$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: /O6naP9LyCusYBEGfoE5xxSydxhih3VXp7xBnloBy18= Subject key identifier: 79:54:92:F5:E3:80:7C:87:C0:80:FA:84:D1:F4:4E:85:A0:60:71:FD Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019D9A74A83BB2A00D450792BA6808EDAA88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 18E9 Signing time: Fri 17 Apr 2026 08:00:29 +0000 Manifest this update: Fri 17 Apr 2026 08:00:29 +0000 Manifest next update: Sat 18 Apr 2026 08:00:29 +0000 Files and hashes: 1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=) 2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=) 3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=) 4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=) 5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=) 6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=) 7: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=) 8: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: WIx9o3uyQv3Gs+uJHkfhngiRVBb7RMLc8Yi3HLabHGU=) 9: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=) 10: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=) 11: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=) 12: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=) 13: Y717qVS96YjYgAZkrscDp7OEvWY.roa (hash: bvdM3ELPzWVbs/s6wCevWXdZqt/DIba2BD86BPGfAIQ=) 14: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=) 15: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=) 16: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=) 17: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=) 18: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=) 19: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=) 20: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=) 21: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:74:a8:3b:b2:a0:0d:45:07:92:ba:68:08:ed:aa:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Apr 17 08:00:29 2026 GMT Not After : Apr 18 08:00:29 2026 GMT Subject: CN=795492f5e3807c87c080fa84d1f44e85a06071fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:49:da:00:e6:3b:ec:16:cf:0e:88:ff:15:bc: 1f:56:ba:69:6b:0a:dc:15:11:ab:e8:2a:5e:07:21: 74:54:e7:8f:4d:3b:f8:df:a6:f2:16:e2:ed:b3:47: 73:49:e6:27:8a:77:36:c8:06:ad:d0:2c:f0:20:07: 82:43:4c:34:23:85:0c:25:7d:28:15:8f:12:3a:9f: 10:76:79:fc:fa:1d:51:5f:ec:c9:c3:31:f2:41:80: b4:87:b2:29:fe:86:f3:f3:3f:71:ee:00:98:28:73: f0:ba:a1:ee:35:bb:56:19:a4:60:b1:22:80:a7:52: 3f:54:fe:f6:40:a9:1e:49:e9:f2:b2:d8:87:81:79: d5:66:a1:83:3d:a4:bf:5e:df:45:99:e3:46:94:1b: 5a:21:a2:a2:8e:92:b3:f0:f5:36:2b:2d:34:6d:76: 99:e2:83:60:14:df:fa:13:e2:27:1b:6e:97:d1:d9: 27:bd:37:c0:bf:6f:94:25:b7:3b:ba:e7:e2:d2:b1: 8d:bc:f6:14:63:09:8e:2d:0e:50:43:77:12:47:56: bf:ad:ae:c2:3d:f8:d5:fa:d2:f6:d7:b3:80:65:ae: 81:40:4d:99:eb:de:32:b1:62:49:d7:4c:d0:6a:97: 19:f5:bf:b0:a3:f0:b4:1b:23:d4:c1:b6:5c:99:2c: f0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:54:92:F5:E3:80:7C:87:C0:80:FA:84:D1:F4:4E:85:A0:60:71:FD X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8c:06:ae:09:42:af:2d:08:b4:7e:87:e1:fa:6f:03:fe:13: 3d:23:2a:f3:3a:a4:52:19:89:ce:da:70:37:f9:8e:48:d6:f8: e3:a0:8d:50:3c:a5:e2:35:59:92:26:f0:23:e8:f0:92:b4:53: c0:33:5e:c7:5b:b7:d0:c2:cb:18:ac:08:f8:7a:2d:48:38:09: 2c:01:21:2f:16:d1:1d:bf:4c:6e:2a:15:68:93:11:00:94:a5: 93:f3:d5:bf:79:7e:b1:ec:b1:18:d9:8e:0c:4d:c1:95:ba:35: a5:ca:09:ba:2c:62:58:a3:45:4e:6a:47:e8:6b:f7:11:e5:d6: ef:92:ac:a8:96:66:61:47:1b:5d:a1:f4:13:02:3c:f3:ee:9d: 72:e3:00:fd:6c:bd:7e:59:11:84:d4:6e:97:b6:8d:10:a9:8a: df:f1:d4:5d:9d:80:ca:3c:e5:d1:3a:f7:2e:17:6d:82:c9:cb: 6a:4c:bf:ff:68:b8:81:8e:2e:ea:9c:38:50:0e:fd:c9:1e:fb: 51:64:44:4c:4e:92:e2:5a:7b:0f:e7:85:58:a2:a6:29:42:9e: 38:b1:f9:42:59:0d:c3:ac:df:13:91:ea:52:a6:ed:b7:aa:66: de:d1:63:e3:27:5c:02:29:0f:28:7c:a8:f6:a8:ec:97:10:b1: bc:31:cf:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2adKg7sqANRQeSumgI7aqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwNDE3MDgwMDI5WhcNMjYwNDE4MDgwMDI5WjAzMTEwLwYDVQQD Eyg3OTU0OTJmNWUzODA3Yzg3YzA4MGZhODRkMWY0NGU4NWEwNjA3MWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0naAOY77BbPDoj/FbwfVrppawrc FRGr6CpeByF0VOePTTv436byFuLts0dzSeYninc2yAat0CzwIAeCQ0w0I4UMJX0o FY8SOp8Qdnn8+h1RX+zJwzHyQYC0h7Ip/obz8z9x7gCYKHPwuqHuNbtWGaRgsSKA p1I/VP72QKkeSenystiHgXnVZqGDPaS/Xt9FmeNGlBtaIaKijpKz8PU2Ky00bXaZ 4oNgFN/6E+InG26X0dknvTfAv2+UJbc7uufi0rGNvPYUYwmOLQ5QQ3cSR1a/ra7C PfjV+tL217OAZa6BQE2Z694ysWJJ10zQapcZ9b+wo/C0GyPUwbZcmSzwWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlUkvXjgHyHwID6hNH0ToWgYHH9MB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIwGrglC ry0ItH6H4fpvA/4TPSMq8zqkUhmJztpwN/mOSNb446CNUDyl4jVZkibwI+jwkrRT wDNex1u30MLLGKwI+HotSDgJLAEhLxbRHb9MbioVaJMRAJSlk/PVv3l+seyxGNmO DE3Blbo1pcoJuixiWKNFTmpH6Gv3EeXW75KsqJZmYUcbXaH0EwI88+6dcuMA/Wy9 flkRhNRul7aNEKmK3/HUXZ2Ayjzl0Tr3LhdtgsnLaky//2i4gY4u6pw4UA79yR77 UWRETE6S4lp7D+eFWKKmKUKeOLH5QlkNw6zfE5HqUqbtt6pm3tFj4ydcAikPKHyo 9qjslxCxvDHP2A== -----END CERTIFICATE-----Generated at Fri Apr 17 16:23:58 2026 by rpki-client