$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: jBfvem0hN13d9PwqYJXJd/JC5/KszXTub45FNY/H3yc= Subject key identifier: 23:BF:94:02:9F:FA:9C:B4:58:6E:D0:67:B9:78:24:AC:E4:6C:2C:49 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 01A0C1B1953DA5B5F4193800D50D2A11FC78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 176A Signing time: Mon 21 Sep 2026 02:00:35 +0000 Manifest this update: Mon 21 Sep 2026 02:00:35 +0000 Manifest next update: Tue 22 Sep 2026 02:00:35 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: S4StkV25j5X9yORbXJPjWWi3pK87mhjZ/8fJrWAL9us=) 4: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 5: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 6: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 7: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 8: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=) 9: OY7VggLlS6S8taEQZwxA_9MJ9Jc.roa (hash: hj2ioa7d+yEki0gbVFILdu22LUXQHhfHdLKTOV3RU+k=) 10: QK12BT5JU0njlnUjcvy2nll9ISw.roa (hash: ueRt97cwc8ElR5smVKqO5aokOBz+HYbbrwTAOsyMRGg=) 11: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 12: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 13: lTN9WM_3kAIwHlpaUspavss4Il0.roa (hash: HHix3BfeZ1Pqtr5dBucc6Su9pPLjQX4ABrsZY3uNeNA=) 14: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 15: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 16: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 17: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=) 18: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c1:b1:95:3d:a5:b5:f4:19:38:00:d5:0d:2a:11:fc:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Sep 21 02:00:35 2026 GMT Not After : Sep 22 02:00:35 2026 GMT Subject: CN=23bf94029ffa9cb4586ed067b97824ace46c2c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:25:b4:0a:ca:03:78:cf:07:c8:50:cd:e2:76: a8:c2:08:ab:10:6c:62:6e:5f:04:26:93:83:39:b5: 10:a6:f1:3b:f2:11:a3:ac:0b:ee:19:6e:b1:38:6e: 62:b0:bf:6e:bc:ed:82:0b:0a:8f:2c:51:a8:a4:38: 32:c5:5e:bb:d4:e9:63:57:89:b9:a0:57:bf:fa:2d: ef:cd:85:09:64:de:92:70:2b:db:20:d6:e5:e9:32: 59:d9:1e:bc:d8:09:6b:03:33:11:c7:7f:7f:d3:a4: d6:67:36:a3:ef:af:8c:ce:d5:ba:48:bb:7f:55:bd: e0:67:0a:d6:a3:2f:75:85:a1:70:3b:41:c9:7e:6b: 4a:25:98:46:5c:84:fd:bc:35:60:6a:f5:ae:ca:e6: d9:c6:40:b9:9e:cd:51:9e:b4:0a:c6:f6:fe:e7:c7: 63:2b:7f:9d:20:a3:ab:74:d0:03:fb:f7:7f:6f:b3: 5c:ee:07:e3:83:17:a9:7c:44:fe:d1:d9:66:72:83: f1:9c:46:ec:db:34:16:c4:ae:95:de:78:e3:58:ce: 92:be:99:76:da:9f:e5:9f:93:cb:c3:ca:55:22:ac: f5:b7:07:03:58:a5:ac:8b:a0:7c:cf:1a:dd:e0:3d: 41:96:28:8a:c7:ee:11:6a:99:a2:86:b8:97:dc:6d: 42:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BF:94:02:9F:FA:9C:B4:58:6E:D0:67:B9:78:24:AC:E4:6C:2C:49 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:8b:a8:bc:82:5f:a0:b6:e8:d4:9f:a1:18:37:4b:a3:ad:eb: 73:01:12:40:f6:52:0e:8e:5e:c9:b3:1a:bc:05:ff:75:64:3e: 46:c5:73:25:9a:55:34:43:60:d6:a7:19:9e:d7:20:06:b7:0b: 55:fc:53:bd:70:d8:52:b5:4d:ab:c3:70:9a:d6:6b:c8:23:f2: fa:2a:f1:75:90:0e:1f:06:4e:fe:81:4d:e5:ee:d4:48:de:22: 99:38:82:37:7a:69:64:53:c7:65:e0:b6:1b:85:8d:8e:a3:8c: 26:cb:39:40:76:14:bf:2a:c8:3c:7c:2b:d9:2f:ef:1d:a5:df: 71:74:84:2a:bc:dc:c8:4f:40:67:7e:35:9f:80:ca:64:8c:b6: 1b:f2:38:17:d0:de:05:3d:67:30:fe:c0:2b:47:77:52:d7:9a: 53:27:62:32:2f:bf:0d:6d:14:68:26:ab:2f:c3:9f:c4:c5:20: 57:f6:84:9d:cb:a0:d8:74:63:9d:22:a4:2f:e5:ec:a8:ff:a8: c6:d2:a7:a8:06:dc:d7:57:15:e7:1a:ed:20:c5:7e:c3:bd:96: 17:b7:4f:0d:4a:33:5e:95:e2:dc:f8:db:3e:b6:21:18:73:9c: d7:b9:da:fe:fe:0d:b1:92:b6:28:e4:d8:15:65:34:d0:f4:a6: 9b:b4:73:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDBsZU9pbX0GTgA1Q0qEfx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwOTIxMDIwMDM1WhcNMjYwOTIyMDIwMDM1WjAzMTEwLwYDVQQD EygyM2JmOTQwMjlmZmE5Y2I0NTg2ZWQwNjdiOTc4MjRhY2U0NmMyYzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyW0CsoDeM8HyFDN4naowgirEGxi bl8EJpODObUQpvE78hGjrAvuGW6xOG5isL9uvO2CCwqPLFGopDgyxV671OljV4m5 oFe/+i3vzYUJZN6ScCvbINbl6TJZ2R682AlrAzMRx39/06TWZzaj76+MztW6SLt/ Vb3gZwrWoy91haFwO0HJfmtKJZhGXIT9vDVgavWuyubZxkC5ns1RnrQKxvb+58dj K3+dIKOrdNAD+/d/b7Nc7gfjgxepfET+0dlmcoPxnEbs2zQWxK6V3njjWM6Svpl2 2p/ln5PLw8pVIqz1twcDWKWsi6B8zxrd4D1BliiKx+4RapmihriX3G1CPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCO/lAKf+py0WG7QZ7l4JKzkbCxJMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIuovIJf oLbo1J+hGDdLo63rcwESQPZSDo5eybMavAX/dWQ+RsVzJZpVNENg1qcZntcgBrcL VfxTvXDYUrVNq8NwmtZryCPy+irxdZAOHwZO/oFN5e7USN4imTiCN3ppZFPHZeC2 G4WNjqOMJss5QHYUvyrIPHwr2S/vHaXfcXSEKrzcyE9AZ341n4DKZIy2G/I4F9De BT1nMP7AK0d3UteaUydiMi+/DW0UaCarL8OfxMUgV/aEncug2HRjnSKkL+XsqP+o xtKnqAbc11cV5xrtIMV+w72WF7dPDUozXpXi3PjbPrYhGHOc17na/v4NsZK2KOTY FWU00PSmm7RzgA== -----END CERTIFICATE-----Generated at Mon Sep 21 10:44:45 2026 by rpki-client