$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: LnyMA9i9HGLOTSyYvQO089TMBsdLXe/Tad2cj0JDMwM= Subject key identifier: C4:AC:1C:AD:B3:4D:39:63:F0:61:B2:BD:61:D3:F1:7B:4D:B3:27:01 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 01A179283ECD7D78F58F88BA6947AB051C03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 17C9 Signing time: Mon 26 Oct 2026 17:00:42 +0000 Manifest this update: Mon 26 Oct 2026 17:00:42 +0000 Manifest next update: Tue 27 Oct 2026 17:00:42 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: h+qFlQmCar/aZD3W7SA76q9JdPCa8fryCO/HI9OVQpQ=) 4: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 5: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 6: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 7: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 8: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=) 9: OY7VggLlS6S8taEQZwxA_9MJ9Jc.roa (hash: hj2ioa7d+yEki0gbVFILdu22LUXQHhfHdLKTOV3RU+k=) 10: QK12BT5JU0njlnUjcvy2nll9ISw.roa (hash: ueRt97cwc8ElR5smVKqO5aokOBz+HYbbrwTAOsyMRGg=) 11: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 12: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 13: lTN9WM_3kAIwHlpaUspavss4Il0.roa (hash: HHix3BfeZ1Pqtr5dBucc6Su9pPLjQX4ABrsZY3uNeNA=) 14: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 15: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 16: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 17: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=) 18: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:79:28:3e:cd:7d:78:f5:8f:88:ba:69:47:ab:05:1c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Oct 26 17:00:42 2026 GMT Not After : Oct 27 17:00:42 2026 GMT Subject: CN=c4ac1cadb34d3963f061b2bd61d3f17b4db32701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:ec:a1:f1:dd:80:c1:09:14:ff:48:29:05: b3:4e:27:3c:cb:c4:a1:8c:d8:26:19:4c:97:a5:b4: 24:50:bd:3a:50:28:11:5d:80:ef:36:6b:29:e5:a5: 1d:59:07:f7:f4:20:f9:ab:4f:dd:94:80:f5:28:34: 09:59:e5:3f:b4:9a:55:55:24:a4:37:46:cb:e3:79: 7d:d0:19:49:26:0c:2d:f7:ab:12:50:ee:0c:2d:87: 5e:c1:21:9f:7d:1a:0f:62:c0:d5:37:63:8d:6e:67: f5:eb:5d:65:18:da:56:a2:81:9f:a3:f4:9a:58:ad: 15:7e:b5:5b:db:71:7f:4a:7b:3d:8d:20:c8:3c:19: c7:dc:1f:ad:7f:87:4e:10:ce:51:3e:5f:5b:26:73: 8b:09:30:0c:9c:29:e0:47:f2:a2:8e:fa:f6:8a:81: fc:3e:a5:a7:3d:2d:fa:cf:ca:89:47:73:76:c1:85: 2c:51:f2:b3:f8:a1:b3:54:b7:86:a5:6d:d1:c8:1a: d2:6b:59:46:de:3a:bc:f7:c0:87:2a:e9:ff:f2:29: 1c:15:ac:77:98:96:d9:0f:1e:fb:7f:c6:fb:bb:91: 4f:79:11:d0:7c:f1:5c:bd:a6:cb:ba:66:65:c7:be: 16:e3:d4:11:87:47:0d:34:28:a6:0d:69:1a:2d:18: ff:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AC:1C:AD:B3:4D:39:63:F0:61:B2:BD:61:D3:F1:7B:4D:B3:27:01 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:06:73:91:98:68:5b:97:ff:be:85:7d:ed:ed:f7:3d:a7:ae: 99:22:b3:23:88:e3:ea:f7:f5:ad:1b:4d:10:8a:da:80:2a:29: 97:3a:39:8c:a2:5d:de:bc:88:4c:1b:04:26:3d:11:81:e3:7c: a9:98:9f:01:6f:d6:46:86:8f:37:cb:fd:03:d3:12:2a:27:18: 4e:78:f7:22:c4:57:e6:21:56:a3:74:ea:a6:24:72:e6:9c:63: e5:c2:8d:02:7f:0c:4c:46:18:df:80:1b:93:dc:fd:cc:19:ee: 93:74:e5:ec:a4:50:c0:d1:b2:30:49:45:73:65:01:eb:cb:12: 62:0c:b1:a7:1b:55:2b:53:11:f1:44:c7:80:64:77:50:6e:9d: ee:90:db:64:f8:79:70:21:15:d5:80:d7:af:3e:e2:9d:4b:66: 5c:9c:26:df:3e:cf:a1:6d:cb:7f:b9:91:ba:ab:03:d1:f0:d9: 53:62:26:cc:f0:f7:7f:32:05:fd:a8:8a:25:74:86:04:60:8e: 67:62:da:39:75:8c:8a:b5:8d:3c:69:10:2f:27:81:71:88:3d: a4:3c:c6:36:12:e4:d5:e9:d8:32:e6:29:97:9e:85:92:ce:1b: a8:be:9b:23:42:26:13:90:d6:3d:bc:1c:3c:42:32:ba:dd:82: b1:2d:79:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF5KD7NfXj1j4i6aUerBRwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYxMDI2MTcwMDQyWhcNMjYxMDI3MTcwMDQyWjAzMTEwLwYDVQQD EyhjNGFjMWNhZGIzNGQzOTYzZjA2MWIyYmQ2MWQzZjE3YjRkYjMyNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcnsofHdgMEJFP9IKQWzTic8y8Sh jNgmGUyXpbQkUL06UCgRXYDvNmsp5aUdWQf39CD5q0/dlID1KDQJWeU/tJpVVSSk N0bL43l90BlJJgwt96sSUO4MLYdewSGffRoPYsDVN2ONbmf1611lGNpWooGfo/Sa WK0VfrVb23F/Sns9jSDIPBnH3B+tf4dOEM5RPl9bJnOLCTAMnCngR/Kijvr2ioH8 PqWnPS36z8qJR3N2wYUsUfKz+KGzVLeGpW3RyBrSa1lG3jq898CHKun/8ikcFax3 mJbZDx77f8b7u5FPeRHQfPFcvabLumZlx74W49QRh0cNNCimDWkaLRj/TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSsHK2zTTlj8GGyvWHT8XtNsycBMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQZzkZho W5f/voV97e33PaeumSKzI4jj6vf1rRtNEIragCoplzo5jKJd3ryITBsEJj0RgeN8 qZifAW/WRoaPN8v9A9MSKicYTnj3IsRX5iFWo3TqpiRy5pxj5cKNAn8MTEYY34Ab k9z9zBnuk3Tl7KRQwNGyMElFc2UB68sSYgyxpxtVK1MR8UTHgGR3UG6d7pDbZPh5 cCEV1YDXrz7inUtmXJwm3z7PoW3Lf7mRuqsD0fDZU2ImzPD3fzIF/aiKJXSGBGCO Z2LaOXWMirWNPGkQLyeBcYg9pDzGNhLk1enYMuYpl56Fks4bqL6bI0ImE5DWPbwc PEIyut2CsS152g== -----END CERTIFICATE-----Generated at Mon Oct 26 20:58:17 2026 by rpki-client