$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json) Hash identifier: 9lnS2np7D33iPihKx0UBXBsBufLi7HTGWen/81Av9Wg= Subject key identifier: 6B:CE:B8:78:6B:3D:36:9D:2E:03:41:11:A2:52:54:C7:D4:55:9C:95 Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019D262865B3BBB6A3139AAEF1D50490197E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft Manifest number: 18A2 Signing time: Wed 25 Mar 2026 18:01:14 +0000 Manifest this update: Wed 25 Mar 2026 18:01:14 +0000 Manifest next update: Thu 26 Mar 2026 18:01:14 +0000 Files and hashes: 1: 9pxyJ_5XKk1_rwWZ9yXVd0wiKTA.roa (hash: 9BXX00EqfHS9Z+w4cbgMB5Q/vF0Ya/E+TQ5+Mz+KYTQ=) 2: F2Hrf2ZO-e5Se-C1MVuiXNtFCts.roa (hash: z70EzbScXbGkEd63iR3gVuVrT2xNv1pFq/gzFaOfapw=) 3: Gk5m5qKg-uP4AW-hWg2d-cU394s.roa (hash: +p2ldW7F6tDvfJL/EzIU442xl//OmT69J/CQCZQMsqo=) 4: IdGgLSVePL4Ag35cTRp5zqyuBEc.roa (hash: D5yVGulGMze85HvjnmBTSvUEhpL48qjlTFI0cEv/IxU=) 5: MOVQFk6w5VTW1mTaAyM9XyFp3A4.roa (hash: CYemttRlGhgSSYTCSRhcvIusMWg/eXfKm4LjWS1ETGs=) 6: dWJfR3O78mdmRump4LfvKR4bPhk.roa (hash: QZkZflIPeyZVp29E1JD/NyFaBd5cvPYJz27bWSVn1CI=) 7: eTOJ7MLge9B1l_Z4b-hB-R0L0Rk.roa (hash: a9rSyG/cenb0O///tgbKrAU6dphPReUWhc0dalzA1Ik=) 8: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: cCZXZgTNMo8EICufKJPn5lpbZnp9XX00qtkbxOrUrTI=) 9: otCB4X2SkZik_W7jF5YoKtNQVQo.roa (hash: ZJ6P0rtTXDrrXOKDDXJiQDSmAF8So5IfFur0h47zhmg=) 10: qt1TBrOjWH0sbh3ZKU2CyV1iMlA.roa (hash: tgi9V/X7llQ0PTMb7GnjdnF/SXuJX/+lesfnAqrS3vw=) 11: s3mKeHVM6Sc_Nu3cBa5CO3c_r2c.roa (hash: nQwJUaWrVg5To0r/HnpgbyQFvZOuiUSeGVW/zjSMAz4=) 12: u7XfC-hyoaL17lnaI1XY7ILk75Q.roa (hash: H5bJ6no8lSHCW4yEf6B9ReJaGHen5zLgZSX5lnUUKd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 18:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:28:65:b3:bb:b6:a3:13:9a:ae:f1:d5:04:90:19:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Mar 25 18:01:14 2026 GMT Not After : Mar 26 18:01:14 2026 GMT Subject: CN=6bceb8786b3d369d2e034111a25254c7d4559c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:50:ca:48:30:e2:95:08:e0:30:60:54:ae: d5:f2:85:82:0b:79:19:03:e3:e1:d3:28:5e:89:4d: 18:9c:3d:bb:11:ba:f1:45:2e:03:d7:13:29:c6:29: 12:7e:1d:1f:05:21:e9:15:40:30:28:c0:95:13:7d: 2a:f3:66:3e:45:3d:f3:d3:8f:a0:6f:30:3d:0e:7a: 21:64:4d:35:73:bb:65:97:94:bf:08:89:32:e8:66: bb:a4:40:7f:2e:a0:66:f6:f7:7e:fd:ba:7a:2f:bb: 60:01:3c:d9:07:e0:6a:55:41:af:92:48:04:f2:1b: 61:f9:8f:47:7c:8b:5c:50:c3:23:d2:af:34:44:78: 49:38:95:ce:93:2f:8a:7e:75:95:1a:52:4b:92:92: 66:3f:2f:f4:98:34:4a:61:9b:9b:21:1a:e8:8d:e3: ee:78:81:50:57:80:8f:1f:72:af:d7:4b:d4:5c:b0: fb:f4:e4:e4:8f:b1:62:32:20:40:74:38:29:98:ee: a5:7e:f0:38:2d:8a:3d:67:9c:bd:b9:f8:30:96:a4: 36:ca:e3:b8:3d:c5:ba:f4:c0:d1:78:f5:40:bb:cb: 9f:59:53:52:40:5a:c0:71:eb:0a:3b:e4:0b:21:4b: 2d:0d:76:33:6a:5c:3b:22:ad:e3:b2:a2:2b:0d:78: a7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CE:B8:78:6B:3D:36:9D:2E:03:41:11:A2:52:54:C7:D4:55:9C:95 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b7:68:fd:0c:b9:08:3b:81:2a:af:59:49:64:a0:20:75:8a: d9:13:23:4d:ba:28:5f:69:1d:87:cc:ac:0a:4a:1a:f0:87:96: d0:8d:44:e5:e2:05:dd:7a:c6:b4:f9:d7:12:48:c3:16:99:11: 61:e7:f6:42:7b:e1:76:61:11:c3:61:55:f4:1f:e6:b1:38:9e: 7a:5f:7c:d2:4a:3d:18:3f:74:3d:96:ad:64:f5:90:30:50:2a: 05:1f:fb:32:d9:2d:a0:a3:f6:41:18:05:ec:4c:1f:0b:e3:4b: d3:b2:60:5b:6e:d6:c6:91:7d:d3:97:ab:da:32:71:65:b2:1e: 6c:e2:1b:cf:84:72:6a:1e:a4:c3:e5:65:ba:d6:f5:29:1e:a6: 12:f2:af:f9:ae:e0:d8:68:a6:92:94:12:b4:26:75:61:48:97: c9:bc:93:e1:28:f2:aa:d6:0d:bf:da:c2:fe:de:ab:c9:dc:52: 21:e4:36:69:ff:e6:d9:74:54:e2:89:04:7a:2a:6c:e3:ab:17: aa:9e:4b:23:a5:ab:81:26:43:8c:30:ed:30:b0:d7:11:c7:be: 69:57:44:bd:83:6e:11:fd:7a:2c:7c:e7:47:5b:f8:e2:b4:07: a1:0c:ae:80:cb:49:be:c2:aa:ad:9a:bc:8b:5d:9a:df:69:54: 4e:d0:63:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mKGWzu7ajE5qu8dUEkBl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwMzI1MTgwMTE0WhcNMjYwMzI2MTgwMTE0WjAzMTEwLwYDVQQD Eyg2YmNlYjg3ODZiM2QzNjlkMmUwMzQxMTFhMjUyNTRjN2Q0NTU5Yzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBJQykgw4pUI4DBgVK7V8oWCC3kZ A+Ph0yheiU0YnD27EbrxRS4D1xMpxikSfh0fBSHpFUAwKMCVE30q82Y+RT3z04+g bzA9DnohZE01c7tll5S/CIky6Ga7pEB/LqBm9vd+/bp6L7tgATzZB+BqVUGvkkgE 8hth+Y9HfItcUMMj0q80RHhJOJXOky+KfnWVGlJLkpJmPy/0mDRKYZubIRrojePu eIFQV4CPH3Kv10vUXLD79OTkj7FiMiBAdDgpmO6lfvA4LYo9Z5y9ufgwlqQ2yuO4 PcW69MDRePVAu8ufWVNSQFrAcesKO+QLIUstDXYzalw7Iq3jsqIrDXingwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvOuHhrPTadLgNBEaJSVMfUVZyVMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7do/Qy5 CDuBKq9ZSWSgIHWK2RMjTbooX2kdh8ysCkoa8IeW0I1E5eIF3XrGtPnXEkjDFpkR Yef2QnvhdmERw2FV9B/msTieel980ko9GD90PZatZPWQMFAqBR/7MtktoKP2QRgF 7EwfC+NL07JgW27WxpF905er2jJxZbIebOIbz4Ryah6kw+Vlutb1KR6mEvKv+a7g 2GimkpQStCZ1YUiXybyT4SjyqtYNv9rC/t6rydxSIeQ2af/m2XRU4okEeips46sX qp5LI6WrgSZDjDDtMLDXEce+aVdEvYNuEf16LHznR1v44rQHoQyugMtJvsKqrZq8 i12a32lUTtBj7Q== -----END CERTIFICATE-----Generated at Thu Mar 26 05:11:10 2026 by rpki-client