$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json) Hash identifier: AO466RdkoFj4C9qCJzJkDt8ZKtmQmYx+1IdiwS/qjK0= Subject key identifier: 43:70:4A:E5:89:E8:02:C8:67:5B:C6:2B:7E:58:DF:89:71:BB:4C:A2 Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019EE10B4D41F945421B66348D6F930B790A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft Manifest number: 12A0 Signing time: Fri 19 Jun 2026 18:01:14 +0000 Manifest this update: Fri 19 Jun 2026 18:01:14 +0000 Manifest next update: Sat 20 Jun 2026 18:01:14 +0000 Files and hashes: 1: 0ucpkHOLz07dxe4q9pinjxTnYUc.roa (hash: hJKd81+/d29GDaL/K2oJV9FZ00QRNy9FU0SHuhHKaE8=) 2: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (hash: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=) 3: FJcsmaUQsD13YXXoyE7RkZKR-ng.roa (hash: u6HoYzjVqNqn2YWEImLaDRf/C6bprfKvf9KjlvjxNLc=) 4: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=) 5: TIdfXJOxAhHLcLFODv0ToSZIZhw.roa (hash: nM/GDFbtviUzKwacCNxiqdK6zqFcWb0+5zH7VN6m7lY=) 6: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=) 7: jqbFij7pY9jR5_tvg6aGlSqXWvY.roa (hash: 9lSkTQcSfW9ZV/1oCol4mnY2Fh21FXn6q4rov7K8Pww=) 8: kZAgbSjcA3AUI27WYX_SLodgwxM.roa (hash: a+GdP0YC4+kyyPVC2mzxcdiH+fxAgf7/mlxAOoguZs4=) 9: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=) 10: nPN1026MFxn1aBHjNnL1ChSjJ7g.roa (hash: 0wKSqZP3wergAVCbgAzLhQpVpALUtP80ss2GImwHhRo=) 11: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: hCClFHin9dtzYOgVBcdUbf/jBr8L01rF1Lmlwt0RtXE=) 12: p3_T8DeWPtAeHSeZ2B-Y_kT44WY.roa (hash: jVKeU/TG6bE9jpQNG8lzJGyb3A2xu0fssrrNg3T0aRc=) 13: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=) 14: tkJi06CdYjIn25noZIzPiK0yCl0.roa (hash: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Jun 2026 18:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:e1:0b:4d:41:f9:45:42:1b:66:34:8d:6f:93:0b:79:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Jun 19 18:01:14 2026 GMT Not After : Jun 20 18:01:14 2026 GMT Subject: CN=43704ae589e802c8675bc62b7e58df8971bb4ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:df:3b:d7:52:5e:3a:33:4d:1d:07:d5:06:f7: 0f:04:62:39:22:1f:27:a8:05:58:3f:81:39:2c:d9: e9:99:ca:e6:90:a8:af:eb:ff:b5:77:15:0e:a6:b9: 8a:9d:45:8e:64:02:a5:33:64:bd:4c:e2:9f:d3:ca: d4:a8:0a:34:2a:d1:b0:55:31:82:58:82:f0:fb:c6: a4:bf:50:9e:57:7a:06:e8:cc:e8:49:f0:66:89:4e: 9c:e4:6e:5b:6c:65:cb:99:4f:5d:4e:44:fd:c7:f0: fa:af:76:02:fa:da:30:10:67:e7:3c:6b:d9:1a:da: 7b:9a:7f:72:f1:c2:f8:fa:3c:ec:69:3d:1e:4b:4d: d4:67:16:8c:27:7d:93:ce:04:54:d2:8e:85:41:97: f9:61:48:10:fe:fe:01:a6:fa:ab:df:f6:45:81:42: 2a:b5:64:9c:46:80:70:de:c0:61:d4:d3:3c:c0:a1: 6c:32:e4:fc:80:24:f9:12:79:70:2e:1f:0a:72:8e: 7d:36:80:cb:18:18:2e:2c:02:6c:b4:29:b6:32:0d: 37:34:71:b2:c1:92:19:8c:58:2c:53:b3:98:ad:e8: 12:59:2a:cf:86:bd:b6:0b:a3:2a:ef:d7:a6:ae:69: 36:3f:19:a5:39:0f:43:8b:16:1c:79:8d:31:42:72: bf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:70:4A:E5:89:E8:02:C8:67:5B:C6:2B:7E:58:DF:89:71:BB:4C:A2 X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:5c:e4:68:31:69:59:20:78:96:37:11:bf:f5:33:ac:26:04: 85:db:2c:c1:9f:e4:e0:f5:fa:bd:46:01:e4:d0:7e:65:7f:38: c1:e8:c0:d5:87:ff:a3:ae:c8:e2:80:d3:66:6b:f5:f4:a5:1e: a1:93:e1:41:37:35:e0:33:4d:f3:c8:c3:b5:ec:7f:ab:58:74: 13:9a:af:7b:32:2f:17:65:35:84:3d:c8:e7:c6:44:45:9a:fd: 8d:67:1d:b2:1e:9f:f1:f7:74:f6:e1:8b:a0:75:6a:4b:34:c0: 8d:67:d9:16:47:c6:9a:38:8f:c2:9f:e0:06:89:46:1a:b5:85: b7:d3:ed:ed:d6:df:96:8a:3e:6f:59:a4:6d:3a:5d:63:c3:08: 39:d2:0f:37:26:9b:e6:32:38:68:0c:7d:cb:27:a9:27:53:b8: 79:a6:78:fb:c8:c3:7e:ff:f2:c4:47:cf:bf:58:86:f9:66:87: d1:0d:37:b3:f5:59:73:e5:9b:2b:04:96:a0:e4:eb:58:27:32: 3b:5b:2c:a2:a9:bc:67:08:b6:3f:4d:20:22:9c:f6:a6:63:b7: 81:56:81:d2:7f:dc:7f:7c:ec:10:65:8d:36:6a:05:99:74:bf: 4e:c8:a2:82:0b:c2:be:ac:d2:2d:a5:a3:26:5f:8f:61:9f:68: 26:2f:26:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7hC01B+UVCG2Y0jW+TC3kKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwNjE5MTgwMTE0WhcNMjYwNjIwMTgwMTE0WjAzMTEwLwYDVQQD Eyg0MzcwNGFlNTg5ZTgwMmM4Njc1YmM2MmI3ZTU4ZGY4OTcxYmI0Y2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt8711JeOjNNHQfVBvcPBGI5Ih8n qAVYP4E5LNnpmcrmkKiv6/+1dxUOprmKnUWOZAKlM2S9TOKf08rUqAo0KtGwVTGC WILw+8akv1CeV3oG6MzoSfBmiU6c5G5bbGXLmU9dTkT9x/D6r3YC+towEGfnPGvZ Gtp7mn9y8cL4+jzsaT0eS03UZxaMJ32TzgRU0o6FQZf5YUgQ/v4Bpvqr3/ZFgUIq tWScRoBw3sBh1NM8wKFsMuT8gCT5EnlwLh8Kco59NoDLGBguLAJstCm2Mg03NHGy wZIZjFgsU7OYregSWSrPhr22C6Mq79emrmk2PxmlOQ9DixYceY0xQnK/xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENwSuWJ6ALIZ1vGK35Y34lxu0yiMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1zkaDFp WSB4ljcRv/UzrCYEhdsswZ/k4PX6vUYB5NB+ZX84wejA1Yf/o67I4oDTZmv19KUe oZPhQTc14DNN88jDtex/q1h0E5qvezIvF2U1hD3I58ZERZr9jWcdsh6f8fd09uGL oHVqSzTAjWfZFkfGmjiPwp/gBolGGrWFt9Pt7dbfloo+b1mkbTpdY8MIOdIPNyab 5jI4aAx9yyepJ1O4eaZ4+8jDfv/yxEfPv1iG+WaH0Q03s/VZc+WbKwSWoOTrWCcy O1ssoqm8Zwi2P00gIpz2pmO3gVaB0n/cf3zsEGWNNmoFmXS/TsiiggvCvqzSLaWj Jl+PYZ9oJi8mxQ== -----END CERTIFICATE-----Generated at Sat Jun 20 03:15:27 2026 by rpki-client