$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: ndkdMS5B2KbU4fl8pYynajnxuz4dCFa9J5vcinc77bA= Subject key identifier: A6:97:84:C5:25:38:95:A9:24:78:86:8D:1E:20:89:0D:7F:46:71:B8 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 01A0CF36B26076BBDA44BB6A954F1D7BA363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0BE7 Signing time: Wed 23 Sep 2026 17:01:03 +0000 Manifest this update: Wed 23 Sep 2026 17:01:03 +0000 Manifest next update: Thu 24 Sep 2026 17:01:03 +0000 Files and hashes: 1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=) 2: 6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa (hash: z38nmLbA27NPlhWOJNNoq+Tpqv3KWZDwtJ61CNlRP7U=) 3: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=) 4: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=) 5: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=) 6: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=) 7: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=) 8: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: v6vuIb91xr4RtSEEiqA4M0LHynMx3udjB54EViJSSoI=) 9: X-k71aDoZWtFtR_cnu9r97seWXY.asa (hash: lw8Nl/kqTmv0YBXcCPnKH/oG1mGI+Wcg8DdG5SlWra4=) 10: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=) 11: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=) 12: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=) 13: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:36:b2:60:76:bb:da:44:bb:6a:95:4f:1d:7b:a3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Sep 23 17:01:03 2026 GMT Not After : Sep 24 17:01:03 2026 GMT Subject: CN=a69784c5253895a92478868d1e20890d7f4671b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9f:10:74:35:ee:0c:70:16:f0:dc:96:fc:b8: 3e:07:a5:e1:18:00:d5:04:10:ff:86:a1:e7:b9:95: a3:b0:0b:09:c2:7e:04:24:f9:bc:71:a9:19:dc:bd: 88:09:d5:da:af:b1:1e:d9:de:ec:1c:85:f2:31:d8: 9a:9e:d0:64:a6:e1:12:51:e4:37:03:10:cf:1c:38: b1:ae:10:7c:c6:95:2e:77:38:5a:ac:45:27:1d:93: ba:f0:f7:d9:52:23:bc:ea:dc:1d:03:f2:b3:a0:97: be:3b:85:eb:d1:ac:c0:16:c9:18:da:5f:c3:1e:14: 69:25:cd:64:b2:f7:68:59:15:07:75:61:75:2a:ca: 55:ce:70:c7:5e:f0:cd:bf:5a:67:83:bf:85:eb:56: 27:5d:0a:f0:2c:87:0a:90:05:90:82:dc:f9:4d:58: 58:97:e0:ce:35:4b:57:5f:7d:29:b8:38:9f:63:4a: be:e5:3e:b9:22:e0:39:33:91:f0:5a:98:38:67:0e: 60:41:99:f4:22:02:90:2f:93:4e:4c:86:39:a7:15: 3a:fa:a6:ef:d8:24:5f:35:5b:10:79:8c:7b:54:af: 74:4b:5a:4b:4f:43:ab:1c:0b:9a:62:e6:9f:6e:1b: 97:46:cf:0a:82:a1:dc:6b:5b:ae:31:74:ab:1c:b0: 67:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:97:84:C5:25:38:95:A9:24:78:86:8D:1E:20:89:0D:7F:46:71:B8 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ed:c4:95:80:14:f5:90:90:05:b8:aa:f7:8f:40:fd:8a:d7: 41:91:e7:f2:0b:a3:02:33:ab:04:75:9b:a9:dd:c2:b9:41:1f: 37:70:ff:2e:cf:02:70:b7:06:91:7b:d8:84:35:f2:be:34:05: ac:09:20:ba:7a:5a:b7:cb:b8:53:c3:c5:46:0d:ca:a1:05:82: 74:68:f2:de:36:83:01:19:90:e7:77:db:ab:18:d8:1e:02:26: 25:26:15:07:76:37:75:4e:00:60:b4:1d:71:b1:44:fa:54:30: ce:4c:d6:69:9c:b2:98:f9:07:97:0b:48:ae:9e:55:b6:5d:6d: 50:a4:32:a7:2f:0a:ae:67:95:2f:30:cc:27:0f:c7:b1:38:b7: 47:76:de:68:56:84:79:b0:1d:a3:7f:b6:bd:05:50:ac:0b:7b: d5:be:67:2a:5c:e7:af:1e:09:24:0d:36:6b:56:f2:5d:25:87: 70:c6:05:bc:4f:df:32:60:ef:6b:61:39:20:89:2c:fc:82:6a: d7:51:49:d3:80:d9:e0:27:ab:a1:7b:fe:8e:f7:09:ff:34:ed: 00:6e:46:5e:bb:fb:7d:c5:04:a8:a6:f1:f5:7c:ea:09:84:31: 18:30:8d:9d:05:c8:66:61:d8:e5:cc:bc:a6:3d:70:84:77:1c: 8b:f8:71:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDPNrJgdrvaRLtqlU8de6NjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwOTIzMTcwMTAzWhcNMjYwOTI0MTcwMTAzWjAzMTEwLwYDVQQD EyhhNjk3ODRjNTI1Mzg5NWE5MjQ3ODg2OGQxZTIwODkwZDdmNDY3MWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm58QdDXuDHAW8NyW/Lg+B6XhGADV BBD/hqHnuZWjsAsJwn4EJPm8cakZ3L2ICdXar7Ee2d7sHIXyMdiantBkpuESUeQ3 AxDPHDixrhB8xpUudzharEUnHZO68PfZUiO86twdA/KzoJe+O4Xr0azAFskY2l/D HhRpJc1ksvdoWRUHdWF1KspVznDHXvDNv1png7+F61YnXQrwLIcKkAWQgtz5TVhY l+DONUtXX30puDifY0q+5T65IuA5M5HwWpg4Zw5gQZn0IgKQL5NOTIY5pxU6+qbv 2CRfNVsQeYx7VK90S1pLT0OrHAuaYuafbhuXRs8KgqHca1uuMXSrHLBnDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaXhMUlOJWpJHiGjR4giQ1/RnG4MB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQe3ElYAU 9ZCQBbiq949A/YrXQZHn8gujAjOrBHWbqd3CuUEfN3D/Ls8CcLcGkXvYhDXyvjQF rAkgunpat8u4U8PFRg3KoQWCdGjy3jaDARmQ53fbqxjYHgImJSYVB3Y3dU4AYLQd cbFE+lQwzkzWaZyymPkHlwtIrp5Vtl1tUKQypy8KrmeVLzDMJw/HsTi3R3beaFaE ebAdo3+2vQVQrAt71b5nKlznrx4JJA02a1byXSWHcMYFvE/fMmDva2E5IIks/IJq 11FJ04DZ4CeroXv+jvcJ/zTtAG5GXrv7fcUEqKbx9XzqCYQxGDCNnQXIZmHY5cy8 pj1whHcci/hxQw== -----END CERTIFICATE-----Generated at Thu Sep 24 01:12:41 2026 by rpki-client