$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: 0ZqY1ax8IBGlPwcna1mF6YllvovnNHdYIt8ctDVfOF4= Subject key identifier: CF:CA:62:6E:B1:C2:53:54:DD:54:6C:16:CE:A9:A0:9E:B1:60:B2:C4 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019EB620871D294284A7A8D23E6986F1E019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 165A Signing time: Thu 11 Jun 2026 10:00:45 +0000 Manifest this update: Thu 11 Jun 2026 10:00:45 +0000 Manifest next update: Fri 12 Jun 2026 10:00:45 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 92brh40WW-h_KiNRuqIZRb5unjw.roa (hash: IJpD/Hxzhb2xZ5MqLyCbtsawZPipjgj8kAZiuASmDs4=) 4: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: ry1RgXnOjbUrI1tHKBqHeOa0gk97VqSFEeZUObC5omw=) 5: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 6: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 7: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 8: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 9: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=) 10: OY7VggLlS6S8taEQZwxA_9MJ9Jc.roa (hash: hj2ioa7d+yEki0gbVFILdu22LUXQHhfHdLKTOV3RU+k=) 11: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 12: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 13: lTN9WM_3kAIwHlpaUspavss4Il0.roa (hash: HHix3BfeZ1Pqtr5dBucc6Su9pPLjQX4ABrsZY3uNeNA=) 14: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 15: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 16: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 17: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=) 18: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b6:20:87:1d:29:42:84:a7:a8:d2:3e:69:86:f1:e0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jun 11 10:00:45 2026 GMT Not After : Jun 12 10:00:45 2026 GMT Subject: CN=cfca626eb1c25354dd546c16cea9a09eb160b2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:f1:65:21:55:aa:c7:84:bb:0c:48:6c:77: 46:9c:f4:3a:6a:d2:35:4e:9a:ef:17:0b:32:62:4e: 19:0c:9e:0c:ba:cf:25:1b:b9:e2:2e:80:8a:a7:41: 16:31:e6:f5:7f:a8:4d:8d:a0:1b:f7:40:42:e2:c1: 63:b9:47:be:0e:13:a1:e1:b1:4a:10:fd:8b:18:bf: f6:5c:90:f8:c5:c0:4d:48:f3:15:f0:6c:40:37:28: d2:0e:fd:8c:88:dd:3a:f6:e9:9b:4b:2b:fb:19:2c: 43:51:cc:69:28:01:de:55:de:ee:56:0d:20:7a:a9: af:2d:7a:04:c6:31:cb:6f:5e:e0:be:e4:59:78:9e: 83:db:13:58:7a:e7:09:b0:ec:77:1b:c4:6e:6e:4c: 6a:08:86:c5:c8:1a:0c:bd:a8:25:13:04:72:a6:14: a4:e5:bf:8c:4a:e4:d8:8a:f7:6b:1d:59:d1:0d:fe: ca:d0:ee:b2:89:48:19:85:2a:a2:40:43:21:9d:a2: fa:e3:7f:b3:44:60:31:6e:b1:89:57:40:c0:7f:b2: 5e:ce:5d:a9:4b:1e:9f:b1:aa:9f:95:d2:87:ba:b8: 3c:2a:58:71:dc:8a:bf:7f:a9:07:ab:8e:20:6d:35: bd:d5:be:9f:cf:76:7e:10:3c:c6:3b:a7:67:84:7a: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CA:62:6E:B1:C2:53:54:DD:54:6C:16:CE:A9:A0:9E:B1:60:B2:C4 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7c:09:57:7e:cd:56:4b:1d:d1:b4:43:3b:61:9d:9a:51:87: 95:b7:d1:4e:de:db:c8:5d:66:3b:63:c0:3a:e0:ff:d8:c3:4e: e6:28:ff:c9:1c:a1:a0:25:4c:92:46:e1:da:fc:2a:46:a8:bb: ad:07:1f:19:8d:c3:19:b0:6a:97:20:b1:c9:d6:f1:7c:a9:2b: 17:ae:ef:04:bd:70:38:4b:fa:28:c3:89:63:06:34:97:d2:d9: d5:e5:c7:2c:58:3f:2d:7c:44:37:97:b9:01:f2:69:f4:80:59: 03:13:97:f7:3c:db:38:ba:72:af:70:ab:0f:fa:cf:d4:2e:ea: d4:37:32:6a:8b:9f:6d:bc:bc:01:c5:cb:d4:c6:30:35:5e:ac: fa:c5:49:b5:6d:b2:ec:93:5e:15:02:4a:5b:8b:56:c1:fb:d8: 5f:e7:6e:41:d6:49:3b:03:6a:0a:83:bd:be:26:d3:99:73:59: 48:d1:f9:5e:92:fb:2a:b1:99:8a:a5:11:55:6d:61:cc:df:4d: fe:da:57:0e:25:ac:4c:e7:86:28:0b:b9:f5:5b:dc:65:c5:df: 71:c5:82:b8:03:c9:83:c5:ea:77:32:e5:23:12:ef:ef:7a:db: 84:16:aa:e9:52:fc:1f:9b:48:48:16:5d:b8:29:8d:95:9c:3c: d7:20:47:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ62IIcdKUKEp6jSPmmG8eAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwNjExMTAwMDQ1WhcNMjYwNjEyMTAwMDQ1WjAzMTEwLwYDVQQD EyhjZmNhNjI2ZWIxYzI1MzU0ZGQ1NDZjMTZjZWE5YTA5ZWIxNjBiMmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7LxZSFVqseEuwxIbHdGnPQ6atI1 TprvFwsyYk4ZDJ4Mus8lG7niLoCKp0EWMeb1f6hNjaAb90BC4sFjuUe+DhOh4bFK EP2LGL/2XJD4xcBNSPMV8GxANyjSDv2MiN069umbSyv7GSxDUcxpKAHeVd7uVg0g eqmvLXoExjHLb17gvuRZeJ6D2xNYeucJsOx3G8RubkxqCIbFyBoMvaglEwRyphSk 5b+MSuTYivdrHVnRDf7K0O6yiUgZhSqiQEMhnaL643+zRGAxbrGJV0DAf7Jezl2p Sx6fsaqfldKHurg8Klhx3Iq/f6kHq44gbTW91b6fz3Z+EDzGO6dnhHrV8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/KYm6xwlNU3VRsFs6poJ6xYLLEMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHwJV37N Vksd0bRDO2GdmlGHlbfRTt7byF1mO2PAOuD/2MNO5ij/yRyhoCVMkkbh2vwqRqi7 rQcfGY3DGbBqlyCxydbxfKkrF67vBL1wOEv6KMOJYwY0l9LZ1eXHLFg/LXxEN5e5 AfJp9IBZAxOX9zzbOLpyr3CrD/rP1C7q1Dcyaoufbby8AcXL1MYwNV6s+sVJtW2y 7JNeFQJKW4tWwfvYX+duQdZJOwNqCoO9vibTmXNZSNH5XpL7KrGZiqURVW1hzN9N /tpXDiWsTOeGKAu59VvcZcXfccWCuAPJg8XqdzLlIxLv73rbhBaq6VL8H5tISBZd uCmNlZw81yBHtQ== -----END CERTIFICATE-----Generated at Thu Jun 11 20:50:27 2026 by rpki-client