$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json) Hash identifier: 6fniFLlNk79RRV24M9Yrp4QokExQ0HgfR4EJQP4mUZw= Subject key identifier: E7:60:4B:D9:03:01:32:FE:65:22:36:71:5F:1A:A4:7B:A4:A6:DF:92 Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 01A0DBA932CA90FF17C0A6395F6A904D3E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft Manifest number: 0677 Signing time: Sat 26 Sep 2026 03:01:33 +0000 Manifest this update: Sat 26 Sep 2026 03:01:33 +0000 Manifest next update: Sun 27 Sep 2026 03:01:33 +0000 Files and hashes: 1: 1-lGH1nu7CvzHWYEiuO1j3MNSzJY.roa (hash: 9/b6BBId/Kn5DB9SmUCWKxBwcAQLvltddZcgBj268UQ=) 2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: R4/MJqIybAurRuRkpdyRmeZABJL77NV3Gt2HUl5F+LA=) 3: 424CCN9QyDvL6fO6bZ7Xg6Fm46s.roa (hash: SHulRC6ks6gdnmfzG9uIHolgIjLc6fN1BcexLvRfVok=) 4: 4hkkLe2dcq377WzDqzkSvMCtsco.roa (hash: z6R8cUSnmMVlMDW9YnWwZZPf73zricPf+TEJ86PN7Ko=) 5: 4vxZx7uBqQQ6FyEF2MVBFY1WSaQ.roa (hash: yT8MYmQtVQnTBHZPhbP/WPtpcUBRa3XEcKCSlPgpz98=) 6: AfpxLvj3BiyLwMcA6kKVrdFgW6Y.roa (hash: KKSEdsLLrws/RATwLIqwcq742JLEElRzqndIEau2IyI=) 7: Kj2mVBpZK5i3xSiOOVydeQMB-K4.roa (hash: 3BF9uGhA0G3sb3UpfLCU/KTehTModommlZcD+YYnZKQ=) 8: QxbU9vvhcA75ENS1lZHkpNyfErk.roa (hash: yv8oGh8GGZWvW+9jiR8h6piajHrkuA5egN2MppGfk+w=) 9: SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa (hash: kRtJ8SNMjyDbUxu98aNT/p/eOM2tAQZf30u+RPiQ1f8=) 10: TDn2Si0wredvySS4eb6YcQsXGoA.roa (hash: PViZzYWq9wpVr0Wiz/5xTXadoeHO740enY0H0kd7OSI=) 11: Vs-VbGsXqggDO3OQJAz7ljIJCBM.roa (hash: 0/YnvO1iRna/5MI8gBnTd4qBir5DLarEENTjj5s3VEU=) 12: _msrPFl7j-h-scWfwUUyG5vmI0Q.roa (hash: C0U0oHsxASzeTthWbTeZAy4SqW+0azDdamHmVesAW1U=) 13: gA8K0uCGARt0iMHybj1fl0_l9iM.roa (hash: oF5vhF0FQd0hgOhUSqj7/e1FPt2MEHPpP+wGYckBTNY=) 14: jCLt2xm1fkgnOn9HMLPQJTVuVNc.roa (hash: c9YGeeLCkAXiNDBuTkfpy8lAq+y929pm91OusU2TBc0=) 15: koXw3LvEwrzn9qCWrcZnQPR8iMs.roa (hash: gNqdDH2AralOcsOhDuMpE5EfKzaR6A0T5YWUJwlNSmY=) 16: kyRVCGVmasDx6k38w-izwTFSZVI.roa (hash: kfM4cnv70+/otrzSrUgrUJZAq/Yw97sDNJ3BUv5w7l4=) 17: l8TSNwU2prw2gsntuaJ9QdkRHKw.roa (hash: gb+3/D4Y4zC34TYQcD7+qVWbJgAtu0xBM1r/dmFP8pw=) 18: nmunvZ8NjUAQxyXLc7q3E6asADA.roa (hash: bcuDcNnBDq7F5VI75bQ3a3MYz4yXIjZXvHo8ZRs1H3g=) 19: qbUtGSmF4OJDy4q4dlRGp4OciDs.roa (hash: VVCFN7s9B67WrTXffUSFAE1mRjFGjdVcuJGLxmq/AY8=) 20: tUYOdiUxF4HxrSVOg847WMoBqws.roa (hash: N6nWp89HDr0pIhLLPi1oB+mkzKMLsBnFNGgdLRBYN30=) 21: tevOSAyMp-1DHWOc8A6PPAJZLUs.roa (hash: /4F2MJ2YCwSX6I/W4Ebbet4QyTAZ6jd4w/oq57g4Qcw=) 22: xOtKmGFOQ0Si4ry-DnEnpbMZzfw.roa (hash: uloNgiaPX4XD2hk6wXEnVMKHkzySU+UwLh3IKRIIyAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:db:a9:32:ca:90:ff:17:c0:a6:39:5f:6a:90:4d:3e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Sep 26 03:01:33 2026 GMT Not After : Sep 27 03:01:33 2026 GMT Subject: CN=e7604bd9030132fe652236715f1aa47ba4a6df92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f1:c4:29:48:b9:26:37:31:b8:e9:66:77:a3: 89:c9:2d:93:f8:ca:63:b9:63:72:74:bd:64:11:ae: ed:9b:4d:59:b0:85:52:fd:c0:d0:3b:f8:d7:ad:40: 9f:fd:61:f9:18:89:57:37:25:b4:c9:cd:64:b0:4a: f4:83:e5:18:24:4d:5d:54:67:6f:8c:22:40:1f:ee: c5:ba:4d:3d:67:1b:b0:49:dd:5d:c7:38:a7:c8:ac: c8:9a:14:2c:04:50:5c:e3:ea:46:eb:7c:3c:b9:be: bf:75:1c:49:db:09:ec:bc:4c:4e:7b:c2:e5:cb:c9: 51:51:26:0d:a5:37:61:6e:65:74:58:f4:c2:e8:52: 5d:0e:26:2f:23:1c:38:43:91:27:61:61:c1:61:44: 78:e1:3f:a4:2c:7c:56:83:47:2d:da:a3:9c:a6:1f: e4:7a:45:e1:65:c4:d3:93:44:b1:e5:0e:4a:00:21: 19:3d:6c:5a:fe:2f:e3:ea:12:05:32:0c:58:1b:2b: 79:8e:71:54:38:3d:4e:ea:c2:56:3a:12:38:ad:42: 02:1a:e2:3e:2c:e4:c9:9e:97:8b:f9:8d:1e:1f:f9: f4:6a:bc:da:ed:05:4a:48:0c:49:8e:08:ac:f8:5a: b5:1c:5b:6d:06:30:bc:f9:3a:65:be:f2:f5:37:5e: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:4B:D9:03:01:32:FE:65:22:36:71:5F:1A:A4:7B:A4:A6:DF:92 X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:fd:e0:21:69:ee:2e:48:73:71:39:fb:b4:c4:65:76:f8:e8: 29:39:d9:77:81:b2:87:cc:92:4c:3d:84:60:b8:7a:a8:17:f8: 11:45:31:94:0c:4e:65:6b:3b:18:14:c6:55:b9:ee:a1:74:3b: a0:5a:0e:e8:af:3e:aa:33:a1:c2:c6:ca:24:4a:0d:4b:6e:7e: 6b:56:72:ea:e2:e0:bb:c8:af:19:e5:72:24:db:54:4d:30:8c: 07:39:26:51:9b:05:3b:3b:6e:93:da:76:39:da:a2:4a:6a:c9: 1a:3d:c6:ea:fa:72:81:ff:ea:96:61:05:e5:6a:f3:ac:3b:48: b3:ba:dd:54:3d:62:8a:88:85:36:fa:7d:e5:71:8e:75:97:d1: 63:ac:03:20:09:55:3e:dc:03:a6:39:f2:70:7b:8f:93:2e:1a: 9a:02:4e:fc:22:f4:77:87:92:06:9b:43:24:ed:95:8b:7b:08: 38:7a:00:d6:48:8e:93:1f:48:8b:c4:ba:4b:24:cf:60:ac:80: 4f:96:28:4e:b0:96:ca:91:5b:ba:6f:82:12:b9:99:c1:4c:85: 36:a7:75:55:eb:3a:68:42:b1:1a:1e:3b:72:b0:c6:5b:80:5b: 6e:8e:a4:7e:0c:2c:c8:4f:99:e8:4b:cd:30:6a:b3:93:9d:0c: c2:87:9f:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDbqTLKkP8XwKY5X2qQTT4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYwOTI2MDMwMTMzWhcNMjYwOTI3MDMwMTMzWjAzMTEwLwYDVQQD EyhlNzYwNGJkOTAzMDEzMmZlNjUyMjM2NzE1ZjFhYTQ3YmE0YTZkZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPHEKUi5JjcxuOlmd6OJyS2T+Mpj uWNydL1kEa7tm01ZsIVS/cDQO/jXrUCf/WH5GIlXNyW0yc1ksEr0g+UYJE1dVGdv jCJAH+7Fuk09ZxuwSd1dxzinyKzImhQsBFBc4+pG63w8ub6/dRxJ2wnsvExOe8Ll y8lRUSYNpTdhbmV0WPTC6FJdDiYvIxw4Q5EnYWHBYUR44T+kLHxWg0ct2qOcph/k ekXhZcTTk0Sx5Q5KACEZPWxa/i/j6hIFMgxYGyt5jnFUOD1O6sJWOhI4rUICGuI+ LOTJnpeL+Y0eH/n0arza7QVKSAxJjgis+Fq1HFttBjC8+TplvvL1N14B1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdgS9kDATL+ZSI2cV8apHukpt+SMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdv3gIWnu LkhzcTn7tMRldvjoKTnZd4Gyh8ySTD2EYLh6qBf4EUUxlAxOZWs7GBTGVbnuoXQ7 oFoO6K8+qjOhwsbKJEoNS25+a1Zy6uLgu8ivGeVyJNtUTTCMBzkmUZsFOztuk9p2 OdqiSmrJGj3G6vpygf/qlmEF5WrzrDtIs7rdVD1iioiFNvp95XGOdZfRY6wDIAlV PtwDpjnycHuPky4amgJO/CL0d4eSBptDJO2Vi3sIOHoA1kiOkx9Ii8S6SyTPYKyA T5YoTrCWypFbum+CErmZwUyFNqd1Ves6aEKxGh47crDGW4Bbbo6kfgwsyE+Z6EvN MGqzk50Mwoefjw== -----END CERTIFICATE-----Generated at Sat Sep 26 07:47:40 2026 by rpki-client