$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: qu67e22rcOBkZVa0EFTCW1RT2jcDudpnl2pWBnQmybk= Subject key identifier: 1F:C8:13:FA:82:A7:61:63:20:3F:12:A8:BC:BD:B1:64:1E:33:75:D6 Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 01A1DEDE43B1B5C502CDD080E0786C2E9D3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 1375 Signing time: Sun 15 Nov 2026 11:01:10 +0000 Manifest this update: Sun 15 Nov 2026 11:01:10 +0000 Manifest next update: Mon 16 Nov 2026 11:01:10 +0000 Files and hashes: 1: 1-E2eDnplntvlwe4dqvPIQjAUIhc.roa (hash: 9/Z1jYPf+fJJ28ARuzFgbWJGXm1CGkGx0/9J9dd55no=) 2: DiGtvUzmZAjH_XRU7fEE9dtFAko.roa (hash: VN3eL01e4plHrv0UjJUEXbnazkjQUDK4S/f50F+hnyA=) 3: MXOis4gKQU6T3fl9u9emfKn1I0g.roa (hash: J1k882H86FIPdqzqztH19RHHRsts9XhSK+QsDtFdrlA=) 4: PP9oA_E391BIuSGTuqgWVwQAMqM.roa (hash: 9n4A9VESg3N8stGG4GCkTD8TQyZX/jvYGa+MvIUmNaE=) 5: PxYDGFFeIMnR3R8ylA8SbuIB6xI.roa (hash: B8FamIOBKJ45rwoZ7RLg7M2fC1zz0YHW8ls9Ia37tyM=) 6: YbeGTIIokJMHl8QEnhR1xFC_ito.roa (hash: HgRFonCxtpdWKTM6rOV0crS0CJsk7MECWgrxxnYsFJU=) 7: jLSzdmpt6mZmgqvhH7NETi0wAYA.roa (hash: txBTBvHgOk8b8SenBZIk3YFAcUyYo3TaX05F0Mt13EA=) 8: mLqJvMc3MqTE99dcKgalJ1ySRfQ.roa (hash: a5WjFx/pe+eZo9TTWVHbhlSmGqGor+/PHYnJbWo/eU8=) 9: myEKyS0ln_CS39qAu-1GdjmG9R0.roa (hash: aW1PpyHp9Pdui/hT7n4EmATj8R60gaAAQo+Y1BQJBTw=) 10: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: e/kiiiyCTfvvBm2gA6ffoh/uQdALMyg1O75pyA+n5mA=) 11: zXmiAgXk_Ydyr1HYZF7kkg2QTLU.roa (hash: tvsSGehiuAYLuz61AA5ClCzxAIXkzHVKNA25tNTKOdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:de:43:b1:b5:c5:02:cd:d0:80:e0:78:6c:2e:9d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Nov 15 11:01:10 2026 GMT Not After : Nov 16 11:01:10 2026 GMT Subject: CN=1fc813fa82a76163203f12a8bcbdb1641e3375d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4c:45:3a:ed:d4:e2:3f:a3:e3:9d:b3:f7:c1: 77:56:7d:66:0d:a6:7a:a4:e9:e2:49:32:67:3d:b2: 96:a6:73:0c:ed:0b:53:f6:c0:72:02:14:8d:ac:ef: c2:9e:b4:68:4d:3d:76:86:de:44:bc:7d:ec:e0:8f: 87:0f:52:fe:a2:3f:08:a5:5a:de:5a:ff:72:e1:87: 0f:8c:d7:63:8d:12:db:39:fe:1d:d7:b7:3a:a8:28: cc:fb:fa:ed:2a:36:ee:05:8a:6d:7b:e8:65:bd:8a: 1b:da:75:f7:ca:03:a3:c4:6c:2c:5b:eb:f8:47:33: 56:bf:97:38:19:27:5e:82:69:56:03:cb:99:43:3b: 77:e5:ae:1b:15:d1:e9:19:63:a4:82:63:db:76:88: b4:bc:27:32:61:e4:2f:02:23:10:15:02:bd:eb:44: e6:7f:3f:1a:20:62:be:a0:3c:87:36:93:84:43:49: 3e:29:6a:57:ac:b2:cd:1e:13:d7:af:2a:d9:70:34: 29:6c:42:01:d4:ff:2f:11:f9:e4:1c:d5:ca:e6:97: 8a:12:da:8a:d8:9f:f7:08:f4:0a:cf:13:bf:76:67: 2c:b7:a0:53:ab:6b:f3:11:a8:35:26:66:c2:bb:a4: aa:5b:ad:c8:a9:8a:2f:57:8f:08:b0:b7:38:1c:50: fe:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C8:13:FA:82:A7:61:63:20:3F:12:A8:BC:BD:B1:64:1E:33:75:D6 X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c9:38:63:44:d1:f1:63:64:0f:2c:fa:87:a5:39:52:d3:c3: 58:86:ad:fd:b6:2b:97:da:e6:23:d1:ec:9d:bc:ea:30:71:0b: af:82:07:ab:cd:58:42:a0:f8:a5:c7:81:a7:1a:52:e6:a7:a2: 1e:d5:7e:26:94:4e:51:75:9c:fc:af:93:f8:d2:1f:df:d0:46: 4c:60:2c:9d:c7:47:ba:5f:47:0f:fa:2d:ed:b1:15:2c:e9:b1: 06:03:a4:6b:56:d5:28:58:7b:c7:33:86:08:0e:91:81:d2:e1: 9a:f3:7d:b5:7a:6f:a8:e9:d7:75:02:e7:94:b5:41:bd:4e:fa: ab:b0:92:c9:1b:2e:62:77:45:9f:f6:ce:44:e1:1f:84:68:27: ec:95:8f:26:67:18:56:04:6d:c8:ab:c9:ee:be:44:13:f4:c9: c6:9d:40:14:19:6d:d7:0b:da:9f:fe:f3:1a:1d:cf:d5:34:3c: 5b:32:a7:e9:5e:14:d4:f4:8f:3a:60:4b:bf:49:1b:c0:17:53: 6f:ae:a5:f5:ac:05:74:40:8f:ca:a6:92:c3:8c:45:ff:74:c0: 67:ce:98:35:39:73:c9:83:01:0c:32:ef:47:f2:91:cb:81:10: 43:07:55:20:6b:db:ca:e5:3b:5c:bb:16:ea:57:a0:a6:6c:97: c0:e2:f4:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHe3kOxtcUCzdCA4HhsLp06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjYxMTE1MTEwMTEwWhcNMjYxMTE2MTEwMTEwWjAzMTEwLwYDVQQD EygxZmM4MTNmYTgyYTc2MTYzMjAzZjEyYThiY2JkYjE2NDFlMzM3NWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykxFOu3U4j+j452z98F3Vn1mDaZ6 pOniSTJnPbKWpnMM7QtT9sByAhSNrO/CnrRoTT12ht5EvH3s4I+HD1L+oj8IpVre Wv9y4YcPjNdjjRLbOf4d17c6qCjM+/rtKjbuBYpte+hlvYob2nX3ygOjxGwsW+v4 RzNWv5c4GSdegmlWA8uZQzt35a4bFdHpGWOkgmPbdoi0vCcyYeQvAiMQFQK960Tm fz8aIGK+oDyHNpOEQ0k+KWpXrLLNHhPXryrZcDQpbEIB1P8vEfnkHNXK5peKEtqK 2J/3CPQKzxO/dmcst6BTq2vzEag1JmbCu6SqW63IqYovV48IsLc4HFD+6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/IE/qCp2FjID8SqLy9sWQeM3XWMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsk4Y0TR 8WNkDyz6h6U5UtPDWIat/bYrl9rmI9HsnbzqMHELr4IHq81YQqD4pceBpxpS5qei HtV+JpROUXWc/K+T+NIf39BGTGAsncdHul9HD/ot7bEVLOmxBgOka1bVKFh7xzOG CA6RgdLhmvN9tXpvqOnXdQLnlLVBvU76q7CSyRsuYndFn/bOROEfhGgn7JWPJmcY VgRtyKvJ7r5EE/TJxp1AFBlt1wvan/7zGh3P1TQ8WzKn6V4U1PSPOmBLv0kbwBdT b66l9awFdECPyqaSw4xF/3TAZ86YNTlzyYMBDDLvR/KRy4EQQwdVIGvbyuU7XLsW 6legpmyXwOL0iQ== -----END CERTIFICATE-----Generated at Sun Nov 15 17:46:25 2026 by rpki-client