$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json) Hash identifier: 3Y0wtHXIS0udiguPkkDYSxzwMbrRNnKI9rNIqVEq2Fw= Subject key identifier: EC:DC:91:1D:3B:FD:8C:F1:53:49:69:F2:CF:46:51:2B:BD:D1:AB:BE Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 019E1DC7A26DBA3C6CBD49B1D6BC9AEA7DD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft Manifest number: 0448 Signing time: Tue 12 May 2026 20:01:22 +0000 Manifest this update: Tue 12 May 2026 20:01:22 +0000 Manifest next update: Wed 13 May 2026 20:01:22 +0000 Files and hashes: 1: 4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa (hash: 3YYvrIPQh3ZlkWIDJWGzPef2omYQb9s0JIFyF3ZtUx0=) 2: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=) 3: 7_KuEvRi_14zb6ajXHwy-1HJpm0.roa (hash: y9zbrYx6KIqniGx302kiI/eIzCLca5mKO3xeDDaCZf0=) 4: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=) 5: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=) 6: Dx-Vy-swUiVNsZKUlolPXBZOZMI.roa (hash: 5aft0BRUbiVKXn588IybsdkKIbt9YKxjDesbktvL34g=) 7: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=) 8: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=) 9: PjcfmGvCF3Jo8bSPGEurQgZgvHI.roa (hash: nN0nspQjOZYATjn1JnM2nPvB9KoYFsNTbycrrE1wEhQ=) 10: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=) 11: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=) 12: WskagO6bCwTQcwB7d_fzf3cdeI0.roa (hash: uVNMY6xrkiM26LXeGtpPm7fSn/FV5Pa+qtC9Vr6WBRk=) 13: YuYmQaJNtuOBq3fPKH-8v6Xr9Qk.roa (hash: U5rEQ3u5XOjHhPmf1nGbyQ/BjTbyBdisgzm75iFjhvQ=) 14: dqsYbbjCxnAptr8zjkd-iezgLz4.roa (hash: 1Yhk6OnIeIea3uiPYWd+rgtl98a+2OVsjXwz+GeFDuw=) 15: n4PyCzNuArzvMMSs4_9M2Rr_Pcc.roa (hash: v767wGXxzM+38xa2Dth+I2XGtOv/gRqhBPQGRj3YQas=) 16: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=) 17: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=) 18: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: 6nBzoXwWyj+Z98Zm8R70NLOtHmWis56gDswS4iK1Ohk=) 19: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:c7:a2:6d:ba:3c:6c:bd:49:b1:d6:bc:9a:ea:7d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: May 12 20:01:22 2026 GMT Not After : May 13 20:01:22 2026 GMT Subject: CN=ecdc911d3bfd8cf1534969f2cf46512bbdd1abbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:df:17:1c:95:08:fe:58:dd:49:a2:1c:4d:d1: ec:62:37:a5:7c:b3:6b:da:aa:cd:0b:80:1b:d7:ae: 27:29:fe:e7:31:d6:17:ed:e8:d5:92:13:c9:e1:53: d9:94:ea:47:9a:d6:38:f1:c5:78:d6:dd:34:07:6a: 47:81:4f:88:ce:9f:40:7c:d8:d8:79:43:ce:b0:69: 30:69:ca:2f:86:9a:97:f0:11:d2:b7:bd:6d:64:19: d7:f3:0c:0d:0f:0f:3c:51:3f:b6:0d:b4:4e:bf:0e: 2f:af:73:ec:58:9f:ac:41:ae:a3:85:63:ce:8c:31: 74:0e:99:68:b4:ea:42:1b:70:92:65:91:09:0b:b3: 0c:8d:fe:38:62:1e:c8:ae:c7:50:b2:37:c3:a1:c8: a2:10:e1:4d:36:92:7d:82:96:7c:02:32:33:4c:47: 82:28:3d:df:63:49:c4:8f:3e:25:32:70:2f:b0:b8: 30:ac:d5:03:4a:1a:86:f4:81:0f:85:01:48:24:eb: cc:5c:d3:c8:77:9b:b6:1e:cd:14:c0:5f:41:c0:69: 06:dc:37:2d:35:8c:b5:b6:88:b8:b2:82:af:48:be: a8:b8:b9:71:34:5a:69:b2:9e:74:e6:d1:c7:84:f4: dd:96:1c:dd:0b:38:59:15:7e:73:32:e6:06:2d:79: bd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DC:91:1D:3B:FD:8C:F1:53:49:69:F2:CF:46:51:2B:BD:D1:AB:BE X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:38:0b:ca:45:32:18:e8:fc:df:42:5c:62:b3:d3:90:91:c4: 4e:ba:69:ea:69:bb:73:2f:b5:08:bf:e2:69:7e:ea:c5:ce:f8: ab:ea:44:74:9b:6e:81:43:51:33:61:fe:b7:04:0b:d0:a1:92: cf:b3:7a:55:71:e2:a0:bb:25:ea:f7:8f:2a:5f:e5:ca:4a:12: fa:e3:0a:c0:1a:c3:c6:e7:48:4b:e3:9e:18:bb:bf:87:e7:31: ef:1d:29:eb:bd:1d:a3:76:82:56:d6:d5:36:55:95:fa:81:5f: c8:e3:f7:34:4b:b2:ae:75:ce:9a:10:c6:60:83:9f:01:c0:03: 75:30:dd:b6:a8:6a:b4:ad:ba:95:f0:b7:6d:47:57:4a:71:93: 6f:c5:f6:f3:e9:42:6b:fe:af:43:f2:fe:1b:b1:f0:e5:3a:63: dd:79:d1:f7:d4:6a:c4:01:a8:50:b6:d0:b4:d0:5f:57:4d:13: 09:ee:81:a3:d1:bb:7c:12:ed:06:1f:d1:8c:b4:f4:a3:64:2c: 63:93:7a:9a:7a:24:c1:58:06:f6:c9:24:53:bd:13:3d:69:36: cf:22:41:ff:dd:70:00:1f:01:65:40:1f:c6:fa:a9:56:6b:f9: 83:53:1a:87:c2:ee:13:84:b9:6e:d3:63:aa:12:ec:cc:fa:89: 97:06:4e:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dx6JtujxsvUmx1rya6n3UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjYwNTEyMjAwMTIyWhcNMjYwNTEzMjAwMTIyWjAzMTEwLwYDVQQD EyhlY2RjOTExZDNiZmQ4Y2YxNTM0OTY5ZjJjZjQ2NTEyYmJkZDFhYmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5N8XHJUI/ljdSaIcTdHsYjelfLNr 2qrNC4Ab164nKf7nMdYX7ejVkhPJ4VPZlOpHmtY48cV41t00B2pHgU+Izp9AfNjY eUPOsGkwacovhpqX8BHSt71tZBnX8wwNDw88UT+2DbROvw4vr3PsWJ+sQa6jhWPO jDF0DplotOpCG3CSZZEJC7MMjf44Yh7IrsdQsjfDociiEOFNNpJ9gpZ8AjIzTEeC KD3fY0nEjz4lMnAvsLgwrNUDShqG9IEPhQFIJOvMXNPId5u2Hs0UwF9BwGkG3Dct NYy1toi4soKvSL6ouLlxNFppsp505tHHhPTdlhzdCzhZFX5zMuYGLXm9UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzckR07/YzxU0lp8s9GUSu90au+MB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzgLykUy GOj830JcYrPTkJHETrpp6mm7cy+1CL/iaX7qxc74q+pEdJtugUNRM2H+twQL0KGS z7N6VXHioLsl6vePKl/lykoS+uMKwBrDxudIS+OeGLu/h+cx7x0p670do3aCVtbV NlWV+oFfyOP3NEuyrnXOmhDGYIOfAcADdTDdtqhqtK26lfC3bUdXSnGTb8X28+lC a/6vQ/L+G7Hw5Tpj3XnR99RqxAGoULbQtNBfV00TCe6Bo9G7fBLtBh/RjLT0o2Qs Y5N6mnokwVgG9skkU70TPWk2zyJB/91wAB8BZUAfxvqpVmv5g1Mah8LuE4S5btNj qhLszPqJlwZOCA== -----END CERTIFICATE-----Generated at Wed May 13 06:22:36 2026 by rpki-client