$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: Fk/1QuOpsNtU6Xq4+LZIaWldpcLSAm2HlGHfOrsJwUE= Subject key identifier: 75:5E:16:E5:86:B3:A6:B6:D3:0B:45:40:D5:8C:AC:EF:0C:46:08:F1 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019E1DFE4B32A58865037FF445A82A774D21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 14BA Signing time: Tue 12 May 2026 21:01:05 +0000 Manifest this update: Tue 12 May 2026 21:01:05 +0000 Manifest next update: Wed 13 May 2026 21:01:05 +0000 Files and hashes: 1: BK_uZd5RIdvcCcnIrkl91Qf2mFw.roa (hash: wV2RNnXCJX3V+Medw8LdpmAEbR5QwEUgTvufx7pFq14=) 2: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (hash: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=) 3: G9O4g34wmhpRqqqyNq64bnjh27k.roa (hash: lYlheaBAaMmywrolWQWx4QnBFOXnz365592aJuQe6Mw=) 4: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (hash: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII=) 5: XppJI7pSNx6BdFrEbdtPboTQL6o.roa (hash: Cty7u06Lt5vOCxE5CLtni9wB/17m9CZOi2zJp+IGXYM=) 6: hHQPymz7nrurWK651cK6wH1WQB4.roa (hash: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk=) 7: hn8HZ87MGm21OeAakwo0L7epBvo.roa (hash: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs=) 8: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (hash: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA=) 9: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (hash: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg=) 10: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: PbowqKf4MCgY8vQvEQhhS4QKXKQ8jwAAvjuIDBRF1GA=) 11: uibhPc4NbRy01honmhOVxxl-SbI.roa (hash: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ=) 12: utkmbyJ1-9TI5Iy29JQnzvwfdgw.roa (hash: MQitkqvZxc85BEfsLrabuKg5Cbpd+JVUjJLsFQDLJCQ=) 13: xxR8mx-20J_lo55Rh1660v5SUI4.roa (hash: 2Y9dBCwd98Bba/rHT3QIRjMGiqefSe3zB38HBIRd3qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:4b:32:a5:88:65:03:7f:f4:45:a8:2a:77:4d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: May 12 21:01:05 2026 GMT Not After : May 13 21:01:05 2026 GMT Subject: CN=755e16e586b3a6b6d30b4540d58cacef0c4608f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:6d:db:f6:b3:65:02:50:c2:13:06:85:6c: 89:8c:fa:37:fc:60:fb:5c:96:e1:c1:f8:5e:d5:5a: e2:bc:f9:67:95:74:5f:ba:ce:64:ec:b9:d4:27:bb: e8:94:8c:d6:8a:a3:09:7f:9a:e1:17:81:87:c9:a7: 08:fe:3a:4a:9d:04:33:40:a7:11:1e:9e:38:b4:28: 11:c2:51:18:c4:63:ff:1b:21:3e:ad:19:07:c5:f0: e5:17:29:e7:32:c3:ab:cb:18:b4:30:08:51:23:81: 70:a5:a0:14:32:79:00:8c:fb:11:70:5b:a4:a7:76: 3a:90:dc:f6:b4:1c:13:f1:32:f1:fb:77:7a:e6:7b: 3c:f7:0e:31:af:40:19:85:cc:52:05:8d:41:bb:7a: b4:f8:9b:c6:e3:a8:2a:1a:6f:23:4d:bc:40:68:5d: ef:65:2a:56:da:77:4e:3f:8d:e6:6e:f1:c1:0f:fd: 97:94:ec:49:5f:9f:be:18:67:7b:46:d6:4f:95:e3: 5a:a2:f9:c8:30:4d:ec:ab:0f:c4:e5:a3:5f:a6:ca: 1c:31:99:c2:ed:35:53:00:9b:da:48:c2:36:b1:62: fd:64:89:e2:6e:9a:19:8f:fe:77:06:69:48:17:08: fd:2e:1d:fa:68:1e:e2:a2:ec:8e:dc:ac:18:b1:20: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5E:16:E5:86:B3:A6:B6:D3:0B:45:40:D5:8C:AC:EF:0C:46:08:F1 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:0a:1b:9d:0b:f4:df:d0:9d:bf:a3:da:8f:89:ef:b3:dc:4b: ab:a1:fb:b7:41:bf:78:d4:79:4e:29:6c:ba:a3:81:e8:e7:cf: 82:64:3d:f4:5a:55:6e:32:21:92:ae:fe:60:fe:b6:87:8f:de: 1f:18:a0:9e:aa:3a:74:f8:ac:57:31:72:c2:5b:f2:02:5f:d6: 7c:99:c5:8e:cd:01:8c:3e:cd:0e:e9:81:41:10:c9:a2:84:98: f0:6a:9c:d8:a6:67:bb:87:29:57:00:36:15:c4:ce:88:ec:c0: b8:ed:f7:b6:66:7a:e7:d5:e0:67:40:ae:de:b3:d1:58:c8:26: f8:67:6e:15:ae:12:b0:21:e0:c1:d6:1d:26:da:16:dc:9f:94: 9c:2c:07:60:fd:8f:ce:8d:f1:60:67:ba:b1:0d:e0:79:98:e9: 98:cf:a7:20:4f:fd:f5:38:b3:fc:ea:79:d9:e0:69:13:73:67: d0:94:af:89:3d:8a:fb:eb:8a:c2:0a:9e:37:6f:d9:8b:ec:e2: 88:ee:15:d4:8a:c4:7d:f2:8a:6c:78:67:5f:71:d6:37:cd:9f: 32:fc:56:f7:04:36:8a:f1:e9:bb:8a:ea:20:71:da:95:c6:61: 7c:a0:9a:4e:b5:d0:00:79:48:95:25:34:86:46:f1:ad:ec:d8: 58:6a:b2:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/ksypYhlA3/0Ragqd00hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwNTEyMjEwMTA1WhcNMjYwNTEzMjEwMTA1WjAzMTEwLwYDVQQD Eyg3NTVlMTZlNTg2YjNhNmI2ZDMwYjQ1NDBkNThjYWNlZjBjNDYwOGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyVt2/azZQJQwhMGhWyJjPo3/GD7 XJbhwfhe1VrivPlnlXRfus5k7LnUJ7volIzWiqMJf5rhF4GHyacI/jpKnQQzQKcR Hp44tCgRwlEYxGP/GyE+rRkHxfDlFynnMsOryxi0MAhRI4FwpaAUMnkAjPsRcFuk p3Y6kNz2tBwT8TLx+3d65ns89w4xr0AZhcxSBY1Bu3q0+JvG46gqGm8jTbxAaF3v ZSpW2ndOP43mbvHBD/2XlOxJX5++GGd7RtZPleNaovnIME3sqw/E5aNfpsocMZnC 7TVTAJvaSMI2sWL9ZInibpoZj/53BmlIFwj9Lh36aB7iouyO3KwYsSDaCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVeFuWGs6a20wtFQNWMrO8MRgjxMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgobnQv0 39Cdv6Paj4nvs9xLq6H7t0G/eNR5TilsuqOB6OfPgmQ99FpVbjIhkq7+YP62h4/e Hxignqo6dPisVzFywlvyAl/WfJnFjs0BjD7NDumBQRDJooSY8Gqc2KZnu4cpVwA2 FcTOiOzAuO33tmZ659XgZ0Cu3rPRWMgm+GduFa4SsCHgwdYdJtoW3J+UnCwHYP2P zo3xYGe6sQ3geZjpmM+nIE/99Tiz/Op52eBpE3Nn0JSviT2K++uKwgqeN2/Zi+zi iO4V1IrEffKKbHhnX3HWN82fMvxW9wQ2ivHpu4rqIHHalcZhfKCaTrXQAHlIlSU0 hkbxrezYWGqyYw== -----END CERTIFICATE-----Generated at Wed May 13 04:59:07 2026 by rpki-client