$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: QPdhcdUnwjZotXnPZAeURbQ5OscBfgomvtGbD4VuxMM= Subject key identifier: EB:B5:E9:91:A4:9F:6F:EE:48:FC:2F:4B:89:F6:9D:48:45:21:5F:B3 Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 01A0B4D178BC8DFE1E2F857997941EF7806E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 139A Signing time: Fri 18 Sep 2026 14:00:21 +0000 Manifest this update: Fri 18 Sep 2026 14:00:21 +0000 Manifest next update: Sat 19 Sep 2026 14:00:21 +0000 Files and hashes: 1: 1-WMupdXluOQ7x-K_avahDFozE_A.roa (hash: Tk/f/OIyoGHt94/pLNY5O4OoQcxa7v//+2RvavWlFyI=) 2: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (hash: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=) 3: FJK3MlyjVAojwF-mVWmHdiKhNPU.roa (hash: TzYYtBzBEMH3oqJKKM05yqeDoBBlOjW5TQHdTV317bs=) 4: FJcsmaUQsD13YXXoyE7RkZKR-ng.roa (hash: u6HoYzjVqNqn2YWEImLaDRf/C6bprfKvf9KjlvjxNLc=) 5: GiIfdM2XaqqMUMcsI6ESoE4Ptfo.roa (hash: rIKQsVG7m+JuvqlnALYeAAG05bQliIjM+scjwsiHm7M=) 6: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=) 7: PP71s4oA0Pqlb0hxrkFxP4F71FI.roa (hash: Gwz4XfEbTmJrMswxNq9bB/hGvbvOMm1RzpVvdkkptJY=) 8: WUEnbdUUqrLfYi2oKn0rFmvvVSs.roa (hash: 5sNj4jrMjIeivWLuNKloS867aHhxwwkfpzUsslqii8k=) 9: XSxSAP7DiJZa4LTWJM8KEYXPTsU.roa (hash: O0ZeRuqT3gg3YRnXifK9FeiFeCfEkxSX/9GHXAJb1XQ=) 10: ewDh-Of3DTsKrizymZCG9qxo_a4.roa (hash: wd/aFSh3or0J34PT5Apt0JYGpHBLqOUvdDS4Ikn/5+M=) 11: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=) 12: kZAgbSjcA3AUI27WYX_SLodgwxM.roa (hash: a+GdP0YC4+kyyPVC2mzxcdiH+fxAgf7/mlxAOoguZs4=) 13: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=) 14: nPN1026MFxn1aBHjNnL1ChSjJ7g.roa (hash: 0wKSqZP3wergAVCbgAzLhQpVpALUtP80ss2GImwHhRo=) 15: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: KbH+XYjKOd6/SwQUHt8+Je9Bp+7v15uh7RYnhgqaL/E=) 16: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=) 17: u6qDpYGmfoGEMACkNnGAHtcqros.roa (hash: K3BjOm+GqWtXxTkJj9qyEmHvHYh3wmQ/32PWbJp61V0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 08:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b4:d1:78:bc:8d:fe:1e:2f:85:79:97:94:1e:f7:80:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Sep 18 14:00:21 2026 GMT Not After : Sep 19 14:00:21 2026 GMT Subject: CN=ebb5e991a49f6fee48fc2f4b89f69d4845215fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:5d:38:fc:be:14:57:ad:e0:9d:a7:24:56: 4d:4a:e6:4e:2b:35:03:c9:74:74:3d:e8:2b:e9:a4: c3:11:6c:70:ff:8a:d6:da:7b:4d:6d:b8:74:22:07: 94:e1:1c:94:bf:a1:a3:43:28:26:c8:25:73:b4:99: 9c:b2:7b:dd:61:ae:6d:54:2b:8d:ee:c1:0a:b6:1f: ac:32:bb:69:63:88:7e:a6:66:76:ee:8f:a6:17:64: 43:5f:05:1c:00:5f:a6:40:e3:5e:46:76:55:80:af: 5a:a6:cf:b0:97:71:56:42:74:23:8b:3f:73:38:a9: 62:71:9a:1c:2f:d6:55:21:e3:7c:c0:f9:4d:c4:3f: 0f:cf:1a:02:62:e9:19:34:fe:31:85:ce:fa:b7:56: 48:99:28:8d:3b:b7:85:e2:5f:02:9f:0e:9c:c1:92: ae:ee:0b:9a:45:a1:6c:51:3b:ad:2f:05:e5:ac:7a: 4f:ce:dc:af:c6:7c:78:77:aa:ad:e1:a9:03:1d:5c: 93:b8:fc:21:cf:77:42:0b:0c:6f:d1:e9:85:ad:5e: df:ed:c2:e0:9f:56:15:7d:6b:a2:e4:df:9c:69:eb: ec:cd:d1:60:c4:bc:31:0a:b7:b7:25:72:3e:fd:db: 13:39:41:0b:8d:2d:88:41:8a:75:f2:be:63:27:e7: 18:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B5:E9:91:A4:9F:6F:EE:48:FC:2F:4B:89:F6:9D:48:45:21:5F:B3 X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:08:26:31:a3:83:bd:43:73:c2:ab:fc:73:5b:af:b8:6d:c9: 7b:25:cd:86:b7:be:05:e4:70:c9:f6:29:4e:60:56:20:89:18: 70:b4:d7:4e:c3:c8:f6:83:8b:d9:0a:4a:e3:2b:21:bc:18:08: de:84:79:02:d8:38:60:4f:b5:0a:4c:ed:8c:23:ab:46:af:1d: 2e:26:4a:69:41:ba:3c:98:2e:c9:5b:c2:94:42:05:b5:3b:35: c4:e8:27:bb:66:17:6e:e8:bf:66:ac:28:5d:75:50:b7:2b:51: 4f:a5:2b:14:7c:de:db:21:1c:02:01:17:2b:ef:6c:68:63:31: a3:dc:4d:88:bd:ac:0f:c3:cb:42:c1:6f:92:81:a5:5e:0c:13: e5:b3:9c:b6:fb:e1:2f:bd:b0:a8:62:cd:39:60:6b:26:04:50: 4a:44:29:10:07:cc:39:a7:b9:96:f6:0f:42:3c:6d:4e:1f:3d: 96:97:3c:a1:0b:cd:e9:f2:26:e7:03:5e:d3:05:55:11:3c:ee: 8f:51:09:da:2f:8b:79:25:62:5a:c4:c3:1c:17:94:05:e8:18: 82:7a:82:9e:b0:7a:2a:36:16:2a:00:58:fd:4b:dd:d7:6d:a5: 18:d4:c8:44:43:23:d1:b7:dd:ad:0c:e2:3c:9f:53:70:5a:5f: 20:1f:45:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC00Xi8jf4eL4V5l5Qe94BuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwOTE4MTQwMDIxWhcNMjYwOTE5MTQwMDIxWjAzMTEwLwYDVQQD EyhlYmI1ZTk5MWE0OWY2ZmVlNDhmYzJmNGI4OWY2OWQ0ODQ1MjE1ZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZNdOPy+FFet4J2nJFZNSuZOKzUD yXR0Pegr6aTDEWxw/4rW2ntNbbh0IgeU4RyUv6GjQygmyCVztJmcsnvdYa5tVCuN 7sEKth+sMrtpY4h+pmZ27o+mF2RDXwUcAF+mQONeRnZVgK9aps+wl3FWQnQjiz9z OKlicZocL9ZVIeN8wPlNxD8PzxoCYukZNP4xhc76t1ZImSiNO7eF4l8Cnw6cwZKu 7guaRaFsUTutLwXlrHpPztyvxnx4d6qt4akDHVyTuPwhz3dCCwxv0emFrV7f7cLg n1YVfWui5N+caevszdFgxLwxCre3JXI+/dsTOUELjS2IQYp18r5jJ+cY2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOu16ZGkn2/uSPwvS4n2nUhFIV+zMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQgmMaOD vUNzwqv8c1uvuG3JeyXNhre+BeRwyfYpTmBWIIkYcLTXTsPI9oOL2QpK4yshvBgI 3oR5Atg4YE+1CkztjCOrRq8dLiZKaUG6PJguyVvClEIFtTs1xOgnu2YXbui/Zqwo XXVQtytRT6UrFHze2yEcAgEXK+9saGMxo9xNiL2sD8PLQsFvkoGlXgwT5bOctvvh L72wqGLNOWBrJgRQSkQpEAfMOae5lvYPQjxtTh89lpc8oQvN6fIm5wNe0wVVETzu j1EJ2i+LeSViWsTDHBeUBegYgnqCnrB6KjYWKgBY/Uvd122lGNTIREMj0bfdrQzi PJ9TcFpfIB9Fcg== -----END CERTIFICATE-----Generated at Fri Sep 18 15:39:41 2026 by rpki-client