$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: pi+/zdaCdDZripGrJNXswLCvx1rrX4WCL2jHwLGxfMM= Subject key identifier: 98:4D:73:C2:4F:3A:14:7E:C7:67:9E:57:DF:2C:A1:80:40:A2:C5:26 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019CAEDA476E4A19E374D43D51A142EDC15C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 186F Signing time: Mon 02 Mar 2026 14:01:06 +0000 Manifest this update: Mon 02 Mar 2026 14:01:06 +0000 Manifest next update: Tue 03 Mar 2026 14:01:06 +0000 Files and hashes: 1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=) 2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=) 3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=) 4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=) 5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=) 6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=) 7: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=) 8: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: PVCXVTZnWWMLmVD0qJEwupN3nWYlqm/uwxOoED7p1o0=) 9: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=) 10: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=) 11: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=) 12: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=) 13: Y717qVS96YjYgAZkrscDp7OEvWY.roa (hash: bvdM3ELPzWVbs/s6wCevWXdZqt/DIba2BD86BPGfAIQ=) 14: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=) 15: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=) 16: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=) 17: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=) 18: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=) 19: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=) 20: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=) 21: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 14:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ae:da:47:6e:4a:19:e3:74:d4:3d:51:a1:42:ed:c1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Mar 2 14:01:06 2026 GMT Not After : Mar 3 14:01:06 2026 GMT Subject: CN=984d73c24f3a147ec7679e57df2ca18040a2c526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:5e:a3:de:f2:eb:11:b0:f7:73:a3:02:de: 0f:06:cb:c4:a8:7e:85:94:27:f9:1b:cb:6b:6e:45: 55:52:52:b1:78:f5:68:a4:3a:4d:51:da:03:d5:cf: 0c:d0:fc:6d:ed:c0:7e:cd:40:73:fd:92:ee:03:7b: da:f8:e1:13:ee:c0:fc:2a:93:4b:19:5a:1c:d8:11: 7a:b3:0e:f1:49:bc:a0:0d:10:08:05:a4:72:c3:a2: 7b:55:b2:71:a9:7e:5c:48:d9:ce:64:c5:0e:99:76: f5:75:f8:bb:5f:a9:37:e5:3a:5b:0d:85:59:93:1e: 26:4a:e2:47:85:b8:7f:e5:e6:e7:d4:6a:d3:8d:90: 1a:e5:e9:4f:8b:af:11:d7:5d:4f:b3:93:30:9d:d3: 1e:38:8c:1d:02:f5:9f:97:f6:26:8f:a9:17:10:a0: 6d:3c:fc:da:8a:e9:d1:46:83:fe:1b:11:e5:32:c6: 2c:31:b5:00:74:30:40:fb:9a:62:53:f0:f5:b8:6c: ef:7a:db:0b:1e:d7:09:61:b2:e2:83:63:82:0d:e7: b7:9d:bf:fd:dd:5b:fe:ef:ad:0b:70:d7:78:fe:8c: e4:3d:5f:79:23:6c:08:46:4d:5f:91:e4:9a:7e:08: ba:30:eb:e9:a8:1e:af:09:14:ff:56:f9:bc:d7:e1: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4D:73:C2:4F:3A:14:7E:C7:67:9E:57:DF:2C:A1:80:40:A2:C5:26 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f1:2f:f9:6b:57:20:63:ed:42:a4:70:a3:9c:6c:d9:a1:cb: cf:3b:a3:9b:e1:79:47:02:8f:e5:5c:77:00:9f:27:d6:bd:e6: 97:5e:de:84:3d:09:41:55:c9:d2:92:81:9b:3a:48:eb:49:00: f7:84:0f:05:b7:b9:d0:6a:bb:cb:c1:84:99:78:fa:10:2d:83: 80:75:9e:ba:95:13:25:e4:c5:49:7a:30:ba:f4:ae:f1:bd:46: 1f:98:0a:fd:e5:9f:e8:cd:1d:a7:02:80:df:5c:42:db:dc:1f: bb:05:a7:76:3f:f8:68:cf:0d:74:eb:0d:6b:b3:83:08:d9:43: 56:28:6f:5c:70:0f:c1:06:24:0f:a9:95:fa:22:55:3d:4a:1c: d4:2b:73:56:87:95:4e:b3:6e:88:29:43:6c:7d:53:f8:00:cc: d2:7f:82:d5:ce:ed:2c:47:1f:97:35:89:72:85:1f:12:57:af: 59:7c:4e:83:cd:97:1a:ac:91:bb:94:aa:1e:81:95:e1:18:aa: b1:66:14:86:df:84:25:9f:ee:f2:c5:77:04:15:e4:18:0d:ab: 30:1b:f0:83:03:87:b5:68:f3:de:53:d4:88:6a:db:02:cd:3b: 2b:c0:ac:3f:11:81:65:c6:c1:c9:16:9c:12:5c:4d:41:a1:7e: 11:53:ce:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyu2kduShnjdNQ9UaFC7cFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMzAyMTQwMTA2WhcNMjYwMzAzMTQwMTA2WjAzMTEwLwYDVQQD Eyg5ODRkNzNjMjRmM2ExNDdlYzc2NzllNTdkZjJjYTE4MDQwYTJjNTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY5eo97y6xGw93OjAt4PBsvEqH6F lCf5G8trbkVVUlKxePVopDpNUdoD1c8M0Pxt7cB+zUBz/ZLuA3va+OET7sD8KpNL GVoc2BF6sw7xSbygDRAIBaRyw6J7VbJxqX5cSNnOZMUOmXb1dfi7X6k35TpbDYVZ kx4mSuJHhbh/5ebn1GrTjZAa5elPi68R111Ps5MwndMeOIwdAvWfl/Ymj6kXEKBt PPzaiunRRoP+GxHlMsYsMbUAdDBA+5piU/D1uGzvetsLHtcJYbLig2OCDee3nb/9 3Vv+760LcNd4/ozkPV95I2wIRk1fkeSafgi6MOvpqB6vCRT/Vvm81+FzlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhNc8JPOhR+x2eeV98soYBAosUmMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPEv+WtX IGPtQqRwo5xs2aHLzzujm+F5RwKP5Vx3AJ8n1r3ml17ehD0JQVXJ0pKBmzpI60kA 94QPBbe50Gq7y8GEmXj6EC2DgHWeupUTJeTFSXowuvSu8b1GH5gK/eWf6M0dpwKA 31xC29wfuwWndj/4aM8NdOsNa7ODCNlDVihvXHAPwQYkD6mV+iJVPUoc1CtzVoeV TrNuiClDbH1T+ADM0n+C1c7tLEcflzWJcoUfElevWXxOg82XGqyRu5SqHoGV4Riq sWYUht+EJZ/u8sV3BBXkGA2rMBvwgwOHtWjz3lPUiGrbAs07K8CsPxGBZcbByRac ElxNQaF+EVPOKw== -----END CERTIFICATE-----Generated at Mon Mar 2 22:20:44 2026 by rpki-client