$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: 3Jhy6N3ybLQNmEcvxnwqdq2cawEnmgQA18iqoLNmNRk= Subject key identifier: E9:43:B1:DE:B0:21:1C:9E:9C:CF:E0:43:88:D0:09:06:1A:64:3D:AC Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019EC224A775AABA2F64B364E64B9C006EF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 1984 Signing time: Sat 13 Jun 2026 18:00:42 +0000 Manifest this update: Sat 13 Jun 2026 18:00:42 +0000 Manifest next update: Sun 14 Jun 2026 18:00:42 +0000 Files and hashes: 1: 1-W7IzE0d_eQl0_LuVQD9X18SkJ4.roa (hash: 1Fmhd+4SkmoKTilp+KnCaHBrX5MmOhF5Wo18rIERPHw=) 2: 733qejQeyvQfxCja1dAc1nuCR_A.roa (hash: KleWDRg9L/DGQoc1sDASC5LrA8OvWQb92hsXoAnnUGY=) 3: 73Plc9lpKO8qvq1Q0uUV1mbIIBc.roa (hash: BSPAMunG7+dz8/xVaXw63v+Zih21l/yg2vG9uFtCoek=) 4: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (hash: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM=) 5: 9fPFGinDfGempONBNKKR85QTrY4.roa (hash: OcTPIavmogAcMDXY2sRRS2ySb+5s9YwccCvKuySUcQg=) 6: F6FVNLRVZ1Urk9z33_67okQbq4g.roa (hash: eN1LfvinQOvT+MLeacaMPwMXreCB7uQkdHfpw0SJBpY=) 7: II1ZVg6fHe7M0vm2TA9v3X8mC6o.roa (hash: p68UHIrzry/3qZoSeb+eQcb4FEiW01aytTp+ib7BRMg=) 8: JnPAv8lx_qgiyt8IZcz38a1HdUk.roa (hash: MwHoRiJbPTT8YYMUuCjiN8T5BomUWhWpITXv0mHPhEQ=) 9: Lh10WlvwLo5FMBkJ865-yYzNORs.roa (hash: KP2ztC96HoIm1Q+cl0xK6rS5NQtKIaU1qUzrl8/B9+s=) 10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: FiPdI8wjlo6ihIBDjsrU3Kl2G0zSgCX1OgK9p96kOyo=) 11: P2aHwDmQlZnOCR7AZJRohjJbrQ0.roa (hash: otq4sVs1VpBy6GnMf7DBSa171vmhP3dynH14BlSuJh0=) 12: RF8NSoKFBF5OaqJYcDdT02VuHSs.roa (hash: vvRB+9WORlJrLhlB589TkVY3+WpSsmxXiUuyhpijGUI=) 13: S8MWOlW-Vjb8leJbaZMsDUN87Ss.roa (hash: wikPp7X61J9BcNvkU05wIEdzT3V8DLeI/IY315exqs4=) 14: US44wcphD6LlMjq_XXuf83C94AM.roa (hash: ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=) 15: aaBKRBdEokmI1YebEe2qpwWm1LU.roa (hash: W0VKJflIrnpYpIB94urNDehev59jsZlXXi8glok95Zw=) 16: dhvS8jcUEVfvG46-fKLWALCIpVw.roa (hash: L/U3IcHBzPTqJbWLVELvDe1/R6RlRem6lq6GXoNBkWg=) 17: kV5aHtGuvX5zjjkUPTgvJgGxAhs.roa (hash: RmDZVqDTWxbHbVHJYI+dt1cvutcS51g0agILS9swwck=) 18: pewyh9mTWFMXEikjYH6QDkv1tH4.roa (hash: 1T30Mm7QBaKNNrH0R9ThAvrcs7PzL0UDdC3W+cUJBXs=) 19: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (hash: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4=) 20: voadC2JBDf0kY270gpj8Ay3wj_4.roa (hash: s3llyj84v1b4U6Le3auXVyy/kIYl6zbffdXfZc1j1vI=) 21: xPy6Z0VLNJ1rPqJ_X8MFCj4AMpk.roa (hash: Bb2qIqxu7gzASrbXBCAeaJtrIuYqnsstxMEsjaiRExs=) 22: ywsBEYyAKFfKP2eykdIBS6MH4y8.roa (hash: HDEyzi3R+BlLQKOv6yiUGnBCJrIeFX9J0ujKiMj5JFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 10:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c2:24:a7:75:aa:ba:2f:64:b3:64:e6:4b:9c:00:6e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jun 13 18:00:42 2026 GMT Not After : Jun 14 18:00:42 2026 GMT Subject: CN=e943b1deb0211c9e9ccfe04388d009061a643dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1c:00:59:89:11:3a:b0:97:67:1d:ce:13:c7: 1b:61:45:97:e4:64:02:2d:05:ee:f4:e4:1e:e8:f6: 6e:ee:4d:3f:6d:be:9e:d1:d5:cd:99:08:86:4f:c1: af:a9:81:98:2a:b4:38:c4:ad:14:c4:51:3a:4f:af: 4e:ff:9f:6b:f7:e2:5e:cc:09:db:ad:de:27:07:bc: e7:99:ec:84:1e:ac:3f:b0:aa:8c:a1:15:27:dd:a4: a8:61:4a:8e:84:e4:7e:28:70:d8:7d:50:71:d8:68: d0:ac:84:c1:85:73:05:92:3c:43:6b:cf:7c:70:07: e8:bb:1f:99:5e:59:db:6c:cd:3a:3b:28:c9:c7:dc: 81:b8:ea:4c:0e:4b:48:4d:a9:f0:60:23:97:c7:bb: 95:49:5d:25:4a:13:23:c1:71:ae:d1:93:11:a8:0e: f6:f9:c6:ca:32:c3:33:fe:22:19:c5:bb:3e:ee:39: c1:a4:cb:1d:c6:5d:73:d7:aa:97:1c:77:2c:1f:55: 29:e4:6f:ca:b7:5a:80:d5:09:eb:14:9b:15:75:69: 0a:de:7e:16:b7:ed:c1:ac:08:7b:4a:19:81:fc:cb: 4b:3f:1f:08:75:84:b4:76:86:c3:ec:68:19:14:93: d4:e0:b4:32:35:98:e2:1b:bc:4a:05:76:18:ab:e2: 96:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:43:B1:DE:B0:21:1C:9E:9C:CF:E0:43:88:D0:09:06:1A:64:3D:AC X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:18:f6:97:20:e3:7b:b2:03:71:db:a6:3e:f2:6a:83:1b:8e: 43:41:8c:c5:06:ca:38:c8:62:83:01:f9:77:1b:da:dd:d9:14: 43:7e:82:54:68:bb:c9:57:5c:5f:9f:cc:a2:89:3e:aa:4a:a9: ec:1f:b2:c9:ec:b2:36:4e:0c:a9:d0:f5:9b:3e:14:7a:82:c3: 3b:48:76:bf:d9:11:67:87:33:b5:2a:40:b8:6f:8e:b2:c9:fd: bd:af:1b:96:80:93:af:dc:cc:92:dd:2f:42:10:c9:50:e0:f9: aa:9e:a9:3e:2b:99:4a:34:ec:4c:9e:c5:ab:fa:5c:a6:93:51: 66:04:a0:32:ed:e7:23:48:23:19:ad:1f:81:13:46:8e:05:26: e5:57:a3:2a:d4:ff:3d:5f:57:ee:aa:f7:51:7e:bf:16:04:42: a4:99:d7:52:a3:22:21:c8:73:98:17:61:ac:89:e8:d7:23:22: c5:87:3e:a9:61:dc:ee:03:5f:d0:3a:f1:8b:13:22:bd:9d:bd: f1:59:6f:21:5d:0f:12:0f:b0:cc:db:13:3c:71:90:ed:d9:c8: 5d:b9:0a:50:d3:62:d0:d5:ae:97:c8:61:c8:64:70:dc:18:6a: 81:28:8a:bf:16:89:6e:15:ee:10:63:ee:bf:c4:76:f7:03:8f: e9:30:1f:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7CJKd1qrovZLNk5kucAG7yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwNjEzMTgwMDQyWhcNMjYwNjE0MTgwMDQyWjAzMTEwLwYDVQQD EyhlOTQzYjFkZWIwMjExYzllOWNjZmUwNDM4OGQwMDkwNjFhNjQzZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxwAWYkROrCXZx3OE8cbYUWX5GQC LQXu9OQe6PZu7k0/bb6e0dXNmQiGT8GvqYGYKrQ4xK0UxFE6T69O/59r9+JezAnb rd4nB7znmeyEHqw/sKqMoRUn3aSoYUqOhOR+KHDYfVBx2GjQrITBhXMFkjxDa898 cAfoux+ZXlnbbM06OyjJx9yBuOpMDktITanwYCOXx7uVSV0lShMjwXGu0ZMRqA72 +cbKMsMz/iIZxbs+7jnBpMsdxl1z16qXHHcsH1Up5G/Kt1qA1QnrFJsVdWkK3n4W t+3BrAh7ShmB/MtLPx8IdYS0dobD7GgZFJPU4LQyNZjiG7xKBXYYq+KWtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlDsd6wIRyenM/gQ4jQCQYaZD2sMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBj2lyDj e7IDcdumPvJqgxuOQ0GMxQbKOMhigwH5dxva3dkUQ36CVGi7yVdcX5/Mook+qkqp 7B+yyeyyNk4MqdD1mz4UeoLDO0h2v9kRZ4cztSpAuG+Ossn9va8bloCTr9zMkt0v QhDJUOD5qp6pPiuZSjTsTJ7Fq/pcppNRZgSgMu3nI0gjGa0fgRNGjgUm5VejKtT/ PV9X7qr3UX6/FgRCpJnXUqMiIchzmBdhrIno1yMixYc+qWHc7gNf0DrxixMivZ29 8VlvIV0PEg+wzNsTPHGQ7dnIXbkKUNNi0NWul8hhyGRw3BhqgSiKvxaJbhXuEGPu v8R29wOP6TAfmA== -----END CERTIFICATE-----Generated at Sat Jun 13 20:21:07 2026 by rpki-client