$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: dWOZ3M9Zn5oXXQ+fh0eXwbmbqs71/kXEab8Yjs5WiZ8= Subject key identifier: 7E:20:32:3F:81:AA:49:7F:D2:DA:82:B0:96:64:E9:E1:84:E8:D2:FF Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019DF984496F697D1C5AE0246498EB5AA74D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 1220 Signing time: Tue 05 May 2026 19:01:29 +0000 Manifest this update: Tue 05 May 2026 19:01:29 +0000 Manifest next update: Wed 06 May 2026 19:01:29 +0000 Files and hashes: 1: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (hash: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=) 2: DmFGe9DLY_1JVHtRv5-IWlYnId8.roa (hash: RYQkOrIc0cxltO77FcoJ2jTy8qfCkxehJtgNWES43Cc=) 3: JDndh6j465NHPFqcUIAxmDMl1_4.roa (hash: b/z9kTCR5Pv6OwHYysLdjRfGopTcn7nyBFVh0WDow0o=) 4: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=) 5: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=) 6: jqbFij7pY9jR5_tvg6aGlSqXWvY.roa (hash: 9lSkTQcSfW9ZV/1oCol4mnY2Fh21FXn6q4rov7K8Pww=) 7: mjAEITCabur0axxusIEwH3ACFzQ.roa (hash: D+f5ZlnsuTJu8gdaHWCiaZcGyn+9TSMFzESMV/fxCQc=) 8: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=) 9: nPN1026MFxn1aBHjNnL1ChSjJ7g.roa (hash: 0wKSqZP3wergAVCbgAzLhQpVpALUtP80ss2GImwHhRo=) 10: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: ijGv/0zm8BjqSwnjFTE5euFGm6zaBVMIWT84EkjYQ7Y=) 11: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=) 12: tkJi06CdYjIn25noZIzPiK0yCl0.roa (hash: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE=) 13: x01F14STJZ1Puy2kQB223Es2edg.roa (hash: jhpr7zWdF2h6v1hL72LPtds9yAJf4NfjncODdCfl3lE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 18:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f9:84:49:6f:69:7d:1c:5a:e0:24:64:98:eb:5a:a7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: May 5 19:01:29 2026 GMT Not After : May 6 19:01:29 2026 GMT Subject: CN=7e20323f81aa497fd2da82b09664e9e184e8d2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:21:e7:c0:ef:2f:5d:9c:1f:71:85:0f:f0: c2:a6:53:51:e0:26:f0:38:4c:fd:41:04:f6:c8:02: de:38:84:27:fc:fa:06:42:8f:7a:f4:31:f9:e4:1a: 73:1b:ca:e6:14:40:bc:77:fe:e5:ab:15:ba:f3:0f: 5a:5e:4d:f8:22:4a:e0:79:50:50:06:e2:cc:66:78: 51:b7:fd:71:d3:eb:09:65:a1:2f:37:fc:79:e2:68: 66:65:b6:d1:6c:77:00:12:92:b3:fd:d0:a1:7a:32: ee:ae:75:13:8e:48:1a:53:e8:c5:ed:fa:a7:18:bb: 09:44:55:c5:6b:10:93:b0:cb:10:b5:23:8d:6f:a6: 6b:1e:bd:30:16:e0:03:02:8a:71:3c:26:00:bc:f9: ca:c6:3a:ee:e7:6f:b6:37:7b:6a:fb:19:07:79:5f: 91:9c:a2:72:a9:eb:d5:12:1e:da:7e:d3:58:ae:10: 07:3d:eb:c0:a9:6c:52:9b:97:c6:f7:a8:ad:75:82: 2f:63:f9:c0:d0:62:67:f0:5b:ba:09:65:a4:32:1b: c9:6b:ed:89:5f:af:f3:3c:7d:53:bf:79:d7:68:d4: ab:d7:cc:d0:fa:c9:5d:89:74:69:2c:ca:4d:2a:07: 76:a2:07:6f:ed:6c:f4:29:9b:c7:2d:10:04:9a:1a: c8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:20:32:3F:81:AA:49:7F:D2:DA:82:B0:96:64:E9:E1:84:E8:D2:FF X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8f:9b:c0:79:00:0c:fe:7e:d2:2c:1b:6b:ee:ab:5c:b4:27: 18:e7:f9:5a:5f:75:f0:69:b1:cd:7e:d8:96:d4:dd:95:b9:41: 54:f9:77:78:54:0f:60:1f:99:7f:3c:48:89:91:ff:34:ed:9f: 0e:15:0c:63:02:ce:12:c0:90:04:2c:28:23:55:9b:05:92:74: 4b:eb:b3:2f:bb:e4:28:6c:4e:e7:12:ed:bf:77:d3:b2:8d:94: bf:94:98:cd:fb:72:e0:9b:3d:b1:0b:b8:b3:2d:94:0f:d6:56: ca:2f:8d:f8:14:a4:15:58:d7:25:aa:55:db:ff:60:61:41:6f: 9c:cf:65:7b:0d:ac:d4:f3:5b:1a:51:e4:b4:87:16:70:f3:1b: c0:74:88:d9:50:c9:5e:34:61:e5:19:8f:44:1e:a8:61:4b:3e: 17:56:95:77:e3:0c:e8:b5:f8:50:24:3f:44:89:57:95:83:26: 43:be:a5:50:a3:7f:42:2e:a2:6f:d4:26:57:f2:9a:74:b1:45: 08:fe:3f:b5:ac:51:b7:cf:e9:ac:11:36:41:e7:7a:4e:48:8d: 77:f5:eb:f2:de:65:7a:3e:2a:81:23:be:62:43:5b:e4:e5:9d: aa:5e:1c:29:fc:fd:5a:37:65:a8:ad:8e:73:b0:18:95:2b:ab: e8:9e:54:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ35hElvaX0cWuAkZJjrWqdNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwNTA1MTkwMTI5WhcNMjYwNTA2MTkwMTI5WjAzMTEwLwYDVQQD Eyg3ZTIwMzIzZjgxYWE0OTdmZDJkYTgyYjA5NjY0ZTllMTg0ZThkMmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn0h58DvL12cH3GFD/DCplNR4Cbw OEz9QQT2yALeOIQn/PoGQo969DH55BpzG8rmFEC8d/7lqxW68w9aXk34IkrgeVBQ BuLMZnhRt/1x0+sJZaEvN/x54mhmZbbRbHcAEpKz/dChejLurnUTjkgaU+jF7fqn GLsJRFXFaxCTsMsQtSONb6ZrHr0wFuADAopxPCYAvPnKxjru52+2N3tq+xkHeV+R nKJyqevVEh7aftNYrhAHPevAqWxSm5fG96itdYIvY/nA0GJn8Fu6CWWkMhvJa+2J X6/zPH1Tv3nXaNSr18zQ+sldiXRpLMpNKgd2ogdv7Wz0KZvHLRAEmhrISwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4gMj+Bqkl/0tqCsJZk6eGE6NL/MB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4+bwHkA DP5+0iwba+6rXLQnGOf5Wl918GmxzX7YltTdlblBVPl3eFQPYB+ZfzxIiZH/NO2f DhUMYwLOEsCQBCwoI1WbBZJ0S+uzL7vkKGxO5xLtv3fTso2Uv5SYzfty4Js9sQu4 sy2UD9ZWyi+N+BSkFVjXJapV2/9gYUFvnM9lew2s1PNbGlHktIcWcPMbwHSI2VDJ XjRh5RmPRB6oYUs+F1aVd+MM6LX4UCQ/RIlXlYMmQ76lUKN/Qi6ib9QmV/KadLFF CP4/taxRt8/prBE2Qed6TkiNd/Xr8t5lej4qgSO+YkNb5OWdql4cKfz9WjdlqK2O c7AYlSur6J5UfA== -----END CERTIFICATE-----Generated at Wed May 6 00:21:01 2026 by rpki-client