$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: mtbdbhXm4OGk+h6F1e6MpIKx1m7wIf9O4M1hIvCSoWM= Subject key identifier: 3C:6B:E0:40:98:65:D6:9A:7C:D6:C8:CB:62:70:53:0D:BA:6F:6C:37 Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 01A11B63D6EFA6FF6725C080B657A0BCBB3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 13D6 Signing time: Thu 08 Oct 2026 12:01:30 +0000 Manifest this update: Thu 08 Oct 2026 12:01:30 +0000 Manifest next update: Fri 09 Oct 2026 12:01:30 +0000 Files and hashes: 1: 0WDxpvd7L6wt7MC6nIzI1pbLxnw.roa (hash: Qj0rLUwIGzXPRYM32sEPLv0WM78LN5ADM0vdNX23xQg=) 2: 1-lrmwrPwRE6tQz1yYRV3ilGz3YI.roa (hash: M+Pkm6+tYT7fplXRGzFnZV4KOURbi0onEdoE/weioGw=) 3: 1-un7aIZPiVQxwfImYtQvepCTIFg.roa (hash: 3q65idVYDT3wcXv8zcKMK2JXkCRnt8H/jRRErWjCr5Y=) 4: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (hash: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=) 5: 76IeoxaQyMm8f4zws9vUUi0CRfc.roa (hash: faPjV8CRMYBsm6MIPxErfFQgbInEdJqVfmJkOLy6PwU=) 6: FrvY4JP2iLacq07f2hX8CLMlfjU.roa (hash: MpiHVdBjryp6MtfrC56keye70ElW/CTBHKK+RhPw8aw=) 7: GiIfdM2XaqqMUMcsI6ESoE4Ptfo.roa (hash: rIKQsVG7m+JuvqlnALYeAAG05bQliIjM+scjwsiHm7M=) 8: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=) 9: PP71s4oA0Pqlb0hxrkFxP4F71FI.roa (hash: Gwz4XfEbTmJrMswxNq9bB/hGvbvOMm1RzpVvdkkptJY=) 10: cMrqxi7UhqJ5QuE5tZumhqK643g.roa (hash: +xNdyx2CSjJfgYsm0wAEMOtt2+/9AZWDUUvwFfGvOXA=) 11: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=) 12: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=) 13: nPN1026MFxn1aBHjNnL1ChSjJ7g.roa (hash: 0wKSqZP3wergAVCbgAzLhQpVpALUtP80ss2GImwHhRo=) 14: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: M+XKEwK/nOaXTshUixrf7qX7pKO3KQ8UAyNbbaYr/So=) 15: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=) 16: vE4T42jxBwechSkNUDTx4xLmF40.roa (hash: VE9Sy1DUDJVvTDYTHPoZIz2Wwsir9Oz1cubyyrGnvlM=) 17: xIM6Ul5OJM3vvLeemfqH5E2uQBw.roa (hash: h95Aj53g6j0rjuQLBWEoc0TgSlS8Nlq+/6uHRGvu+PM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 07:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:1b:63:d6:ef:a6:ff:67:25:c0:80:b6:57:a0:bc:bb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Oct 8 12:01:30 2026 GMT Not After : Oct 9 12:01:30 2026 GMT Subject: CN=3c6be0409865d69a7cd6c8cb6270530dba6f6c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:16:0a:0a:1d:73:c5:09:e4:19:c2:4a:11:4c: a3:5d:d7:cc:31:d1:50:19:fe:60:68:a8:8c:1d:2f: 3c:78:b5:ed:eb:9d:c6:d4:59:8f:23:3b:62:89:32: 48:2f:00:78:76:b8:15:49:92:79:ef:8e:fa:b0:2e: 05:2c:70:b2:9f:10:9a:a1:78:81:1c:44:6e:e2:b4: d4:d7:42:cc:55:c4:6c:2c:20:f7:5c:7b:dd:c0:ec: 51:65:e8:3e:fa:01:11:52:50:af:e8:b0:a0:3f:e4: 31:2a:e6:55:92:c8:4c:da:4c:b5:35:eb:3e:66:e2: 4d:99:c9:cc:60:f7:34:ef:3f:07:33:fa:8c:b4:e4: 85:e3:d7:51:96:30:a2:c2:c6:1c:05:84:21:da:7a: 81:92:bb:cf:79:ac:bf:8f:28:5b:c5:7f:ec:c2:50: 9e:6a:8b:82:50:ff:79:19:ed:ae:6c:a5:51:8e:b5: 32:b4:31:a5:93:19:b7:0f:65:6c:f5:9d:cd:0b:f6: 9d:2b:35:eb:17:e4:3d:53:9a:23:8a:c5:ef:4d:8b: cd:3d:75:ef:d1:f0:9f:45:05:c4:07:78:d2:0c:67: 2f:aa:86:b7:67:3f:c0:9f:2e:ed:3e:46:51:12:fe: bf:e4:fe:3f:ec:2f:40:45:f0:d4:bd:e4:ef:94:f8: 1d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6B:E0:40:98:65:D6:9A:7C:D6:C8:CB:62:70:53:0D:BA:6F:6C:37 X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f2:a0:c9:01:af:b7:c8:51:94:56:fd:00:4a:0c:ad:c9:31: 34:d5:d1:20:2a:65:ab:5c:d0:7b:a5:76:e0:d6:e3:92:02:77: 61:e0:99:e1:3d:7a:4b:36:b0:af:c4:70:e8:5a:29:c8:6d:bf: 7c:1e:79:09:47:64:28:25:05:bf:fa:55:8e:50:58:2c:38:e6: a4:56:d3:0d:52:f1:8a:74:aa:19:3d:33:b5:7a:20:d9:8b:b6: 16:78:6d:60:a0:b3:ac:c0:5e:46:ed:94:f7:b6:77:ec:80:33: 74:7e:31:96:59:2d:16:c7:c2:3f:71:27:6e:b0:2a:4b:68:22: 73:4f:a3:81:73:43:97:3d:89:a6:dd:12:f1:57:96:03:cd:20: 1f:2f:a4:dd:fa:4c:e9:8e:2c:de:0e:38:7f:1c:f9:5f:1b:9f: 61:f4:63:70:1a:8f:aa:83:44:b2:ff:3e:f8:1d:85:1d:65:af: fc:a0:23:d8:7f:21:76:61:a2:30:00:60:5b:75:11:56:1a:f0: 00:0c:4b:34:31:4c:1e:2b:5b:2d:db:54:7f:c2:11:2d:e2:b4: d1:d4:48:11:ba:ac:d4:02:24:22:99:3f:d4:99:08:4f:00:f6: cf:7d:f5:7c:92:ee:cf:a8:aa:dc:7c:b5:e9:2e:f1:33:a6:39: 5f:be:9b:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEbY9bvpv9nJcCAtlegvLs+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYxMDA4MTIwMTMwWhcNMjYxMDA5MTIwMTMwWjAzMTEwLwYDVQQD EygzYzZiZTA0MDk4NjVkNjlhN2NkNmM4Y2I2MjcwNTMwZGJhNmY2YzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hYKCh1zxQnkGcJKEUyjXdfMMdFQ Gf5gaKiMHS88eLXt653G1FmPIztiiTJILwB4drgVSZJ57476sC4FLHCynxCaoXiB HERu4rTU10LMVcRsLCD3XHvdwOxRZeg++gERUlCv6LCgP+QxKuZVkshM2ky1Nes+ ZuJNmcnMYPc07z8HM/qMtOSF49dRljCiwsYcBYQh2nqBkrvPeay/jyhbxX/swlCe aouCUP95Ge2ubKVRjrUytDGlkxm3D2Vs9Z3NC/adKzXrF+Q9U5ojisXvTYvNPXXv 0fCfRQXEB3jSDGcvqoa3Zz/Any7tPkZREv6/5P4/7C9ARfDUveTvlPgdCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxr4ECYZdaafNbIy2JwUw26b2w3MB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvKgyQGv t8hRlFb9AEoMrckxNNXRICplq1zQe6V24NbjkgJ3YeCZ4T16Szawr8Rw6FopyG2/ fB55CUdkKCUFv/pVjlBYLDjmpFbTDVLxinSqGT0ztXog2Yu2FnhtYKCzrMBeRu2U 97Z37IAzdH4xllktFsfCP3EnbrAqS2gic0+jgXNDlz2Jpt0S8VeWA80gHy+k3fpM 6Y4s3g44fxz5XxufYfRjcBqPqoNEsv8++B2FHWWv/KAj2H8hdmGiMABgW3URVhrw AAxLNDFMHitbLdtUf8IRLeK00dRIEbqs1AIkIpk/1JkITwD2z331fJLuz6iq3Hy1 6S7xM6Y5X76bTA== -----END CERTIFICATE-----Generated at Thu Oct 8 16:30:23 2026 by rpki-client