$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: hoPbOmDzc3xrouOvfuRG8ZOOKMrdg5pKRoachJb0uDo= Subject key identifier: 76:54:9D:9E:24:CA:84:49:52:43:69:60:0C:AB:2A:C9:D9:06:DA:80 Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 01A1043796038DDB81C01451E7662F37A3E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 13CA Signing time: Sun 04 Oct 2026 00:01:53 +0000 Manifest this update: Sun 04 Oct 2026 00:01:53 +0000 Manifest next update: Mon 05 Oct 2026 00:01:53 +0000 Files and hashes: 1: 0WDxpvd7L6wt7MC6nIzI1pbLxnw.roa (hash: Qj0rLUwIGzXPRYM32sEPLv0WM78LN5ADM0vdNX23xQg=) 2: 1-lrmwrPwRE6tQz1yYRV3ilGz3YI.roa (hash: M+Pkm6+tYT7fplXRGzFnZV4KOURbi0onEdoE/weioGw=) 3: 1-un7aIZPiVQxwfImYtQvepCTIFg.roa (hash: 3q65idVYDT3wcXv8zcKMK2JXkCRnt8H/jRRErWjCr5Y=) 4: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (hash: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=) 5: 76IeoxaQyMm8f4zws9vUUi0CRfc.roa (hash: faPjV8CRMYBsm6MIPxErfFQgbInEdJqVfmJkOLy6PwU=) 6: FrvY4JP2iLacq07f2hX8CLMlfjU.roa (hash: MpiHVdBjryp6MtfrC56keye70ElW/CTBHKK+RhPw8aw=) 7: GiIfdM2XaqqMUMcsI6ESoE4Ptfo.roa (hash: rIKQsVG7m+JuvqlnALYeAAG05bQliIjM+scjwsiHm7M=) 8: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=) 9: PP71s4oA0Pqlb0hxrkFxP4F71FI.roa (hash: Gwz4XfEbTmJrMswxNq9bB/hGvbvOMm1RzpVvdkkptJY=) 10: cMrqxi7UhqJ5QuE5tZumhqK643g.roa (hash: +xNdyx2CSjJfgYsm0wAEMOtt2+/9AZWDUUvwFfGvOXA=) 11: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=) 12: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=) 13: nPN1026MFxn1aBHjNnL1ChSjJ7g.roa (hash: 0wKSqZP3wergAVCbgAzLhQpVpALUtP80ss2GImwHhRo=) 14: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: A0LZqQkkQSjDDQOV1hjLmxw5ApyijHMdmvNl+HLuzQs=) 15: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=) 16: vE4T42jxBwechSkNUDTx4xLmF40.roa (hash: VE9Sy1DUDJVvTDYTHPoZIz2Wwsir9Oz1cubyyrGnvlM=) 17: xIM6Ul5OJM3vvLeemfqH5E2uQBw.roa (hash: h95Aj53g6j0rjuQLBWEoc0TgSlS8Nlq+/6uHRGvu+PM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 00:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:04:37:96:03:8d:db:81:c0:14:51:e7:66:2f:37:a3:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Oct 4 00:01:53 2026 GMT Not After : Oct 5 00:01:53 2026 GMT Subject: CN=76549d9e24ca8449524369600cab2ac9d906da80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:a9:16:03:6b:11:87:45:1e:01:82:47:8b: 7f:a7:80:02:61:c9:71:79:bc:d6:a6:e4:e1:7e:a7: 92:a6:47:5d:28:20:42:0b:f5:e0:ca:64:d5:9f:de: c6:55:81:27:96:4c:d2:8f:a2:c7:ae:59:da:42:e6: 56:5a:01:14:67:2a:72:30:1b:12:56:ee:ea:b2:0e: e6:34:de:92:3c:b5:8c:35:fb:d6:b7:5a:88:9f:c7: 1d:1d:48:9a:9a:00:f7:7b:ce:39:ea:29:9e:9c:af: 4e:eb:03:b5:77:2f:8c:cf:64:e7:76:a2:05:e7:59: 6d:9d:48:db:e5:7d:9f:d2:3c:aa:09:41:32:67:3e: 02:8d:40:12:2e:08:eb:70:c6:25:6b:7a:ec:67:1f: ad:c6:51:45:84:e7:03:94:ac:97:62:29:9b:38:c9: c7:ff:77:1c:b3:b3:fa:6c:59:c6:e6:c1:fd:24:78: 06:79:c8:a2:f1:c1:b3:c1:00:38:b2:fe:09:7b:3f: bf:dc:d6:1c:79:e5:54:cf:f9:0e:59:97:33:90:d1: ea:6e:6d:8d:86:b5:98:f1:16:b7:cb:7b:3e:5c:44: c9:a5:65:1d:24:95:0c:5b:9f:b6:e2:21:85:44:96: 69:7f:5c:29:41:32:9a:08:49:07:f0:fb:86:2a:a8: df:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:54:9D:9E:24:CA:84:49:52:43:69:60:0C:AB:2A:C9:D9:06:DA:80 X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d8:1d:30:e4:00:6c:55:67:69:b6:dc:50:52:c0:c9:e2:05: 95:e4:e4:b4:7b:a3:1c:f2:59:d0:63:80:6f:b6:32:53:56:d1: cd:f0:bb:b6:17:aa:7f:76:31:aa:b0:e2:3c:1b:76:0c:09:fc: 63:c4:ac:2c:58:cf:86:66:f2:73:57:8b:da:05:ba:a2:b5:63: 5c:93:fb:21:dd:d2:1e:09:0f:f0:4c:89:4c:ca:70:bf:06:43: f4:e6:a2:2a:30:8b:da:f0:0e:16:ec:5e:7b:94:b6:c7:cf:f9: 15:8b:1e:5f:81:eb:7e:dc:13:96:11:0d:86:b5:be:ba:cb:03: 6a:c8:13:78:fb:a7:3e:ae:69:1c:b1:97:de:c7:ec:3d:68:27: ab:a2:d0:55:a2:3c:98:c2:6d:69:cc:fb:6a:2b:cc:02:18:98: ae:06:f4:ed:97:a6:d7:af:97:45:c3:55:4b:6d:d5:af:21:79: 7e:3f:70:3e:ab:73:9c:48:7a:11:67:f9:ac:03:20:f6:1c:72: 43:88:30:bb:22:71:20:31:31:ee:7d:07:8e:c8:6a:58:11:cd: 85:4e:d1:c5:eb:1c:a4:4e:34:70:63:8b:b4:b7:8a:23:b2:5b: 84:fc:4f:c9:82:c6:09:21:87:aa:5e:a9:f9:fc:43:12:fb:9b: 51:a7:63:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEEN5YDjduBwBRR52YvN6PmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYxMDA0MDAwMTUzWhcNMjYxMDA1MDAwMTUzWjAzMTEwLwYDVQQD Eyg3NjU0OWQ5ZTI0Y2E4NDQ5NTI0MzY5NjAwY2FiMmFjOWQ5MDZkYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAapFgNrEYdFHgGCR4t/p4ACYclx ebzWpuThfqeSpkddKCBCC/XgymTVn97GVYEnlkzSj6LHrlnaQuZWWgEUZypyMBsS Vu7qsg7mNN6SPLWMNfvWt1qIn8cdHUiamgD3e8456imenK9O6wO1dy+Mz2TndqIF 51ltnUjb5X2f0jyqCUEyZz4CjUASLgjrcMYla3rsZx+txlFFhOcDlKyXYimbOMnH /3ccs7P6bFnG5sH9JHgGecii8cGzwQA4sv4Jez+/3NYceeVUz/kOWZczkNHqbm2N hrWY8Ra3y3s+XETJpWUdJJUMW5+24iGFRJZpf1wpQTKaCEkH8PuGKqjfpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZUnZ4kyoRJUkNpYAyrKsnZBtqAMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9gdMOQA bFVnabbcUFLAyeIFleTktHujHPJZ0GOAb7YyU1bRzfC7theqf3YxqrDiPBt2DAn8 Y8SsLFjPhmbyc1eL2gW6orVjXJP7Id3SHgkP8EyJTMpwvwZD9OaiKjCL2vAOFuxe e5S2x8/5FYseX4HrftwTlhENhrW+ussDasgTePunPq5pHLGX3sfsPWgnq6LQVaI8 mMJtacz7aivMAhiYrgb07Zem16+XRcNVS23VryF5fj9wPqtznEh6EWf5rAMg9hxy Q4gwuyJxIDEx7n0HjshqWBHNhU7RxescpE40cGOLtLeKI7JbhPxPyYLGCSGHql6p +fxDEvubUadjbg== -----END CERTIFICATE-----Generated at Sun Oct 4 11:21:17 2026 by rpki-client