$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json) Hash identifier: +28Ya0BopLburbM5h1nb9cSjEBKteam+X3pZ4hkN8x0= Subject key identifier: 58:29:64:05:DF:FE:1C:BF:26:80:E0:15:1A:A0:AF:6F:70:D4:91:C8 Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019DCDBD7237FC486ACE576D8438A2515DEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft Manifest number: 18FA Signing time: Mon 27 Apr 2026 07:00:37 +0000 Manifest this update: Mon 27 Apr 2026 07:00:37 +0000 Manifest next update: Tue 28 Apr 2026 07:00:37 +0000 Files and hashes: 1: 9pxyJ_5XKk1_rwWZ9yXVd0wiKTA.roa (hash: 9BXX00EqfHS9Z+w4cbgMB5Q/vF0Ya/E+TQ5+Mz+KYTQ=) 2: F2Hrf2ZO-e5Se-C1MVuiXNtFCts.roa (hash: z70EzbScXbGkEd63iR3gVuVrT2xNv1pFq/gzFaOfapw=) 3: FAlee-OYgKuE4kcEctbEn5npxGk.roa (hash: SGbhggfKol3NwIX4ZMFxR+eOS/x+4TXDB+7IUtG8eyQ=) 4: Gk5m5qKg-uP4AW-hWg2d-cU394s.roa (hash: +p2ldW7F6tDvfJL/EzIU442xl//OmT69J/CQCZQMsqo=) 5: IdGgLSVePL4Ag35cTRp5zqyuBEc.roa (hash: D5yVGulGMze85HvjnmBTSvUEhpL48qjlTFI0cEv/IxU=) 6: MOVQFk6w5VTW1mTaAyM9XyFp3A4.roa (hash: CYemttRlGhgSSYTCSRhcvIusMWg/eXfKm4LjWS1ETGs=) 7: Vr9ytmrCwbBqhUlYrq7bFaPmTqI.roa (hash: jg1K9QAoanry73mjJnp/KaVM7L5lfbgOuK03+5jC5lM=) 8: dWJfR3O78mdmRump4LfvKR4bPhk.roa (hash: QZkZflIPeyZVp29E1JD/NyFaBd5cvPYJz27bWSVn1CI=) 9: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: ROsoo7OCLOpO5BBxzkMeUA06zLuNOMvvxtacCwybEC0=) 10: otCB4X2SkZik_W7jF5YoKtNQVQo.roa (hash: ZJ6P0rtTXDrrXOKDDXJiQDSmAF8So5IfFur0h47zhmg=) 11: qt1TBrOjWH0sbh3ZKU2CyV1iMlA.roa (hash: tgi9V/X7llQ0PTMb7GnjdnF/SXuJX/+lesfnAqrS3vw=) 12: s3mKeHVM6Sc_Nu3cBa5CO3c_r2c.roa (hash: nQwJUaWrVg5To0r/HnpgbyQFvZOuiUSeGVW/zjSMAz4=) 13: sPQTBXUhQk6UJZCQIfZBbd9Pv-U.roa (hash: TMIOrtwO5O4ZcGgyNNJHkTCwy9R3KRqkE9Z5jqJ0JJI=) 14: u7XfC-hyoaL17lnaI1XY7ILk75Q.roa (hash: H5bJ6no8lSHCW4yEf6B9ReJaGHen5zLgZSX5lnUUKd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 07:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:bd:72:37:fc:48:6a:ce:57:6d:84:38:a2:51:5d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Apr 27 07:00:37 2026 GMT Not After : Apr 28 07:00:37 2026 GMT Subject: CN=58296405dffe1cbf2680e0151aa0af6f70d491c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:85:55:f9:c5:3a:5a:79:a7:a5:e5:c3:31: 54:85:61:7f:66:76:38:f6:5c:c4:b1:23:76:ca:ec: 94:aa:88:42:f7:4f:cd:21:6c:4b:f3:36:42:6d:80: 8c:db:2f:b1:4e:69:a2:68:d7:a4:de:4b:89:9b:43: 68:6e:0d:7a:d2:97:44:08:db:74:94:28:7d:35:f9: c4:e8:aa:49:8f:f4:a4:73:0d:2d:6d:31:df:d1:91: d7:35:ce:dc:81:da:07:ba:18:fd:a0:f1:a7:f8:9c: 79:41:11:54:f3:dd:02:31:d0:7b:ec:8a:7e:6c:5f: 51:40:b8:4b:de:8c:eb:ef:13:b3:46:ea:ae:07:c3: fb:cf:82:73:9a:5c:0c:23:68:32:5a:eb:81:aa:a9: cd:06:42:61:31:6b:ed:f4:24:ce:7a:65:4a:a9:f6: 6a:bd:63:1f:c9:1d:ee:19:2d:a3:de:04:bd:e3:bc: c3:43:be:b1:c5:6d:28:86:5d:7b:84:3c:1c:20:38: 6a:cb:fc:af:91:73:2d:c0:ae:0f:7f:fd:39:63:2e: f8:c2:c1:c0:14:4e:7c:e9:ac:bc:dd:12:69:61:79: 59:68:e0:f0:e9:fd:dc:d9:03:c7:67:5b:9d:4d:cc: 99:ae:52:8a:3f:c5:1f:f2:d4:d7:f5:b1:21:94:96: c8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:29:64:05:DF:FE:1C:BF:26:80:E0:15:1A:A0:AF:6F:70:D4:91:C8 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1a:b3:02:45:14:62:28:a0:28:08:3e:ea:b4:eb:4a:ac:a0: 48:80:ca:fc:53:8e:7a:99:f5:55:ed:61:7a:a3:10:ba:e7:8c: d8:60:c1:69:11:a8:36:dc:d7:d2:8f:17:34:6d:f9:09:1b:22: 65:82:17:19:42:87:f8:59:5c:64:4a:91:83:3b:55:6d:0f:e4: eb:c4:f6:b3:c6:a5:d9:69:e0:99:f6:97:82:c6:aa:dc:ef:3a: fd:2f:c6:6d:2f:63:35:1f:74:2e:b0:a8:4c:bb:0c:bf:31:42: bf:1b:82:11:ed:f9:76:e0:37:7e:7b:aa:02:36:4e:ab:85:c6: 60:94:22:9c:5b:52:cb:a1:0a:b1:cd:17:3b:a5:be:b5:9a:61: 00:d6:30:b1:d3:d2:20:9c:e3:c3:15:9e:22:2b:45:05:95:1c: f9:34:1c:82:8d:aa:5b:e5:5b:ce:48:b8:31:1e:56:c5:1b:55: 5e:15:99:fa:8a:5b:4a:78:aa:22:66:2d:cb:7c:8a:e2:63:ae: 42:4e:46:42:d0:ab:5f:e6:7d:e2:44:4d:86:44:65:e2:96:83: d4:d0:fb:ad:d4:ee:de:9a:6f:1b:69:63:d8:98:45:b0:d4:25: 9c:bf:37:47:a5:e2:d4:23:02:86:41:16:8a:46:a2:42:14:b8: c8:8a:b8:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3NvXI3/EhqzldthDiiUV3vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwNDI3MDcwMDM3WhcNMjYwNDI4MDcwMDM3WjAzMTEwLwYDVQQD Eyg1ODI5NjQwNWRmZmUxY2JmMjY4MGUwMTUxYWEwYWY2ZjcwZDQ5MWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqKFVfnFOlp5p6XlwzFUhWF/ZnY4 9lzEsSN2yuyUqohC90/NIWxL8zZCbYCM2y+xTmmiaNek3kuJm0Nobg160pdECNt0 lCh9NfnE6KpJj/Skcw0tbTHf0ZHXNc7cgdoHuhj9oPGn+Jx5QRFU890CMdB77Ip+ bF9RQLhL3ozr7xOzRuquB8P7z4JzmlwMI2gyWuuBqqnNBkJhMWvt9CTOemVKqfZq vWMfyR3uGS2j3gS947zDQ76xxW0ohl17hDwcIDhqy/yvkXMtwK4Pf/05Yy74wsHA FE586ay83RJpYXlZaODw6f3c2QPHZ1udTcyZrlKKP8Uf8tTX9bEhlJbIcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgpZAXf/hy/JoDgFRqgr29w1JHIMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxqzAkUU YiigKAg+6rTrSqygSIDK/FOOepn1Ve1heqMQuueM2GDBaRGoNtzX0o8XNG35CRsi ZYIXGUKH+FlcZEqRgztVbQ/k68T2s8al2WngmfaXgsaq3O86/S/GbS9jNR90LrCo TLsMvzFCvxuCEe35duA3fnuqAjZOq4XGYJQinFtSy6EKsc0XO6W+tZphANYwsdPS IJzjwxWeIitFBZUc+TQcgo2qW+Vbzki4MR5WxRtVXhWZ+opbSniqImYty3yK4mOu Qk5GQtCrX+Z94kRNhkRl4paD1ND7rdTu3ppvG2lj2JhFsNQlnL83R6Xi1CMChkEW ikaiQhS4yIq4NA== -----END CERTIFICATE-----Generated at Mon Apr 27 14:30:04 2026 by rpki-client