$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json) Hash identifier: R2ilgC/qK2wrgSDJYFXFXgQATzyh0unXHsYjEqu+SgA= Subject key identifier: EB:AF:5E:6D:A8:EC:3E:43:2B:FE:D0:8B:98:5D:5C:4D:F3:91:D3:92 Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 01A103C8E302299CC4FF2A7EE88CA5C9AC5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft Manifest number: 068C Signing time: Sat 03 Oct 2026 22:00:59 +0000 Manifest this update: Sat 03 Oct 2026 22:00:59 +0000 Manifest next update: Sun 04 Oct 2026 22:00:59 +0000 Files and hashes: 1: 1-lGH1nu7CvzHWYEiuO1j3MNSzJY.roa (hash: 9/b6BBId/Kn5DB9SmUCWKxBwcAQLvltddZcgBj268UQ=) 2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: U4rR6CROKVXRIQWuPAYQ2q8kVPy41JoStUUWVB8N4kM=) 3: 4hkkLe2dcq377WzDqzkSvMCtsco.roa (hash: z6R8cUSnmMVlMDW9YnWwZZPf73zricPf+TEJ86PN7Ko=) 4: 4vxZx7uBqQQ6FyEF2MVBFY1WSaQ.roa (hash: yT8MYmQtVQnTBHZPhbP/WPtpcUBRa3XEcKCSlPgpz98=) 5: AfpxLvj3BiyLwMcA6kKVrdFgW6Y.roa (hash: KKSEdsLLrws/RATwLIqwcq742JLEElRzqndIEau2IyI=) 6: Kj2mVBpZK5i3xSiOOVydeQMB-K4.roa (hash: 3BF9uGhA0G3sb3UpfLCU/KTehTModommlZcD+YYnZKQ=) 7: QxbU9vvhcA75ENS1lZHkpNyfErk.roa (hash: yv8oGh8GGZWvW+9jiR8h6piajHrkuA5egN2MppGfk+w=) 8: SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa (hash: kRtJ8SNMjyDbUxu98aNT/p/eOM2tAQZf30u+RPiQ1f8=) 9: TDn2Si0wredvySS4eb6YcQsXGoA.roa (hash: PViZzYWq9wpVr0Wiz/5xTXadoeHO740enY0H0kd7OSI=) 10: Vs-VbGsXqggDO3OQJAz7ljIJCBM.roa (hash: 0/YnvO1iRna/5MI8gBnTd4qBir5DLarEENTjj5s3VEU=) 11: _msrPFl7j-h-scWfwUUyG5vmI0Q.roa (hash: C0U0oHsxASzeTthWbTeZAy4SqW+0azDdamHmVesAW1U=) 12: aNmhMUglIr2giFdXm-cOJi5f7t0.roa (hash: 3MjHDUiU+/7uDICeGLTTAd4NEfz+JjZNSCSY07jxmow=) 13: gA8K0uCGARt0iMHybj1fl0_l9iM.roa (hash: oF5vhF0FQd0hgOhUSqj7/e1FPt2MEHPpP+wGYckBTNY=) 14: jCLt2xm1fkgnOn9HMLPQJTVuVNc.roa (hash: c9YGeeLCkAXiNDBuTkfpy8lAq+y929pm91OusU2TBc0=) 15: koXw3LvEwrzn9qCWrcZnQPR8iMs.roa (hash: gNqdDH2AralOcsOhDuMpE5EfKzaR6A0T5YWUJwlNSmY=) 16: kyRVCGVmasDx6k38w-izwTFSZVI.roa (hash: kfM4cnv70+/otrzSrUgrUJZAq/Yw97sDNJ3BUv5w7l4=) 17: l8TSNwU2prw2gsntuaJ9QdkRHKw.roa (hash: gb+3/D4Y4zC34TYQcD7+qVWbJgAtu0xBM1r/dmFP8pw=) 18: nmunvZ8NjUAQxyXLc7q3E6asADA.roa (hash: bcuDcNnBDq7F5VI75bQ3a3MYz4yXIjZXvHo8ZRs1H3g=) 19: qbUtGSmF4OJDy4q4dlRGp4OciDs.roa (hash: VVCFN7s9B67WrTXffUSFAE1mRjFGjdVcuJGLxmq/AY8=) 20: tUYOdiUxF4HxrSVOg847WMoBqws.roa (hash: N6nWp89HDr0pIhLLPi1oB+mkzKMLsBnFNGgdLRBYN30=) 21: tevOSAyMp-1DHWOc8A6PPAJZLUs.roa (hash: /4F2MJ2YCwSX6I/W4Ebbet4QyTAZ6jd4w/oq57g4Qcw=) 22: xOtKmGFOQ0Si4ry-DnEnpbMZzfw.roa (hash: uloNgiaPX4XD2hk6wXEnVMKHkzySU+UwLh3IKRIIyAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:03:c8:e3:02:29:9c:c4:ff:2a:7e:e8:8c:a5:c9:ac:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Oct 3 22:00:59 2026 GMT Not After : Oct 4 22:00:59 2026 GMT Subject: CN=ebaf5e6da8ec3e432bfed08b985d5c4df391d392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:52:59:87:06:ff:b9:6e:d8:aa:ee:b5:b6:67: 0d:d5:21:3d:ab:6c:31:d7:fa:c5:ed:c6:f7:94:5c: f6:2c:69:1d:94:f1:d7:9e:3e:7d:fc:c9:28:cd:b9: 52:c1:84:38:0f:db:0a:29:98:27:37:f4:01:f8:17: f8:9e:9a:3b:2d:1a:1b:1a:f4:b4:b9:79:4c:9d:fb: 17:bc:8f:5d:e8:e5:7b:eb:cb:7c:f3:ff:6d:aa:ba: b9:f9:5d:bc:3d:97:20:16:b6:0e:49:b4:4f:46:a9: 49:c8:1a:ac:95:de:a0:5e:50:b7:2a:68:c2:33:95: 1b:f0:47:a6:b3:89:94:dd:59:f3:a7:5a:82:ad:4e: 2e:50:9d:b5:a3:7b:6f:10:ca:36:de:81:e3:50:3a: a7:fd:af:d6:3b:f2:77:9d:6b:35:bf:dc:d5:c5:84: 5e:28:e2:11:49:05:63:b1:61:09:23:c4:a0:63:b1: 37:d7:0a:e3:a6:00:90:59:42:59:83:3e:47:f1:c7: 0e:a0:ce:c4:7b:e0:08:3c:54:f8:c1:9c:f5:b1:a5: ac:25:ae:71:20:29:62:75:4e:b3:81:55:d6:b5:79: 53:b9:cb:90:16:aa:b3:24:e6:3d:0e:8d:f4:d1:62: 3e:70:78:22:73:f0:28:6f:b6:15:15:f4:bb:71:c8: b3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AF:5E:6D:A8:EC:3E:43:2B:FE:D0:8B:98:5D:5C:4D:F3:91:D3:92 X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:55:c9:dc:d5:52:a8:af:a9:ab:29:ad:72:33:46:13:13:49: be:79:89:a7:a4:4f:fc:a8:6b:05:13:10:77:e6:d9:f7:01:7a: 01:02:51:e4:43:53:13:bc:86:db:e6:54:07:ac:e1:1c:de:13: af:d7:df:83:9b:15:8b:a1:62:c4:48:0c:39:90:37:d3:8e:c4: 82:5c:7d:c8:4a:bd:1e:c5:f3:d9:1f:28:74:0d:42:64:b9:6a: ef:09:51:3c:d5:90:09:ef:78:88:b5:93:85:3d:04:c0:61:a2: 18:a0:03:1a:b7:16:7e:06:46:0d:7a:1d:36:fb:cd:15:fe:08: 21:07:75:f2:da:25:1f:b4:82:60:2c:cf:dd:60:12:c9:21:7a: 81:b0:e6:e6:6e:0e:20:17:ca:2a:8a:64:41:a9:f4:47:63:f6: a9:c8:56:99:26:36:84:58:f9:06:ac:78:7f:b8:2f:86:3a:05: 09:0c:24:95:07:a7:2a:61:a1:c2:bd:62:3a:1e:c0:e3:28:64: 30:36:99:e6:5a:d2:e3:7f:3e:a6:e2:52:ad:f5:4a:17:f4:c5: e5:38:21:4a:df:02:ef:03:0a:84:28:4c:65:71:e8:4f:a4:49: 7e:b5:c4:ca:5e:ed:fa:bb:5a:fb:b4:94:c4:25:c7:4c:e9:63: 18:7a:31:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEDyOMCKZzE/yp+6IylyaxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYxMDAzMjIwMDU5WhcNMjYxMDA0MjIwMDU5WjAzMTEwLwYDVQQD EyhlYmFmNWU2ZGE4ZWMzZTQzMmJmZWQwOGI5ODVkNWM0ZGYzOTFkMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVJZhwb/uW7Yqu61tmcN1SE9q2wx 1/rF7cb3lFz2LGkdlPHXnj59/MkozblSwYQ4D9sKKZgnN/QB+Bf4npo7LRobGvS0 uXlMnfsXvI9d6OV768t88/9tqrq5+V28PZcgFrYOSbRPRqlJyBqsld6gXlC3KmjC M5Ub8Eems4mU3Vnzp1qCrU4uUJ21o3tvEMo23oHjUDqn/a/WO/J3nWs1v9zVxYRe KOIRSQVjsWEJI8SgY7E31wrjpgCQWUJZgz5H8ccOoM7Ee+AIPFT4wZz1saWsJa5x IClidU6zgVXWtXlTucuQFqqzJOY9Do300WI+cHgic/Aob7YVFfS7ccizhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuvXm2o7D5DK/7Qi5hdXE3zkdOSMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVXJ3NVS qK+pqymtcjNGExNJvnmJp6RP/KhrBRMQd+bZ9wF6AQJR5ENTE7yG2+ZUB6zhHN4T r9ffg5sVi6FixEgMOZA3047Eglx9yEq9HsXz2R8odA1CZLlq7wlRPNWQCe94iLWT hT0EwGGiGKADGrcWfgZGDXodNvvNFf4IIQd18tolH7SCYCzP3WASySF6gbDm5m4O IBfKKopkQan0R2P2qchWmSY2hFj5Bqx4f7gvhjoFCQwklQenKmGhwr1iOh7A4yhk MDaZ5lrS438+puJSrfVKF/TF5TghSt8C7wMKhChMZXHoT6RJfrXEyl7t+rta+7SU xCXHTOljGHoxBw== -----END CERTIFICATE-----Generated at Sun Oct 4 06:50:15 2026 by rpki-client