$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: II4bXTNRjb0Wdht/V6E3TH3t4VVu/YDxHTD21X1nCfA= Subject key identifier: 21:40:F1:21:3F:DD:1D:CB:7F:DB:FA:C2:5F:26:12:ED:0F:DD:68:DC Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019FA78656AA3D61DC2F4E9F25110F0DDAAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 16D7 Signing time: Tue 28 Jul 2026 07:00:26 +0000 Manifest this update: Tue 28 Jul 2026 07:00:26 +0000 Manifest next update: Wed 29 Jul 2026 07:00:26 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 92brh40WW-h_KiNRuqIZRb5unjw.roa (hash: IJpD/Hxzhb2xZ5MqLyCbtsawZPipjgj8kAZiuASmDs4=) 4: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: VyLLB5cjXLHotRwiEj45fFXLGzL78rPelu3uc4ej6Xs=) 5: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 6: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 7: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 8: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 9: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=) 10: OY7VggLlS6S8taEQZwxA_9MJ9Jc.roa (hash: hj2ioa7d+yEki0gbVFILdu22LUXQHhfHdLKTOV3RU+k=) 11: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 12: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 13: lTN9WM_3kAIwHlpaUspavss4Il0.roa (hash: HHix3BfeZ1Pqtr5dBucc6Su9pPLjQX4ABrsZY3uNeNA=) 14: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 15: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 16: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 17: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=) 18: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 07:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:86:56:aa:3d:61:dc:2f:4e:9f:25:11:0f:0d:da:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jul 28 07:00:26 2026 GMT Not After : Jul 29 07:00:26 2026 GMT Subject: CN=2140f1213fdd1dcb7fdbfac25f2612ed0fdd68dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:3b:46:d5:70:a7:11:53:77:1d:ec:ec:f9: c6:c2:7d:23:80:93:45:22:19:2a:09:5f:e6:68:fd: ed:21:0e:14:85:45:43:a1:45:b4:d0:8e:54:00:a3: 90:2c:48:fc:8c:b4:13:0c:59:d9:0e:af:f7:57:18: 48:48:2a:51:2f:eb:e4:6f:04:65:dc:ee:86:68:e3: b1:1e:15:92:14:b3:87:05:05:04:ab:27:fd:b0:23: db:90:05:bd:15:12:bb:e4:73:46:cb:3b:9b:f0:1f: 49:73:f9:34:71:8c:c1:0d:9f:f9:5d:be:7a:19:b7: f3:66:eb:f7:92:98:fe:a3:02:53:68:71:6e:87:c7: 5a:9c:6a:5d:00:3a:9d:27:67:b8:1e:48:83:2e:98: f2:cd:de:74:b1:0b:43:27:01:d4:e0:08:21:90:b8: 90:79:d3:72:e2:57:9e:d7:f0:ad:9a:90:58:0a:9c: df:ff:d7:31:18:d0:33:a3:8f:47:45:99:a2:62:cc: 19:4b:2f:fa:da:d5:92:5c:b5:19:84:48:33:f9:f1: 52:be:2e:c1:6d:04:6d:3b:c1:14:22:ef:17:d1:14: 7e:f9:83:10:1e:50:c3:8c:67:bd:8d:06:c5:04:77: 48:3d:e7:05:30:03:af:a8:7b:d7:ad:af:f9:12:94: 9a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:40:F1:21:3F:DD:1D:CB:7F:DB:FA:C2:5F:26:12:ED:0F:DD:68:DC X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:77:5b:98:64:c0:b3:89:fd:79:52:93:0b:8a:91:0e:19:77: b6:d2:c8:60:ba:ea:e9:b6:73:01:21:ff:d8:88:ef:4b:0e:45: 45:8d:91:1c:74:60:9c:ea:62:8b:f6:8c:c0:89:5b:71:bf:09: 8a:ce:a9:4c:90:13:b1:ae:a4:34:4b:cf:c1:1c:a0:fa:90:dd: 72:dc:1b:60:c3:a9:19:50:c6:d5:6a:93:07:aa:26:3b:41:d2: 27:a0:5b:cf:48:52:b5:d6:43:84:c8:59:47:11:b0:51:b2:1a: 8f:9d:9a:5b:e8:da:70:bb:fd:a7:3c:4b:1e:b1:d7:be:56:89: 54:db:37:2d:96:d4:16:ca:b1:dc:2a:98:19:8c:d2:81:fd:8b: 2e:fe:1a:35:61:34:d5:61:1d:74:01:d0:0b:58:67:28:3a:6e: 9a:ce:d8:d1:4c:92:a1:09:77:a5:82:a3:48:ca:63:c4:fc:bf: f2:bd:a8:81:c3:59:7d:59:41:6a:cc:32:91:12:a7:1a:af:ab: 68:a8:71:de:37:ae:63:a3:39:9a:2f:a2:e7:ce:00:5a:51:82: e2:f0:25:dd:4c:f9:f7:35:57:b8:32:82:24:91:85:50:14:df: 7c:59:8d:13:08:c9:07:86:f8:1f:f2:3a:ec:22:9d:71:5c:cf: 23:39:ad:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+nhlaqPWHcL06fJREPDdquMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwNzI4MDcwMDI2WhcNMjYwNzI5MDcwMDI2WjAzMTEwLwYDVQQD EygyMTQwZjEyMTNmZGQxZGNiN2ZkYmZhYzI1ZjI2MTJlZDBmZGQ2OGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6I7RtVwpxFTdx3s7PnGwn0jgJNF IhkqCV/maP3tIQ4UhUVDoUW00I5UAKOQLEj8jLQTDFnZDq/3VxhISCpRL+vkbwRl 3O6GaOOxHhWSFLOHBQUEqyf9sCPbkAW9FRK75HNGyzub8B9Jc/k0cYzBDZ/5Xb56 GbfzZuv3kpj+owJTaHFuh8danGpdADqdJ2e4HkiDLpjyzd50sQtDJwHU4AghkLiQ edNy4lee1/CtmpBYCpzf/9cxGNAzo49HRZmiYswZSy/62tWSXLUZhEgz+fFSvi7B bQRtO8EUIu8X0RR++YMQHlDDjGe9jQbFBHdIPecFMAOvqHvXra/5EpSa+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFA8SE/3R3Lf9v6wl8mEu0P3WjcMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHdbmGTA s4n9eVKTC4qRDhl3ttLIYLrq6bZzASH/2IjvSw5FRY2RHHRgnOpii/aMwIlbcb8J is6pTJATsa6kNEvPwRyg+pDdctwbYMOpGVDG1WqTB6omO0HSJ6Bbz0hStdZDhMhZ RxGwUbIaj52aW+jacLv9pzxLHrHXvlaJVNs3LZbUFsqx3CqYGYzSgf2LLv4aNWE0 1WEddAHQC1hnKDpums7Y0UySoQl3pYKjSMpjxPy/8r2ogcNZfVlBaswykRKnGq+r aKhx3jeuY6M5mi+i584AWlGC4vAl3Uz59zVXuDKCJJGFUBTffFmNEwjJB4b4H/I6 7CKdcVzPIzmtVQ== -----END CERTIFICATE-----Generated at Tue Jul 28 16:06:54 2026 by rpki-client