$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: HSC8NOQwvaX79r4/wN8BS84MvMnp6EIC858z7gtkbpw= Subject key identifier: 03:A3:76:C5:35:36:13:16:BF:24:EF:EA:C7:57:0B:5F:99:63:3A:44 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019D25F11029C581D425099C5E0CFEAB2474 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0A01 Signing time: Wed 25 Mar 2026 17:00:48 +0000 Manifest this update: Wed 25 Mar 2026 17:00:48 +0000 Manifest next update: Thu 26 Mar 2026 17:00:48 +0000 Files and hashes: 1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=) 2: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=) 3: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=) 4: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=) 5: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=) 6: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=) 7: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: se7qCCjirydEzC0F4KK+KgtLOhIz17kZvCvJGRKhRvw=) 8: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=) 9: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=) 10: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=) 11: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:10:29:c5:81:d4:25:09:9c:5e:0c:fe:ab:24:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Mar 25 17:00:48 2026 GMT Not After : Mar 26 17:00:48 2026 GMT Subject: CN=03a376c535361316bf24efeac7570b5f99633a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0f:b9:88:d2:98:00:07:b6:04:a3:55:c8:d0: 82:46:a8:6c:de:73:71:47:7e:0e:25:69:94:40:2f: 58:da:0e:d9:7e:3c:26:3b:b3:c1:14:51:71:d5:48: 9e:1a:66:b7:87:6e:df:7f:83:97:ef:0a:1a:63:ba: e1:9e:18:ee:8a:54:37:07:50:ba:ff:ae:41:7b:61: db:24:a3:50:7a:9d:58:95:ed:82:d5:c6:45:18:58: 81:6e:cf:5a:1c:cc:ea:0f:18:6b:ff:d7:4f:d1:78: 7d:5d:c0:c0:c9:d7:e8:76:08:a5:b3:d0:97:5b:69: 81:1f:3c:a3:75:6b:45:dc:14:b5:06:26:c8:1e:6e: 2c:7d:6f:5a:33:75:bc:1e:b5:e4:ad:15:88:b2:5b: 39:8c:85:1d:20:e3:16:23:da:2f:5a:46:ec:26:30: 69:96:e4:db:e9:47:77:15:2c:03:d1:a8:32:51:7a: 13:d2:85:68:ba:38:fb:3b:2a:4e:60:2e:e2:9e:3a: c2:e2:de:a3:6b:a8:e2:51:49:ff:60:eb:cb:0b:15: b5:04:c8:00:75:fb:c1:c0:09:74:cb:cb:a1:f8:b4: 8d:ff:5f:c8:77:e7:9b:ad:e7:e3:ee:8f:98:d8:a3: ce:2e:66:22:85:86:31:7e:0f:2d:89:3b:82:86:c7: 70:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A3:76:C5:35:36:13:16:BF:24:EF:EA:C7:57:0B:5F:99:63:3A:44 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:57:75:ff:89:8d:c3:0e:cb:17:61:d8:ab:4b:5f:cb:1d:95: bc:ee:23:2c:84:23:c2:87:e2:91:54:16:ee:65:e7:a7:85:84: 1e:27:d3:7e:ea:ee:2c:ec:19:0d:22:10:49:99:12:c1:44:97: fe:d6:7c:cf:42:c8:58:b1:0d:1a:4c:b9:02:73:a8:4a:2e:a2: 2e:ab:72:bf:7c:44:2d:f8:ca:fb:ea:eb:8a:1c:06:91:b6:6f: 7e:e8:f2:16:8e:08:f4:49:b7:d2:c5:0d:1a:c2:1f:a4:b5:20: a3:f2:ed:8e:54:b8:11:21:dc:d9:42:b2:6b:95:9a:23:40:44: 2a:e6:6f:13:71:ea:e4:f0:13:ba:ac:43:8b:16:2c:11:b1:1c: 25:f7:f8:20:a3:9c:0c:fa:e7:74:71:0d:f2:75:06:77:21:9b: 80:61:9a:c5:85:ce:03:44:dd:27:6f:83:96:2a:5e:63:20:ae: f7:d7:31:f3:b8:0b:16:6b:6e:94:00:24:b1:52:9d:2c:55:02: 2c:76:c3:23:01:d7:f4:88:05:b4:59:db:0a:81:77:8b:f1:29: d3:2f:0a:99:e4:33:4c:3c:9b:de:5e:9b:26:e8:25:45:0a:0f: 38:4c:54:0b:29:77:51:30:52:a1:dc:a9:3f:1f:90:c5:7d:38: ea:3a:ce:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8RApxYHUJQmcXgz+qyR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwMzI1MTcwMDQ4WhcNMjYwMzI2MTcwMDQ4WjAzMTEwLwYDVQQD EygwM2EzNzZjNTM1MzYxMzE2YmYyNGVmZWFjNzU3MGI1Zjk5NjMzYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ+5iNKYAAe2BKNVyNCCRqhs3nNx R34OJWmUQC9Y2g7ZfjwmO7PBFFFx1UieGma3h27ff4OX7woaY7rhnhjuilQ3B1C6 /65Be2HbJKNQep1Yle2C1cZFGFiBbs9aHMzqDxhr/9dP0Xh9XcDAydfodgils9CX W2mBHzyjdWtF3BS1BibIHm4sfW9aM3W8HrXkrRWIsls5jIUdIOMWI9ovWkbsJjBp luTb6Ud3FSwD0agyUXoT0oVoujj7OypOYC7injrC4t6ja6jiUUn/YOvLCxW1BMgA dfvBwAl0y8uh+LSN/1/Id+ebrefj7o+Y2KPOLmYihYYxfg8tiTuChsdwewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOjdsU1NhMWvyTv6sdXC1+ZYzpEMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVd1/4mN ww7LF2HYq0tfyx2VvO4jLIQjwofikVQW7mXnp4WEHifTfuruLOwZDSIQSZkSwUSX /tZ8z0LIWLENGky5AnOoSi6iLqtyv3xELfjK++rrihwGkbZvfujyFo4I9Em30sUN GsIfpLUgo/LtjlS4ESHc2UKya5WaI0BEKuZvE3Hq5PATuqxDixYsEbEcJff4IKOc DPrndHEN8nUGdyGbgGGaxYXOA0TdJ2+DlipeYyCu99cx87gLFmtulAAksVKdLFUC LHbDIwHX9IgFtFnbCoF3i/Ep0y8KmeQzTDyb3l6bJuglRQoPOExUCyl3UTBSodyp Px+QxX046jrO1w== -----END CERTIFICATE-----Generated at Thu Mar 26 00:36:08 2026 by rpki-client