$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: Qo3AfjXM7NyMaECWlPWGAodr3apyGCQ4zx4XciaT0xs= Subject key identifier: 61:B6:84:AC:1D:DC:8F:1A:00:97:9E:4D:1A:5A:C7:FC:CE:DA:6B:47 Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019EBE10F628A36813F607263D871225FC60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 128D Signing time: Fri 12 Jun 2026 23:00:43 +0000 Manifest this update: Fri 12 Jun 2026 23:00:43 +0000 Manifest next update: Sat 13 Jun 2026 23:00:43 +0000 Files and hashes: 1: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (hash: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=) 2: DV4o-pa7bE1DVk5ZDUDqLE1xNuM.roa (hash: vxXhUN5PVtjIWV2GInuWXJw6qiMrF0Y1ZWYFmp+Mi9c=) 3: FJcsmaUQsD13YXXoyE7RkZKR-ng.roa (hash: u6HoYzjVqNqn2YWEImLaDRf/C6bprfKvf9KjlvjxNLc=) 4: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=) 5: TIdfXJOxAhHLcLFODv0ToSZIZhw.roa (hash: nM/GDFbtviUzKwacCNxiqdK6zqFcWb0+5zH7VN6m7lY=) 6: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=) 7: jqbFij7pY9jR5_tvg6aGlSqXWvY.roa (hash: 9lSkTQcSfW9ZV/1oCol4mnY2Fh21FXn6q4rov7K8Pww=) 8: kZAgbSjcA3AUI27WYX_SLodgwxM.roa (hash: a+GdP0YC4+kyyPVC2mzxcdiH+fxAgf7/mlxAOoguZs4=) 9: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=) 10: nPN1026MFxn1aBHjNnL1ChSjJ7g.roa (hash: 0wKSqZP3wergAVCbgAzLhQpVpALUtP80ss2GImwHhRo=) 11: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: d2EM4+zDKM1LOlhj533tZOiUEmeJjPkZXxhJL2LFi2k=) 12: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=) 13: tkJi06CdYjIn25noZIzPiK0yCl0.roa (hash: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:10:f6:28:a3:68:13:f6:07:26:3d:87:12:25:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Jun 12 23:00:43 2026 GMT Not After : Jun 13 23:00:43 2026 GMT Subject: CN=61b684ac1ddc8f1a00979e4d1a5ac7fcceda6b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:aa:a8:c3:29:97:6e:bb:4a:5a:45:cc:90: 2d:80:11:2b:e6:4d:74:25:59:e9:9a:1d:10:6e:80: 5a:95:17:ff:17:9b:12:49:92:24:71:25:cd:fb:c8: 84:f7:52:dc:2d:b7:53:54:7c:c7:a7:2a:7f:ab:16: 20:d4:1a:5e:35:85:d7:c9:5e:e2:c0:b4:93:42:b2: 0d:2c:4f:18:00:73:24:bc:5f:cc:d1:36:f9:c4:1d: e4:1e:4a:56:4a:90:83:84:8d:b4:41:83:2f:54:64: 51:ec:b4:8b:b3:a9:0d:0d:b2:99:09:4c:4a:3e:a5: 4b:cb:3b:56:93:56:7d:91:b5:17:0c:dc:59:e3:26: 61:16:38:6c:12:e7:a3:4f:04:d6:0d:38:b0:fc:0f: b1:21:da:17:a1:8f:97:40:86:08:91:b6:20:db:e5: c8:25:70:29:04:d8:9d:25:98:1d:63:b5:5b:36:c8: 96:db:af:48:d4:3a:a5:af:a1:a2:b3:81:86:c6:65: 7a:db:1e:36:e1:44:69:e4:b4:70:7d:1d:b4:17:c7: b5:b6:d4:9e:48:cf:78:3e:69:4f:4d:51:e9:88:c2: 46:a8:97:ba:cd:78:82:cf:77:58:59:39:47:29:76: d2:c8:8c:be:6a:3e:25:42:22:e1:32:03:1e:e4:62: b5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B6:84:AC:1D:DC:8F:1A:00:97:9E:4D:1A:5A:C7:FC:CE:DA:6B:47 X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:2f:c6:de:fc:89:90:36:68:d2:af:eb:ff:06:fa:62:63:4a: c4:b6:e5:10:85:a1:cf:1b:a3:73:29:76:a2:33:4c:da:ba:2c: d7:cc:f7:57:58:cd:2c:b3:3d:ff:1c:5a:3c:10:21:f3:55:b6: 9c:a9:3a:dd:c0:ba:6f:ad:70:a8:35:80:a4:a6:fd:92:b0:b3: f5:07:3a:bc:77:f7:21:87:3f:3b:7e:e1:a2:f8:ed:5a:92:3d: 17:78:6b:56:7e:6c:a4:fc:77:a8:68:e8:b1:f1:99:93:4e:72: b0:08:e7:76:3d:9b:1c:bc:92:65:44:b0:30:51:e0:25:ca:d5: 79:9e:06:e8:23:37:6d:e1:69:c1:62:fc:1b:18:1c:98:0a:ac: 2a:11:98:f2:ad:a5:90:eb:65:70:ea:6c:0a:6d:67:b6:06:6f: 99:87:36:15:d8:cd:87:5a:05:2e:df:ed:9d:91:99:a7:b1:e4: 51:58:99:25:58:51:3c:a1:20:54:e2:9c:30:bd:83:53:2a:e5: 7f:7f:b3:b1:9f:97:e5:90:94:0c:42:e5:2e:65:f9:1b:72:e2: 0d:56:a1:03:49:15:37:bf:3b:23:5b:4c:df:bf:06:e5:89:64: 60:cf:97:83:03:7a:99:e6:06:c4:64:fc:58:78:12:56:6a:86: a9:46:93:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+EPYoo2gT9gcmPYcSJfxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwNjEyMjMwMDQzWhcNMjYwNjEzMjMwMDQzWjAzMTEwLwYDVQQD Eyg2MWI2ODRhYzFkZGM4ZjFhMDA5NzllNGQxYTVhYzdmY2NlZGE2YjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOSqqMMpl267SlpFzJAtgBEr5k10 JVnpmh0QboBalRf/F5sSSZIkcSXN+8iE91LcLbdTVHzHpyp/qxYg1BpeNYXXyV7i wLSTQrINLE8YAHMkvF/M0Tb5xB3kHkpWSpCDhI20QYMvVGRR7LSLs6kNDbKZCUxK PqVLyztWk1Z9kbUXDNxZ4yZhFjhsEuejTwTWDTiw/A+xIdoXoY+XQIYIkbYg2+XI JXApBNidJZgdY7VbNsiW269I1Dqlr6Gis4GGxmV62x424URp5LRwfR20F8e1ttSe SM94PmlPTVHpiMJGqJe6zXiCz3dYWTlHKXbSyIy+aj4lQiLhMgMe5GK1KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGG2hKwd3I8aAJeeTRpax/zO2mtHMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVS/G3vyJ kDZo0q/r/wb6YmNKxLblEIWhzxujcyl2ojNM2ros18z3V1jNLLM9/xxaPBAh81W2 nKk63cC6b61wqDWApKb9krCz9Qc6vHf3IYc/O37hovjtWpI9F3hrVn5spPx3qGjo sfGZk05ysAjndj2bHLySZUSwMFHgJcrVeZ4G6CM3beFpwWL8GxgcmAqsKhGY8q2l kOtlcOpsCm1ntgZvmYc2FdjNh1oFLt/tnZGZp7HkUViZJVhRPKEgVOKcML2DUyrl f3+zsZ+X5ZCUDELlLmX5G3LiDVahA0kVN787I1tM378G5YlkYM+XgwN6meYGxGT8 WHgSVmqGqUaTgQ== -----END CERTIFICATE-----Generated at Sat Jun 13 07:32:05 2026 by rpki-client