$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json) Hash identifier: PLzQppoMaiCkb2lzMg59YAPUgMaFZwkWaubOMRkG8Zk= Subject key identifier: 40:88:4F:71:00:CD:0F:D1:2D:CF:55:8A:F0:13:AC:9A:AE:51:11:55 Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 019F84FACBA88BF68CCEC0C2F698D1F872A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft Manifest number: 05C3 Signing time: Tue 21 Jul 2026 14:00:56 +0000 Manifest this update: Tue 21 Jul 2026 14:00:56 +0000 Manifest next update: Wed 22 Jul 2026 14:00:56 +0000 Files and hashes: 1: 1-lGH1nu7CvzHWYEiuO1j3MNSzJY.roa (hash: 9/b6BBId/Kn5DB9SmUCWKxBwcAQLvltddZcgBj268UQ=) 2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: IRIqw6+m9bmbQgSKlOMHQTPV4Cu0EUhyTq0OJcxs6XA=) 3: 4hkkLe2dcq377WzDqzkSvMCtsco.roa (hash: z6R8cUSnmMVlMDW9YnWwZZPf73zricPf+TEJ86PN7Ko=) 4: 4vxZx7uBqQQ6FyEF2MVBFY1WSaQ.roa (hash: yT8MYmQtVQnTBHZPhbP/WPtpcUBRa3XEcKCSlPgpz98=) 5: AfpxLvj3BiyLwMcA6kKVrdFgW6Y.roa (hash: KKSEdsLLrws/RATwLIqwcq742JLEElRzqndIEau2IyI=) 6: Kj2mVBpZK5i3xSiOOVydeQMB-K4.roa (hash: 3BF9uGhA0G3sb3UpfLCU/KTehTModommlZcD+YYnZKQ=) 7: NFRDafdwtbHFs2DS-06WUfB0qjs.roa (hash: CADabzrhmlSvgDt/e0SzZcFB32kEvIdohJzhJZyWJJc=) 8: QxbU9vvhcA75ENS1lZHkpNyfErk.roa (hash: yv8oGh8GGZWvW+9jiR8h6piajHrkuA5egN2MppGfk+w=) 9: SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa (hash: kRtJ8SNMjyDbUxu98aNT/p/eOM2tAQZf30u+RPiQ1f8=) 10: Vs-VbGsXqggDO3OQJAz7ljIJCBM.roa (hash: 0/YnvO1iRna/5MI8gBnTd4qBir5DLarEENTjj5s3VEU=) 11: _msrPFl7j-h-scWfwUUyG5vmI0Q.roa (hash: C0U0oHsxASzeTthWbTeZAy4SqW+0azDdamHmVesAW1U=) 12: gA8K0uCGARt0iMHybj1fl0_l9iM.roa (hash: oF5vhF0FQd0hgOhUSqj7/e1FPt2MEHPpP+wGYckBTNY=) 13: koXw3LvEwrzn9qCWrcZnQPR8iMs.roa (hash: gNqdDH2AralOcsOhDuMpE5EfKzaR6A0T5YWUJwlNSmY=) 14: l8TSNwU2prw2gsntuaJ9QdkRHKw.roa (hash: gb+3/D4Y4zC34TYQcD7+qVWbJgAtu0xBM1r/dmFP8pw=) 15: nmunvZ8NjUAQxyXLc7q3E6asADA.roa (hash: bcuDcNnBDq7F5VI75bQ3a3MYz4yXIjZXvHo8ZRs1H3g=) 16: qbUtGSmF4OJDy4q4dlRGp4OciDs.roa (hash: VVCFN7s9B67WrTXffUSFAE1mRjFGjdVcuJGLxmq/AY8=) 17: tUYOdiUxF4HxrSVOg847WMoBqws.roa (hash: N6nWp89HDr0pIhLLPi1oB+mkzKMLsBnFNGgdLRBYN30=) 18: tevOSAyMp-1DHWOc8A6PPAJZLUs.roa (hash: /4F2MJ2YCwSX6I/W4Ebbet4QyTAZ6jd4w/oq57g4Qcw=) 19: xOtKmGFOQ0Si4ry-DnEnpbMZzfw.roa (hash: uloNgiaPX4XD2hk6wXEnVMKHkzySU+UwLh3IKRIIyAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:84:fa:cb:a8:8b:f6:8c:ce:c0:c2:f6:98:d1:f8:72:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Jul 21 14:00:56 2026 GMT Not After : Jul 22 14:00:56 2026 GMT Subject: CN=40884f7100cd0fd12dcf558af013ac9aae511155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:4c:6d:49:de:4a:81:5f:cd:75:bc:88:de: 45:62:dc:8b:98:08:79:69:fc:f4:52:5b:55:62:d3: eb:a4:82:75:f1:dc:f3:78:99:7b:36:52:0e:c1:67: f1:07:59:78:d1:eb:c6:36:66:03:40:09:cb:85:81: 2b:9b:da:8c:f8:93:0b:4e:4b:2a:39:19:cf:e6:78: e0:3c:95:4d:16:68:45:67:85:78:6e:87:6a:86:7b: f4:36:e3:41:1f:39:bd:55:fe:c2:08:f1:34:64:27: 16:41:35:19:0b:99:26:0c:6b:1c:47:59:a9:a4:0f: ce:e1:88:8c:75:04:70:ab:02:26:40:4d:66:fb:40: 33:1e:53:fd:ff:c0:7b:14:4c:0f:44:16:a4:c1:4a: 5d:30:6e:e7:85:c7:b4:e7:a3:fb:4e:37:24:f8:a6: 07:f1:f1:a4:bf:62:14:88:28:3c:96:64:27:e1:dd: 50:64:d6:da:f0:4f:cd:77:4d:ca:ba:32:1a:a8:bf: 51:26:1e:65:e8:cd:a1:7c:74:d4:ee:9e:32:ba:e3: e2:24:9a:2f:92:79:d6:a6:26:6c:75:dd:f2:66:b3: 70:8e:81:34:90:c2:8c:7e:f8:03:a9:44:f1:89:a1: b6:af:bd:31:9d:af:b9:2f:00:08:17:35:8a:37:45: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:88:4F:71:00:CD:0F:D1:2D:CF:55:8A:F0:13:AC:9A:AE:51:11:55 X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:8d:ae:22:63:f4:de:0e:17:b6:48:26:0f:fb:60:5c:30:5b: 64:7f:9c:ff:1c:22:0b:99:81:5e:b3:e5:96:31:40:f0:73:78: c7:de:27:c4:60:b6:70:fa:68:57:f5:bc:36:74:8e:60:b3:d0: 65:6a:30:27:89:df:ed:7a:87:d7:cf:a6:d9:1c:73:f3:7b:ee: 89:50:60:cf:47:6b:45:e3:bd:6f:48:b1:85:84:c0:e1:94:fe: 6c:5b:db:dd:01:cb:90:ff:ff:f8:58:a2:aa:95:7d:04:44:b2: 7b:4b:ef:cc:d4:a6:5c:49:a1:f3:5c:ed:40:16:7b:17:b7:36: c9:0d:83:a2:8b:63:79:d9:3d:3b:da:8c:51:d5:57:78:d3:de: 64:a5:d4:ec:fb:63:fd:32:37:59:05:4b:fd:a7:d3:a1:70:79: e2:2e:f6:1c:ab:80:02:b9:3a:a7:95:a5:dc:c2:cf:99:9c:f3: c3:73:2d:d6:82:b0:79:5e:77:c2:da:51:c9:8d:9e:a8:a9:da: 9a:6d:b0:5f:34:c8:dd:6f:e2:5f:e4:d5:9f:a8:e3:14:d1:e9: a4:73:10:8a:22:1a:03:e0:a4:2e:58:12:a3:7a:82:20:da:00: 8f:1a:a4:07:e6:27:99:4b:66:50:75:10:17:46:76:c1:09:ab: 77:f7:a3:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+E+suoi/aMzsDC9pjR+HKhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYwNzIxMTQwMDU2WhcNMjYwNzIyMTQwMDU2WjAzMTEwLwYDVQQD Eyg0MDg4NGY3MTAwY2QwZmQxMmRjZjU1OGFmMDEzYWM5YWFlNTExMTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuZMbUneSoFfzXW8iN5FYtyLmAh5 afz0UltVYtPrpIJ18dzzeJl7NlIOwWfxB1l40evGNmYDQAnLhYErm9qM+JMLTksq ORnP5njgPJVNFmhFZ4V4bodqhnv0NuNBHzm9Vf7CCPE0ZCcWQTUZC5kmDGscR1mp pA/O4YiMdQRwqwImQE1m+0AzHlP9/8B7FEwPRBakwUpdMG7nhce056P7Tjck+KYH 8fGkv2IUiCg8lmQn4d1QZNba8E/Nd03KujIaqL9RJh5l6M2hfHTU7p4yuuPiJJov knnWpiZsdd3yZrNwjoE0kMKMfvgDqUTxiaG2r70xna+5LwAIFzWKN0Ue+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECIT3EAzQ/RLc9VivATrJquURFVMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy42uImP0 3g4XtkgmD/tgXDBbZH+c/xwiC5mBXrPlljFA8HN4x94nxGC2cPpoV/W8NnSOYLPQ ZWowJ4nf7XqH18+m2Rxz83vuiVBgz0drReO9b0ixhYTA4ZT+bFvb3QHLkP//+Fii qpV9BESye0vvzNSmXEmh81ztQBZ7F7c2yQ2Dootjedk9O9qMUdVXeNPeZKXU7Ptj /TI3WQVL/afToXB54i72HKuAArk6p5Wl3MLPmZzzw3Mt1oKweV53wtpRyY2eqKna mm2wXzTI3W/iX+TVn6jjFNHppHMQiiIaA+CkLlgSo3qCINoAjxqkB+YnmUtmUHUQ F0Z2wQmrd/ejIA== -----END CERTIFICATE-----Generated at Tue Jul 21 17:37:37 2026 by rpki-client