$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: qMSebJozI0rBdo387HY4HVai+FF9S+qFARA7T8096zo= Subject key identifier: DE:84:4C:F8:34:24:2C:69:19:54:AE:CD:AA:4D:03:5A:A6:93:3E:2F Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019CE47F287EE1D0A1CBB0F1EC87ACAA6552 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 1564 Signing time: Fri 13 Mar 2026 00:01:04 +0000 Manifest this update: Fri 13 Mar 2026 00:01:04 +0000 Manifest next update: Sat 14 Mar 2026 00:01:04 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: PkImEQuIVlGQ9+VjNtf39swrq7wNluboRjnKiLX5TMA=) 4: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 5: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 6: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 7: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 8: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=) 9: PltyVjQAqljKh-lpYhHsZNR11q4.roa (hash: M3aePkMYEmgu13dRPatY8KDTkwjaxhLnORYN2cJl+Pk=) 10: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 11: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 12: hkTeBzR1zcpqpx-K2o2CKT69syE.roa (hash: 2ch6dbKSCdDQEw4rDKS8nHOAKxa/9jjwxReZLqw+2wk=) 13: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 14: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 15: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 16: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=) 17: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e4:7f:28:7e:e1:d0:a1:cb:b0:f1:ec:87:ac:aa:65:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Mar 13 00:01:04 2026 GMT Not After : Mar 14 00:01:04 2026 GMT Subject: CN=de844cf834242c691954aecdaa4d035aa6933e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:8c:c4:84:7a:a9:0d:53:f0:ad:ad:65:e9: 37:b2:fe:84:97:b5:c8:00:c8:47:73:36:8d:fc:65: 46:81:73:c2:ee:aa:0d:41:9a:dc:b4:13:c2:58:f6: 1a:51:68:fc:3c:62:d2:23:3e:dd:43:bb:de:f9:20: 2c:3c:83:d7:ec:1d:07:4b:df:bd:67:53:53:88:20: 0e:fd:e3:9d:8d:8c:49:22:1c:ba:61:8e:c1:11:00: 88:b5:eb:4a:a0:4d:33:54:c9:6a:de:6c:c7:b6:b1: 6f:fb:c9:ee:47:39:f4:0c:3c:d8:31:e9:44:a2:00: 38:89:85:7e:09:4c:08:f5:e9:a9:10:6b:27:55:95: 26:e2:1c:ac:84:25:2f:73:58:1d:e7:3a:62:30:da: 8b:66:9b:c8:89:55:ee:3b:5f:4a:7f:4c:cc:44:73: 4d:e1:c9:cc:7d:d1:a9:b8:95:6c:77:47:45:76:4c: ac:07:36:f5:fd:80:a6:c5:1a:08:89:3c:c5:79:72: f6:a2:fa:c0:62:84:82:6e:70:56:2a:88:91:99:1a: c9:42:60:0c:fe:a4:6c:b6:2e:ef:fa:c4:f0:58:8b: 39:80:a9:81:1c:1e:57:66:f5:58:e4:3c:bd:88:36: f7:87:61:61:d7:64:e7:6e:b7:c2:95:b5:ed:06:2f: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:84:4C:F8:34:24:2C:69:19:54:AE:CD:AA:4D:03:5A:A6:93:3E:2F X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f0:c6:67:08:e5:b9:9c:ac:2e:33:ba:97:81:9c:df:57:6c: 8a:63:e3:1f:f4:4b:95:07:50:e1:00:06:be:4c:f0:84:49:c2: 19:dc:ed:45:47:da:4e:3e:31:ed:cd:30:39:b5:bb:fb:e2:6b: 30:96:13:16:e1:f8:0e:aa:1d:8c:e8:98:d5:c6:93:f6:1d:fe: 4c:e1:b9:e8:e1:5f:e3:23:ab:e7:e9:14:e5:c0:2c:ea:73:42: b5:91:9b:85:31:55:9a:d3:34:11:0c:07:87:df:74:aa:2f:d6: 1b:e1:80:98:f3:5f:d6:7f:df:fd:b2:c4:47:d8:95:3e:50:9b: b5:95:30:10:f4:3d:ef:7f:54:14:ff:2b:87:c4:e3:c9:af:98: b5:a5:98:c9:58:1a:cf:60:76:72:8b:9b:9b:f8:16:51:c0:d1: dd:8e:53:c8:51:23:1b:ab:67:95:2b:8e:28:81:db:dc:f2:8e: 8d:e3:c3:23:4d:6b:7e:73:d1:f7:e8:c0:9a:88:4e:b1:e9:61: 63:0b:e6:2e:7c:41:df:94:2c:af:52:29:5f:ed:9b:d0:c0:f7: e1:5a:5e:e8:c2:d2:5f:21:09:97:17:00:01:82:d0:a3:7d:bb: 5b:6a:ec:29:b5:e0:42:6a:f1:be:73:0a:31:1d:a1:2a:6b:7f: 1e:f0:6a:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzkfyh+4dChy7Dx7IesqmVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwMzEzMDAwMTA0WhcNMjYwMzE0MDAwMTA0WjAzMTEwLwYDVQQD EyhkZTg0NGNmODM0MjQyYzY5MTk1NGFlY2RhYTRkMDM1YWE2OTMzZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth+MxIR6qQ1T8K2tZek3sv6El7XI AMhHczaN/GVGgXPC7qoNQZrctBPCWPYaUWj8PGLSIz7dQ7ve+SAsPIPX7B0HS9+9 Z1NTiCAO/eOdjYxJIhy6YY7BEQCItetKoE0zVMlq3mzHtrFv+8nuRzn0DDzYMelE ogA4iYV+CUwI9empEGsnVZUm4hyshCUvc1gd5zpiMNqLZpvIiVXuO19Kf0zMRHNN 4cnMfdGpuJVsd0dFdkysBzb1/YCmxRoIiTzFeXL2ovrAYoSCbnBWKoiRmRrJQmAM /qRsti7v+sTwWIs5gKmBHB5XZvVY5Dy9iDb3h2Fh12TnbrfClbXtBi8crwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6ETPg0JCxpGVSuzapNA1qmkz4vMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfDGZwjl uZysLjO6l4Gc31dsimPjH/RLlQdQ4QAGvkzwhEnCGdztRUfaTj4x7c0wObW7++Jr MJYTFuH4DqodjOiY1caT9h3+TOG56OFf4yOr5+kU5cAs6nNCtZGbhTFVmtM0EQwH h990qi/WG+GAmPNf1n/f/bLER9iVPlCbtZUwEPQ9739UFP8rh8Tjya+YtaWYyVga z2B2coubm/gWUcDR3Y5TyFEjG6tnlSuOKIHb3PKOjePDI01rfnPR9+jAmohOselh YwvmLnxB35Qsr1IpX+2b0MD34Vpe6MLSXyEJlxcAAYLQo327W2rsKbXgQmrxvnMK MR2hKmt/HvBqiA== -----END CERTIFICATE-----Generated at Fri Mar 13 09:27:17 2026 by rpki-client