$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft File: UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft (raw, json) Hash identifier: cl1oEO/6Ri2hPiF21TVjz/u2MCKUhMmWhajaSy8mm/M= Subject key identifier: 26:15:92:68:D3:A6:F3:B2:83:CC:42:EF:E6:9B:AD:EC:76:12:BC:0D Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e Certificate serial: 01A0D0B69548C8510FA7096BFC9ED4E45B1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft Manifest number: 1596 Signing time: Thu 24 Sep 2026 00:00:21 +0000 Manifest this update: Thu 24 Sep 2026 00:00:21 +0000 Manifest next update: Fri 25 Sep 2026 00:00:21 +0000 Files and hashes: 1: 5LP1tFsYxrSifJx4g3QCwnwqEE0.roa (hash: KN3CpVDHemmKFo5Hvty6pP9rTH9gXzF1gwHa0T5DRaI=) 2: 9okxpKR53j_wPBq5poJcbcWbCuU.roa (hash: g6ME8XCY/1PYlaKndRMLOkvVq06aR4XG5jU3acn3n1Q=) 3: NEN0LXaSfRY1LnULdkJtj6mRNJQ.roa (hash: 3VMJ8FAcJtXYQQFiElHCi0MUd/IBCd2Oo6ayYD6ZuQI=) 4: UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl (hash: VrmPAuGfxFQeprnjSTm+Kb6aFW5xzrzcYtWIb5drVh0=) 5: Vvg_eRMXx1wM0ykfa7tuZT2JbiU.roa (hash: y54xWJIZgynMkSzzpbyHXRwEQLJEaYo5XZHrl4z8vdo=) 6: aF8HdNDR8v9GbRHA9AUlpw1JBio.roa (hash: D5TksZpwG3SQ7rtD3PvQaY0VIClKXUQssfssM3S6CMo=) 7: c72wk2piK98wT4mJw8_ZtS1RplA.roa (hash: sWf1C2L00m53zAy7UBc4ltRNb1KloYEQlgh8zb6I1Tg=) 8: q5ijRhsoQMXQqvexZ__tLFhWfbE.roa (hash: RKODKNUK1hXqxPnqoVYe1vULFOrntBOl4JYsmeK1KQ4=) 9: vqgsCdnQjdwb8knW65OqR5JZyMQ.roa (hash: vaE98kS/d3xxz0YZliXnz/1dmO+QWIKwmXrkaJQJaCI=) 10: xyPRxt8gyN4UvPVCARX1LVhRpNY.roa (hash: 6Z0OEqU5ZvJLP8MHSq0j/bl+XSlDKyhwlrMFSdH8iSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:b6:95:48:c8:51:0f:a7:09:6b:fc:9e:d4:e4:5b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e Validity Not Before: Sep 24 00:00:21 2026 GMT Not After : Sep 25 00:00:21 2026 GMT Subject: CN=26159268d3a6f3b283cc42efe69badec7612bc0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:49:5f:41:90:84:f2:c1:03:cc:63:d0:12:e1: b2:d4:84:08:5c:39:08:ab:04:a6:af:7e:ea:69:38: af:48:30:c9:2a:73:23:79:d1:83:b4:07:7a:07:b8: 75:68:df:47:7e:bd:57:24:60:3d:aa:a0:15:9b:93: 76:fa:99:f7:d1:f0:b7:37:90:11:47:17:d4:bf:98: d3:16:09:e5:93:ed:ee:a5:90:6f:ce:98:87:9a:9b: 94:fc:19:bd:a7:76:d8:4e:21:30:b9:35:5f:70:61: 8f:74:cc:db:92:85:c5:78:8a:bb:f3:7b:cb:43:cb: 41:93:77:46:4c:e3:d3:1f:fd:7a:99:01:c5:0f:cc: 92:3a:61:ed:58:e4:c7:53:1b:fc:fb:09:c8:44:a4: 18:2a:58:49:61:ba:71:31:e1:39:10:d2:a0:03:a9: 56:72:24:d0:95:6d:c3:c5:22:47:dd:4a:01:b2:5c: af:9c:3c:1d:d2:d7:57:69:d9:4b:ab:e5:e3:52:a5: 4a:9a:ff:e8:e1:8e:a1:ec:72:fc:74:73:0e:0c:75: b7:62:cd:e4:89:e6:4f:1b:77:e2:fd:24:b4:33:a5: f1:30:8e:45:41:e4:c4:89:4b:c2:c5:d9:39:1b:6f: ac:42:a7:9b:0a:57:38:c2:37:95:81:c9:5d:10:a5: 1f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:15:92:68:D3:A6:F3:B2:83:CC:42:EF:E6:9B:AD:EC:76:12:BC:0D X509v3 Authority Key Identifier: keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:1c:00:6f:0d:1d:eb:f7:a3:21:c3:3b:39:96:13:a3:f9:82: 80:6c:d6:2e:a7:4a:4a:80:78:3d:d3:e6:4f:5f:c8:7a:95:85: dd:78:1e:5a:a8:a8:59:aa:da:7b:f2:ab:c5:07:1b:e6:7d:bd: 7e:ad:49:43:66:a5:93:d1:48:e8:12:64:57:18:45:61:fb:0b: 7d:bd:4d:a4:65:4c:e7:1e:c8:c4:fa:f9:67:ca:17:70:22:16: 88:d3:ea:ac:35:82:23:c1:b3:2b:a6:13:18:c4:26:e9:c6:4d: 10:33:c9:25:b9:f3:8e:e4:03:6d:d7:59:9b:c4:9b:90:ea:97: ab:e5:6a:75:39:99:44:be:94:65:b5:57:50:d8:e5:1d:90:54: 73:ca:82:cd:f3:e9:89:8e:44:70:0d:f9:d4:55:25:a9:53:98: ad:ae:2f:5c:43:ae:cf:b1:a4:9d:38:e3:68:18:02:36:51:14: 72:73:d7:97:fa:11:c4:2a:58:9d:d7:b2:d3:f5:26:eb:20:c6: 54:b1:b8:3d:3d:09:e5:cd:de:b4:20:0f:b4:04:09:f2:96:25: 23:bc:14:e5:2a:4e:d0:b1:c3:58:1a:cf:d3:ac:f4:12:ba:8f: 01:10:86:7c:f9:fa:eb:88:59:55:ca:ce:a2:e2:bf:89:19:27: fe:e2:34:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQtpVIyFEPpwlr/J7U5FsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk YzI2MWUwHhcNMjYwOTI0MDAwMDIxWhcNMjYwOTI1MDAwMDIxWjAzMTEwLwYDVQQD EygyNjE1OTI2OGQzYTZmM2IyODNjYzQyZWZlNjliYWRlYzc2MTJiYzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UlfQZCE8sEDzGPQEuGy1IQIXDkI qwSmr37qaTivSDDJKnMjedGDtAd6B7h1aN9Hfr1XJGA9qqAVm5N2+pn30fC3N5AR RxfUv5jTFgnlk+3upZBvzpiHmpuU/Bm9p3bYTiEwuTVfcGGPdMzbkoXFeIq783vL Q8tBk3dGTOPTH/16mQHFD8ySOmHtWOTHUxv8+wnIRKQYKlhJYbpxMeE5ENKgA6lW ciTQlW3DxSJH3UoBslyvnDwd0tdXadlLq+XjUqVKmv/o4Y6h7HL8dHMODHW3Ys3k ieZPG3fi/SS0M6XxMI5FQeTEiUvCxdk5G2+sQqebClc4wjeVgcldEKUfswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYVkmjTpvOyg8xC7+abrex2ErwNMB8GA1UdIwQY MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt MTRhMDk5OTNkNjcxLzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBwAbw0d 6/ejIcM7OZYTo/mCgGzWLqdKSoB4PdPmT1/IepWF3XgeWqioWarae/KrxQcb5n29 fq1JQ2alk9FI6BJkVxhFYfsLfb1NpGVM5x7IxPr5Z8oXcCIWiNPqrDWCI8GzK6YT GMQm6cZNEDPJJbnzjuQDbddZm8SbkOqXq+VqdTmZRL6UZbVXUNjlHZBUc8qCzfPp iY5EcA351FUlqVOYra4vXEOuz7GknTjjaBgCNlEUcnPXl/oRxCpYndey0/Um6yDG VLG4PT0J5c3etCAPtAQJ8pYlI7wU5SpO0LHDWBrP06z0ErqPARCGfPn664hZVcrO ouK/iRkn/uI08g== -----END CERTIFICATE-----Generated at Thu Sep 24 02:53:53 2026 by rpki-client