$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json) Hash identifier: 8zthIEt1JglWt8ZImiCHqM4swQ4JZDjdNU5guGkQ6h0= Subject key identifier: C1:0B:F2:FE:2F:44:F3:43:65:D0:06:9F:6C:5C:CC:B5:AE:3C:1F:85 Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 01A0D5DDF56F33F91E02D98B97E29AAAB153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft Manifest number: 0674 Signing time: Fri 25 Sep 2026 00:01:28 +0000 Manifest this update: Fri 25 Sep 2026 00:01:28 +0000 Manifest next update: Sat 26 Sep 2026 00:01:28 +0000 Files and hashes: 1: 1-lGH1nu7CvzHWYEiuO1j3MNSzJY.roa (hash: 9/b6BBId/Kn5DB9SmUCWKxBwcAQLvltddZcgBj268UQ=) 2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: nhMuYWKFoxzKVfCt5zPGuPYzcxIK+CuTtvWdiXd9iJI=) 3: 424CCN9QyDvL6fO6bZ7Xg6Fm46s.roa (hash: SHulRC6ks6gdnmfzG9uIHolgIjLc6fN1BcexLvRfVok=) 4: 4hkkLe2dcq377WzDqzkSvMCtsco.roa (hash: z6R8cUSnmMVlMDW9YnWwZZPf73zricPf+TEJ86PN7Ko=) 5: 4vxZx7uBqQQ6FyEF2MVBFY1WSaQ.roa (hash: yT8MYmQtVQnTBHZPhbP/WPtpcUBRa3XEcKCSlPgpz98=) 6: AfpxLvj3BiyLwMcA6kKVrdFgW6Y.roa (hash: KKSEdsLLrws/RATwLIqwcq742JLEElRzqndIEau2IyI=) 7: Kj2mVBpZK5i3xSiOOVydeQMB-K4.roa (hash: 3BF9uGhA0G3sb3UpfLCU/KTehTModommlZcD+YYnZKQ=) 8: QxbU9vvhcA75ENS1lZHkpNyfErk.roa (hash: yv8oGh8GGZWvW+9jiR8h6piajHrkuA5egN2MppGfk+w=) 9: SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa (hash: kRtJ8SNMjyDbUxu98aNT/p/eOM2tAQZf30u+RPiQ1f8=) 10: TDn2Si0wredvySS4eb6YcQsXGoA.roa (hash: PViZzYWq9wpVr0Wiz/5xTXadoeHO740enY0H0kd7OSI=) 11: Vs-VbGsXqggDO3OQJAz7ljIJCBM.roa (hash: 0/YnvO1iRna/5MI8gBnTd4qBir5DLarEENTjj5s3VEU=) 12: _msrPFl7j-h-scWfwUUyG5vmI0Q.roa (hash: C0U0oHsxASzeTthWbTeZAy4SqW+0azDdamHmVesAW1U=) 13: gA8K0uCGARt0iMHybj1fl0_l9iM.roa (hash: oF5vhF0FQd0hgOhUSqj7/e1FPt2MEHPpP+wGYckBTNY=) 14: jCLt2xm1fkgnOn9HMLPQJTVuVNc.roa (hash: c9YGeeLCkAXiNDBuTkfpy8lAq+y929pm91OusU2TBc0=) 15: koXw3LvEwrzn9qCWrcZnQPR8iMs.roa (hash: gNqdDH2AralOcsOhDuMpE5EfKzaR6A0T5YWUJwlNSmY=) 16: kyRVCGVmasDx6k38w-izwTFSZVI.roa (hash: kfM4cnv70+/otrzSrUgrUJZAq/Yw97sDNJ3BUv5w7l4=) 17: l8TSNwU2prw2gsntuaJ9QdkRHKw.roa (hash: gb+3/D4Y4zC34TYQcD7+qVWbJgAtu0xBM1r/dmFP8pw=) 18: nmunvZ8NjUAQxyXLc7q3E6asADA.roa (hash: bcuDcNnBDq7F5VI75bQ3a3MYz4yXIjZXvHo8ZRs1H3g=) 19: qbUtGSmF4OJDy4q4dlRGp4OciDs.roa (hash: VVCFN7s9B67WrTXffUSFAE1mRjFGjdVcuJGLxmq/AY8=) 20: tUYOdiUxF4HxrSVOg847WMoBqws.roa (hash: N6nWp89HDr0pIhLLPi1oB+mkzKMLsBnFNGgdLRBYN30=) 21: tevOSAyMp-1DHWOc8A6PPAJZLUs.roa (hash: /4F2MJ2YCwSX6I/W4Ebbet4QyTAZ6jd4w/oq57g4Qcw=) 22: xOtKmGFOQ0Si4ry-DnEnpbMZzfw.roa (hash: uloNgiaPX4XD2hk6wXEnVMKHkzySU+UwLh3IKRIIyAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 21:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d5:dd:f5:6f:33:f9:1e:02:d9:8b:97:e2:9a:aa:b1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Sep 25 00:01:28 2026 GMT Not After : Sep 26 00:01:28 2026 GMT Subject: CN=c10bf2fe2f44f34365d0069f6c5cccb5ae3c1f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cc:19:7d:e7:9f:f4:30:eb:78:20:2e:0e:e6: 65:cc:8a:b7:41:92:45:ae:66:d9:87:b4:2b:0b:74: 00:8a:cb:3f:b7:fe:94:b5:1a:ab:d6:b3:80:f0:c8: 88:e8:89:25:d9:f9:71:5f:82:f2:94:fc:e4:f4:fa: 3e:4d:32:47:a1:5c:91:95:69:2c:ff:41:f4:26:86: 4b:7b:82:fd:90:99:fc:ef:69:f4:64:8f:ce:e0:b9: 82:61:f0:5e:a7:a9:81:77:10:10:96:5c:12:b4:81: d7:16:fe:2b:8e:56:f5:8a:e9:6d:47:9e:0a:93:f1: 87:b8:cc:83:27:fe:02:b6:6c:9a:5d:49:61:27:cb: 7e:3f:e9:f8:ca:e6:6f:75:2a:7e:1d:0b:79:77:b4: 0b:6c:5d:08:36:b9:ed:db:76:7e:9e:41:fe:98:48: af:f1:9e:9b:a3:50:7d:d4:18:9a:fc:0a:20:e1:a6: 9c:f3:e4:08:e2:9b:27:b4:03:5d:83:2a:d4:e5:46: 3f:09:ce:7a:bf:1a:5c:a1:33:a0:cb:8b:02:2c:09: b9:89:bd:38:ac:38:5e:0d:46:8f:bb:c5:ad:98:40: c0:d4:18:07:95:b8:aa:e0:05:08:2d:91:b0:3d:93: dd:d3:c6:fc:2e:a6:a0:0e:e4:3c:d3:fb:31:eb:82: ab:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0B:F2:FE:2F:44:F3:43:65:D0:06:9F:6C:5C:CC:B5:AE:3C:1F:85 X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:cd:c1:b1:1a:4b:83:9a:22:87:06:ab:64:8f:ac:81:0c:9a: de:e3:bd:e1:fa:98:c6:82:f2:87:45:6c:37:ff:55:41:5f:90: 64:3b:71:d7:f9:33:a7:4a:1b:cd:10:2a:aa:94:50:a3:e7:3c: 0d:10:e5:db:e6:e8:58:05:aa:02:8b:68:d2:c5:bc:30:18:cd: 04:48:a7:54:ed:4a:98:6f:02:7d:a3:c7:8d:31:a2:ac:de:e5: 0f:85:98:50:ff:fe:c0:80:9d:d3:5f:eb:e2:d5:bd:67:89:a4: 5e:54:13:80:a2:ec:f6:35:a5:97:89:fe:72:12:6f:c0:ef:ee: a6:72:b2:2a:04:ea:a3:5e:f0:e9:cc:f1:28:aa:55:4d:aa:44: 2c:68:b1:b4:42:9d:58:65:7c:aa:ea:9e:45:c4:ca:52:02:1f: 96:42:c2:c7:2c:58:54:96:55:e4:21:0f:cb:c2:1f:5a:fc:b4: e5:ec:e7:cb:82:81:d6:15:63:4e:e8:e2:08:fe:72:df:b9:33: 79:8c:b8:85:1f:8b:57:d3:d5:a7:a8:b5:7c:ee:3c:19:01:ca: 13:91:21:7f:65:15:0b:da:ac:d0:6a:9e:23:e5:82:ec:db:eb: bd:e5:51:8d:67:c3:6c:ed:26:70:6e:51:ee:3e:1c:68:e9:b1: ac:7d:0b:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDV3fVvM/keAtmLl+KaqrFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYwOTI1MDAwMTI4WhcNMjYwOTI2MDAwMTI4WjAzMTEwLwYDVQQD EyhjMTBiZjJmZTJmNDRmMzQzNjVkMDA2OWY2YzVjY2NiNWFlM2MxZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMwZfeef9DDreCAuDuZlzIq3QZJF rmbZh7QrC3QAiss/t/6UtRqr1rOA8MiI6Ikl2flxX4LylPzk9Po+TTJHoVyRlWks /0H0JoZLe4L9kJn872n0ZI/O4LmCYfBep6mBdxAQllwStIHXFv4rjlb1iultR54K k/GHuMyDJ/4CtmyaXUlhJ8t+P+n4yuZvdSp+HQt5d7QLbF0INrnt23Z+nkH+mEiv 8Z6bo1B91Bia/Aog4aac8+QI4psntANdgyrU5UY/Cc56vxpcoTOgy4sCLAm5ib04 rDheDUaPu8WtmEDA1BgHlbiq4AUILZGwPZPd08b8LqagDuQ80/sx64KrSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEL8v4vRPNDZdAGn2xczLWuPB+FMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEc3BsRpL g5oihwarZI+sgQya3uO94fqYxoLyh0VsN/9VQV+QZDtx1/kzp0obzRAqqpRQo+c8 DRDl2+boWAWqAoto0sW8MBjNBEinVO1KmG8CfaPHjTGirN7lD4WYUP/+wICd01/r 4tW9Z4mkXlQTgKLs9jWll4n+chJvwO/upnKyKgTqo17w6czxKKpVTapELGixtEKd WGV8quqeRcTKUgIflkLCxyxYVJZV5CEPy8IfWvy05ezny4KB1hVjTujiCP5y37kz eYy4hR+LV9PVp6i1fO48GQHKE5Ehf2UVC9qs0GqeI+WC7NvrveVRjWfDbO0mcG5R 7j4caOmxrH0L9g== -----END CERTIFICATE-----Generated at Fri Sep 25 04:17:15 2026 by rpki-client