$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: GsH1+zU5WoB68rF47Q2yOHXmKAdUiCQqlEO0H9rOUrs= Subject key identifier: F8:9C:FB:1E:5A:E1:42:03:FE:75:82:72:F4:1E:90:88:F7:41:31:19 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 01A0D6F10D0ACF1217EE30647065BC038F69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0BEB Signing time: Fri 25 Sep 2026 05:01:56 +0000 Manifest this update: Fri 25 Sep 2026 05:01:56 +0000 Manifest next update: Sat 26 Sep 2026 05:01:56 +0000 Files and hashes: 1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=) 2: 6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa (hash: z38nmLbA27NPlhWOJNNoq+Tpqv3KWZDwtJ61CNlRP7U=) 3: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=) 4: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=) 5: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=) 6: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=) 7: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=) 8: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: F9ag3M9+20PrvD7ezvRhqp07juvrdumJ/EWXP8odmpM=) 9: X-k71aDoZWtFtR_cnu9r97seWXY.asa (hash: lw8Nl/kqTmv0YBXcCPnKH/oG1mGI+Wcg8DdG5SlWra4=) 10: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=) 11: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=) 12: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=) 13: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:f1:0d:0a:cf:12:17:ee:30:64:70:65:bc:03:8f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Sep 25 05:01:56 2026 GMT Not After : Sep 26 05:01:56 2026 GMT Subject: CN=f89cfb1e5ae14203fe758272f41e9088f7413119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:15:02:40:fd:38:55:31:4d:e2:40:3f:77:38: a5:d6:d2:23:1f:9b:d7:84:68:20:32:76:e6:e5:53: 92:49:1f:65:65:d1:51:73:b5:9e:7b:4d:15:7b:ef: c2:c9:9e:e3:b3:c6:b3:53:72:ca:22:58:b1:b3:ad: 24:a0:41:a0:e2:62:15:10:8a:27:88:37:92:e4:52: c4:97:24:37:0d:0c:ef:cb:87:a1:4b:8b:43:66:23: b1:de:cb:3f:a7:aa:9d:6d:f4:43:43:57:fe:68:34: fc:6d:3b:b6:4e:21:11:bc:5a:da:5e:52:0a:47:0c: 69:a5:cc:7d:62:82:2a:36:50:c9:96:60:35:a5:d2: 70:c1:ca:e1:40:a5:2f:89:cd:da:3c:19:7d:6d:d1: 20:9c:55:60:68:a7:6a:d5:62:73:cf:31:5c:63:c0: 04:d5:0e:9b:51:75:db:99:e3:fa:cc:cb:68:c2:00: 6e:83:dd:54:85:fc:84:51:73:ed:a4:87:75:a9:b7: 8e:60:a4:fe:26:42:29:d7:98:fa:47:fa:97:cf:72: a5:c6:6d:cb:b3:d3:7f:a7:5a:e9:6a:64:45:e5:67: 08:d8:3b:3d:07:5b:e6:4f:1b:3a:88:1c:4b:c9:9c: c3:9d:84:e7:22:a6:40:64:32:fd:01:e4:dc:fc:57: 0a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9C:FB:1E:5A:E1:42:03:FE:75:82:72:F4:1E:90:88:F7:41:31:19 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0e:8f:28:3d:b2:6d:f4:eb:cd:58:cc:d8:70:82:b4:53:4a: 54:2e:ee:d5:67:a5:66:28:df:95:86:81:85:22:f4:ff:74:a5: 3f:25:ff:a3:cf:64:51:b8:1e:ae:f3:bf:fb:1e:6d:4b:b6:84: 5c:57:cc:ef:16:2c:37:9a:be:ea:83:22:27:23:b6:1a:b0:7b: a9:08:cd:2b:d8:09:75:73:bf:d7:2c:db:94:7b:1c:4b:c0:ad: c1:26:94:98:85:c1:c3:0c:b8:2a:19:14:37:3a:15:ba:c3:19: c7:26:36:35:71:f6:00:19:94:e0:58:8e:7b:dc:61:1a:54:8f: 4e:a9:0f:64:c7:46:07:45:fb:15:66:d9:4f:10:b8:32:7e:7a: a6:ae:1a:b4:7e:2b:ea:c0:70:ff:bd:aa:4f:48:a9:3f:92:e3: 1d:72:e4:3e:68:68:e6:3e:2e:bb:d7:22:bd:73:a6:ac:93:a2: 2f:ab:fa:c9:83:65:d9:8b:95:3e:1b:65:4a:b4:fc:9b:e0:fe: f5:c3:c9:80:5d:1b:90:6a:7f:1b:5e:89:a8:84:34:e6:86:08: 7e:d9:37:07:49:d0:63:d1:a6:63:9c:30:85:71:1f:06:34:8c: c2:83:13:35:9c:7b:5b:57:3b:58:e8:73:e4:93:53:2a:c0:db: da:e3:02:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDW8Q0KzxIX7jBkcGW8A49pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwOTI1MDUwMTU2WhcNMjYwOTI2MDUwMTU2WjAzMTEwLwYDVQQD EyhmODljZmIxZTVhZTE0MjAzZmU3NTgyNzJmNDFlOTA4OGY3NDEzMTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRUCQP04VTFN4kA/dzil1tIjH5vX hGggMnbm5VOSSR9lZdFRc7Wee00Ve+/CyZ7js8azU3LKIlixs60koEGg4mIVEIon iDeS5FLElyQ3DQzvy4ehS4tDZiOx3ss/p6qdbfRDQ1f+aDT8bTu2TiERvFraXlIK Rwxppcx9YoIqNlDJlmA1pdJwwcrhQKUvic3aPBl9bdEgnFVgaKdq1WJzzzFcY8AE 1Q6bUXXbmeP6zMtowgBug91UhfyEUXPtpId1qbeOYKT+JkIp15j6R/qXz3Klxm3L s9N/p1rpamRF5WcI2Ds9B1vmTxs6iBxLyZzDnYTnIqZAZDL9AeTc/FcKPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPic+x5a4UID/nWCcvQekIj3QTEZMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQ6PKD2y bfTrzVjM2HCCtFNKVC7u1WelZijflYaBhSL0/3SlPyX/o89kUbgervO/+x5tS7aE XFfM7xYsN5q+6oMiJyO2GrB7qQjNK9gJdXO/1yzblHscS8CtwSaUmIXBwwy4KhkU NzoVusMZxyY2NXH2ABmU4FiOe9xhGlSPTqkPZMdGB0X7FWbZTxC4Mn56pq4atH4r 6sBw/72qT0ipP5LjHXLkPmho5j4uu9civXOmrJOiL6v6yYNl2YuVPhtlSrT8m+D+ 9cPJgF0bkGp/G16JqIQ05oYIftk3B0nQY9GmY5wwhXEfBjSMwoMTNZx7W1c7WOhz 5JNTKsDb2uMCCQ== -----END CERTIFICATE-----Generated at Fri Sep 25 11:05:02 2026 by rpki-client