$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: BXmWWGxNNKbWil5qx2HKSCAWZjlyDpLA1JuBcERzZuU= Subject key identifier: 01:4E:1A:A4:4F:2B:35:29:AF:2E:92:A3:D5:AE:E9:A6:BE:73:48:5F Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019FCA812C478C7E5836840F0B3D1B0DCB72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 1320 Signing time: Tue 04 Aug 2026 02:01:30 +0000 Manifest this update: Tue 04 Aug 2026 02:01:30 +0000 Manifest next update: Wed 05 Aug 2026 02:01:30 +0000 Files and hashes: 1: 1-WMupdXluOQ7x-K_avahDFozE_A.roa (hash: Tk/f/OIyoGHt94/pLNY5O4OoQcxa7v//+2RvavWlFyI=) 2: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (hash: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=) 3: FJK3MlyjVAojwF-mVWmHdiKhNPU.roa (hash: TzYYtBzBEMH3oqJKKM05yqeDoBBlOjW5TQHdTV317bs=) 4: FJcsmaUQsD13YXXoyE7RkZKR-ng.roa (hash: u6HoYzjVqNqn2YWEImLaDRf/C6bprfKvf9KjlvjxNLc=) 5: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=) 6: WUEnbdUUqrLfYi2oKn0rFmvvVSs.roa (hash: 5sNj4jrMjIeivWLuNKloS867aHhxwwkfpzUsslqii8k=) 7: XSxSAP7DiJZa4LTWJM8KEYXPTsU.roa (hash: O0ZeRuqT3gg3YRnXifK9FeiFeCfEkxSX/9GHXAJb1XQ=) 8: ewDh-Of3DTsKrizymZCG9qxo_a4.roa (hash: wd/aFSh3or0J34PT5Apt0JYGpHBLqOUvdDS4Ikn/5+M=) 9: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=) 10: kZAgbSjcA3AUI27WYX_SLodgwxM.roa (hash: a+GdP0YC4+kyyPVC2mzxcdiH+fxAgf7/mlxAOoguZs4=) 11: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=) 12: nPN1026MFxn1aBHjNnL1ChSjJ7g.roa (hash: 0wKSqZP3wergAVCbgAzLhQpVpALUtP80ss2GImwHhRo=) 13: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: dsUZ5E1Ni4KA2NNyKI+A43hvMD2Hztr3uqdMOkvOOhE=) 14: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=) 15: tkJi06CdYjIn25noZIzPiK0yCl0.roa (hash: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE=) 16: u6qDpYGmfoGEMACkNnGAHtcqros.roa (hash: K3BjOm+GqWtXxTkJj9qyEmHvHYh3wmQ/32PWbJp61V0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Aug 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ca:81:2c:47:8c:7e:58:36:84:0f:0b:3d:1b:0d:cb:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Aug 4 02:01:30 2026 GMT Not After : Aug 5 02:01:30 2026 GMT Subject: CN=014e1aa44f2b3529af2e92a3d5aee9a6be73485f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:59:ca:13:31:a6:4a:bc:32:f7:be:ce:8a:c5: e9:e6:5d:4a:2b:c5:ab:e5:f0:9d:dc:12:21:bd:9f: 55:21:73:9f:f8:12:eb:a3:1d:aa:4d:63:c1:72:3b: 60:b8:77:b9:7b:74:4b:2f:8a:31:c8:80:08:8a:2c: a3:59:75:f2:77:a1:6f:a7:a7:14:0a:cf:dd:c7:d4: 6c:7a:ed:2e:0c:80:52:05:d8:a9:e7:f3:c9:0c:07: fb:15:75:3b:22:a7:32:ef:49:2e:fe:a4:89:67:17: e6:7d:71:c2:34:fd:e5:27:be:71:0a:32:38:8a:d4: 03:92:69:eb:34:8b:1b:d4:ab:12:29:c5:7d:39:86: 21:32:28:57:57:96:06:3b:19:17:7f:86:84:94:48: ac:d4:59:7d:93:b7:8a:e1:e4:9f:3b:1b:df:b7:53: af:4c:fe:27:00:b3:aa:d0:7d:f5:26:f5:27:42:04: 35:e1:69:1f:ff:93:d7:9e:c2:f9:85:f2:1f:77:06: dc:ef:cc:29:af:25:d2:8d:2a:50:2b:e9:94:9c:21: 1d:b8:97:ea:fe:32:37:ea:d6:5e:d6:65:35:69:24: 43:20:67:c6:0c:78:77:39:7e:01:96:0c:3b:cd:0b: 18:9a:55:18:2b:e3:51:03:ce:e3:43:ca:d9:58:82: d3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4E:1A:A4:4F:2B:35:29:AF:2E:92:A3:D5:AE:E9:A6:BE:73:48:5F X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d0:81:10:76:8f:84:fc:07:4d:b9:77:27:ac:38:c9:fc:58: cb:7f:df:d5:07:f1:22:b6:d2:5a:f9:b5:18:7d:da:a3:53:e1: 89:16:9d:d9:da:0f:93:07:21:14:6e:2d:f1:1d:e6:ed:6d:e8: 1d:98:25:8c:71:e7:ed:91:31:aa:ec:58:83:99:47:45:38:76: f7:f0:9a:6a:a1:0f:fc:b5:1e:f9:8d:59:a0:8b:9f:e6:74:7c: 6d:e0:97:d7:25:e9:f3:fb:73:25:38:84:58:e2:c2:47:f3:e5: 6d:cf:8b:08:bd:88:41:47:ee:26:ea:12:68:61:34:2f:af:f1: f9:6f:33:30:d0:17:9e:5e:63:19:02:59:4d:60:e9:a3:3d:b1: be:8a:7d:8b:8a:02:c3:48:a3:60:b0:fe:21:ea:46:25:90:86: 10:00:e5:be:12:a2:2e:f4:f1:42:51:f0:c5:ea:c7:57:f7:fc: e7:eb:cd:1b:01:88:9f:e6:0f:3a:91:51:3b:8f:a5:da:a0:03: 28:94:a3:39:a5:d2:ad:24:ce:99:f5:1e:63:82:bc:fc:dd:00: 7f:02:ce:cb:89:72:28:62:ee:34:16:f1:6d:b2:0a:6b:40:a1: c0:71:4f:92:75:88:3f:e9:e5:fe:60:d5:2b:e4:33:80:7b:af: ae:1d:5c:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/KgSxHjH5YNoQPCz0bDctyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwODA0MDIwMTMwWhcNMjYwODA1MDIwMTMwWjAzMTEwLwYDVQQD EygwMTRlMWFhNDRmMmIzNTI5YWYyZTkyYTNkNWFlZTlhNmJlNzM0ODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlnKEzGmSrwy977OisXp5l1KK8Wr 5fCd3BIhvZ9VIXOf+BLrox2qTWPBcjtguHe5e3RLL4oxyIAIiiyjWXXyd6Fvp6cU Cs/dx9Rseu0uDIBSBdip5/PJDAf7FXU7Iqcy70ku/qSJZxfmfXHCNP3lJ75xCjI4 itQDkmnrNIsb1KsSKcV9OYYhMihXV5YGOxkXf4aElEis1Fl9k7eK4eSfOxvft1Ov TP4nALOq0H31JvUnQgQ14Wkf/5PXnsL5hfIfdwbc78wpryXSjSpQK+mUnCEduJfq /jI36tZe1mU1aSRDIGfGDHh3OX4Blgw7zQsYmlUYK+NRA87jQ8rZWILTRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFOGqRPKzUpry6So9Wu6aa+c0hfMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdCBEHaP hPwHTbl3J6w4yfxYy3/f1QfxIrbSWvm1GH3ao1PhiRad2doPkwchFG4t8R3m7W3o HZgljHHn7ZExquxYg5lHRTh29/CaaqEP/LUe+Y1ZoIuf5nR8beCX1yXp8/tzJTiE WOLCR/Plbc+LCL2IQUfuJuoSaGE0L6/x+W8zMNAXnl5jGQJZTWDpoz2xvop9i4oC w0ijYLD+IepGJZCGEADlvhKiLvTxQlHwxerHV/f85+vNGwGIn+YPOpFRO4+l2qAD KJSjOaXSrSTOmfUeY4K8/N0AfwLOy4lyKGLuNBbxbbIKa0ChwHFPknWIP+nl/mDV K+QzgHuvrh1ceQ== -----END CERTIFICATE-----Generated at Tue Aug 4 08:50:30 2026 by rpki-client