$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: plIcsIh5rGbe8+XcoqzrdaefrYXIUmxu5aMs55B7c5E= Subject key identifier: 22:BD:24:3B:12:97:7C:7A:D1:6C:2C:53:C2:69:A3:0F:87:56:D7:76 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019D9A752ABC288287D5278DBCA5FCDC306C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 15C7 Signing time: Fri 17 Apr 2026 08:01:03 +0000 Manifest this update: Fri 17 Apr 2026 08:01:03 +0000 Manifest next update: Sat 18 Apr 2026 08:01:03 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: TJHkRFflbijCGTrPgErkrqqgtvlpK1YUP4W323S648E=) 4: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 5: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 6: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 7: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 8: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=) 9: OY7VggLlS6S8taEQZwxA_9MJ9Jc.roa (hash: hj2ioa7d+yEki0gbVFILdu22LUXQHhfHdLKTOV3RU+k=) 10: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 11: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 12: lTN9WM_3kAIwHlpaUspavss4Il0.roa (hash: HHix3BfeZ1Pqtr5dBucc6Su9pPLjQX4ABrsZY3uNeNA=) 13: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 14: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 15: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 16: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=) 17: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:75:2a:bc:28:82:87:d5:27:8d:bc:a5:fc:dc:30:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Apr 17 08:01:03 2026 GMT Not After : Apr 18 08:01:03 2026 GMT Subject: CN=22bd243b12977c7ad16c2c53c269a30f8756d776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a7:b8:79:50:88:18:ea:8d:1d:04:77:a8:fc: a5:ed:a2:1e:22:4c:80:c1:19:dd:18:01:2e:0a:40: f4:f0:11:f0:81:23:7a:00:d1:32:60:85:b0:db:81: eb:e1:6d:9c:57:21:8e:3a:f7:4d:a9:9b:41:48:5b: 06:b6:0a:0a:95:e1:a6:05:45:5c:1a:9f:bf:28:e6: eb:1f:d0:7b:be:3e:9c:43:10:bf:72:c4:ca:cf:6d: 64:97:db:7f:89:56:3b:eb:59:35:07:52:be:70:e0: 4f:cd:86:d6:41:df:6c:b3:38:ed:99:a2:d6:69:2d: d3:80:14:eb:8d:8b:33:b5:98:63:19:ac:9f:19:46: 34:85:93:fb:41:29:d2:8d:93:28:17:95:ae:e4:0e: 08:81:a0:4c:28:4a:03:78:b8:18:a5:db:ac:0c:63: 56:0c:9e:25:0d:44:f7:6d:2c:91:33:11:48:8b:98: 77:04:6a:94:37:6c:74:37:29:4b:29:b0:69:00:9f: fa:3a:2b:b1:d0:16:d6:5b:57:4e:0d:17:18:2a:00: ca:14:fe:00:99:bb:47:1d:89:87:e9:69:de:94:b0: ad:e7:6d:a9:b6:00:b8:39:1c:e5:32:c0:cb:f9:d2: 3c:50:53:f1:13:87:f3:1c:66:ca:95:55:10:10:f8: b3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BD:24:3B:12:97:7C:7A:D1:6C:2C:53:C2:69:A3:0F:87:56:D7:76 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:47:0d:43:dd:6d:29:7b:46:1d:7e:a5:89:ec:b5:04:bc:f9: 1f:c1:48:6b:1b:7a:e2:33:25:cc:48:3f:32:58:2b:6c:bd:a8: 58:f6:b4:ed:b4:2f:ce:2d:c6:cf:2b:78:61:ce:f2:b4:36:88: 0a:6d:6a:7b:c8:05:4d:08:95:ca:6a:0f:87:26:bd:80:79:2f: 0d:7b:48:54:1f:08:1c:e1:27:e2:c9:64:e2:18:b2:9a:1e:6b: 8b:f7:25:53:4f:36:6d:9f:1a:bd:dc:7e:9f:84:46:b5:57:eb: b3:46:9b:37:86:5f:93:a3:31:b2:c4:32:46:3c:0e:e5:1c:f2: 4a:ba:d1:b4:fd:c9:b7:2c:a7:89:da:e9:59:ae:ce:b9:07:6f: 0a:50:0b:9e:17:15:1e:6a:65:d7:70:5e:ff:fe:05:59:98:ff: d6:d1:cf:44:b6:f3:2a:cb:46:d2:b5:a5:73:50:5f:21:42:83: 45:bd:5d:90:ad:d6:57:a4:35:c0:eb:23:26:f9:5b:14:98:58: 8f:a6:f1:6a:d7:8d:cf:19:75:01:bb:98:4e:01:09:40:e8:a8: 45:f0:f3:5e:31:a5:92:d6:4c:0a:5e:72:f8:28:0f:d9:19:9b: 3b:a9:d2:41:ee:49:0c:df:84:b6:3e:b8:a1:b7:77:64:26:17: 76:09:5c:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2adSq8KIKH1SeNvKX83DBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwNDE3MDgwMTAzWhcNMjYwNDE4MDgwMTAzWjAzMTEwLwYDVQQD EygyMmJkMjQzYjEyOTc3YzdhZDE2YzJjNTNjMjY5YTMwZjg3NTZkNzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqe4eVCIGOqNHQR3qPyl7aIeIkyA wRndGAEuCkD08BHwgSN6ANEyYIWw24Hr4W2cVyGOOvdNqZtBSFsGtgoKleGmBUVc Gp+/KObrH9B7vj6cQxC/csTKz21kl9t/iVY761k1B1K+cOBPzYbWQd9sszjtmaLW aS3TgBTrjYsztZhjGayfGUY0hZP7QSnSjZMoF5Wu5A4IgaBMKEoDeLgYpdusDGNW DJ4lDUT3bSyRMxFIi5h3BGqUN2x0NylLKbBpAJ/6Oiux0BbWW1dODRcYKgDKFP4A mbtHHYmH6WnelLCt522ptgC4ORzlMsDL+dI8UFPxE4fzHGbKlVUQEPiz7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCK9JDsSl3x60WwsU8Jpow+HVtd2MB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv0cNQ91t KXtGHX6liey1BLz5H8FIaxt64jMlzEg/MlgrbL2oWPa07bQvzi3Gzyt4Yc7ytDaI Cm1qe8gFTQiVymoPhya9gHkvDXtIVB8IHOEn4slk4hiymh5ri/clU082bZ8avdx+ n4RGtVfrs0abN4Zfk6MxssQyRjwO5RzySrrRtP3JtyynidrpWa7OuQdvClALnhcV Hmpl13Be//4FWZj/1tHPRLbzKstG0rWlc1BfIUKDRb1dkK3WV6Q1wOsjJvlbFJhY j6bxateNzxl1AbuYTgEJQOioRfDzXjGlktZMCl5y+CgP2RmbO6nSQe5JDN+Etj64 obd3ZCYXdglcjw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:20:25 2026 by rpki-client