$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: ZffUlUVrwsDt1aHOjQTUg7aLpc326tEW8PGt1HteRuQ= Subject key identifier: A3:F5:D0:CF:51:88:DD:9A:79:11:60:42:CE:8D:FF:5C:19:E4:46:02 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019EBFC8CDD23221A677BFD5A1F3775BF564 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 165F Signing time: Sat 13 Jun 2026 07:01:08 +0000 Manifest this update: Sat 13 Jun 2026 07:01:08 +0000 Manifest next update: Sun 14 Jun 2026 07:01:08 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 92brh40WW-h_KiNRuqIZRb5unjw.roa (hash: IJpD/Hxzhb2xZ5MqLyCbtsawZPipjgj8kAZiuASmDs4=) 4: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: WoD6rwDBwy0yxLaZALiTNwlGAOD8nIxUQNW4x1ZHxfQ=) 5: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 6: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 7: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 8: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 9: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=) 10: OY7VggLlS6S8taEQZwxA_9MJ9Jc.roa (hash: hj2ioa7d+yEki0gbVFILdu22LUXQHhfHdLKTOV3RU+k=) 11: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 12: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 13: lTN9WM_3kAIwHlpaUspavss4Il0.roa (hash: HHix3BfeZ1Pqtr5dBucc6Su9pPLjQX4ABrsZY3uNeNA=) 14: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 15: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 16: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 17: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=) 18: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:c8:cd:d2:32:21:a6:77:bf:d5:a1:f3:77:5b:f5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jun 13 07:01:08 2026 GMT Not After : Jun 14 07:01:08 2026 GMT Subject: CN=a3f5d0cf5188dd9a79116042ce8dff5c19e44602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:4a:07:47:e8:d5:54:26:a0:1f:d9:72:02: 30:e3:17:0a:fb:f8:db:d0:d6:9a:f6:63:98:40:b7: e7:7f:2f:5f:a6:d8:ef:db:69:92:03:30:af:a1:ff: 2f:0c:e3:f8:a3:ab:e3:13:65:5f:c8:44:a4:52:36: 38:76:99:72:9d:43:08:62:f3:c2:44:79:81:8e:f1: ae:ec:7f:13:8a:c9:33:44:e7:f0:0c:d4:41:ee:a8: c9:a3:00:68:b2:58:4e:c9:d6:41:b6:4b:b4:37:bd: 75:54:f2:e4:ed:00:03:14:f0:fe:3a:21:ec:06:da: e5:bc:d8:9f:6c:58:02:c8:01:08:7e:fc:82:56:b5: 42:53:12:81:fd:fb:fe:b9:99:ee:dc:c5:26:b2:13: 98:68:9c:6a:25:85:14:c5:08:6d:67:72:41:6b:e8: 32:c5:9c:1d:c7:c9:35:e1:c4:ca:5d:4e:58:78:cd: 4d:5a:f5:43:c7:6f:7d:a8:e4:fa:60:a6:1f:fd:7d: 62:d3:c4:60:44:df:18:e5:8b:ea:fa:c8:01:d7:f7: 8f:3b:72:98:76:67:a2:99:ed:0e:d7:7c:8d:ab:5e: f1:56:02:65:98:8f:62:e9:fb:e8:f8:fb:18:34:8f: 4b:94:7e:f9:6b:f7:df:c0:54:b5:b5:1b:ed:02:87: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F5:D0:CF:51:88:DD:9A:79:11:60:42:CE:8D:FF:5C:19:E4:46:02 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d6:00:49:d0:41:75:0c:69:80:cc:27:4b:a0:3d:cc:00:98: 0a:2f:ba:d6:36:8e:09:18:bd:31:88:6c:7c:d3:5b:97:47:fd: f0:19:76:f2:ae:27:ca:0d:48:e5:39:3d:3f:2b:0c:f4:2a:73: bd:01:0d:b0:33:e5:c8:4b:3a:ef:73:90:5b:cb:89:66:a7:27: 1d:61:1b:24:8a:69:b8:9b:cb:b0:69:09:de:af:54:01:ca:8b: 40:b5:68:2e:7d:85:1d:c7:fd:a8:3a:82:f4:6e:8e:d3:86:2c: 61:59:bd:3c:fc:f8:bf:be:51:e1:fb:40:df:39:74:4d:22:01: c5:9f:1b:c9:53:c7:4d:a7:cd:59:91:6f:be:5b:60:46:f5:47: 1b:8f:61:81:f5:2d:f8:9c:77:bd:9e:7c:bf:3a:a5:10:fb:9e: 0b:82:a3:ae:35:f1:4f:57:e9:35:70:ef:29:49:56:13:43:ee: 8c:3e:fa:52:bd:bc:56:09:46:1c:67:09:db:e5:39:07:f9:4e: 7f:ae:7d:db:db:77:8c:88:2b:34:df:59:49:ff:c0:82:18:fe: f2:d9:75:a9:98:62:61:03:90:b7:ba:85:b7:45:28:5d:7b:a7: cf:14:4d:66:cf:f7:1b:b2:30:65:1e:8e:dc:93:49:89:7f:71: 0d:32:de:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/yM3SMiGmd7/VofN3W/VkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwNjEzMDcwMTA4WhcNMjYwNjE0MDcwMTA4WjAzMTEwLwYDVQQD EyhhM2Y1ZDBjZjUxODhkZDlhNzkxMTYwNDJjZThkZmY1YzE5ZTQ0NjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAlKB0fo1VQmoB/ZcgIw4xcK+/jb 0Naa9mOYQLfnfy9fptjv22mSAzCvof8vDOP4o6vjE2VfyESkUjY4dplynUMIYvPC RHmBjvGu7H8TiskzROfwDNRB7qjJowBoslhOydZBtku0N711VPLk7QADFPD+OiHs BtrlvNifbFgCyAEIfvyCVrVCUxKB/fv+uZnu3MUmshOYaJxqJYUUxQhtZ3JBa+gy xZwdx8k14cTKXU5YeM1NWvVDx299qOT6YKYf/X1i08RgRN8Y5Yvq+sgB1/ePO3KY dmeime0O13yNq17xVgJlmI9i6fvo+PsYNI9LlH75a/ffwFS1tRvtAoes2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKP10M9RiN2aeRFgQs6N/1wZ5EYCMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtYASdBB dQxpgMwnS6A9zACYCi+61jaOCRi9MYhsfNNbl0f98Bl28q4nyg1I5Tk9PysM9Cpz vQENsDPlyEs673OQW8uJZqcnHWEbJIppuJvLsGkJ3q9UAcqLQLVoLn2FHcf9qDqC 9G6O04YsYVm9PPz4v75R4ftA3zl0TSIBxZ8byVPHTafNWZFvvltgRvVHG49hgfUt +Jx3vZ58vzqlEPueC4KjrjXxT1fpNXDvKUlWE0PujD76Ur28VglGHGcJ2+U5B/lO f65929t3jIgrNN9ZSf/Aghj+8tl1qZhiYQOQt7qFt0UoXXunzxRNZs/3G7IwZR6O 3JNJiX9xDTLeuA== -----END CERTIFICATE-----Generated at Sat Jun 13 08:56:44 2026 by rpki-client