
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: Sr7CjehzGz61k+CrtDeEx8ZFSeF9/qtj5WoVxuQyYno=
Subject key identifier: D2:BE:DC:B3:CD:9F:0A:44:78:26:A1:E8:03:20:EF:A8:D8:F5:42:EB
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019F9486DFAA3C2D19B7FE12CAD61A82731F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 1304
Signing time: Fri 24 Jul 2026 14:28:14 +0000
Manifest this update: Fri 24 Jul 2026 14:28:14 +0000
Manifest next update: Sat 25 Jul 2026 14:28:14 +0000
Files and hashes: 1: 1-WMupdXluOQ7x-K_avahDFozE_A.roa (hash: Tk/f/OIyoGHt94/pLNY5O4OoQcxa7v//+2RvavWlFyI=)
2: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (hash: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=)
3: FJK3MlyjVAojwF-mVWmHdiKhNPU.roa (hash: TzYYtBzBEMH3oqJKKM05yqeDoBBlOjW5TQHdTV317bs=)
4: FJcsmaUQsD13YXXoyE7RkZKR-ng.roa (hash: u6HoYzjVqNqn2YWEImLaDRf/C6bprfKvf9KjlvjxNLc=)
5: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=)
6: WUEnbdUUqrLfYi2oKn0rFmvvVSs.roa (hash: 5sNj4jrMjIeivWLuNKloS867aHhxwwkfpzUsslqii8k=)
7: XSxSAP7DiJZa4LTWJM8KEYXPTsU.roa (hash: O0ZeRuqT3gg3YRnXifK9FeiFeCfEkxSX/9GHXAJb1XQ=)
8: ewDh-Of3DTsKrizymZCG9qxo_a4.roa (hash: wd/aFSh3or0J34PT5Apt0JYGpHBLqOUvdDS4Ikn/5+M=)
9: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=)
10: kZAgbSjcA3AUI27WYX_SLodgwxM.roa (hash: a+GdP0YC4+kyyPVC2mzxcdiH+fxAgf7/mlxAOoguZs4=)
11: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=)
12: nPN1026MFxn1aBHjNnL1ChSjJ7g.roa (hash: 0wKSqZP3wergAVCbgAzLhQpVpALUtP80ss2GImwHhRo=)
13: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: 1RR5SD7YwvJvsXyk+Mm9wL6APZnBaMsXnt/9r3jRPC0=)
14: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=)
15: tkJi06CdYjIn25noZIzPiK0yCl0.roa (hash: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE=)
16: u6qDpYGmfoGEMACkNnGAHtcqros.roa (hash: K3BjOm+GqWtXxTkJj9qyEmHvHYh3wmQ/32PWbJp61V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:86:df:aa:3c:2d:19:b7:fe:12:ca:d6:1a:82:73:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jul 24 14:28:14 2026 GMT
Not After : Jul 25 14:28:14 2026 GMT
Subject: CN=d2bedcb3cd9f0a447826a1e80320efa8d8f542eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:83:8d:fc:43:1a:30:f9:bc:19:64:cd:82:
f3:d2:e4:07:31:16:c5:97:b0:38:1d:e4:05:6e:3f:
57:53:80:66:40:f8:51:8f:27:a5:b2:4d:68:31:6a:
8e:4e:36:60:04:08:1d:be:a1:29:4b:d3:48:40:fa:
1d:a2:11:d4:de:89:01:6f:21:d7:78:b0:02:6f:a0:
92:63:af:c5:08:4d:6c:0b:7f:97:a1:91:1d:e8:ee:
da:29:77:c0:d6:67:e6:06:2a:51:3c:8d:10:e7:cf:
da:5b:55:ee:0b:59:35:89:df:66:ff:e6:fb:f2:2b:
bb:0d:96:b3:d5:7d:9a:cc:3a:f4:7c:84:8b:8c:4e:
6f:11:00:4e:88:a9:05:6b:25:97:8b:b4:d0:2c:ac:
b8:a3:ea:52:fc:c9:b4:53:f6:52:ae:40:15:69:6a:
7c:79:22:6c:8e:ff:aa:5d:ea:10:71:d4:36:56:a8:
e0:ae:40:13:1e:1e:70:66:a1:74:40:8d:05:e8:e4:
3b:13:47:07:5a:99:34:38:df:fc:37:86:4d:00:46:
3b:fc:04:12:e4:93:3a:84:db:08:60:40:b2:81:d5:
3d:52:ec:10:2f:b1:17:7a:9c:44:46:9c:5d:93:3e:
8b:2c:ef:f7:12:ca:c4:e0:94:11:34:3b:06:a1:b0:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BE:DC:B3:CD:9F:0A:44:78:26:A1:E8:03:20:EF:A8:D8:F5:42:EB
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:13:b4:17:d4:0a:27:24:c4:83:7e:7d:8e:f8:2a:e8:1a:6a:
25:65:db:a4:d8:25:7f:7c:81:57:1a:b9:74:d0:6e:62:57:d0:
97:27:3f:1e:ea:98:13:cd:db:72:38:9f:20:41:85:6e:3e:b5:
e8:68:f9:23:a3:7c:f1:90:63:cb:f1:38:e6:e0:c8:87:58:30:
e4:bc:89:59:04:4a:bf:40:a1:36:ec:da:48:fc:0e:f2:63:07:
83:d8:08:f7:ba:af:8f:c3:5a:7b:58:3e:0e:44:6f:7d:33:5d:
1f:3b:52:e7:89:19:9d:59:c3:7e:59:4a:a6:f0:56:52:d3:bc:
f9:a3:f8:8d:55:bf:83:5c:22:83:57:70:59:78:45:13:31:9f:
24:d2:4c:e0:4d:df:66:3b:87:7f:98:a6:d9:8d:24:e3:25:dc:
72:7a:ce:cc:87:de:17:2a:f6:de:54:e4:90:04:0a:37:bc:12:
f3:b0:87:ca:ab:7f:52:88:c3:a7:c9:fa:c7:1f:49:a0:df:fd:
9d:dc:be:18:e0:66:28:64:88:0c:34:66:3e:4d:06:3f:7b:e7:
b0:0a:ad:16:99:cf:2b:b5:6f:e7:8a:33:90:1e:2a:9c:9e:72:
d7:b3:25:e0:98:68:a4:b3:bc:94:0a:b3:86:bf:de:83:1c:73:
66:8a:6b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:02:55 2026 by rpki-client