$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: nHYQvYk911GSm8uz2qh6ZzCtQcS71TObFSLR+VzmhRs= Subject key identifier: AB:65:BB:E7:81:E6:03:28:82:BF:B5:21:FE:D7:AF:18:49:37:51:B2 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 01A0BDD4CA04004D1C4CF6E99EC96750D869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 1768 Signing time: Sun 20 Sep 2026 08:00:34 +0000 Manifest this update: Sun 20 Sep 2026 08:00:34 +0000 Manifest next update: Mon 21 Sep 2026 08:00:34 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: /sArYR31aJh6BPXWIr2A9nYAbPk6tpsFi8erUz+qMK4=) 4: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 5: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 6: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 7: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 8: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=) 9: OY7VggLlS6S8taEQZwxA_9MJ9Jc.roa (hash: hj2ioa7d+yEki0gbVFILdu22LUXQHhfHdLKTOV3RU+k=) 10: QK12BT5JU0njlnUjcvy2nll9ISw.roa (hash: ueRt97cwc8ElR5smVKqO5aokOBz+HYbbrwTAOsyMRGg=) 11: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 12: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 13: lTN9WM_3kAIwHlpaUspavss4Il0.roa (hash: HHix3BfeZ1Pqtr5dBucc6Su9pPLjQX4ABrsZY3uNeNA=) 14: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 15: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 16: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 17: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=) 18: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 08:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bd:d4:ca:04:00:4d:1c:4c:f6:e9:9e:c9:67:50:d8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Sep 20 08:00:34 2026 GMT Not After : Sep 21 08:00:34 2026 GMT Subject: CN=ab65bbe781e6032882bfb521fed7af18493751b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:8a:50:38:e2:b8:cc:6d:15:7a:ca:b6:b5: a7:59:1b:d1:9a:18:26:4d:4f:77:83:11:00:e4:b6: c0:ac:f6:a7:d1:fa:ae:6e:23:37:83:6e:f3:73:dd: 78:a4:15:cf:a0:33:1a:dc:61:1c:d0:38:6e:65:fc: 16:7d:61:37:1c:ec:0e:fa:b0:4c:d3:b9:c3:b0:ed: f8:cb:bc:4d:9d:98:d8:de:28:f7:89:bf:8c:fb:34: 34:84:92:f5:a6:ff:83:ec:20:8f:3d:4c:b0:9f:de: 18:c7:6c:bf:57:d9:9b:df:35:7b:0f:58:3d:ef:5f: 78:cb:73:ff:10:e5:fa:5e:03:25:95:28:9c:81:07: dc:ae:58:f6:d4:f6:54:9d:62:9d:e1:dd:47:78:0e: ba:e1:8a:ec:96:7a:37:be:4d:1a:99:60:81:22:f7: 6c:96:c6:ac:a4:28:5a:85:47:90:31:3e:0f:3b:3c: ba:f7:5a:b7:a8:63:e3:7e:b3:12:7b:49:ac:f3:46: b7:88:cf:4b:61:8e:bd:f9:43:9b:b3:10:10:40:83: f5:0d:63:b1:2a:1a:37:c3:0e:ad:9c:ab:81:e9:73: 7f:c9:e6:c2:9a:5a:3e:75:0b:ed:3b:e9:e5:5d:39: 6f:d3:d3:ba:e5:ba:59:35:11:d6:47:f0:d2:d6:5c: 72:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:65:BB:E7:81:E6:03:28:82:BF:B5:21:FE:D7:AF:18:49:37:51:B2 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:69:06:1c:7d:64:40:5a:9b:54:31:4a:36:89:59:b5:ef:49: 31:2b:27:61:1a:48:65:e6:ca:bc:21:d6:df:44:11:be:ad:14: 8c:70:96:81:9e:db:04:45:61:ab:48:d2:c1:cb:d4:b8:a6:70: 9a:b2:c2:6b:9a:50:10:22:27:62:39:9f:90:cd:91:23:aa:00: ea:98:7d:b5:e0:83:8a:9a:3a:e5:94:0e:18:b7:26:7d:82:57: 8a:c7:23:de:ee:5f:ab:64:b3:5c:4e:c6:f0:15:e2:87:04:a2: 59:d0:fa:1f:7d:de:e8:24:dc:2a:38:9e:cd:f4:bc:49:b9:1d: 8c:84:b4:c5:f1:34:ed:a3:e7:13:20:ed:49:21:75:e8:a0:1d: 15:f3:98:61:65:39:52:15:8e:56:f0:26:a8:fd:d9:1a:3e:61: 61:4c:f6:27:82:f2:66:a1:74:65:4d:d0:20:a6:54:d8:54:f4: 9f:a9:b9:e7:d8:d1:55:12:9e:29:23:69:c7:d9:d7:18:7b:c7: 75:14:9b:5f:1b:28:5b:06:52:2d:9e:c8:7e:0d:8b:7b:cc:90: b1:af:9e:f7:05:66:f2:42:6f:83:06:bf:5b:33:d1:09:a5:04: 50:5d:43:7a:69:06:3b:d6:ae:de:30:54:62:7f:5a:d0:63:ae: 6e:e1:5c:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC91MoEAE0cTPbpnslnUNhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwOTIwMDgwMDM0WhcNMjYwOTIxMDgwMDM0WjAzMTEwLwYDVQQD EyhhYjY1YmJlNzgxZTYwMzI4ODJiZmI1MjFmZWQ3YWYxODQ5Mzc1MWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBaKUDjiuMxtFXrKtrWnWRvRmhgm TU93gxEA5LbArPan0fqubiM3g27zc914pBXPoDMa3GEc0DhuZfwWfWE3HOwO+rBM 07nDsO34y7xNnZjY3ij3ib+M+zQ0hJL1pv+D7CCPPUywn94Yx2y/V9mb3zV7D1g9 7194y3P/EOX6XgMllSicgQfcrlj21PZUnWKd4d1HeA664Yrslno3vk0amWCBIvds lsaspChahUeQMT4POzy691q3qGPjfrMSe0ms80a3iM9LYY69+UObsxAQQIP1DWOx Kho3ww6tnKuB6XN/yebCmlo+dQvtO+nlXTlv09O65bpZNRHWR/DS1lxy8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtlu+eB5gMogr+1If7XrxhJN1GyMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamkGHH1k QFqbVDFKNolZte9JMSsnYRpIZebKvCHW30QRvq0UjHCWgZ7bBEVhq0jSwcvUuKZw mrLCa5pQECInYjmfkM2RI6oA6ph9teCDipo65ZQOGLcmfYJXiscj3u5fq2SzXE7G 8BXihwSiWdD6H33e6CTcKjiezfS8SbkdjIS0xfE07aPnEyDtSSF16KAdFfOYYWU5 UhWOVvAmqP3ZGj5hYUz2J4LyZqF0ZU3QIKZU2FT0n6m559jRVRKeKSNpx9nXGHvH dRSbXxsoWwZSLZ7Ifg2Le8yQsa+e9wVm8kJvgwa/WzPRCaUEUF1DemkGO9au3jBU Yn9a0GOubuFcuw== -----END CERTIFICATE-----Generated at Sun Sep 20 19:12:46 2026 by rpki-client