$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json) Hash identifier: pWDs97pgkdYG2+lo6/xwh78i6f9gS0Sb6+vIKYBCut8= Subject key identifier: 2F:8B:E9:B9:FF:6B:34:04:6D:E4:5C:13:41:D8:87:70:69:34:54:39 Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 019D265EFE9EABEB78FC360B01E8B906556F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft Manifest number: 03C6 Signing time: Wed 25 Mar 2026 19:00:52 +0000 Manifest this update: Wed 25 Mar 2026 19:00:52 +0000 Manifest next update: Thu 26 Mar 2026 19:00:52 +0000 Files and hashes: 1: 4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa (hash: 3YYvrIPQh3ZlkWIDJWGzPef2omYQb9s0JIFyF3ZtUx0=) 2: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=) 3: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=) 4: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=) 5: Dx-Vy-swUiVNsZKUlolPXBZOZMI.roa (hash: 5aft0BRUbiVKXn588IybsdkKIbt9YKxjDesbktvL34g=) 6: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=) 7: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=) 8: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=) 9: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=) 10: WskagO6bCwTQcwB7d_fzf3cdeI0.roa (hash: uVNMY6xrkiM26LXeGtpPm7fSn/FV5Pa+qtC9Vr6WBRk=) 11: YuYmQaJNtuOBq3fPKH-8v6Xr9Qk.roa (hash: U5rEQ3u5XOjHhPmf1nGbyQ/BjTbyBdisgzm75iFjhvQ=) 12: ZvzZunjDlBYEEo5tXrgzyLt_dGg.roa (hash: UPsyzhi87SZnZ58kTtKE+18tmkXvGwl7y+zmR4Y6hbw=) 13: dqsYbbjCxnAptr8zjkd-iezgLz4.roa (hash: 1Yhk6OnIeIea3uiPYWd+rgtl98a+2OVsjXwz+GeFDuw=) 14: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=) 15: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=) 16: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: 7FyEJyFilFjieiAt2TvBf++b9e1paWi5qWJBIpcPhD0=) 17: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:5e:fe:9e:ab:eb:78:fc:36:0b:01:e8:b9:06:55:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Mar 25 19:00:52 2026 GMT Not After : Mar 26 19:00:52 2026 GMT Subject: CN=2f8be9b9ff6b34046de45c1341d8877069345439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:c8:c4:d0:29:21:1b:1d:0b:05:68:82:31: 0b:57:c8:9c:ba:aa:a6:fd:ef:4a:10:8a:f7:fb:3f: 42:f3:b0:98:3e:b2:6a:ba:a7:eb:fd:ff:a9:92:26: f2:84:cd:4e:74:55:4f:b6:fe:38:17:4c:e3:7d:2f: 92:a0:b6:b4:df:2b:cb:a8:e5:1e:10:13:10:39:29: 93:d4:28:54:32:9e:60:be:eb:30:06:e2:7e:20:49: 68:d4:5a:11:ba:96:af:66:b2:2d:6a:ac:01:8a:b9: d7:07:e3:b2:8c:1e:3d:b6:68:77:83:cc:e7:a3:c6: b3:0b:d5:ce:b2:62:e2:76:33:b9:aa:0a:be:e7:13: 76:2d:60:59:76:5d:ea:10:cd:b0:f4:ff:1d:64:c1: d5:18:fb:dd:6b:4b:31:80:23:79:48:b0:3d:b9:94: b8:13:60:a0:9e:83:61:d7:e2:4a:81:d3:c2:a8:71: 1d:0d:de:b0:ba:6f:44:ee:46:d3:71:94:d3:1c:c9: 43:17:2e:e3:35:7e:7f:92:82:db:93:3a:b0:bb:58: 48:57:ce:90:18:82:1f:05:55:5e:eb:2b:93:4a:4f: 7d:db:0b:13:7a:79:eb:e5:7b:18:f7:99:da:46:81: 5d:80:e2:52:fa:59:26:96:fa:32:50:93:1a:5d:79: c2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8B:E9:B9:FF:6B:34:04:6D:E4:5C:13:41:D8:87:70:69:34:54:39 X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:11:fd:20:78:28:2d:ee:a1:12:fc:26:58:5e:1b:b8:d5:59: e0:af:4b:9f:ec:2b:9b:d2:d6:39:30:11:af:3c:fa:00:bb:d8: 80:eb:40:16:e8:96:4b:af:ef:19:41:c9:e9:f9:70:8f:3a:9d: 58:df:ac:14:e2:8b:12:c5:cb:f3:e0:a6:f1:19:a7:c8:29:ca: c6:f5:f2:36:fd:9a:3f:b2:a3:84:50:8e:61:83:cd:ef:1c:a6: 6e:a1:bd:3e:07:ef:89:71:98:e2:c6:7e:fe:82:97:34:3b:75: 4e:5f:c8:d9:3f:92:4f:8d:b8:2f:3f:55:fd:08:e5:02:c3:31: 02:6c:1f:f8:3f:66:ed:b1:a9:74:fe:20:c4:ac:69:12:c2:c0: e7:7b:7a:d6:70:48:de:39:72:ff:56:b2:b9:7e:04:73:a9:78: bf:54:78:c7:99:8b:86:5c:ec:cc:11:b2:fe:df:ef:8a:d8:ba: 60:2a:f4:21:9b:40:df:74:4f:d4:62:da:c4:46:d3:e0:f0:4b: 37:64:e8:6f:8e:c3:b3:7f:52:f1:11:73:7e:3e:46:36:19:a1: 8a:f5:d5:f9:95:a0:e7:5c:d7:3f:ae:23:4d:df:4c:ab:eb:0a: 64:1f:87:81:65:53:0f:31:ec:54:db:6e:4f:6d:cb:b6:04:07: 90:6c:d3:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mXv6eq+t4/DYLAei5BlVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjYwMzI1MTkwMDUyWhcNMjYwMzI2MTkwMDUyWjAzMTEwLwYDVQQD EygyZjhiZTliOWZmNmIzNDA0NmRlNDVjMTM0MWQ4ODc3MDY5MzQ1NDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/XIxNApIRsdCwVogjELV8icuqqm /e9KEIr3+z9C87CYPrJquqfr/f+pkibyhM1OdFVPtv44F0zjfS+SoLa03yvLqOUe EBMQOSmT1ChUMp5gvuswBuJ+IElo1FoRupavZrItaqwBirnXB+OyjB49tmh3g8zn o8azC9XOsmLidjO5qgq+5xN2LWBZdl3qEM2w9P8dZMHVGPvda0sxgCN5SLA9uZS4 E2CgnoNh1+JKgdPCqHEdDd6wum9E7kbTcZTTHMlDFy7jNX5/koLbkzqwu1hIV86Q GIIfBVVe6yuTSk992wsTennr5XsY95naRoFdgOJS+lkmlvoyUJMaXXnCTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+L6bn/azQEbeRcE0HYh3BpNFQ5MB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRH9IHgo Le6hEvwmWF4buNVZ4K9Ln+wrm9LWOTARrzz6ALvYgOtAFuiWS6/vGUHJ6flwjzqd WN+sFOKLEsXL8+Cm8RmnyCnKxvXyNv2aP7KjhFCOYYPN7xymbqG9PgfviXGY4sZ+ /oKXNDt1Tl/I2T+ST424Lz9V/QjlAsMxAmwf+D9m7bGpdP4gxKxpEsLA53t61nBI 3jly/1ayuX4Ec6l4v1R4x5mLhlzszBGy/t/viti6YCr0IZtA33RP1GLaxEbT4PBL N2Tob47Ds39S8RFzfj5GNhmhivXV+ZWg51zXP64jTd9Mq+sKZB+HgWVTDzHsVNtu T23LtgQHkGzTJQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:37:15 2026 by rpki-client