$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft File: UJgPtq3oWPJlLnNpkxJshXWfBtk.mft (raw, json) Hash identifier: AHlA/PEE3Xa6EjLWN0/DLxGAC9TwlREC2wH7ildgfDs= Subject key identifier: BE:76:C8:43:7B:46:F3:EB:6F:8D:B2:92:66:6E:81:F0:87:82:6B:3E Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9 Certificate serial: 019D2A3BC8AE132E201BA9D713F500A36320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft Manifest number: 17F6 Signing time: Thu 26 Mar 2026 13:00:54 +0000 Manifest this update: Thu 26 Mar 2026 13:00:54 +0000 Manifest next update: Fri 27 Mar 2026 13:00:54 +0000 Files and hashes: 1: 4zPyCmOCOHn0UmU25C34lBLrfsc.roa (hash: mYeF9TieLkXAP7pTIPCY5kfzmWlfrZulfwAKyol+I8w=) 2: 8U9Wp8aMDTMHire9KsQQwLfqs00.roa (hash: X/erkao+YL7ZRtCVh/gBhtM8++R5nL+zCJPtIYT4ET0=) 3: HUNURVAA892dDIzCfcEspa0FlqE.roa (hash: zuRP0sT5Q7shDkaltBQBAdM4I77s5Z8T+hSw7WgROyk=) 4: Hd3ojefiZSO4EQV3qaL7pExW__U.roa (hash: gRRtQEbW2/M2MaLd+m10UeRJYblia3Rho50OsDCy5PY=) 5: OB9RZiF89Z1uRZeWn1vTQcGDais.roa (hash: jAA2Lpyh8IWvH3ZZq1p0bZ1EbJHY9jTF1clJ6M81wgk=) 6: Ti8i0UIny7Sj-LCspkWODf7h3eQ.roa (hash: iUMW9CXtMXsoO7pWBR6eDo8RzWNspIapoeSgUIgm3y8=) 7: UJgPtq3oWPJlLnNpkxJshXWfBtk.crl (hash: I8953ZLdjGEynI7fx7sZzn3kdzckx0eVZbdTtuAXfVM=) 8: _IW__XFXehaq9QdxRfT864VriOU.roa (hash: k90WCGYeq167jhMKLuGJ73HDgSUqj5sLLRTsPnjXIoA=) 9: cxkZbn0blHBZhN_WVkm447mHt1o.roa (hash: PIh/jQ39BbhdqKW9+Xaf1VMc438vWZrDb53e0GQNo2w=) 10: jgOsHUWcbSDiI_fNSViiorGknbI.roa (hash: ExxFYpwqdFjHSrJxztsKKOJte37WACbeefcX87tcqNs=) 11: nD5UUoUGQF8Rxq4gzZbVuJa8PJE.roa (hash: RvmrVvYCv5AOaoQZhyeX78k0GCJb5MBQlGW4Cu7wFrA=) 12: prmQZEtK7d8LPnJ5d9AMaIwx-vE.roa (hash: a0MOVqD8PQL7h5XQHdpb3HadDSEFipAD1XuOUI4ggCg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2a:3b:c8:ae:13:2e:20:1b:a9:d7:13:f5:00:a3:63:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9 Validity Not Before: Mar 26 13:00:54 2026 GMT Not After : Mar 27 13:00:54 2026 GMT Subject: CN=be76c8437b46f3eb6f8db292666e81f087826b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0d:7b:66:c1:4b:52:e6:09:6b:ac:46:95:91: 66:1f:9c:aa:35:95:ce:32:a0:29:7c:04:f8:79:9a: 56:c5:89:d3:13:59:49:26:aa:89:ff:e2:23:a3:0d: 66:fa:79:c0:d1:2a:7e:8c:70:ed:d1:27:07:17:9c: 0a:d6:ef:ab:1a:b5:83:b4:04:f2:fa:2e:09:7c:57: 33:45:52:c9:d7:c4:45:36:6c:10:62:7a:e4:25:b2: e0:d4:0a:bc:c3:3c:aa:c2:56:15:f3:ed:06:e6:7d: e2:a6:01:61:10:94:06:b3:d3:80:04:2c:68:9b:2e: 7b:14:f9:c7:a4:c3:a7:75:4e:61:d4:a6:3b:41:2c: 05:c3:71:81:45:86:a8:3e:6c:65:32:21:fe:2b:3e: 14:be:88:aa:64:99:56:6d:d6:c1:6d:b0:05:d7:f3: 42:20:82:2c:c0:00:09:f5:d3:00:cc:92:8d:08:91: d2:a3:32:da:3d:5b:d5:12:7f:ae:3d:e7:b0:73:42: 05:f2:8f:11:cc:f5:9d:5e:b0:3f:f7:54:34:ee:62: e1:3b:0d:a0:e8:31:d4:9a:db:36:93:96:ba:5a:ca: fd:f9:f6:61:07:8a:d9:f6:56:0b:38:54:f9:3b:b4: 89:73:79:bc:ea:db:d5:eb:d6:cc:6c:18:55:83:2c: 77:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:76:C8:43:7B:46:F3:EB:6F:8D:B2:92:66:6E:81:F0:87:82:6B:3E X509v3 Authority Key Identifier: keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:83:92:cf:8e:b9:ff:d7:0c:57:91:7d:4c:6d:31:57:40:0c: 57:77:57:16:90:0d:32:15:f0:53:ef:f0:93:88:71:2b:ff:e1: 9b:aa:7a:a7:ae:73:3c:6d:7b:ba:e1:04:5b:66:9c:44:68:f0: e0:8d:65:c8:bd:97:7d:cf:2f:58:76:fa:41:0e:db:f2:ba:93: c6:f3:8b:e4:87:74:9c:b7:87:f2:08:12:23:89:3d:60:24:fe: 3d:73:b0:24:c3:60:c3:20:c5:49:e2:df:d6:30:02:80:db:68: 7c:9b:15:e5:7d:69:de:18:fa:a8:f7:bf:21:1b:4f:ba:b9:3a: 25:43:25:9e:20:da:ff:cb:65:82:05:a7:fa:46:7b:88:ff:d3: a3:e7:6a:bb:e2:35:39:7d:83:35:b2:40:75:19:d5:86:25:8b: 5b:8b:ba:f6:c3:0b:c2:c5:67:3e:a8:d4:4c:41:b7:a0:4a:24: fa:95:cc:3e:ce:8f:ab:aa:a2:7c:47:99:54:cd:9c:7c:ce:74: e7:37:e6:f4:04:5d:ec:10:14:7c:e6:2c:5e:ea:07:18:6b:05: 34:49:00:60:a9:fa:87:cd:31:42:a5:51:59:cc:6f:20:a5:a0: 7a:df:a2:dd:2e:e6:f4:f6:e1:31:14:bf:bb:5a:1c:04:b9:3e: 70:a4:ad:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0qO8iuEy4gG6nXE/UAo2MgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5 ZjA2ZDkwHhcNMjYwMzI2MTMwMDU0WhcNMjYwMzI3MTMwMDU0WjAzMTEwLwYDVQQD EyhiZTc2Yzg0MzdiNDZmM2ViNmY4ZGIyOTI2NjZlODFmMDg3ODI2YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw17ZsFLUuYJa6xGlZFmH5yqNZXO MqApfAT4eZpWxYnTE1lJJqqJ/+Ijow1m+nnA0Sp+jHDt0ScHF5wK1u+rGrWDtATy +i4JfFczRVLJ18RFNmwQYnrkJbLg1Aq8wzyqwlYV8+0G5n3ipgFhEJQGs9OABCxo my57FPnHpMOndU5h1KY7QSwFw3GBRYaoPmxlMiH+Kz4UvoiqZJlWbdbBbbAF1/NC IIIswAAJ9dMAzJKNCJHSozLaPVvVEn+uPeewc0IF8o8RzPWdXrA/91Q07mLhOw2g 6DHUmts2k5a6Wsr9+fZhB4rZ9lYLOFT5O7SJc3m86tvV69bMbBhVgyx3HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL52yEN7RvPrb42ykmZugfCHgms+MB8GA1UdIwQY MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYOSz465 /9cMV5F9TG0xV0AMV3dXFpANMhXwU+/wk4hxK//hm6p6p65zPG17uuEEW2acRGjw 4I1lyL2Xfc8vWHb6QQ7b8rqTxvOL5Id0nLeH8ggSI4k9YCT+PXOwJMNgwyDFSeLf 1jACgNtofJsV5X1p3hj6qPe/IRtPurk6JUMlniDa/8tlggWn+kZ7iP/To+dqu+I1 OX2DNbJAdRnVhiWLW4u69sMLwsVnPqjUTEG3oEok+pXMPs6Pq6qifEeZVM2cfM50 5zfm9ARd7BAUfOYsXuoHGGsFNEkAYKn6h80xQqVRWcxvIKWget+i3S7m9PbhMRS/ u1ocBLk+cKStvQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:58:45 2026 by rpki-client