$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: d1eX5qZEDfh+zMCoBT+DR+1ulJJjS7hCnqej7b/cbZ8= Subject key identifier: F9:83:73:61:80:8C:D0:9D:06:39:ED:1F:31:FE:0D:ED:F5:1D:41:DE Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 01A1DFB9DC758680C8D3B710C51EEFC0DB10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0C76 Signing time: Sun 15 Nov 2026 15:01:02 +0000 Manifest this update: Sun 15 Nov 2026 15:01:02 +0000 Manifest next update: Mon 16 Nov 2026 15:01:02 +0000 Files and hashes: 1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=) 2: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=) 3: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=) 4: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=) 5: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=) 6: J7UieLkU5cdt3Nx39UB2K-YkRso.asa (hash: 0tI8SwxUcx4SCw/fFFMKuEUlu9B0JZOlBVFNgIKxk28=) 7: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=) 8: KISMGvfigyXIh4YXo7sPXwQIHO0.asa (hash: cen5xYbD83N6WxoeHm7YVnvogV5B2+/8v4VEwr9kzTY=) 9: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: VSqFvB0/DBOxORRU+pPms9phECmk+Y8DJTGta4A3MQE=) 10: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=) 11: ky6aEM3QS8sYnRUJTuZ6SDwhAAg.roa (hash: fxV90Eu9cbxWk8vMXSQhqbwJr0KJjyMYtXo9QWz1xhA=) 12: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=) 13: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=) 14: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:b9:dc:75:86:80:c8:d3:b7:10:c5:1e:ef:c0:db:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Nov 15 15:01:02 2026 GMT Not After : Nov 16 15:01:02 2026 GMT Subject: CN=f9837361808cd09d0639ed1f31fe0dedf51d41de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:c0:14:14:2e:b9:ca:40:69:3d:aa:df:84: 70:31:9b:3c:04:4f:3d:04:4d:29:29:a8:d6:b3:f3: e4:d8:ed:05:d4:e2:73:89:4d:65:45:28:13:78:67: 24:1c:37:8b:72:39:8e:49:78:7a:b6:3a:2e:01:15: 13:1f:36:43:ab:1e:44:5b:d6:86:0f:1d:e8:db:56: 31:fe:ff:c5:24:19:1c:87:b1:19:b4:74:62:9c:55: 6f:bd:8a:87:c0:28:59:bc:ea:02:52:86:b7:e9:c9: 60:68:bc:44:7f:eb:c2:38:d4:c4:96:64:4a:4d:8c: 15:be:2a:db:00:97:80:ef:7d:1e:af:80:31:99:28: b3:ae:97:ca:8c:02:42:1e:5c:64:44:2c:4a:28:12: a4:0b:a9:78:9d:e7:6b:d9:4e:0d:95:d5:24:2a:f0: 4a:e3:57:0d:ef:5c:05:0c:a1:4d:2c:25:e9:c1:12: 9b:0f:34:6d:fb:ff:8b:c2:52:f9:76:45:a2:6b:79: 1f:ae:97:93:23:8a:ea:4d:64:68:6f:46:23:b4:ea: d3:4f:a9:24:dd:f6:ea:2a:01:0e:b1:3e:96:48:4d: 9d:32:2e:0b:f5:73:ed:35:26:3a:40:40:53:8f:40: 27:c0:97:5b:b3:89:52:49:57:1a:61:04:0f:61:2b: ce:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:83:73:61:80:8C:D0:9D:06:39:ED:1F:31:FE:0D:ED:F5:1D:41:DE X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cf:8e:90:9b:ba:2a:3f:c6:ef:94:27:ca:f0:55:44:2c:d4: d2:ba:bf:e1:bc:60:2c:2a:ee:ba:90:c1:3e:9a:6e:29:cb:50: ab:d6:d6:15:c0:80:89:d8:84:9a:5b:fa:1f:f9:f3:1e:f8:60: 8a:7a:53:83:28:62:bb:08:b0:b7:25:6a:d6:8d:8d:fb:85:c6: 07:92:37:09:9a:ba:3a:9a:15:5b:5c:19:51:be:17:35:af:65: 15:c6:37:28:ed:fe:e3:14:2c:1c:19:07:cf:9c:c1:a7:16:25: 16:91:df:79:33:25:79:88:d7:15:31:a9:a8:bd:25:4c:c0:51: d7:b7:fa:6b:1b:39:dd:a3:5d:a4:cd:8a:6b:ca:a7:d5:ee:dd: b9:8d:30:a2:66:75:ac:65:72:8c:73:6f:b6:f4:89:39:81:11: 73:63:d7:54:e6:9d:f7:5b:dd:e1:d2:f0:f4:7e:66:e0:29:ef: db:cd:90:6b:b1:f1:6d:4c:e8:4c:ad:51:ec:fe:bf:60:81:8f: ea:55:5a:69:48:50:f5:50:67:19:cb:9e:89:00:8b:4b:06:bf: 5f:2e:01:47:63:df:ec:29:1f:85:35:93:37:a1:58:b9:46:41: e2:70:6f:48:a4:cd:ef:e7:ed:dc:71:75:67:7b:db:e3:fe:5b: 77:f0:64:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfudx1hoDI07cQxR7vwNsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYxMTE1MTUwMTAyWhcNMjYxMTE2MTUwMTAyWjAzMTEwLwYDVQQD EyhmOTgzNzM2MTgwOGNkMDlkMDYzOWVkMWYzMWZlMGRlZGY1MWQ0MWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd3AFBQuucpAaT2q34RwMZs8BE89 BE0pKajWs/Pk2O0F1OJziU1lRSgTeGckHDeLcjmOSXh6tjouARUTHzZDqx5EW9aG Dx3o21Yx/v/FJBkch7EZtHRinFVvvYqHwChZvOoCUoa36clgaLxEf+vCONTElmRK TYwVvirbAJeA730er4AxmSizrpfKjAJCHlxkRCxKKBKkC6l4nedr2U4NldUkKvBK 41cN71wFDKFNLCXpwRKbDzRt+/+LwlL5dkWia3kfrpeTI4rqTWRob0YjtOrTT6kk 3fbqKgEOsT6WSE2dMi4L9XPtNSY6QEBTj0AnwJdbs4lSSVcaYQQPYSvOfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmDc2GAjNCdBjntHzH+De31HUHeMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXc+OkJu6 Kj/G75QnyvBVRCzU0rq/4bxgLCruupDBPppuKctQq9bWFcCAidiEmlv6H/nzHvhg inpTgyhiuwiwtyVq1o2N+4XGB5I3CZq6OpoVW1wZUb4XNa9lFcY3KO3+4xQsHBkH z5zBpxYlFpHfeTMleYjXFTGpqL0lTMBR17f6axs53aNdpM2Ka8qn1e7duY0womZ1 rGVyjHNvtvSJOYERc2PXVOad91vd4dLw9H5m4Cnv282Qa7HxbUzoTK1R7P6/YIGP 6lVaaUhQ9VBnGcueiQCLSwa/Xy4BR2Pf7CkfhTWTN6FYuUZB4nBvSKTN7+ft3HF1 Z3vb4/5bd/Bkaw== -----END CERTIFICATE-----Generated at Sun Nov 15 17:04:54 2026 by rpki-client