$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: Sr7CjehzGz61k+CrtDeEx8ZFSeF9/qtj5WoVxuQyYno= Subject key identifier: D2:BE:DC:B3:CD:9F:0A:44:78:26:A1:E8:03:20:EF:A8:D8:F5:42:EB Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019F9486DFAA3C2D19B7FE12CAD61A82731F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 1304 Signing time: Fri 24 Jul 2026 14:28:14 +0000 Manifest this update: Fri 24 Jul 2026 14:28:14 +0000 Manifest next update: Sat 25 Jul 2026 14:28:14 +0000 Files and hashes: 1: 1-WMupdXluOQ7x-K_avahDFozE_A.roa (hash: Tk/f/OIyoGHt94/pLNY5O4OoQcxa7v//+2RvavWlFyI=) 2: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (hash: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=) 3: FJK3MlyjVAojwF-mVWmHdiKhNPU.roa (hash: TzYYtBzBEMH3oqJKKM05yqeDoBBlOjW5TQHdTV317bs=) 4: FJcsmaUQsD13YXXoyE7RkZKR-ng.roa (hash: u6HoYzjVqNqn2YWEImLaDRf/C6bprfKvf9KjlvjxNLc=) 5: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=) 6: WUEnbdUUqrLfYi2oKn0rFmvvVSs.roa (hash: 5sNj4jrMjIeivWLuNKloS867aHhxwwkfpzUsslqii8k=) 7: XSxSAP7DiJZa4LTWJM8KEYXPTsU.roa (hash: O0ZeRuqT3gg3YRnXifK9FeiFeCfEkxSX/9GHXAJb1XQ=) 8: ewDh-Of3DTsKrizymZCG9qxo_a4.roa (hash: wd/aFSh3or0J34PT5Apt0JYGpHBLqOUvdDS4Ikn/5+M=) 9: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=) 10: kZAgbSjcA3AUI27WYX_SLodgwxM.roa (hash: a+GdP0YC4+kyyPVC2mzxcdiH+fxAgf7/mlxAOoguZs4=) 11: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=) 12: nPN1026MFxn1aBHjNnL1ChSjJ7g.roa (hash: 0wKSqZP3wergAVCbgAzLhQpVpALUtP80ss2GImwHhRo=) 13: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: 1RR5SD7YwvJvsXyk+Mm9wL6APZnBaMsXnt/9r3jRPC0=) 14: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=) 15: tkJi06CdYjIn25noZIzPiK0yCl0.roa (hash: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE=) 16: u6qDpYGmfoGEMACkNnGAHtcqros.roa (hash: K3BjOm+GqWtXxTkJj9qyEmHvHYh3wmQ/32PWbJp61V0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:94:86:df:aa:3c:2d:19:b7:fe:12:ca:d6:1a:82:73:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Jul 24 14:28:14 2026 GMT Not After : Jul 25 14:28:14 2026 GMT Subject: CN=d2bedcb3cd9f0a447826a1e80320efa8d8f542eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:da:83:8d:fc:43:1a:30:f9:bc:19:64:cd:82: f3:d2:e4:07:31:16:c5:97:b0:38:1d:e4:05:6e:3f: 57:53:80:66:40:f8:51:8f:27:a5:b2:4d:68:31:6a: 8e:4e:36:60:04:08:1d:be:a1:29:4b:d3:48:40:fa: 1d:a2:11:d4:de:89:01:6f:21:d7:78:b0:02:6f:a0: 92:63:af:c5:08:4d:6c:0b:7f:97:a1:91:1d:e8:ee: da:29:77:c0:d6:67:e6:06:2a:51:3c:8d:10:e7:cf: da:5b:55:ee:0b:59:35:89:df:66:ff:e6:fb:f2:2b: bb:0d:96:b3:d5:7d:9a:cc:3a:f4:7c:84:8b:8c:4e: 6f:11:00:4e:88:a9:05:6b:25:97:8b:b4:d0:2c:ac: b8:a3:ea:52:fc:c9:b4:53:f6:52:ae:40:15:69:6a: 7c:79:22:6c:8e:ff:aa:5d:ea:10:71:d4:36:56:a8: e0:ae:40:13:1e:1e:70:66:a1:74:40:8d:05:e8:e4: 3b:13:47:07:5a:99:34:38:df:fc:37:86:4d:00:46: 3b:fc:04:12:e4:93:3a:84:db:08:60:40:b2:81:d5: 3d:52:ec:10:2f:b1:17:7a:9c:44:46:9c:5d:93:3e: 8b:2c:ef:f7:12:ca:c4:e0:94:11:34:3b:06:a1:b0: e5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BE:DC:B3:CD:9F:0A:44:78:26:A1:E8:03:20:EF:A8:D8:F5:42:EB X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:13:b4:17:d4:0a:27:24:c4:83:7e:7d:8e:f8:2a:e8:1a:6a: 25:65:db:a4:d8:25:7f:7c:81:57:1a:b9:74:d0:6e:62:57:d0: 97:27:3f:1e:ea:98:13:cd:db:72:38:9f:20:41:85:6e:3e:b5: e8:68:f9:23:a3:7c:f1:90:63:cb:f1:38:e6:e0:c8:87:58:30: e4:bc:89:59:04:4a:bf:40:a1:36:ec:da:48:fc:0e:f2:63:07: 83:d8:08:f7:ba:af:8f:c3:5a:7b:58:3e:0e:44:6f:7d:33:5d: 1f:3b:52:e7:89:19:9d:59:c3:7e:59:4a:a6:f0:56:52:d3:bc: f9:a3:f8:8d:55:bf:83:5c:22:83:57:70:59:78:45:13:31:9f: 24:d2:4c:e0:4d:df:66:3b:87:7f:98:a6:d9:8d:24:e3:25:dc: 72:7a:ce:cc:87:de:17:2a:f6:de:54:e4:90:04:0a:37:bc:12: f3:b0:87:ca:ab:7f:52:88:c3:a7:c9:fa:c7:1f:49:a0:df:fd: 9d:dc:be:18:e0:66:28:64:88:0c:34:66:3e:4d:06:3f:7b:e7: b0:0a:ad:16:99:cf:2b:b5:6f:e7:8a:33:90:1e:2a:9c:9e:72: d7:b3:25:e0:98:68:a4:b3:bc:94:0a:b3:86:bf:de:83:1c:73: 66:8a:6b:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Uht+qPC0Zt/4SytYagnMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwNzI0MTQyODE0WhcNMjYwNzI1MTQyODE0WjAzMTEwLwYDVQQD EyhkMmJlZGNiM2NkOWYwYTQ0NzgyNmExZTgwMzIwZWZhOGQ4ZjU0MmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtqDjfxDGjD5vBlkzYLz0uQHMRbF l7A4HeQFbj9XU4BmQPhRjyelsk1oMWqOTjZgBAgdvqEpS9NIQPodohHU3okBbyHX eLACb6CSY6/FCE1sC3+XoZEd6O7aKXfA1mfmBipRPI0Q58/aW1XuC1k1id9m/+b7 8iu7DZaz1X2azDr0fISLjE5vEQBOiKkFayWXi7TQLKy4o+pS/Mm0U/ZSrkAVaWp8 eSJsjv+qXeoQcdQ2VqjgrkATHh5wZqF0QI0F6OQ7E0cHWpk0ON/8N4ZNAEY7/AQS 5JM6hNsIYECygdU9UuwQL7EXepxERpxdkz6LLO/3EsrE4JQRNDsGobDlaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNK+3LPNnwpEeCah6AMg76jY9ULrMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhO0F9QK JyTEg359jvgq6BpqJWXbpNglf3yBVxq5dNBuYlfQlyc/HuqYE83bcjifIEGFbj61 6Gj5I6N88ZBjy/E45uDIh1gw5LyJWQRKv0ChNuzaSPwO8mMHg9gI97qvj8Nae1g+ DkRvfTNdHztS54kZnVnDfllKpvBWUtO8+aP4jVW/g1wig1dwWXhFEzGfJNJM4E3f ZjuHf5im2Y0k4yXccnrOzIfeFyr23lTkkAQKN7wS87CHyqt/UojDp8n6xx9JoN/9 ndy+GOBmKGSIDDRmPk0GP3vnsAqtFpnPK7Vv54ozkB4qnJ5y17Ml4JhopLO8lAqz hr/egxxzZoprUg== -----END CERTIFICATE-----Generated at Fri Jul 24 17:02:55 2026 by rpki-client