$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json) Hash identifier: x/4QMskqfVUCC7uDIILvI1LBPXX8NB6eOVHheXP5SYA= Subject key identifier: 53:91:1A:B7:E5:B1:8D:06:DA:04:0D:3B:4B:69:07:4B:52:67:F5:21 Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019E1CEB615CC502E10EC132505325A16810 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft Manifest number: 1924 Signing time: Tue 12 May 2026 16:00:48 +0000 Manifest this update: Tue 12 May 2026 16:00:48 +0000 Manifest next update: Wed 13 May 2026 16:00:48 +0000 Files and hashes: 1: 9pxyJ_5XKk1_rwWZ9yXVd0wiKTA.roa (hash: 9BXX00EqfHS9Z+w4cbgMB5Q/vF0Ya/E+TQ5+Mz+KYTQ=) 2: CVxfx3KQzEER-BBbsCQ4b2WjeFk.roa (hash: P12FxyadZ3+D6ncFfUITGrjK2DjmN6s5NrQ2Cl3FgF4=) 3: F2Hrf2ZO-e5Se-C1MVuiXNtFCts.roa (hash: z70EzbScXbGkEd63iR3gVuVrT2xNv1pFq/gzFaOfapw=) 4: FAlee-OYgKuE4kcEctbEn5npxGk.roa (hash: SGbhggfKol3NwIX4ZMFxR+eOS/x+4TXDB+7IUtG8eyQ=) 5: Gk5m5qKg-uP4AW-hWg2d-cU394s.roa (hash: +p2ldW7F6tDvfJL/EzIU442xl//OmT69J/CQCZQMsqo=) 6: IdGgLSVePL4Ag35cTRp5zqyuBEc.roa (hash: D5yVGulGMze85HvjnmBTSvUEhpL48qjlTFI0cEv/IxU=) 7: MOVQFk6w5VTW1mTaAyM9XyFp3A4.roa (hash: CYemttRlGhgSSYTCSRhcvIusMWg/eXfKm4LjWS1ETGs=) 8: aoNiKUZP83xEfHnw2PxeK_lXsIw.roa (hash: Kw2LseMm72XUVDXHYb6CS/Zn8Lq+Y6DAIpp18mdH9/w=) 9: dWJfR3O78mdmRump4LfvKR4bPhk.roa (hash: QZkZflIPeyZVp29E1JD/NyFaBd5cvPYJz27bWSVn1CI=) 10: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: xHZ8Oq0PAID++IhqBdgC1+38jhjIwsD54kOTJJsvfRg=) 11: otCB4X2SkZik_W7jF5YoKtNQVQo.roa (hash: ZJ6P0rtTXDrrXOKDDXJiQDSmAF8So5IfFur0h47zhmg=) 12: qt1TBrOjWH0sbh3ZKU2CyV1iMlA.roa (hash: tgi9V/X7llQ0PTMb7GnjdnF/SXuJX/+lesfnAqrS3vw=) 13: s3mKeHVM6Sc_Nu3cBa5CO3c_r2c.roa (hash: nQwJUaWrVg5To0r/HnpgbyQFvZOuiUSeGVW/zjSMAz4=) 14: sPQTBXUhQk6UJZCQIfZBbd9Pv-U.roa (hash: TMIOrtwO5O4ZcGgyNNJHkTCwy9R3KRqkE9Z5jqJ0JJI=) 15: u7XfC-hyoaL17lnaI1XY7ILk75Q.roa (hash: H5bJ6no8lSHCW4yEf6B9ReJaGHen5zLgZSX5lnUUKd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:eb:61:5c:c5:02:e1:0e:c1:32:50:53:25:a1:68:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: May 12 16:00:48 2026 GMT Not After : May 13 16:00:48 2026 GMT Subject: CN=53911ab7e5b18d06da040d3b4b69074b5267f521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e9:f7:bc:2f:f7:c7:6b:c8:02:9e:3a:5c:ae: bb:80:de:cf:14:fe:33:5d:7d:e5:cc:93:69:75:5a: ff:6d:bd:39:29:a4:be:9c:f4:ca:bc:d0:26:e9:c6: 29:4d:54:06:bb:27:32:f3:2a:f5:ae:e6:98:1c:7b: 1d:c4:8f:58:ca:77:91:9b:36:15:b0:b5:0b:e3:09: 96:ea:35:3a:ca:5d:b7:33:ee:51:60:3b:33:ea:5d: b3:f2:15:17:72:65:d6:de:5c:52:b8:cb:7c:d2:7b: af:7e:c1:38:83:50:67:7b:73:05:7c:cb:14:fa:f6: 47:f1:3e:bc:5a:88:b1:ff:ca:a5:a1:8a:05:58:d6: 26:da:68:b4:00:09:90:06:29:cd:d1:82:b4:0c:a0: e5:b7:f0:2b:0f:80:33:1a:ff:72:b2:fe:34:c9:9f: 4a:d9:42:28:11:ad:90:49:52:c0:18:92:84:ef:83: eb:1d:09:c6:97:d6:8d:01:a6:3c:8e:e5:ad:ae:f6: a1:74:2b:7a:74:71:b7:55:56:0c:38:72:cd:4e:a1: 8a:c8:ac:fe:9e:25:1c:10:a9:ac:cf:f6:73:9d:9a: 79:fe:ff:46:ee:52:7b:bb:0d:8f:98:96:fa:58:5e: 9c:8f:76:a5:9e:72:b4:37:4b:31:cb:2d:4b:91:58: 41:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:91:1A:B7:E5:B1:8D:06:DA:04:0D:3B:4B:69:07:4B:52:67:F5:21 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:15:0d:c2:bd:7a:1a:04:62:aa:b1:6a:63:c3:47:1b:47:72: ec:17:6a:5e:32:5c:b6:35:40:da:22:f8:93:7e:a1:b1:8a:58: 3c:d2:9f:63:05:e7:01:89:5d:63:6c:7b:49:9d:62:af:aa:2e: 4a:ce:6c:d3:8c:fe:85:6e:6f:d7:9f:51:31:6e:11:66:a7:db: ca:ee:20:ec:cb:d1:4e:d9:1d:63:fd:bd:79:97:3c:01:a1:eb: 68:d3:9b:d2:18:81:7e:e4:91:fd:5f:8d:bf:b1:45:4f:3f:98: 91:09:84:43:ec:94:c0:25:a5:50:cd:f4:da:1f:84:d7:c9:a6: 3c:4e:0e:c8:5c:f8:f6:b7:ef:4f:5a:bc:ff:50:21:a6:11:ea: 64:06:2e:45:df:c7:58:d1:36:c2:34:8b:85:d9:a7:23:73:03: a0:cc:a6:c1:4f:25:71:f1:f0:0b:f1:66:ff:f4:09:7d:07:82: de:46:31:4c:6a:0d:8c:36:1a:32:6b:b2:99:66:19:a2:a1:6c: d0:c9:4e:c9:b2:50:34:f8:54:4d:98:a5:aa:4a:7c:b5:65:df: 3b:d2:4a:e8:64:0f:81:b3:c0:8f:aa:2f:b5:46:b5:2f:f8:94: 52:3a:ec:a3:04:1d:0a:62:70:71:85:2a:93:4e:35:8f:34:1b: 6c:ed:a2:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4c62FcxQLhDsEyUFMloWgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwNTEyMTYwMDQ4WhcNMjYwNTEzMTYwMDQ4WjAzMTEwLwYDVQQD Eyg1MzkxMWFiN2U1YjE4ZDA2ZGEwNDBkM2I0YjY5MDc0YjUyNjdmNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+n3vC/3x2vIAp46XK67gN7PFP4z XX3lzJNpdVr/bb05KaS+nPTKvNAm6cYpTVQGuycy8yr1ruaYHHsdxI9YyneRmzYV sLUL4wmW6jU6yl23M+5RYDsz6l2z8hUXcmXW3lxSuMt80nuvfsE4g1Bne3MFfMsU +vZH8T68Woix/8qloYoFWNYm2mi0AAmQBinN0YK0DKDlt/ArD4AzGv9ysv40yZ9K 2UIoEa2QSVLAGJKE74PrHQnGl9aNAaY8juWtrvahdCt6dHG3VVYMOHLNTqGKyKz+ niUcEKmsz/ZznZp5/v9G7lJ7uw2PmJb6WF6cj3alnnK0N0sxyy1LkVhBCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFORGrflsY0G2gQNO0tpB0tSZ/UhMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshUNwr16 GgRiqrFqY8NHG0dy7BdqXjJctjVA2iL4k36hsYpYPNKfYwXnAYldY2x7SZ1ir6ou Ss5s04z+hW5v159RMW4RZqfbyu4g7MvRTtkdY/29eZc8AaHraNOb0hiBfuSR/V+N v7FFTz+YkQmEQ+yUwCWlUM302h+E18mmPE4OyFz49rfvT1q8/1AhphHqZAYuRd/H WNE2wjSLhdmnI3MDoMymwU8lcfHwC/Fm//QJfQeC3kYxTGoNjDYaMmuymWYZoqFs 0MlOybJQNPhUTZilqkp8tWXfO9JK6GQPgbPAj6ovtUa1L/iUUjrsowQdCmJwcYUq k041jzQbbO2iCA== -----END CERTIFICATE-----Generated at Wed May 13 01:12:35 2026 by rpki-client