$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: Vn4xYj0YjDPVW6xdtZHInfHnm+9Mx8sSnOAuE6FUbQw= Subject key identifier: FB:D9:61:19:6B:08:9F:CC:9A:DD:F9:D4:AA:74:0F:D9:A6:24:19:B1 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019FA1BBBDF3FDFAF5E3A479C83302575A55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 16D4 Signing time: Mon 27 Jul 2026 04:01:03 +0000 Manifest this update: Mon 27 Jul 2026 04:01:03 +0000 Manifest next update: Tue 28 Jul 2026 04:01:03 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 92brh40WW-h_KiNRuqIZRb5unjw.roa (hash: IJpD/Hxzhb2xZ5MqLyCbtsawZPipjgj8kAZiuASmDs4=) 4: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: tWMk/VN/3fLKf4PVx6WVG1WIrueEJKrXu+xmCP3RZ/I=) 5: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 6: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 7: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 8: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 9: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=) 10: OY7VggLlS6S8taEQZwxA_9MJ9Jc.roa (hash: hj2ioa7d+yEki0gbVFILdu22LUXQHhfHdLKTOV3RU+k=) 11: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 12: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 13: lTN9WM_3kAIwHlpaUspavss4Il0.roa (hash: HHix3BfeZ1Pqtr5dBucc6Su9pPLjQX4ABrsZY3uNeNA=) 14: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 15: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 16: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 17: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=) 18: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:bb:bd:f3:fd:fa:f5:e3:a4:79:c8:33:02:57:5a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jul 27 04:01:03 2026 GMT Not After : Jul 28 04:01:03 2026 GMT Subject: CN=fbd961196b089fcc9addf9d4aa740fd9a62419b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:b8:73:dc:13:5e:5c:dd:af:ad:96:a4:e4: 10:69:40:e2:50:19:56:5d:ae:0b:94:71:c4:fa:c9: a2:57:e8:4e:ef:90:cb:81:5a:26:26:52:db:14:54: d4:89:a3:de:9d:eb:95:de:ab:6f:b9:62:0b:d2:2f: 5b:21:58:08:78:4a:18:6e:c5:9e:8c:18:f6:f8:83: 53:8c:1d:21:4e:74:8b:af:81:c5:c7:d8:9c:5b:89: 3b:08:8a:26:ec:72:38:e5:1f:1d:8f:81:02:d4:fb: 30:ad:f5:38:99:c4:52:a4:4e:dc:ca:cf:1c:4d:48: bb:54:14:80:bf:e5:c5:47:46:b5:0a:b7:70:2d:ac: 49:e9:a1:07:61:94:8a:83:7a:ae:11:04:ad:f8:84: dc:36:5a:a3:e9:48:d6:c5:ba:1a:d8:06:5a:38:38: a0:71:96:76:71:e5:e0:a4:89:12:80:08:f3:70:58: 0c:a8:fb:5a:60:2d:c5:81:ef:16:d0:2a:b9:cc:c1: 48:3d:f1:6b:f2:71:56:db:21:4d:28:21:f1:b1:f5: 8c:cd:a5:33:d8:b0:42:d2:34:37:59:40:6c:4a:b5: dd:5a:d0:e2:1e:36:78:d5:38:f9:47:4f:ef:76:20: 1b:b7:95:8b:63:6d:de:fe:b8:08:9d:63:8f:c2:9b: f6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D9:61:19:6B:08:9F:CC:9A:DD:F9:D4:AA:74:0F:D9:A6:24:19:B1 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5e:9d:f6:70:39:63:13:1c:60:23:f2:6e:47:b1:29:52:35: 3d:99:df:70:87:04:5a:9c:3f:30:f3:f6:70:84:4d:65:cf:47: fd:fc:a3:79:32:42:e9:71:b4:8d:a7:1d:3c:39:8e:41:d4:f1: 9a:33:e5:db:c9:08:40:b0:2c:47:d8:d1:c0:0a:b6:52:49:1c: 59:08:c1:c6:c8:08:15:32:29:62:6d:8b:d8:6c:c3:bf:7c:c2: 37:50:28:cd:6d:71:1b:e9:83:ce:97:51:05:63:a2:9a:da:b0: 43:91:16:80:da:ad:c8:5b:42:ef:31:11:99:39:fa:0e:14:6f: 44:51:00:0b:b6:36:68:78:77:2e:23:c4:f9:a8:63:b2:94:c7: 64:5a:4b:9e:c3:7e:93:12:9d:d0:c9:7b:44:bb:68:d1:8d:36: 1d:87:83:3f:b5:7b:14:57:8b:dd:6c:59:49:b4:89:89:91:54: d3:d4:2a:6f:5c:ac:50:15:c8:7f:29:16:b3:21:c3:f4:64:8f: e4:ac:b3:f8:1f:e2:f9:bb:80:23:9a:a4:db:cb:c8:c4:db:c2: 57:49:59:ba:90:23:ce:b9:e9:b6:bf:23:d1:df:ec:38:d0:b5: fb:15:2d:c8:70:33:1c:c3:50:94:00:8b:1a:ee:c5:73:45:66: da:86:5f:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hu73z/fr146R5yDMCV1pVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwNzI3MDQwMTAzWhcNMjYwNzI4MDQwMTAzWjAzMTEwLwYDVQQD EyhmYmQ5NjExOTZiMDg5ZmNjOWFkZGY5ZDRhYTc0MGZkOWE2MjQxOWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArli4c9wTXlzdr62WpOQQaUDiUBlW Xa4LlHHE+smiV+hO75DLgVomJlLbFFTUiaPeneuV3qtvuWIL0i9bIVgIeEoYbsWe jBj2+INTjB0hTnSLr4HFx9icW4k7CIom7HI45R8dj4EC1PswrfU4mcRSpE7cys8c TUi7VBSAv+XFR0a1CrdwLaxJ6aEHYZSKg3quEQSt+ITcNlqj6UjWxboa2AZaODig cZZ2ceXgpIkSgAjzcFgMqPtaYC3Fge8W0Cq5zMFIPfFr8nFW2yFNKCHxsfWMzaUz 2LBC0jQ3WUBsSrXdWtDiHjZ41Tj5R0/vdiAbt5WLY23e/rgInWOPwpv2NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvZYRlrCJ/Mmt351Kp0D9mmJBmxMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfl6d9nA5 YxMcYCPybkexKVI1PZnfcIcEWpw/MPP2cIRNZc9H/fyjeTJC6XG0jacdPDmOQdTx mjPl28kIQLAsR9jRwAq2UkkcWQjBxsgIFTIpYm2L2GzDv3zCN1AozW1xG+mDzpdR BWOimtqwQ5EWgNqtyFtC7zERmTn6DhRvRFEAC7Y2aHh3LiPE+ahjspTHZFpLnsN+ kxKd0Ml7RLto0Y02HYeDP7V7FFeL3WxZSbSJiZFU09Qqb1ysUBXIfykWsyHD9GSP 5Kyz+B/i+buAI5qk28vIxNvCV0lZupAjzrnptr8j0d/sONC1+xUtyHAzHMNQlACL Gu7Fc0Vm2oZfSA== -----END CERTIFICATE-----Generated at Mon Jul 27 06:51:19 2026 by rpki-client