$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json) Hash identifier: bTj7DU69scMyS5lkW/lrSTcv9p7RsqJtbGnVDV+m/wk= Subject key identifier: 8A:47:E5:0D:87:C7:AB:1D:75:84:B9:A8:C0:5D:CA:7A:EC:0B:C1:28 Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 019F8EA29FCE775A8274F7C03909BF29AB5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft Manifest number: 05C8 Signing time: Thu 23 Jul 2026 11:00:50 +0000 Manifest this update: Thu 23 Jul 2026 11:00:50 +0000 Manifest next update: Fri 24 Jul 2026 11:00:50 +0000 Files and hashes: 1: 1-lGH1nu7CvzHWYEiuO1j3MNSzJY.roa (hash: 9/b6BBId/Kn5DB9SmUCWKxBwcAQLvltddZcgBj268UQ=) 2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: bCoWj8/GXm2R5QbmVW/MElZSE+bfnjLksmDRhr4d2zo=) 3: 4hkkLe2dcq377WzDqzkSvMCtsco.roa (hash: z6R8cUSnmMVlMDW9YnWwZZPf73zricPf+TEJ86PN7Ko=) 4: 4vxZx7uBqQQ6FyEF2MVBFY1WSaQ.roa (hash: yT8MYmQtVQnTBHZPhbP/WPtpcUBRa3XEcKCSlPgpz98=) 5: AfpxLvj3BiyLwMcA6kKVrdFgW6Y.roa (hash: KKSEdsLLrws/RATwLIqwcq742JLEElRzqndIEau2IyI=) 6: Kj2mVBpZK5i3xSiOOVydeQMB-K4.roa (hash: 3BF9uGhA0G3sb3UpfLCU/KTehTModommlZcD+YYnZKQ=) 7: NFRDafdwtbHFs2DS-06WUfB0qjs.roa (hash: CADabzrhmlSvgDt/e0SzZcFB32kEvIdohJzhJZyWJJc=) 8: QxbU9vvhcA75ENS1lZHkpNyfErk.roa (hash: yv8oGh8GGZWvW+9jiR8h6piajHrkuA5egN2MppGfk+w=) 9: SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa (hash: kRtJ8SNMjyDbUxu98aNT/p/eOM2tAQZf30u+RPiQ1f8=) 10: Vs-VbGsXqggDO3OQJAz7ljIJCBM.roa (hash: 0/YnvO1iRna/5MI8gBnTd4qBir5DLarEENTjj5s3VEU=) 11: _msrPFl7j-h-scWfwUUyG5vmI0Q.roa (hash: C0U0oHsxASzeTthWbTeZAy4SqW+0azDdamHmVesAW1U=) 12: gA8K0uCGARt0iMHybj1fl0_l9iM.roa (hash: oF5vhF0FQd0hgOhUSqj7/e1FPt2MEHPpP+wGYckBTNY=) 13: koXw3LvEwrzn9qCWrcZnQPR8iMs.roa (hash: gNqdDH2AralOcsOhDuMpE5EfKzaR6A0T5YWUJwlNSmY=) 14: l8TSNwU2prw2gsntuaJ9QdkRHKw.roa (hash: gb+3/D4Y4zC34TYQcD7+qVWbJgAtu0xBM1r/dmFP8pw=) 15: nmunvZ8NjUAQxyXLc7q3E6asADA.roa (hash: bcuDcNnBDq7F5VI75bQ3a3MYz4yXIjZXvHo8ZRs1H3g=) 16: qbUtGSmF4OJDy4q4dlRGp4OciDs.roa (hash: VVCFN7s9B67WrTXffUSFAE1mRjFGjdVcuJGLxmq/AY8=) 17: tUYOdiUxF4HxrSVOg847WMoBqws.roa (hash: N6nWp89HDr0pIhLLPi1oB+mkzKMLsBnFNGgdLRBYN30=) 18: tevOSAyMp-1DHWOc8A6PPAJZLUs.roa (hash: /4F2MJ2YCwSX6I/W4Ebbet4QyTAZ6jd4w/oq57g4Qcw=) 19: xOtKmGFOQ0Si4ry-DnEnpbMZzfw.roa (hash: uloNgiaPX4XD2hk6wXEnVMKHkzySU+UwLh3IKRIIyAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:a2:9f:ce:77:5a:82:74:f7:c0:39:09:bf:29:ab:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Jul 23 11:00:50 2026 GMT Not After : Jul 24 11:00:50 2026 GMT Subject: CN=8a47e50d87c7ab1d7584b9a8c05dca7aec0bc128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:0a:d2:75:ad:61:82:f4:74:4c:3b:03:4d: 15:a2:c5:5a:af:d8:bb:d1:ae:d7:11:4c:1d:85:95: bc:7a:2d:da:00:4e:60:73:98:bf:be:f4:c5:06:cb: 83:00:89:fa:39:b4:b9:68:a7:8a:50:4e:46:03:c5: 2b:e7:7a:8a:1a:7f:4f:fe:d2:47:2b:d0:10:42:6b: f1:94:4b:9f:1f:8c:2b:93:4f:ab:43:e5:07:47:6f: 7d:e0:21:14:a7:e1:cc:a7:f9:c1:7d:6c:1c:84:d9: ee:ec:ce:24:44:7c:8e:15:62:82:ee:b1:d6:46:f2: 3f:27:c4:5c:75:27:1a:1e:53:c9:2a:b8:1e:8b:14: ec:bf:96:a1:00:96:67:d4:cf:43:fd:6b:2b:ad:8e: 3d:3c:ed:09:ec:70:10:b8:3a:e9:da:aa:f5:ff:da: 5c:a2:77:eb:5a:29:80:2e:99:3f:ad:d4:6b:e5:03: 28:b9:5b:87:73:d5:9b:cf:18:91:a8:1c:67:62:b4: 38:5a:af:c7:0b:7f:d3:ad:1b:e5:25:74:75:4a:1a: df:65:b7:83:96:1e:4e:b8:78:a9:66:88:42:d4:85: 1f:da:5c:d0:4c:95:eb:fa:be:52:72:c7:51:56:3c: 0e:a7:00:c1:0d:6c:fc:b2:94:23:6e:ea:78:a0:08: 5a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:47:E5:0D:87:C7:AB:1D:75:84:B9:A8:C0:5D:CA:7A:EC:0B:C1:28 X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a4:36:81:92:f5:35:3a:d5:bc:90:9d:ac:2a:a5:79:05:d3: ce:f0:41:c9:f4:b6:32:aa:21:f7:c6:f9:38:0b:4b:29:c2:fb: b0:3d:5a:94:71:ed:53:4e:7c:d3:19:35:f5:59:3d:08:6d:28: a1:41:76:70:75:d8:e0:fd:2f:eb:3d:8b:53:f4:21:48:cf:a1: 2e:4a:50:a6:02:db:5b:9e:f3:ad:58:94:39:8d:6e:a5:0a:66: bb:ac:54:62:3c:cc:dc:28:74:77:f5:86:e3:34:2e:d9:f9:96: f9:a1:bc:f6:d4:f1:7b:eb:3a:5a:06:58:58:61:68:18:3e:b7: af:da:75:52:a5:52:85:20:15:b5:5f:a6:c9:93:5c:08:7b:14: 14:d1:ad:8b:9d:90:48:e1:da:12:8a:4b:01:51:fe:c0:ca:75: 13:cf:5a:fc:d9:73:e3:58:59:5a:19:b8:81:32:8b:66:85:5f: 0f:6a:d1:5d:20:57:3a:f2:fe:1d:a1:5c:c6:41:d1:79:db:04: bc:9e:73:25:0e:3f:f3:81:b3:78:18:d3:70:ca:8c:74:b2:41: 06:dc:06:07:78:bf:8a:04:fa:de:54:3a:27:56:db:ee:ca:2b: 85:20:76:3a:4f:06:84:e2:cf:9a:af:12:14:57:ec:23:4e:c7: 96:75:42:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Oop/Od1qCdPfAOQm/KatfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYwNzIzMTEwMDUwWhcNMjYwNzI0MTEwMDUwWjAzMTEwLwYDVQQD Eyg4YTQ3ZTUwZDg3YzdhYjFkNzU4NGI5YThjMDVkY2E3YWVjMGJjMTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtykK0nWtYYL0dEw7A00VosVar9i7 0a7XEUwdhZW8ei3aAE5gc5i/vvTFBsuDAIn6ObS5aKeKUE5GA8Ur53qKGn9P/tJH K9AQQmvxlEufH4wrk0+rQ+UHR2994CEUp+HMp/nBfWwchNnu7M4kRHyOFWKC7rHW RvI/J8RcdScaHlPJKrgeixTsv5ahAJZn1M9D/WsrrY49PO0J7HAQuDrp2qr1/9pc onfrWimALpk/rdRr5QMouVuHc9WbzxiRqBxnYrQ4Wq/HC3/TrRvlJXR1ShrfZbeD lh5OuHipZohC1IUf2lzQTJXr+r5ScsdRVjwOpwDBDWz8spQjbup4oAhaHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpH5Q2Hx6sddYS5qMBdynrsC8EoMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6Q2gZL1 NTrVvJCdrCqleQXTzvBByfS2Mqoh98b5OAtLKcL7sD1alHHtU0580xk19Vk9CG0o oUF2cHXY4P0v6z2LU/QhSM+hLkpQpgLbW57zrViUOY1upQpmu6xUYjzM3Ch0d/WG 4zQu2fmW+aG89tTxe+s6WgZYWGFoGD63r9p1UqVShSAVtV+myZNcCHsUFNGti52Q SOHaEopLAVH+wMp1E89a/Nlz41hZWhm4gTKLZoVfD2rRXSBXOvL+HaFcxkHRedsE vJ5zJQ4/84GzeBjTcMqMdLJBBtwGB3i/igT63lQ6J1bb7sorhSB2Ok8GhOLPmq8S FFfsI07HlnVCTw== -----END CERTIFICATE-----Generated at Thu Jul 23 20:08:27 2026 by rpki-client