$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: 9LVq8iM53OoLQXUCkb85nP3YGg9mugfs20sdDfTb7iE= Subject key identifier: EC:C7:2C:A8:4E:1A:D2:F9:3F:5F:CF:A2:9F:5B:1B:33:AC:D6:83:A0 Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019EC1EDFA5CBA870588154D3631AD65B047 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 128F Signing time: Sat 13 Jun 2026 17:00:59 +0000 Manifest this update: Sat 13 Jun 2026 17:00:59 +0000 Manifest next update: Sun 14 Jun 2026 17:00:59 +0000 Files and hashes: 1: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (hash: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=) 2: DV4o-pa7bE1DVk5ZDUDqLE1xNuM.roa (hash: vxXhUN5PVtjIWV2GInuWXJw6qiMrF0Y1ZWYFmp+Mi9c=) 3: FJcsmaUQsD13YXXoyE7RkZKR-ng.roa (hash: u6HoYzjVqNqn2YWEImLaDRf/C6bprfKvf9KjlvjxNLc=) 4: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=) 5: TIdfXJOxAhHLcLFODv0ToSZIZhw.roa (hash: nM/GDFbtviUzKwacCNxiqdK6zqFcWb0+5zH7VN6m7lY=) 6: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=) 7: jqbFij7pY9jR5_tvg6aGlSqXWvY.roa (hash: 9lSkTQcSfW9ZV/1oCol4mnY2Fh21FXn6q4rov7K8Pww=) 8: kZAgbSjcA3AUI27WYX_SLodgwxM.roa (hash: a+GdP0YC4+kyyPVC2mzxcdiH+fxAgf7/mlxAOoguZs4=) 9: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=) 10: nPN1026MFxn1aBHjNnL1ChSjJ7g.roa (hash: 0wKSqZP3wergAVCbgAzLhQpVpALUtP80ss2GImwHhRo=) 11: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: xkE0vDObzjF78AWVqPJ9O8o5PxCNGCoxqygm3HXlvpA=) 12: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=) 13: tkJi06CdYjIn25noZIzPiK0yCl0.roa (hash: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c1:ed:fa:5c:ba:87:05:88:15:4d:36:31:ad:65:b0:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Jun 13 17:00:59 2026 GMT Not After : Jun 14 17:00:59 2026 GMT Subject: CN=ecc72ca84e1ad2f93f5fcfa29f5b1b33acd683a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:00:f8:a9:4c:f8:57:50:d0:e9:92:f1:c2:a1: e3:77:0b:4c:40:49:8e:27:e5:57:fb:b1:f2:ef:31: 6c:b9:d8:b1:9e:69:98:c7:20:d0:87:00:3b:a4:88: c2:c1:4e:23:57:40:0e:53:9e:9f:cc:b5:8d:ca:8d: c9:89:a8:2f:b4:02:ec:61:6f:6b:bd:1b:48:41:f4: f0:73:33:f0:1b:3c:fb:94:ad:70:b2:70:07:a8:38: f5:c1:42:06:68:4e:70:c7:33:46:1f:27:65:a6:bf: c3:5b:93:46:9e:23:f4:12:74:32:a6:fe:7a:c1:90: 7b:64:08:c0:fc:91:85:3d:c2:a2:ef:a5:03:99:14: 3e:99:bb:e1:fd:b6:02:17:0a:dc:52:e8:02:a7:1c: e3:58:2b:ab:2f:ae:f5:15:4a:44:73:38:bb:b7:f7: 1a:42:96:1d:66:3e:d0:bc:c6:1b:a1:84:f2:b8:84: c4:9a:e8:c6:25:e5:67:9d:fc:ad:a0:5e:15:0d:20: 45:5a:a9:61:7f:b0:ad:67:ad:53:37:4d:00:0d:ba: c1:de:d2:b4:0e:2e:a5:de:31:ed:f9:f0:02:9e:3e: 28:98:fb:17:bd:c8:81:ff:d6:fc:ea:80:7d:1d:ca: 64:57:65:27:a1:af:40:c6:dd:ab:30:12:dc:16:0d: 60:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C7:2C:A8:4E:1A:D2:F9:3F:5F:CF:A2:9F:5B:1B:33:AC:D6:83:A0 X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:cb:a9:fc:64:90:b5:a8:0b:98:bb:31:2e:af:0f:f5:42:5b: 78:73:31:73:a2:dc:94:ce:e8:15:e9:62:58:b4:19:10:3d:ea: 9c:cd:1b:e4:b2:7f:91:81:86:39:2d:85:99:57:dd:50:fc:01: 5c:44:72:a9:14:73:6c:a8:f9:c7:bd:9d:fe:26:57:c3:0b:22: a0:74:17:e8:21:c2:7b:6b:97:b2:7c:c7:90:61:8b:8a:37:5d: 51:cb:f5:dc:c5:1a:42:13:25:e7:c5:13:9d:9e:2f:33:2b:15: 7c:28:6f:72:77:42:52:a1:7c:63:bb:ce:67:76:90:45:1b:38: d5:a2:b2:66:60:90:84:13:15:9e:c3:a2:ea:bf:a7:99:d4:42: b2:a7:ab:4f:ec:06:d1:16:eb:e7:c1:db:de:6c:d4:4a:c7:35: f9:1d:c3:be:a0:2e:56:e1:72:54:4c:cd:7f:a9:e8:c3:c7:0d: d4:53:36:92:5c:a1:ee:19:45:7b:0f:e1:c9:12:83:54:5d:90: 9a:9e:4e:41:21:6c:1e:40:8a:3f:7c:ee:55:59:c2:16:bc:ce: 32:53:c1:58:7a:e5:55:4e:69:ca:83:44:0d:71:14:94:bd:e8: 25:2d:0e:7f:cd:01:cf:c9:f9:ea:ba:e5:e9:d1:fd:64:bb:58: d2:5c:b7:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7B7fpcuocFiBVNNjGtZbBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwNjEzMTcwMDU5WhcNMjYwNjE0MTcwMDU5WjAzMTEwLwYDVQQD EyhlY2M3MmNhODRlMWFkMmY5M2Y1ZmNmYTI5ZjViMWIzM2FjZDY4M2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAD4qUz4V1DQ6ZLxwqHjdwtMQEmO J+VX+7Hy7zFsudixnmmYxyDQhwA7pIjCwU4jV0AOU56fzLWNyo3JiagvtALsYW9r vRtIQfTwczPwGzz7lK1wsnAHqDj1wUIGaE5wxzNGHydlpr/DW5NGniP0EnQypv56 wZB7ZAjA/JGFPcKi76UDmRQ+mbvh/bYCFwrcUugCpxzjWCurL671FUpEczi7t/ca QpYdZj7QvMYboYTyuITEmujGJeVnnfytoF4VDSBFWqlhf7CtZ61TN00ADbrB3tK0 Di6l3jHt+fACnj4omPsXvciB/9b86oB9HcpkV2Unoa9Axt2rMBLcFg1gVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzHLKhOGtL5P1/Pop9bGzOs1oOgMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsup/GSQ tagLmLsxLq8P9UJbeHMxc6LclM7oFeliWLQZED3qnM0b5LJ/kYGGOS2FmVfdUPwB XERyqRRzbKj5x72d/iZXwwsioHQX6CHCe2uXsnzHkGGLijddUcv13MUaQhMl58UT nZ4vMysVfChvcndCUqF8Y7vOZ3aQRRs41aKyZmCQhBMVnsOi6r+nmdRCsqerT+wG 0Rbr58Hb3mzUSsc1+R3DvqAuVuFyVEzNf6now8cN1FM2klyh7hlFew/hyRKDVF2Q mp5OQSFsHkCKP3zuVVnCFrzOMlPBWHrlVU5pyoNEDXEUlL3oJS0Of80Bz8n56rrl 6dH9ZLtY0ly3EA== -----END CERTIFICATE-----Generated at Sat Jun 13 22:37:32 2026 by rpki-client