$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: scTpunf/kYL2aS3TQWb2/wZspmRcc/zMbdc1qfKjo4g= Subject key identifier: 12:3F:6C:3E:FF:54:08:45:A2:D5:84:5D:BD:AE:C4:AF:26:99:84:4D Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019FA9AC046F07A832970AC983E8C3687BA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 130F Signing time: Tue 28 Jul 2026 17:00:50 +0000 Manifest this update: Tue 28 Jul 2026 17:00:50 +0000 Manifest next update: Wed 29 Jul 2026 17:00:50 +0000 Files and hashes: 1: 1-WMupdXluOQ7x-K_avahDFozE_A.roa (hash: Tk/f/OIyoGHt94/pLNY5O4OoQcxa7v//+2RvavWlFyI=) 2: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (hash: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=) 3: FJK3MlyjVAojwF-mVWmHdiKhNPU.roa (hash: TzYYtBzBEMH3oqJKKM05yqeDoBBlOjW5TQHdTV317bs=) 4: FJcsmaUQsD13YXXoyE7RkZKR-ng.roa (hash: u6HoYzjVqNqn2YWEImLaDRf/C6bprfKvf9KjlvjxNLc=) 5: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=) 6: WUEnbdUUqrLfYi2oKn0rFmvvVSs.roa (hash: 5sNj4jrMjIeivWLuNKloS867aHhxwwkfpzUsslqii8k=) 7: XSxSAP7DiJZa4LTWJM8KEYXPTsU.roa (hash: O0ZeRuqT3gg3YRnXifK9FeiFeCfEkxSX/9GHXAJb1XQ=) 8: ewDh-Of3DTsKrizymZCG9qxo_a4.roa (hash: wd/aFSh3or0J34PT5Apt0JYGpHBLqOUvdDS4Ikn/5+M=) 9: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=) 10: kZAgbSjcA3AUI27WYX_SLodgwxM.roa (hash: a+GdP0YC4+kyyPVC2mzxcdiH+fxAgf7/mlxAOoguZs4=) 11: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=) 12: nPN1026MFxn1aBHjNnL1ChSjJ7g.roa (hash: 0wKSqZP3wergAVCbgAzLhQpVpALUtP80ss2GImwHhRo=) 13: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: EeEz5Eq4oyaMA5y3fjAXaBc6gkNeff1Yzl8ZGnO0x98=) 14: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=) 15: tkJi06CdYjIn25noZIzPiK0yCl0.roa (hash: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE=) 16: u6qDpYGmfoGEMACkNnGAHtcqros.roa (hash: K3BjOm+GqWtXxTkJj9qyEmHvHYh3wmQ/32PWbJp61V0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ac:04:6f:07:a8:32:97:0a:c9:83:e8:c3:68:7b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Jul 28 17:00:50 2026 GMT Not After : Jul 29 17:00:50 2026 GMT Subject: CN=123f6c3eff540845a2d5845dbdaec4af2699844d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a7:76:83:7e:1c:d9:aa:bf:2f:22:22:9b:e5: cb:64:b7:a2:f3:f1:fa:b7:bb:2e:c8:fc:d8:6d:fe: ae:36:50:3f:06:2a:ad:c2:25:69:7d:e3:28:d2:3e: 4c:b8:0e:5a:c4:60:4e:a4:ce:0b:20:cc:70:e0:8b: 4e:59:c5:66:f2:9a:f7:7a:32:bf:23:cd:c5:c4:66: f4:3d:e9:8e:0b:7a:77:36:22:85:83:89:90:86:07: 06:5b:c1:e4:77:74:35:86:ce:22:ad:d7:38:ba:54: a2:b4:4e:e9:e5:1c:c5:5f:14:4f:15:0e:e1:1d:4a: 9a:34:a3:c0:8c:01:29:13:dd:9b:2f:fe:7a:85:0c: 78:f7:23:7d:62:14:71:65:83:6a:bf:78:ab:f3:9a: 25:5e:9d:79:3c:c2:c9:c7:a9:e8:b0:ce:85:a4:80: d6:a2:d2:ba:5e:18:a1:96:89:39:2e:c2:e5:0e:41: 0e:51:37:9f:63:c5:6e:5f:5d:04:3a:2b:8a:33:cd: 97:db:92:fe:97:b6:78:de:00:09:c9:90:6a:85:ca: 29:ed:8a:86:2d:f4:fa:ee:63:77:32:31:b7:40:bd: 77:96:e6:9a:2d:c9:e7:18:81:fd:0c:f2:b9:a2:f5: 80:0c:98:e0:e7:60:47:0c:72:0c:1d:37:34:8c:25: 93:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3F:6C:3E:FF:54:08:45:A2:D5:84:5D:BD:AE:C4:AF:26:99:84:4D X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e9:c9:94:9a:d0:ea:d5:82:a5:5f:f7:2a:b4:cf:1e:26:f9: 59:19:d3:51:1f:79:22:ff:1a:75:91:6e:f6:ca:0e:79:b7:88: 57:67:31:56:77:bc:67:bc:c3:69:57:d9:50:73:02:fb:1d:48: 84:6e:36:fd:36:fe:bb:41:94:e5:7a:35:49:df:3d:06:af:82: a4:21:d2:37:ea:37:c8:60:a7:b7:c9:fe:99:6d:ad:a4:a8:b5: c1:42:39:90:79:38:d8:66:b1:10:e2:58:f9:15:a2:e2:d3:a0: ad:0c:d9:f6:5c:32:98:24:ce:06:41:c9:cd:73:dd:6b:73:91: 89:ea:cf:c1:db:bb:09:d7:b1:e8:d4:3c:06:5b:55:80:d6:92: 07:37:89:ab:37:6a:aa:7e:9e:c9:2f:85:d7:02:69:d0:fc:e5: bd:c9:24:ab:7b:69:60:b7:5c:5b:57:a3:8a:a9:72:98:54:ff: 71:7c:44:98:5a:11:a5:ec:46:a4:6e:ed:40:8f:a6:de:b3:70: 3f:ba:73:c9:f8:dd:d0:80:d4:7b:04:f8:c9:52:6e:06:71:f5: b0:55:21:02:8b:aa:ab:7d:52:83:a8:f0:7d:b1:38:51:4d:80: fc:63:ff:01:d4:c7:27:17:34:51:e5:45:72:6f:59:59:70:43: 77:32:8a:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+prARvB6gylwrJg+jDaHuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwNzI4MTcwMDUwWhcNMjYwNzI5MTcwMDUwWjAzMTEwLwYDVQQD EygxMjNmNmMzZWZmNTQwODQ1YTJkNTg0NWRiZGFlYzRhZjI2OTk4NDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqd2g34c2aq/LyIim+XLZLei8/H6 t7suyPzYbf6uNlA/BiqtwiVpfeMo0j5MuA5axGBOpM4LIMxw4ItOWcVm8pr3ejK/ I83FxGb0PemOC3p3NiKFg4mQhgcGW8Hkd3Q1hs4irdc4ulSitE7p5RzFXxRPFQ7h HUqaNKPAjAEpE92bL/56hQx49yN9YhRxZYNqv3ir85olXp15PMLJx6nosM6FpIDW otK6Xhihlok5LsLlDkEOUTefY8VuX10EOiuKM82X25L+l7Z43gAJyZBqhcop7YqG LfT67mN3MjG3QL13luaaLcnnGIH9DPK5ovWADJjg52BHDHIMHTc0jCWTowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBI/bD7/VAhFotWEXb2uxK8mmYRNMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlenJlJrQ 6tWCpV/3KrTPHib5WRnTUR95Iv8adZFu9soOebeIV2cxVne8Z7zDaVfZUHMC+x1I hG42/Tb+u0GU5Xo1Sd89Bq+CpCHSN+o3yGCnt8n+mW2tpKi1wUI5kHk42GaxEOJY +RWi4tOgrQzZ9lwymCTOBkHJzXPda3ORierPwdu7Cdex6NQ8BltVgNaSBzeJqzdq qn6eyS+F1wJp0Pzlvckkq3tpYLdcW1ejiqlymFT/cXxEmFoRpexGpG7tQI+m3rNw P7pzyfjd0IDUewT4yVJuBnH1sFUhAouqq31Sg6jwfbE4UU2A/GP/AdTHJxc0UeVF cm9ZWXBDdzKK9g== -----END CERTIFICATE-----Generated at Wed Jul 29 01:17:58 2026 by rpki-client