000 Manifest next update: Mon 12 Oct 2026 22:00:39 +0000 Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=) 2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=) 3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=) 4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=) 5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=) 6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: 0sz/HB9xuRs6wFuq8ZtV5oh2BsVqslssLs8Q2cO/ibM=) 7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=) 8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=) 9: vzidGM-MJjldkGGDVWaxyGxbVlE.roa (hash: yoJENfRbWs+TKZhJt2OSgIUYi9IpVHltrW6bYU1ft9s=) 10: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 22:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:2c:fb:77:c1:58:13:fc:e5:42:bf:84:1f:04:9c:34:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4 Validity Not Before: Oct 11 22:00:39 2026 GMT Not After : Oct 12 22:00:39 2026 GMT Subject: CN=e8d262687fb0d786a7b8c523bc78d2ef60d126e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:46:8b:e0:2d:24:6b:6a:63:37:bb:f4:69:3d: 42:ee:d1:6d:7c:bb:3f:34:fe:cf:d9:c7:a6:65:ff: d2:e5:54:2b:8e:ab:3a:5b:6c:d9:44:6c:07:3c:2d: 01:c8:82:60:bb:f3:b4:b3:a0:36:84:31:1a:d8:06: 58:ad:c3:9b:23:5f:74:89:68:dd:5f:89:aa:da:8e: a7:af:2b:47:f6:52:72:c4:bd:dc:3e:3f:b9:fd:68: 0e:4b:32:71:e0:17:aa:09:95:61:1d:4b:0a:2f:fd: ad:e2:6f:76:3c:85:d5:de:e5:db:b9:ea:bc:b8:c7: a9:ac:e4:b5:0d:df:ad:0c:03:8d:47:a2:32:92:21: 1e:24:fe:31:6d:17:57:c8:79:15:61:2f:57:a1:25: f8:16:df:f9:34:08:dc:60:fc:64:dd:6f:24:a6:61: 11:49:ba:9a:fd:02:3e:34:c6:04:7d:dd:54:3b:e3: 9c:e9:3d:00:1b:00:15:a7:31:13:63:e0:8e:32:a0: ad:81:9c:4e:a6:f3:32:3b:e8:92:4e:34:3c:e0:ed: 76:41:04:5c:20:52:3b:bc:da:75:b5:4a:02:c5:b8: fa:24:f7:cd:3b:f9:3f:a3:9d:70:57:52:73:4f:37: 0d:72:9e:1c:1d:d7:59:87:7c:c6:bf:0c:b3:77:5b: 11:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D2:62:68:7F:B0:D7:86:A7:B8:C5:23:BC:78:D2:EF:60:D1:26:E4 X509v3 Authority Key Identifier: keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:1b:0f:d7:05:69:b4:67:83:6a:0e:81:66:cd:88:5c:fc:64: fb:28:96:f6:88:b2:ff:3a:fa:fc:09:ae:a6:a1:fe:cb:2c:c0: 85:e2:c4:3b:27:4a:f4:38:77:75:67:c6:ec:1e:6f:89:a5:6b: 85:2d:8c:e4:2d:56:9e:58:10:80:ad:54:1e:de:f9:83:05:44: 27:87:cb:d5:71:97:ef:9b:32:52:6c:5c:28:d7:35:d8:8b:25: 34:27:0c:e6:00:37:9f:6f:11:ba:85:a5:3c:10:27:28:c3:9a: 51:a5:3d:0b:bd:35:93:bb:bf:8d:0e:ae:ef:a8:db:cd:4c:40: 63:a9:86:37:95:50:cf:ac:f2:9a:8d:6a:ab:cc:1f:1b:de:1c: f9:91:4a:58:e0:c8:3a:cb:1d:55:99:36:f7:63:50:81:d5:35: e0:b6:80:90:fe:14:7b:68:6e:d8:73:48:30:f6:81:4c:2b:dc: ca:31:ef:61:f0:8a:39:68:af:20:13:d2:ec:bc:bd:96:41:c6: 1c:c0:e6:ab:9d:7a:94:c9:52:7b:08:68:71:1f:30:2a:57:e1: a6:77:ef:9c:17:d5:c5:67:0a:83:d4:5f:a2:16:8f:c8:23:18: af:d1:3f:20:46:85:7d:cf:3d:ca:26:15:d3:14:c7:d5:19:9e: c4:a7:a3:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEs+3fBWBP85UK/hB8EnDQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWExNGNlOWQyNTIzOWI5MmZlNWFiY2U1MzI1MTUwNDRj MWFiYTQwHhcNMjYxMDExMjIwMDM5WhcNMjYxMDEyMjIwMDM5WjAzMTEwLwYDVQQD EyhlOGQyNjI2ODdmYjBkNzg2YTdiOGM1MjNiYzc4ZDJlZjYwZDEyNmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EaL4C0ka2pjN7v0aT1C7tFtfLs/ NP7P2cemZf/S5VQrjqs6W2zZRGwHPC0ByIJgu/O0s6A2hDEa2AZYrcObI190iWjd X4mq2o6nrytH9lJyxL3cPj+5/WgOSzJx4BeqCZVhHUsKL/2t4m92PIXV3uXbueq8 uMeprOS1Dd+tDAONR6IykiEeJP4xbRdXyHkVYS9XoSX4Ft/5NAjcYPxk3W8kpmER Sbqa/QI+NMYEfd1UO+Oc6T0AGwAVpzETY+COMqCtgZxOpvMyO+iSTjQ84O12QQRc IFI7vNp1tUoCxbj6JPfNO/k/o51wV1JzTzcNcp4cHddZh3zGvwyzd1sRAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjSYmh/sNeGp7jFI7x40u9g0SbkMB8GA1UdIwQY MBaAFDUaFM6dJSObkv5avOUyUVBEwaukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEt Mjk1Mzg5NGIxZjZkLzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEtMjk1Mzg5NGIxZjZk LzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhsP1wVp tGeDag6BZs2IXPxk+yiW9oiy/zr6/AmupqH+yyzAheLEOydK9Dh3dWfG7B5viaVr hS2M5C1WnlgQgK1UHt75gwVEJ4fL1XGX75syUmxcKNc12IslNCcM5gA3n28RuoWl PBAnKMOaUaU9C701k7u/jQ6u76jbzUxAY6mGN5VQz6zymo1qq8wfG94c+ZFKWODI OssdVZk292NQgdU14LaAkP4Ue2hu2HNIMPaBTCvcyjHvYfCKOWivIBPS7Ly9lkHG HMDmq516lMlSewhocR8wKlfhpnfvnBfVxWcKg9RfohaPyCMYr9E/IEaFfc89yiYV 0xTH1RmexKejFQ== -----END CERTIFICATE-----Generated at Mon Oct 12 04:10:34 2026 by rpki-client