$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json) Hash identifier: xrD+JnwI1fYR7vXQw6YKwDEGY3UC8uWT59zF47iGRpI= Subject key identifier: 18:0E:38:F7:AF:77:DA:9D:3D:2B:B2:B6:21:2D:24:A9:76:A6:75:34 Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 01A0CD10B8DFB5AB373CDFB4270D192513D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft Manifest number: 1A90 Signing time: Wed 23 Sep 2026 07:00:20 +0000 Manifest this update: Wed 23 Sep 2026 07:00:20 +0000 Manifest next update: Thu 24 Sep 2026 07:00:20 +0000 Files and hashes: 1: 8FD4U6ZGtuoAHocljE-7ZaSj_2s.roa (hash: QKGIUmJdU7SFEM11wIAC5KNHu59OvooxmJA3U48JvIk=) 2: 9pxyJ_5XKk1_rwWZ9yXVd0wiKTA.roa (hash: 9BXX00EqfHS9Z+w4cbgMB5Q/vF0Ya/E+TQ5+Mz+KYTQ=) 3: CVxfx3KQzEER-BBbsCQ4b2WjeFk.roa (hash: P12FxyadZ3+D6ncFfUITGrjK2DjmN6s5NrQ2Cl3FgF4=) 4: F2Hrf2ZO-e5Se-C1MVuiXNtFCts.roa (hash: z70EzbScXbGkEd63iR3gVuVrT2xNv1pFq/gzFaOfapw=) 5: FAlee-OYgKuE4kcEctbEn5npxGk.roa (hash: SGbhggfKol3NwIX4ZMFxR+eOS/x+4TXDB+7IUtG8eyQ=) 6: IdGgLSVePL4Ag35cTRp5zqyuBEc.roa (hash: D5yVGulGMze85HvjnmBTSvUEhpL48qjlTFI0cEv/IxU=) 7: dWJfR3O78mdmRump4LfvKR4bPhk.roa (hash: QZkZflIPeyZVp29E1JD/NyFaBd5cvPYJz27bWSVn1CI=) 8: koTgAFyzFSoTCzrVHkTbWrfryNs.roa (hash: aNxRjEaWtREsXUUDkBWGz5jJ0n92KgYyzWBEcWr4iFA=) 9: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: 634cqgSb3MwxXr75vtsKzy4LTc4EECfa0GnrDPswDIc=) 10: qt1TBrOjWH0sbh3ZKU2CyV1iMlA.roa (hash: tgi9V/X7llQ0PTMb7GnjdnF/SXuJX/+lesfnAqrS3vw=) 11: s3mKeHVM6Sc_Nu3cBa5CO3c_r2c.roa (hash: nQwJUaWrVg5To0r/HnpgbyQFvZOuiUSeGVW/zjSMAz4=) 12: sPQTBXUhQk6UJZCQIfZBbd9Pv-U.roa (hash: TMIOrtwO5O4ZcGgyNNJHkTCwy9R3KRqkE9Z5jqJ0JJI=) 13: u7XfC-hyoaL17lnaI1XY7ILk75Q.roa (hash: H5bJ6no8lSHCW4yEf6B9ReJaGHen5zLgZSX5lnUUKd0=) 14: x-XonmE5dvLur1OxvFQr6H38FwM.roa (hash: zWIumHXMp1m+hNVABrbxWgvO1UkXyiG4O4UCyEISs5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:10:b8:df:b5:ab:37:3c:df:b4:27:0d:19:25:13:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Sep 23 07:00:20 2026 GMT Not After : Sep 24 07:00:20 2026 GMT Subject: CN=180e38f7af77da9d3d2bb2b6212d24a976a67534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c2:49:83:ae:3b:fe:ee:97:01:43:55:2d:6a: d7:89:2e:e6:25:69:11:90:32:97:91:73:d6:6b:30: 9e:68:c4:6a:d0:09:6b:0c:f3:54:cd:fb:87:5c:cd: f2:aa:3b:3c:ea:ed:3a:e7:ba:5f:72:f8:57:cf:52: bc:97:1c:48:c3:2f:1c:51:1f:09:53:e7:f2:33:91: 6d:7b:89:4a:ee:d7:98:af:dc:cc:06:da:8b:ec:7b: 9f:4f:96:6b:51:77:5f:43:8e:1f:3b:b4:01:f6:d7: 14:70:d9:b8:d8:06:5c:91:46:e2:2c:bd:25:f7:30: 7e:61:a8:03:3c:09:a9:be:89:c9:57:e5:f1:97:5a: b1:5e:68:63:05:e1:d7:0b:cd:7c:b6:d3:3c:1b:a7: e0:93:63:05:60:c6:fd:23:4c:b7:49:62:86:80:29: 31:f9:0b:9a:db:f4:4a:5e:ab:5f:72:c7:40:15:a8: cf:01:e9:d0:ca:86:67:7d:c0:1c:d0:dc:17:57:33: 7b:fb:17:98:d8:04:f1:43:8f:70:0a:ee:60:6e:dc: 68:bf:ad:44:d9:94:92:b0:53:92:43:09:a3:a0:5f: a6:9d:1f:53:74:46:98:6f:23:cf:c9:78:5d:83:01: 7f:b1:3c:14:28:83:36:17:05:57:e3:51:2c:4b:b3: 86:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0E:38:F7:AF:77:DA:9D:3D:2B:B2:B6:21:2D:24:A9:76:A6:75:34 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c2:a8:5b:d7:4f:1f:80:1e:27:79:9e:3b:5f:f3:ed:af:df: 1c:a1:10:f3:06:02:6c:6a:6c:0e:7f:ed:22:f1:2a:38:7e:14: e0:b4:fb:5d:37:d0:83:41:d9:e0:07:90:0c:b8:b8:97:df:69: d7:0c:94:78:32:12:59:af:50:72:f4:99:59:52:af:2b:1b:34: 98:c6:03:2b:a1:64:46:dc:e1:0e:16:08:bb:92:48:8f:5b:79: 8a:d9:6c:d9:c5:e9:dc:4d:5e:ef:8a:30:83:4f:82:60:ce:e4: 98:62:cf:09:d5:0d:3c:20:8b:25:55:34:5c:3f:68:5d:3f:d7: 51:e2:a8:18:37:56:6e:a3:3f:60:99:e8:e6:4f:af:27:a3:1e: 2a:10:45:ff:5d:1d:3b:6f:b5:c8:54:fc:f9:a7:41:2f:fc:52: c8:09:50:df:7d:98:da:b0:9e:a1:a4:cd:11:d1:3e:3c:27:ab: fb:b1:bb:d3:d7:a7:3b:a4:d4:b5:e4:0c:b0:f5:38:b3:71:67: ae:d2:25:0e:3e:e7:df:54:27:cc:ec:62:77:03:6d:34:39:25: 17:37:17:f0:0c:d0:e3:b5:f1:a9:fa:ab:6e:e9:ad:ca:37:23: ef:72:03:02:a5:fd:d4:43:c3:98:ef:81:00:89:52:4d:b9:4e: 7b:a7:0a:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNELjftas3PN+0Jw0ZJRPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwOTIzMDcwMDIwWhcNMjYwOTI0MDcwMDIwWjAzMTEwLwYDVQQD EygxODBlMzhmN2FmNzdkYTlkM2QyYmIyYjYyMTJkMjRhOTc2YTY3NTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cJJg647/u6XAUNVLWrXiS7mJWkR kDKXkXPWazCeaMRq0AlrDPNUzfuHXM3yqjs86u0657pfcvhXz1K8lxxIwy8cUR8J U+fyM5Fte4lK7teYr9zMBtqL7HufT5ZrUXdfQ44fO7QB9tcUcNm42AZckUbiLL0l 9zB+YagDPAmpvonJV+Xxl1qxXmhjBeHXC818ttM8G6fgk2MFYMb9I0y3SWKGgCkx +Qua2/RKXqtfcsdAFajPAenQyoZnfcAc0NwXVzN7+xeY2ATxQ49wCu5gbtxov61E 2ZSSsFOSQwmjoF+mnR9TdEaYbyPPyXhdgwF/sTwUKIM2FwVX41EsS7OGwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgOOPevd9qdPSuytiEtJKl2pnU0MB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsKoW9dP H4AeJ3meO1/z7a/fHKEQ8wYCbGpsDn/tIvEqOH4U4LT7XTfQg0HZ4AeQDLi4l99p 1wyUeDISWa9QcvSZWVKvKxs0mMYDK6FkRtzhDhYIu5JIj1t5itls2cXp3E1e74ow g0+CYM7kmGLPCdUNPCCLJVU0XD9oXT/XUeKoGDdWbqM/YJno5k+vJ6MeKhBF/10d O2+1yFT8+adBL/xSyAlQ332Y2rCeoaTNEdE+PCer+7G709enO6TUteQMsPU4s3Fn rtIlDj7n31QnzOxidwNtNDklFzcX8AzQ47Xxqfqrbumtyjcj73IDAqX91EPDmO+B AIlSTblOe6cKvQ== -----END CERTIFICATE-----Generated at Wed Sep 23 18:11:40 2026 by rpki-client