$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json) Hash identifier: 7r8QeUNYOp6gtyHRkhH4iqR2vGccXpQp9KCI/unuWFk= Subject key identifier: F0:08:49:18:38:FA:76:B8:58:D9:D2:90:C1:5F:DF:7F:54:28:E9:87 Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019EB732C892AA0E127E29E761853A72A112 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft Manifest number: 1977 Signing time: Thu 11 Jun 2026 15:00:19 +0000 Manifest this update: Thu 11 Jun 2026 15:00:19 +0000 Manifest next update: Fri 12 Jun 2026 15:00:19 +0000 Files and hashes: 1: 4SQgpK8BNeEWZfyYsAVSi9v3OtY.roa (hash: OjohDknvXgNvEpw0X132+NPUbbI+DpOi1V9m5ErFpAs=) 2: 9pxyJ_5XKk1_rwWZ9yXVd0wiKTA.roa (hash: 9BXX00EqfHS9Z+w4cbgMB5Q/vF0Ya/E+TQ5+Mz+KYTQ=) 3: CVxfx3KQzEER-BBbsCQ4b2WjeFk.roa (hash: P12FxyadZ3+D6ncFfUITGrjK2DjmN6s5NrQ2Cl3FgF4=) 4: EqwNsTi9NVU4fVwRT0dDk5Gqcxc.roa (hash: Zs1xHMWJq30fgJGKXe+EaRX4uki/zrdU1bDKlfUylpU=) 5: F2Hrf2ZO-e5Se-C1MVuiXNtFCts.roa (hash: z70EzbScXbGkEd63iR3gVuVrT2xNv1pFq/gzFaOfapw=) 6: FAlee-OYgKuE4kcEctbEn5npxGk.roa (hash: SGbhggfKol3NwIX4ZMFxR+eOS/x+4TXDB+7IUtG8eyQ=) 7: IdGgLSVePL4Ag35cTRp5zqyuBEc.roa (hash: D5yVGulGMze85HvjnmBTSvUEhpL48qjlTFI0cEv/IxU=) 8: MOVQFk6w5VTW1mTaAyM9XyFp3A4.roa (hash: CYemttRlGhgSSYTCSRhcvIusMWg/eXfKm4LjWS1ETGs=) 9: dWJfR3O78mdmRump4LfvKR4bPhk.roa (hash: QZkZflIPeyZVp29E1JD/NyFaBd5cvPYJz27bWSVn1CI=) 10: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: 1T/eDljneVbR9t9XVtABZ1yE6MjbidHPy4xFu4v4tRo=) 11: qkeJhJN0QtZceHnAHCmJT2X0h5k.roa (hash: Sx3eIYeKwHXjmlOHh2WKSSlEFJciEMJBS092d+tyFiY=) 12: qt1TBrOjWH0sbh3ZKU2CyV1iMlA.roa (hash: tgi9V/X7llQ0PTMb7GnjdnF/SXuJX/+lesfnAqrS3vw=) 13: rIgqpAYglrIaA3V1I42fBko-DNI.roa (hash: jg1alXBj9VMFT3lN1gk2yDhV8xp8j9aUebJ327iU0gA=) 14: s3mKeHVM6Sc_Nu3cBa5CO3c_r2c.roa (hash: nQwJUaWrVg5To0r/HnpgbyQFvZOuiUSeGVW/zjSMAz4=) 15: sPQTBXUhQk6UJZCQIfZBbd9Pv-U.roa (hash: TMIOrtwO5O4ZcGgyNNJHkTCwy9R3KRqkE9Z5jqJ0JJI=) 16: u7XfC-hyoaL17lnaI1XY7ILk75Q.roa (hash: H5bJ6no8lSHCW4yEf6B9ReJaGHen5zLgZSX5lnUUKd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:32:c8:92:aa:0e:12:7e:29:e7:61:85:3a:72:a1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Jun 11 15:00:19 2026 GMT Not After : Jun 12 15:00:19 2026 GMT Subject: CN=f008491838fa76b858d9d290c15fdf7f5428e987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:81:88:10:89:36:83:4d:8f:3e:8e:5a:14: 73:39:21:5b:8c:c6:80:80:13:9b:3e:59:df:5f:b9: f3:24:c2:ee:0f:e2:a6:6b:66:b5:5e:b8:59:60:27: 10:71:0c:75:86:ad:a5:7a:7a:9e:03:de:75:2f:e4: 89:bb:af:23:92:2e:f3:21:2a:43:59:e5:9b:77:27: c8:e2:0b:26:4f:4b:09:dc:46:63:a9:b1:e0:30:2d: 5a:06:38:8c:ea:13:01:bc:8f:dc:07:fb:fe:a4:b7: 63:43:e6:8f:ee:39:aa:b6:c7:66:5a:02:32:e1:d8: b5:a6:e6:47:4d:0d:59:29:f1:30:1a:82:4d:1a:20: 6f:65:9f:21:cf:a1:3a:44:a4:a2:ad:87:44:c1:4c: 09:87:f6:8e:ef:87:13:99:1f:d1:18:df:93:4d:9b: 1e:c6:43:e3:ba:73:7b:66:78:b2:8c:ce:ba:5f:67: e7:94:17:8c:2e:d9:d1:3f:d6:c5:7e:35:81:4a:6e: 0e:5c:8b:4b:07:67:2b:0b:fd:17:dd:81:fe:9f:12: 9c:0f:ac:e6:2a:31:ed:63:1d:ad:75:7c:9d:1b:b9: cb:58:20:a5:3b:dd:b7:b6:e6:68:16:02:a7:1a:45: 2f:dd:e2:0c:bd:63:6c:23:48:ec:4d:aa:34:75:23: f7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:08:49:18:38:FA:76:B8:58:D9:D2:90:C1:5F:DF:7F:54:28:E9:87 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:33:a7:df:2b:ab:fb:1f:24:a6:fb:21:8a:d4:52:5b:44:5b: 43:ab:3b:ad:22:37:08:ff:81:90:5a:26:0d:6d:12:61:16:53: 72:73:80:33:64:3a:78:0f:2e:81:ed:91:e5:c6:4a:9c:b5:22: 2d:dd:3e:66:52:4f:4a:e3:ae:7c:a2:b7:ab:1b:02:1d:eb:90: 60:9a:fe:8b:cf:24:f6:98:c5:be:68:ce:e5:ac:f1:4b:4f:7e: f3:de:a3:09:14:60:05:f2:b2:11:08:0a:c2:e4:15:1a:d1:5b: 00:55:2f:40:47:f1:60:28:17:68:de:24:83:1a:98:30:2c:c7: c7:ad:fc:d0:86:64:46:c2:66:5c:59:38:b7:81:65:37:45:0b: ee:65:4f:e5:33:21:ce:81:71:59:cb:92:f6:85:4a:09:bd:b0: 45:70:85:34:43:33:37:fb:a8:6c:f7:86:f7:a5:6f:af:9b:1c: 6c:4b:74:c7:e5:5f:0f:7d:6f:8f:8a:14:14:e0:b5:73:60:34: 1e:04:6b:76:fb:8e:6a:35:99:ba:72:16:72:f7:1e:d6:2a:e3: 97:9d:29:3c:76:ae:3d:86:5e:bd:90:f8:50:20:1c:f0:26:64: 0d:d3:ca:45:35:20:88:f2:e8:ec:fe:67:b6:8c:d0:61:eb:1c: 28:91:ed:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ63MsiSqg4SfinnYYU6cqESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwNjExMTUwMDE5WhcNMjYwNjEyMTUwMDE5WjAzMTEwLwYDVQQD EyhmMDA4NDkxODM4ZmE3NmI4NThkOWQyOTBjMTVmZGY3ZjU0MjhlOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZqBiBCJNoNNjz6OWhRzOSFbjMaA gBObPlnfX7nzJMLuD+Kma2a1XrhZYCcQcQx1hq2lenqeA951L+SJu68jki7zISpD WeWbdyfI4gsmT0sJ3EZjqbHgMC1aBjiM6hMBvI/cB/v+pLdjQ+aP7jmqtsdmWgIy 4di1puZHTQ1ZKfEwGoJNGiBvZZ8hz6E6RKSirYdEwUwJh/aO74cTmR/RGN+TTZse xkPjunN7ZniyjM66X2fnlBeMLtnRP9bFfjWBSm4OXItLB2crC/0X3YH+nxKcD6zm KjHtYx2tdXydG7nLWCClO923tuZoFgKnGkUv3eIMvWNsI0jsTao0dSP30wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAISRg4+na4WNnSkMFf339UKOmHMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazOn3yur +x8kpvshitRSW0RbQ6s7rSI3CP+BkFomDW0SYRZTcnOAM2Q6eA8uge2R5cZKnLUi Ld0+ZlJPSuOufKK3qxsCHeuQYJr+i88k9pjFvmjO5azxS09+896jCRRgBfKyEQgK wuQVGtFbAFUvQEfxYCgXaN4kgxqYMCzHx6380IZkRsJmXFk4t4FlN0UL7mVP5TMh zoFxWcuS9oVKCb2wRXCFNEMzN/uobPeG96Vvr5scbEt0x+VfD31vj4oUFOC1c2A0 HgRrdvuOajWZunIWcvce1irjl50pPHauPYZevZD4UCAc8CZkDdPKRTUgiPLo7P5n tozQYescKJHtuQ== -----END CERTIFICATE-----Generated at Thu Jun 11 21:44:18 2026 by rpki-client