$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: xl1OUN0R/7k0K4Mhf+JbhGMGhAxs6ejYLWSFs8H0aTQ= Subject key identifier: E2:DD:C8:90:2B:EF:7D:B3:C8:5B:6F:80:D4:FB:ED:1A:73:7F:DB:C0 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019DCE62BF9FCEB0951BEB9EEEF44D161357 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 15E2 Signing time: Mon 27 Apr 2026 10:01:11 +0000 Manifest this update: Mon 27 Apr 2026 10:01:11 +0000 Manifest next update: Tue 28 Apr 2026 10:01:11 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 92brh40WW-h_KiNRuqIZRb5unjw.roa (hash: IJpD/Hxzhb2xZ5MqLyCbtsawZPipjgj8kAZiuASmDs4=) 4: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: 2SivDSgocBXb6WcWl/MeywMuZpKabh2jcngabSo024k=) 5: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 6: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 7: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 8: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 9: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=) 10: OY7VggLlS6S8taEQZwxA_9MJ9Jc.roa (hash: hj2ioa7d+yEki0gbVFILdu22LUXQHhfHdLKTOV3RU+k=) 11: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 12: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 13: lTN9WM_3kAIwHlpaUspavss4Il0.roa (hash: HHix3BfeZ1Pqtr5dBucc6Su9pPLjQX4ABrsZY3uNeNA=) 14: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 15: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 16: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 17: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=) 18: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:62:bf:9f:ce:b0:95:1b:eb:9e:ee:f4:4d:16:13:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Apr 27 10:01:11 2026 GMT Not After : Apr 28 10:01:11 2026 GMT Subject: CN=e2ddc8902bef7db3c85b6f80d4fbed1a737fdbc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:56:5c:62:99:6f:a1:02:e1:42:63:4b:81: b0:c8:39:a4:0e:80:22:d3:ca:90:38:3d:58:28:e1: bf:81:90:1c:0d:9a:3c:3f:5e:b5:ee:cf:98:52:16: e4:12:b8:37:92:0a:a5:ac:2c:40:2d:fe:a0:89:3b: bf:63:bb:33:b7:0c:92:f6:cd:73:40:04:e7:89:73: 9b:84:76:2f:76:5b:49:82:d9:7f:6d:8e:8c:e5:64: 98:fd:fc:15:8e:67:f1:b8:2d:ac:a1:bc:48:4a:11: 2c:52:21:8a:b2:e9:3d:dd:1e:9c:34:f6:27:5d:58: 5c:21:88:64:78:30:e3:81:93:5f:ce:4b:f2:a6:82: 8f:58:ac:71:10:89:c3:52:2e:45:c9:64:33:69:8f: 61:93:ab:3f:23:27:cd:0e:20:11:65:29:24:9b:f3: 50:17:4c:af:99:7a:34:ec:d9:eb:71:03:f1:09:0e: ca:5a:db:ed:1e:34:18:fe:c0:68:54:2e:1b:5d:05: 4a:be:0c:d5:a6:90:b3:22:d2:33:37:32:31:db:f5: 20:33:00:ba:76:42:c3:51:4a:0d:a4:34:a9:e0:93: da:21:2c:54:78:0a:8f:87:87:ff:20:31:aa:f1:ed: 20:dc:47:68:74:e4:38:94:0f:ab:57:3a:02:36:2c: 32:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DD:C8:90:2B:EF:7D:B3:C8:5B:6F:80:D4:FB:ED:1A:73:7F:DB:C0 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ab:da:f4:8f:a9:af:24:cf:98:19:5c:39:e2:42:a0:9b:34: 04:e5:7b:28:9f:d0:72:d0:bf:17:f3:5c:02:22:7e:0a:dd:65: 1e:25:bf:6b:38:d4:85:7b:25:88:dc:a2:d3:ee:2d:09:85:9d: 10:71:30:11:5b:5c:88:45:06:1b:da:ef:fb:ec:c9:25:fb:02: 6a:64:6b:83:95:ab:90:c6:73:7e:ba:9b:a4:ae:79:34:dd:f5: 52:ef:33:b2:5a:74:a8:c4:75:9b:c0:e3:2a:10:96:52:a3:d6: a5:77:81:a5:46:9c:d8:51:be:2e:73:0a:0a:87:cb:b1:31:b7: 65:1a:fb:ed:7e:40:65:38:88:4e:0e:c8:3a:ea:26:5a:b2:e0: 77:79:48:a7:43:a5:c0:78:38:c0:6e:ca:55:75:06:2a:cd:b6: 92:58:3f:f1:30:a1:8a:1d:6d:07:50:61:0e:cb:32:4a:c1:25: 33:68:2e:e7:20:8e:aa:a3:1a:d7:48:9b:05:c1:e0:ad:53:16: b4:8c:47:44:76:b0:da:ac:b2:2a:38:28:7c:4d:b9:ef:b3:d1: 2b:d8:c1:e5:6c:d4:67:8d:1f:87:18:80:54:76:ee:c2:d4:56: f4:3b:8a:5b:11:98:cd:2e:1d:d9:03:ee:74:0b:b8:d9:78:be: b1:23:16:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OYr+fzrCVG+ue7vRNFhNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwNDI3MTAwMTExWhcNMjYwNDI4MTAwMTExWjAzMTEwLwYDVQQD EyhlMmRkYzg5MDJiZWY3ZGIzYzg1YjZmODBkNGZiZWQxYTczN2ZkYmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBBWXGKZb6EC4UJjS4GwyDmkDoAi 08qQOD1YKOG/gZAcDZo8P1617s+YUhbkErg3kgqlrCxALf6giTu/Y7sztwyS9s1z QATniXObhHYvdltJgtl/bY6M5WSY/fwVjmfxuC2sobxIShEsUiGKsuk93R6cNPYn XVhcIYhkeDDjgZNfzkvypoKPWKxxEInDUi5FyWQzaY9hk6s/IyfNDiARZSkkm/NQ F0yvmXo07NnrcQPxCQ7KWtvtHjQY/sBoVC4bXQVKvgzVppCzItIzNzIx2/UgMwC6 dkLDUUoNpDSp4JPaISxUeAqPh4f/IDGq8e0g3EdodOQ4lA+rVzoCNiwy2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLdyJAr732zyFtvgNT77Rpzf9vAMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6va9I+p ryTPmBlcOeJCoJs0BOV7KJ/QctC/F/NcAiJ+Ct1lHiW/azjUhXsliNyi0+4tCYWd EHEwEVtciEUGG9rv++zJJfsCamRrg5WrkMZzfrqbpK55NN31Uu8zslp0qMR1m8Dj KhCWUqPWpXeBpUac2FG+LnMKCofLsTG3ZRr77X5AZTiITg7IOuomWrLgd3lIp0Ol wHg4wG7KVXUGKs22klg/8TChih1tB1BhDssySsElM2gu5yCOqqMa10ibBcHgrVMW tIxHRHaw2qyyKjgofE2577PRK9jB5WzUZ40fhxiAVHbuwtRW9DuKWxGYzS4d2QPu dAu42Xi+sSMW5g== -----END CERTIFICATE-----Generated at Mon Apr 27 18:31:33 2026 by rpki-client