$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: TjmvvmEQLAOjmIqQUVxhZgYguRP+YCHAZAbn8ZqbB74= Subject key identifier: 36:E4:D3:84:A1:9A:D9:72:D2:7E:17:AF:93:E3:40:27:AA:BE:FA:D8 Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 01A0D45D7B88868898374C1FD922A551DBEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 12EB Signing time: Thu 24 Sep 2026 17:01:31 +0000 Manifest this update: Thu 24 Sep 2026 17:01:31 +0000 Manifest next update: Fri 25 Sep 2026 17:01:31 +0000 Files and hashes: 1: 1-E2eDnplntvlwe4dqvPIQjAUIhc.roa (hash: 9/Z1jYPf+fJJ28ARuzFgbWJGXm1CGkGx0/9J9dd55no=) 2: DiGtvUzmZAjH_XRU7fEE9dtFAko.roa (hash: VN3eL01e4plHrv0UjJUEXbnazkjQUDK4S/f50F+hnyA=) 3: MXOis4gKQU6T3fl9u9emfKn1I0g.roa (hash: J1k882H86FIPdqzqztH19RHHRsts9XhSK+QsDtFdrlA=) 4: PP9oA_E391BIuSGTuqgWVwQAMqM.roa (hash: 9n4A9VESg3N8stGG4GCkTD8TQyZX/jvYGa+MvIUmNaE=) 5: PxYDGFFeIMnR3R8ylA8SbuIB6xI.roa (hash: B8FamIOBKJ45rwoZ7RLg7M2fC1zz0YHW8ls9Ia37tyM=) 6: YbeGTIIokJMHl8QEnhR1xFC_ito.roa (hash: HgRFonCxtpdWKTM6rOV0crS0CJsk7MECWgrxxnYsFJU=) 7: jLSzdmpt6mZmgqvhH7NETi0wAYA.roa (hash: txBTBvHgOk8b8SenBZIk3YFAcUyYo3TaX05F0Mt13EA=) 8: mLqJvMc3MqTE99dcKgalJ1ySRfQ.roa (hash: a5WjFx/pe+eZo9TTWVHbhlSmGqGor+/PHYnJbWo/eU8=) 9: myEKyS0ln_CS39qAu-1GdjmG9R0.roa (hash: aW1PpyHp9Pdui/hT7n4EmATj8R60gaAAQo+Y1BQJBTw=) 10: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: UQPukVG1M6ix2GKLceLXQhSxqGzQGffmCNvK1B3HC6c=) 11: zXmiAgXk_Ydyr1HYZF7kkg2QTLU.roa (hash: tvsSGehiuAYLuz61AA5ClCzxAIXkzHVKNA25tNTKOdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 17:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:5d:7b:88:86:88:98:37:4c:1f:d9:22:a5:51:db:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Sep 24 17:01:31 2026 GMT Not After : Sep 25 17:01:31 2026 GMT Subject: CN=36e4d384a19ad972d27e17af93e34027aabefad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ba:95:4b:58:60:63:22:ad:7c:0a:eb:ca:42: 02:5a:95:fb:28:e7:3c:96:9e:d5:cf:88:58:5a:58: 98:12:24:db:8c:83:d1:97:77:7b:fd:51:75:41:fe: aa:b5:9e:d2:49:7a:21:59:39:15:42:da:cf:26:3a: c4:f3:1e:fa:42:84:63:10:bd:65:c3:f7:7a:22:2c: 74:4d:5d:ba:4d:61:92:ea:d7:a9:b3:84:dc:07:7f: e6:d8:6e:04:24:ef:b2:7e:15:e7:3d:49:d7:85:30: fd:d2:da:f3:b2:96:7f:03:ad:32:0e:fb:fb:9e:cd: 8f:09:18:14:36:73:bc:ce:0e:da:9f:ef:7b:d1:09: d6:63:a8:42:fb:40:cc:4f:c0:b8:24:bf:9b:6d:f1: 2f:23:6e:65:46:72:b2:a3:d0:0c:1f:cc:eb:c4:be: f9:ee:24:81:2b:23:8d:49:57:98:26:1a:2f:12:5e: df:f9:8a:f1:41:b8:4a:ea:d9:f9:ab:21:a7:65:22: 58:df:b8:aa:61:0f:7c:ed:80:e4:37:81:32:7d:6c: 47:a4:aa:21:5d:78:b2:76:36:6f:90:00:66:de:b5: 42:a1:30:4d:4a:b2:f2:0f:a0:e1:e4:30:9d:a1:73: 59:1c:3c:a4:89:b0:03:5d:8a:77:b8:ff:9f:80:95: 67:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E4:D3:84:A1:9A:D9:72:D2:7E:17:AF:93:E3:40:27:AA:BE:FA:D8 X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:ef:f8:df:11:e4:d7:7f:a0:0a:51:34:98:fb:9e:b3:30:30: 11:09:bd:bc:5b:61:40:b0:6f:db:41:86:61:f4:b7:ba:06:41: 62:57:79:53:8d:42:e9:79:40:31:2a:d6:87:32:98:12:f9:d1: 31:9c:1d:f7:a7:7b:9d:98:d8:b8:3e:18:75:db:0f:b0:92:36: b3:17:37:34:a8:72:4e:23:22:97:3f:00:50:26:30:33:78:58: 41:91:ae:00:66:c6:14:11:76:96:93:f8:25:73:c8:70:47:f8: 90:b3:ff:da:26:9c:2e:a5:69:de:b5:8b:02:94:c6:2e:79:9c: b8:83:b2:88:42:cd:61:0b:b5:f5:a2:32:b8:64:7d:29:23:99: 08:b6:56:1a:a3:53:68:55:51:00:26:e4:93:01:d3:c2:28:11: b5:8d:b3:6a:1a:f1:54:c1:c4:22:05:4b:05:8b:40:98:4a:e6: 29:48:d0:57:76:e1:dc:74:cb:97:9d:a0:f8:e1:55:94:6c:19: 01:60:99:9b:5c:81:f4:bd:17:9c:01:a1:fc:bb:ad:38:93:08: 16:3d:bc:b6:97:e0:75:a9:04:99:f1:3a:75:ff:1e:db:7f:73: 2e:ce:e9:dd:16:9f:57:f1:bd:b9:8c:17:0c:8d:3d:7b:f4:b0: 03:79:13:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUXXuIhoiYN0wf2SKlUdvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjYwOTI0MTcwMTMxWhcNMjYwOTI1MTcwMTMxWjAzMTEwLwYDVQQD EygzNmU0ZDM4NGExOWFkOTcyZDI3ZTE3YWY5M2UzNDAyN2FhYmVmYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87qVS1hgYyKtfArrykICWpX7KOc8 lp7Vz4hYWliYEiTbjIPRl3d7/VF1Qf6qtZ7SSXohWTkVQtrPJjrE8x76QoRjEL1l w/d6Iix0TV26TWGS6teps4TcB3/m2G4EJO+yfhXnPUnXhTD90trzspZ/A60yDvv7 ns2PCRgUNnO8zg7an+970QnWY6hC+0DMT8C4JL+bbfEvI25lRnKyo9AMH8zrxL75 7iSBKyONSVeYJhovEl7f+YrxQbhK6tn5qyGnZSJY37iqYQ987YDkN4EyfWxHpKoh XXiydjZvkABm3rVCoTBNSrLyD6Dh5DCdoXNZHDykibADXYp3uP+fgJVnUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbk04Shmtly0n4Xr5PjQCeqvvrYMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3e/43xHk 13+gClE0mPueszAwEQm9vFthQLBv20GGYfS3ugZBYld5U41C6XlAMSrWhzKYEvnR MZwd96d7nZjYuD4YddsPsJI2sxc3NKhyTiMilz8AUCYwM3hYQZGuAGbGFBF2lpP4 JXPIcEf4kLP/2iacLqVp3rWLApTGLnmcuIOyiELNYQu19aIyuGR9KSOZCLZWGqNT aFVRACbkkwHTwigRtY2zahrxVMHEIgVLBYtAmErmKUjQV3bh3HTLl52g+OFVlGwZ AWCZm1yB9L0XnAGh/LutOJMIFj28tpfgdakEmfE6df8e239zLs7p3RafV/G9uYwX DI09e/SwA3kTzw== -----END CERTIFICATE-----Generated at Fri Sep 25 02:57:22 2026 by rpki-client