$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: HAaJNibnGHVoiJuUhOrSOHzGEWZRTFrfgHAyeZHC/II= Subject key identifier: 39:80:61:57:CE:49:A6:FF:00:48:60:6C:34:09:3E:B1:39:55:E2:6A Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019D29296EBF023EDE02DECB5ECF47EE8DFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 18D8 Signing time: Thu 26 Mar 2026 08:01:14 +0000 Manifest this update: Thu 26 Mar 2026 08:01:14 +0000 Manifest next update: Fri 27 Mar 2026 08:01:14 +0000 Files and hashes: 1: 1-OlVpNxRszjxmjMWSuuMXpZOpfY.roa (hash: etdjbA76Sv9FnoMTJ6w4NbuXIKXN/yCoWSnBpCSOyLg=) 2: 1Cwbh-EBkqRBbTaTb-Y36KV1_f4.roa (hash: KaOvvLBbfyfPARr7O7r9zR6vas9QNYiMvTjqvCPXEUI=) 3: 2BmKC7Ao1aRSr4Cg66zffNdrunE.roa (hash: HcsscwJ/VuVcTV3kH/59/X4RCs3dMy2ECBZo7Txdi0o=) 4: 4vDYopNfblYxNyrSl7_Y8BBd78I.roa (hash: 9L22tlP5yMozusESHvaSo7CwK7JqSGuZhoMXYx5tMKw=) 5: 5cE4cXv9NfAhTzlsvseSXv-Va78.roa (hash: imOu3NBS+5L3w9gmNSjFTt0fMM+20Ow725s46hfVaoM=) 6: 6TVF3dArdPB2NJxy7_Pdt8ium4c.roa (hash: TnqA7ATOZWUWRWUjYZnrgFVgbRIJUV3+W+Bfc18gIck=) 7: 7_hKJNCWOqs8t2EHuZj_d2dqY80.roa (hash: oy0SSTc3SuINToqj7/oP07vHJ6DF+ESaKkvhl2mG+rc=) 8: 9dzcaLIqbqLLjoq0zYXtDd1PnhY.roa (hash: qxt/JZrhSAN1jPHN0Hazm3PY3+cu+jvBRtI3PEduO0E=) 9: 9myGapApVrb4JbejkloU4P66zLc.roa (hash: 6EFV77uWAJvDV9lSFY6CsxJphPSKH4/4PVdWuftIQJ8=) 10: AINcwmRM2PiJl3bMkFrzxQDkhpk.roa (hash: FjiZq5IDyOXJDGmE0DFVsFGnpZhWC68Kn1wBUMVqjoE=) 11: AxycDmx0_sRBRNwROaLXtKkwrSA.roa (hash: /OH19GJSnVpqoFUA2l9v57qAgYy75+THHbmUdJGT9/U=) 12: BgaPpw4QZZFq8BjvHJztJJvHVPk.roa (hash: 1bdyBEdjzw65JHZi7PKNdH+OzNLoot3lZr9JxQYu6k4=) 13: CePoxKEHwCSRTbVngcfu2MheeDA.roa (hash: 9sLFIyTUP2/uR3ROEWPVyAdEpgJBgZOMxIEue+PDcrc=) 14: DfQSPmYelNb0NF30t1iTQWlUs5o.roa (hash: QnQiSZ4dExtUn1E1FxF2JPdUhkzoCuIvrEqj49xiXjQ=) 15: G_vLaWL_4n0xx6AmTZKeOZFeQ1M.roa (hash: 2JUl1gxV4a+1huqyyhuozz6EfwwCu7xROBFLG6lBkXQ=) 16: HmPFJkjojfXkQXnX-ShV0bymoms.roa (hash: qiXaZzgKfCkOjQoBV7iB0khwdnyrdRGDGRMiD17+W5Q=) 17: HtxrMlw1XYD3O00XvDNyUfXKFD8.roa (hash: okOUXYArEcKSjt4C2XgrkB0y7IllxSkE0rtSnZOlw/I=) 18: IHON2rn_CAk-QTZRxcf294uBItk.roa (hash: GpSTLre0+QFMoobK7dgqzWVvBqhjML/zcMCSHc91zfI=) 19: LfPTL7ZW-A5mmvN1zdwvatohGGM.roa (hash: ozraq4O9mZcm6giPdikSak7iJBai30VVr/xRbiF+gKI=) 20: NvAf-nH1w6EiGE9EpJz1duIzkVw.roa (hash: bwe7C45RRQtIzIlIMP4B3/mPa5O8hzeJmz+qxMwmGW8=) 21: Tqg7OHqJVQA5mkNW3ZN7tWwejr4.roa (hash: D+gy7cLckRRSrklWvJRd2Z44Dw8nmd5jQhzfOPZiZtA=) 22: Wfqf17fPNrqhYEuomD94h7cLzTQ.roa (hash: +K1HlQK29dpjLdYpqFFk3MJakrfyvQ2V89xPZB0rlNk=) 23: ZNXbO3wa73OxZsGaC73Tv6OfGL4.roa (hash: lhKT5GFgOwPiLaKmkEPqlSiSwbXyE2FWLpI/hBm483Q=) 24: aBHHIsoOk3cwdTg01_-s4u0Jsjk.roa (hash: PbrAA8TMsU9WP0enV5kXL9Tl3hHucxigMTmbYxEfjpk=) 25: c2OTgD7SJ-vOU2BnpOm4w9MqsgA.roa (hash: XBITRKn+SQfBgNtBqxuCcsnPrL0WkQhuSGqNDgb7udo=) 26: dnBR3jW0Kh4UVx_oWTNX9npKj2M.roa (hash: ogXmRAS68aAykUp/xTYTY3s+V2LuvqBkBMoKuQRwEjk=) 27: ib3eXdJ0h8wtIzIl2cBYokJr_9Q.roa (hash: NphbwdgT6fB0qOIn0HJy/kyHWoDJIQz8cXWMiK9ya4Y=) 28: igm3-NIqQRhNu9yZxNTMh_1HJYo.roa (hash: cfGF5AAxd5HmRNRxM7Asm85cxUZHuluzpiB9gp54keg=) 29: k5L4tohXQ4Ed_n59tNNB1TzR1Q4.roa (hash: 3rnORVw3E2u078fD2E2EbKJTg0lHYsmpc4uiLB3Yv/8=) 30: lSanMDeIzNXvZBhpiuO2WcMcnGA.roa (hash: z1k+Po4k1NiDxL5nJsZYdntctP6qEJPsnJ4NvYoS3GU=) 31: lueVV_jKMeHO5Ubr9jZ-cwt5lHo.roa (hash: 9c+KFKnP0O3swEyj7ofbRvYd449L+eQRnVpdXmf8AiM=) 32: sdcvoTQBQgoeAFopLsTr-xpMuPs.roa (hash: WtnlbPaLYL1j+j4AclbHMyJ9VcWAM1c5WBmY3q72Npc=) 33: uO2NHQ5TTdNCQ22ZCOS8lC2JSs8.roa (hash: pOQFIMx25jyK9Z1HP3/nkQhmDqp4NhXL4Z7xwh9pM0A=) 34: uhrmeJIDBf0UOu2SKTeGKN2KLdU.roa (hash: 6yakXLB9HxwcEdeaop2mfVwvTXAmim03f6ri7g4Sfy8=) 35: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: snd8fNRrO3oZTk13Y/R8ClwZ6NFic641zwk1/DD9sXk=) 36: uqK8RxQN9LvzCAlm9cz-JPc33k0.roa (hash: QBT2sv9FfNzV4E0o6WzeRcOpOw1Nw/sc0uB77lAIYy8=) 37: vloaPvYoyY7lftrTQCapPW0IXOY.roa (hash: jGy6XOMpTVxN0ST97KCkF87I0GrKB16LjlLEWBSNbCQ=) 38: xEGlR8AyR4zdleMn0h5pddeRX14.roa (hash: ZkNfc0IpugjxRFp85te3h6YIm1ECTC91UgGg0apvU/I=) 39: xyaLQZsDAvrm7P96t1P_1iQ01ug.roa (hash: 8WV+5vFShCRtn2TW6yJKkPCd8zXeEaaVVDKdZ+jH3aY=) 40: yflRQXgc3sRXtlMhgbPQejPgA54.roa (hash: ELCJ/0UNTdR4XmPGdTDQGIRX33BsOogxgdA0Xu5bAP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:29:29:6e:bf:02:3e:de:02:de:cb:5e:cf:47:ee:8d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Mar 26 08:01:14 2026 GMT Not After : Mar 27 08:01:14 2026 GMT Subject: CN=39806157ce49a6ff0048606c34093eb13955e26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:91:3c:0d:0a:a1:d9:60:e9:7d:7d:ed:3f: d6:1c:3e:67:91:88:c6:92:a4:db:62:39:9b:57:71: 0a:ac:f9:7c:7b:f5:f9:b7:67:b1:48:7a:08:54:ca: dc:00:4b:3a:d9:20:e3:fb:15:14:a0:74:c3:ea:61: 5e:7f:9e:25:39:23:08:d6:f9:2a:a3:7c:87:58:6c: 74:80:fc:55:5c:d0:6c:08:cf:c4:ac:9b:a7:50:19: 29:c4:9d:e4:46:70:6f:58:d7:c2:0e:7c:73:c0:61: b6:5b:ab:2c:73:dd:0d:63:83:8d:94:a4:fa:5c:1b: 84:f7:20:86:3c:f3:b1:e2:49:20:49:a1:4e:a5:e7: 8c:25:b3:58:93:b1:58:fe:fc:0f:fd:d2:42:69:af: 73:e7:d1:33:84:c8:6e:24:c6:86:0b:6c:41:f1:5a: f8:2a:3d:3d:6c:2d:18:c8:aa:5d:8f:54:d6:cc:38: 2a:0a:2d:eb:3c:ab:af:4b:73:a4:28:2e:e5:fd:37: 28:7a:17:b5:ab:26:ba:a0:05:4e:8e:2e:a2:7d:0c: 74:aa:34:12:47:4e:81:17:12:06:81:9a:81:db:1b: 29:d5:3d:b9:59:91:e6:01:7c:21:19:1e:90:38:ca: b8:e5:bc:fa:f8:6f:2b:86:09:48:2c:f1:fa:a2:a0: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:80:61:57:CE:49:A6:FF:00:48:60:6C:34:09:3E:B1:39:55:E2:6A X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c3:66:e2:bb:f8:fb:a8:a0:86:5f:02:2d:90:a5:eb:59:b5: 52:c0:68:15:ae:07:64:d0:89:c6:10:15:03:46:4a:ac:cd:83: 6c:a5:5b:aa:9b:28:33:14:c2:92:b7:f2:1d:3d:c9:b1:77:79: ac:76:e2:da:6e:a4:c6:03:2f:72:f7:d7:1a:67:fe:c4:bb:89: 69:db:7c:95:55:5f:9b:30:03:f8:9e:b5:3c:5b:c7:58:42:de: a5:96:8a:a7:05:06:81:1c:81:3f:6f:0a:19:3b:fe:21:c4:e0: 14:11:54:ea:8f:dc:c7:42:40:66:16:cf:d3:50:9e:5c:22:e8: 6d:12:06:2a:10:78:47:de:e5:cb:3f:88:17:05:63:99:e8:0b: de:64:95:8f:a7:3c:19:7f:ef:1f:05:96:23:9f:e4:4c:a8:db: ec:e9:60:56:b8:b1:59:dd:38:9b:d0:bb:dd:a3:d1:9e:c7:44: ac:41:e8:09:b3:e8:a9:8c:a0:a1:cf:5a:de:ea:26:66:f4:84: 2f:a7:2f:27:bc:49:b2:82:8f:1c:44:ae:af:c6:18:74:84:17: 2e:1d:ff:24:6f:66:dd:ff:36:6b:b6:73:58:cc:59:45:4b:1f: 01:da:7d:9d:62:c2:42:20:96:cf:26:49:b9:b0:ab:cd:d1:88: 6e:ec:53:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0pKW6/Aj7eAt7LXs9H7o3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwMzI2MDgwMTE0WhcNMjYwMzI3MDgwMTE0WjAzMTEwLwYDVQQD EygzOTgwNjE1N2NlNDlhNmZmMDA0ODYwNmMzNDA5M2ViMTM5NTVlMjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXaRPA0Kodlg6X197T/WHD5nkYjG kqTbYjmbV3EKrPl8e/X5t2exSHoIVMrcAEs62SDj+xUUoHTD6mFef54lOSMI1vkq o3yHWGx0gPxVXNBsCM/ErJunUBkpxJ3kRnBvWNfCDnxzwGG2W6ssc90NY4ONlKT6 XBuE9yCGPPOx4kkgSaFOpeeMJbNYk7FY/vwP/dJCaa9z59EzhMhuJMaGC2xB8Vr4 Kj09bC0YyKpdj1TWzDgqCi3rPKuvS3OkKC7l/Tcoehe1qya6oAVOji6ifQx0qjQS R06BFxIGgZqB2xsp1T25WZHmAXwhGR6QOMq45bz6+G8rhglILPH6oqC1CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmAYVfOSab/AEhgbDQJPrE5VeJqMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMNm4rv4 +6ighl8CLZCl61m1UsBoFa4HZNCJxhAVA0ZKrM2DbKVbqpsoMxTCkrfyHT3JsXd5 rHbi2m6kxgMvcvfXGmf+xLuJadt8lVVfmzAD+J61PFvHWELepZaKpwUGgRyBP28K GTv+IcTgFBFU6o/cx0JAZhbP01CeXCLobRIGKhB4R97lyz+IFwVjmegL3mSVj6c8 GX/vHwWWI5/kTKjb7OlgVrixWd04m9C73aPRnsdErEHoCbPoqYygoc9a3uomZvSE L6cvJ7xJsoKPHESur8YYdIQXLh3/JG9m3f82a7ZzWMxZRUsfAdp9nWLCQiCWzyZJ ubCrzdGIbuxTlA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:10:13 2026 by rpki-client