$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: xUmS0LarOhANHIKWPV47cZN1p9AoRJF0rXJfxGGgU9w= Subject key identifier: E4:50:34:CC:22:2A:1E:F3:70:BD:66:87:ED:71:25:BA:BA:AD:AF:72 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019CAA8F7B9250D11689BCF47AE7228A30C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 1546 Signing time: Sun 01 Mar 2026 18:00:55 +0000 Manifest this update: Sun 01 Mar 2026 18:00:55 +0000 Manifest next update: Mon 02 Mar 2026 18:00:55 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: H/zOmnPjZohK4elnJ9MGFagPlWierPXiYslL2SEjMi0=) 4: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 5: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 6: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 7: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 8: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=) 9: PltyVjQAqljKh-lpYhHsZNR11q4.roa (hash: M3aePkMYEmgu13dRPatY8KDTkwjaxhLnORYN2cJl+Pk=) 10: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 11: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 12: hkTeBzR1zcpqpx-K2o2CKT69syE.roa (hash: 2ch6dbKSCdDQEw4rDKS8nHOAKxa/9jjwxReZLqw+2wk=) 13: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 14: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 15: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 16: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=) 17: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:8f:7b:92:50:d1:16:89:bc:f4:7a:e7:22:8a:30:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Mar 1 18:00:55 2026 GMT Not After : Mar 2 18:00:55 2026 GMT Subject: CN=e45034cc222a1ef370bd6687ed7125babaadaf72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:02:0c:75:a2:be:d6:da:55:4d:b2:d0:05:57: 74:a8:0d:6f:2a:d4:ec:7d:3a:38:14:db:67:c0:91: 43:85:65:d6:a9:61:1b:c7:9f:51:83:06:ac:cf:4a: 3b:e0:51:d8:ce:78:1e:bf:5d:52:9d:0b:64:aa:a0: a0:ec:f3:d0:f5:f1:da:d8:9e:72:90:c1:97:ce:48: 84:64:43:9a:f7:56:bd:ba:da:bc:00:10:d9:75:67: ef:28:67:23:ec:60:fb:2e:e0:00:b2:74:fe:81:48: 8c:a6:9c:2a:e2:41:80:64:e2:97:24:70:c0:86:99: fb:26:6b:16:4a:d2:02:56:a0:6e:80:b1:08:5c:02: bc:3e:3c:72:ed:3e:18:3b:d9:53:26:64:b8:3a:a1: 3e:69:4f:df:43:a8:50:44:12:11:b8:28:b3:77:d4: d7:3a:b1:37:51:25:fd:16:4d:70:39:c9:da:80:67: 8a:97:78:93:d3:c2:97:70:b7:87:b3:63:8a:25:ed: ae:03:b0:b3:9c:65:2e:7e:c6:89:a4:72:52:fd:0f: f6:b4:ee:f3:33:c6:2d:83:6e:0a:df:07:57:64:8f: 86:4c:1f:a2:59:3b:eb:fa:dd:7b:1e:01:cb:8e:fb: f3:19:e0:9c:b1:6e:a5:6a:41:d1:45:05:a4:55:a2: 69:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:50:34:CC:22:2A:1E:F3:70:BD:66:87:ED:71:25:BA:BA:AD:AF:72 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f4:96:13:b7:78:9f:92:4d:e1:6f:45:5d:81:db:4c:5c:39: 7c:78:fe:d4:89:5d:28:07:80:f2:3c:f6:19:56:4e:7c:05:e2: dd:b7:f2:97:da:be:79:f0:f8:b8:54:25:30:22:f0:e6:bf:32: c3:6e:f3:09:45:11:f3:48:25:f8:81:d3:e3:53:46:f5:84:c3: 6e:e5:44:52:55:94:f0:d9:35:f9:10:bf:f1:07:c9:4b:ed:90: 74:70:63:95:92:9a:71:98:cc:f9:97:9d:82:b3:38:04:85:5d: 51:61:a9:94:71:d0:1f:eb:f3:95:98:2e:e8:5c:f6:50:9c:1d: fb:af:75:da:c2:29:e3:30:c8:5a:fe:ea:0a:b0:ee:4a:e1:c1: 4b:96:a4:57:cc:90:84:d2:23:9d:0a:45:99:64:39:f4:d3:cc: 0f:b4:53:ec:bb:45:c4:65:e1:6a:50:73:fc:0d:56:29:cc:ae: 7d:44:5b:9f:87:13:d3:29:b4:2c:a8:ee:fd:c2:91:c5:30:cc: 77:6a:08:6d:c5:f0:a8:da:47:86:ac:21:ad:77:f5:48:90:af: 03:14:0a:cb:9e:ce:5c:35:ce:a6:74:3f:22:41:fb:ac:76:f1: 9e:24:7e:99:1e:97:e4:25:87:53:f2:a5:ad:5e:de:c6:05:53: a8:43:8f:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqj3uSUNEWibz0euciijDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwMzAxMTgwMDU1WhcNMjYwMzAyMTgwMDU1WjAzMTEwLwYDVQQD EyhlNDUwMzRjYzIyMmExZWYzNzBiZDY2ODdlZDcxMjViYWJhYWRhZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAIMdaK+1tpVTbLQBVd0qA1vKtTs fTo4FNtnwJFDhWXWqWEbx59Rgwasz0o74FHYzngev11SnQtkqqCg7PPQ9fHa2J5y kMGXzkiEZEOa91a9utq8ABDZdWfvKGcj7GD7LuAAsnT+gUiMppwq4kGAZOKXJHDA hpn7JmsWStICVqBugLEIXAK8Pjxy7T4YO9lTJmS4OqE+aU/fQ6hQRBIRuCizd9TX OrE3USX9Fk1wOcnagGeKl3iT08KXcLeHs2OKJe2uA7CznGUufsaJpHJS/Q/2tO7z M8Ytg24K3wdXZI+GTB+iWTvr+t17HgHLjvvzGeCcsW6lakHRRQWkVaJp6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORQNMwiKh7zcL1mh+1xJbq6ra9yMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/SWE7d4 n5JN4W9FXYHbTFw5fHj+1IldKAeA8jz2GVZOfAXi3bfyl9q+efD4uFQlMCLw5r8y w27zCUUR80gl+IHT41NG9YTDbuVEUlWU8Nk1+RC/8QfJS+2QdHBjlZKacZjM+Zed grM4BIVdUWGplHHQH+vzlZgu6Fz2UJwd+6912sIp4zDIWv7qCrDuSuHBS5akV8yQ hNIjnQpFmWQ59NPMD7RT7LtFxGXhalBz/A1WKcyufURbn4cT0ym0LKju/cKRxTDM d2oIbcXwqNpHhqwhrXf1SJCvAxQKy57OXDXOpnQ/IkH7rHbxniR+mR6X5CWHU/Kl rV7exgVTqEOPZg== -----END CERTIFICATE-----Generated at Mon Mar 2 00:44:49 2026 by rpki-client