$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json) Hash identifier: IqNjWa9CxU8KfmCXRP5wkxNA+J57MLvBYxBcybDj+9w= Subject key identifier: 4C:F1:FF:75:B7:A8:E9:6E:B4:29:B7:20:3E:CC:5E:2E:C3:65:E6:1F Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019F8EA27CE07B98AB7222DD9543A640BE33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft Manifest number: 19E9 Signing time: Thu 23 Jul 2026 11:00:41 +0000 Manifest this update: Thu 23 Jul 2026 11:00:41 +0000 Manifest next update: Fri 24 Jul 2026 11:00:41 +0000 Files and hashes: 1: 9pxyJ_5XKk1_rwWZ9yXVd0wiKTA.roa (hash: 9BXX00EqfHS9Z+w4cbgMB5Q/vF0Ya/E+TQ5+Mz+KYTQ=) 2: CVxfx3KQzEER-BBbsCQ4b2WjeFk.roa (hash: P12FxyadZ3+D6ncFfUITGrjK2DjmN6s5NrQ2Cl3FgF4=) 3: F2Hrf2ZO-e5Se-C1MVuiXNtFCts.roa (hash: z70EzbScXbGkEd63iR3gVuVrT2xNv1pFq/gzFaOfapw=) 4: FAlee-OYgKuE4kcEctbEn5npxGk.roa (hash: SGbhggfKol3NwIX4ZMFxR+eOS/x+4TXDB+7IUtG8eyQ=) 5: IdGgLSVePL4Ag35cTRp5zqyuBEc.roa (hash: D5yVGulGMze85HvjnmBTSvUEhpL48qjlTFI0cEv/IxU=) 6: MOVQFk6w5VTW1mTaAyM9XyFp3A4.roa (hash: CYemttRlGhgSSYTCSRhcvIusMWg/eXfKm4LjWS1ETGs=) 7: dWJfR3O78mdmRump4LfvKR4bPhk.roa (hash: QZkZflIPeyZVp29E1JD/NyFaBd5cvPYJz27bWSVn1CI=) 8: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: RR/g8Bs581Ain3gqOMXYOLelbWE52PbZGpR33Y0iECA=) 9: qt1TBrOjWH0sbh3ZKU2CyV1iMlA.roa (hash: tgi9V/X7llQ0PTMb7GnjdnF/SXuJX/+lesfnAqrS3vw=) 10: s3mKeHVM6Sc_Nu3cBa5CO3c_r2c.roa (hash: nQwJUaWrVg5To0r/HnpgbyQFvZOuiUSeGVW/zjSMAz4=) 11: sPQTBXUhQk6UJZCQIfZBbd9Pv-U.roa (hash: TMIOrtwO5O4ZcGgyNNJHkTCwy9R3KRqkE9Z5jqJ0JJI=) 12: u7XfC-hyoaL17lnaI1XY7ILk75Q.roa (hash: H5bJ6no8lSHCW4yEf6B9ReJaGHen5zLgZSX5lnUUKd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:a2:7c:e0:7b:98:ab:72:22:dd:95:43:a6:40:be:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Jul 23 11:00:41 2026 GMT Not After : Jul 24 11:00:41 2026 GMT Subject: CN=4cf1ff75b7a8e96eb429b7203ecc5e2ec365e61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ff:14:dd:f4:7e:83:34:cd:3f:90:38:4b:6e: ca:82:64:41:09:fe:f4:f3:1c:82:07:8d:1f:bc:68: 53:d7:b5:52:7a:20:21:92:97:50:eb:94:b4:2c:4b: 99:0e:9f:f1:7f:ea:98:66:97:fd:62:07:ce:ab:b3: c1:17:78:76:e4:bf:64:e1:c6:34:9a:47:8d:e3:a8: 4a:ab:0b:40:81:7f:92:ed:69:50:42:ea:c2:09:40: 6b:b2:15:7a:19:20:48:5d:c0:44:63:74:b4:5e:66: cf:91:47:f8:1b:12:2d:a8:53:ae:7a:9f:6c:83:0c: d4:5d:a0:64:99:5d:73:ff:99:bf:c1:1a:5a:56:a6: f8:ae:65:c7:0b:5e:0c:2a:76:aa:a0:29:7c:db:eb: 6b:81:40:06:9e:35:87:81:ef:2c:05:98:31:64:87: 8e:eb:c3:8a:40:03:5d:16:4a:df:3e:2a:62:4c:d5: fb:d0:72:31:3c:a4:73:90:be:e8:6e:a0:5f:5d:c3: 85:52:5c:4b:f7:62:a7:48:64:c1:1f:5a:34:b3:51: 59:64:ff:b4:6d:16:d3:17:9f:08:49:8f:76:26:2d: fb:8d:4b:8c:7a:83:a8:43:2b:bd:84:ec:58:04:9b: f4:0c:b5:83:99:c9:68:63:53:26:e4:58:6e:06:1b: 39:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F1:FF:75:B7:A8:E9:6E:B4:29:B7:20:3E:CC:5E:2E:C3:65:E6:1F X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0a:45:39:9b:f5:eb:61:62:4c:7a:92:7b:f5:a2:0e:1f:ac: 5a:16:67:c9:2c:4c:23:69:6c:64:b0:c4:59:ad:e9:ed:e7:ee: bb:0f:38:6a:cb:c1:f6:1a:20:73:14:90:a9:fd:25:47:68:41: 7c:84:ff:41:f4:bd:4d:36:d5:a8:fe:27:31:f0:96:49:90:69: 16:c0:6f:b6:fd:6b:3a:01:21:e8:19:38:77:06:64:f4:ef:ac: 06:3d:64:d8:76:e6:4e:24:09:62:61:0b:cd:96:48:67:0c:39: 33:e7:e9:df:96:09:04:34:48:d5:10:e5:80:56:92:85:de:b3: d1:bc:55:8a:bf:2e:d5:b2:58:0b:d7:76:e7:6a:72:73:e3:9b: a2:81:86:f3:05:8d:16:b8:5c:27:f6:e8:c0:57:31:0a:43:31: 12:2f:40:5e:3f:10:1b:49:e6:00:75:10:20:0b:2a:9a:46:5d: 90:70:19:58:4a:14:6f:0f:82:0f:13:6b:67:45:b2:3c:2a:c2: 54:37:f5:b7:16:92:3a:33:f8:09:16:70:fe:f1:04:00:59:61: a1:aa:7c:3f:b7:52:6f:3b:ba:30:ca:c2:89:50:c5:c5:18:15: d0:04:95:9a:e8:71:1a:f5:07:a9:4c:25:f5:3c:5e:4f:35:59: 4f:6d:99:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Oonzge5irciLdlUOmQL4zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwNzIzMTEwMDQxWhcNMjYwNzI0MTEwMDQxWjAzMTEwLwYDVQQD Eyg0Y2YxZmY3NWI3YThlOTZlYjQyOWI3MjAzZWNjNWUyZWMzNjVlNjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/8U3fR+gzTNP5A4S27KgmRBCf70 8xyCB40fvGhT17VSeiAhkpdQ65S0LEuZDp/xf+qYZpf9YgfOq7PBF3h25L9k4cY0 mkeN46hKqwtAgX+S7WlQQurCCUBrshV6GSBIXcBEY3S0XmbPkUf4GxItqFOuep9s gwzUXaBkmV1z/5m/wRpaVqb4rmXHC14MKnaqoCl82+trgUAGnjWHge8sBZgxZIeO 68OKQANdFkrfPipiTNX70HIxPKRzkL7obqBfXcOFUlxL92KnSGTBH1o0s1FZZP+0 bRbTF58ISY92Ji37jUuMeoOoQyu9hOxYBJv0DLWDmcloY1Mm5FhuBhs5dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzx/3W3qOlutCm3ID7MXi7DZeYfMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwpFOZv1 62FiTHqSe/WiDh+sWhZnySxMI2lsZLDEWa3p7efuuw84asvB9hogcxSQqf0lR2hB fIT/QfS9TTbVqP4nMfCWSZBpFsBvtv1rOgEh6Bk4dwZk9O+sBj1k2HbmTiQJYmEL zZZIZww5M+fp35YJBDRI1RDlgFaShd6z0bxVir8u1bJYC9d252pyc+ObooGG8wWN FrhcJ/bowFcxCkMxEi9AXj8QG0nmAHUQIAsqmkZdkHAZWEoUbw+CDxNrZ0WyPCrC VDf1txaSOjP4CRZw/vEEAFlhoap8P7dSbzu6MMrCiVDFxRgV0ASVmuhxGvUHqUwl 9TxeTzVZT22ZdA== -----END CERTIFICATE-----Generated at Thu Jul 23 20:27:02 2026 by rpki-client