$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft File: Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft (raw, json) Hash identifier: vs4HFo1hLbXFKBSKaNOeVvVZ96MNVzAGFVoPZ5bVlyI= Subject key identifier: B9:B5:E1:5E:84:5B:21:A6:2F:BB:EF:94:96:7B:A8:CE:C1:EC:30:14 Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09 Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09 Certificate serial: 019D260250D7CE90020198DF5900482A8388 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft Manifest number: 0136 Signing time: Wed 25 Mar 2026 17:19:39 +0000 Manifest this update: Wed 25 Mar 2026 17:19:39 +0000 Manifest next update: Thu 26 Mar 2026 17:19:39 +0000 Files and hashes: 1: 8Wa9_vPZrMT6pIcho3_TYjVtqk8.roa (hash: h7V44SoFq4shpd3Oi+k/Fm8gG7BNoMR2fp5YWnkKrKs=) 2: 8fi5iM7BFQj_Bt75OCC-P5CN6zk.roa (hash: Bsmzr3yLe5P1CEDMP39xK9eBS/Zhsocr2KSbPcvXVlc=) 3: 9IXwTzzllCJjNWjosEw9IqDjZZ4.roa (hash: qwbUB4pGtNvNetLT365Cb9mkywkHbHRPACK7i2qfcIU=) 4: 9anljo1u38WRWdyUlNqYgyIsWkc.roa (hash: njj9lvf50nQWay0CSc0j5wmaZyV9ulWW8W8UXJFVS5Y=) 5: 9uJevseWtHq9WwkYBlyBhrsiipI.roa (hash: XWHVmAdhqAX/5wURmMpdbLR+UcMWugrpYTC02rWpXjA=) 6: B7uJFcLqc7Xu9qJ8s4tqACmUV88.roa (hash: izOIKuTGDVS/wOGTAaBbH31pYgKeWIaPte5X/+hKw+s=) 7: D8MTwdqOGoqiadxznmbc58GGyCw.roa (hash: hWg4hQ21GnKD+Kub0XusadCxYjYanrHdJMGDk68zWQI=) 8: E1p-EiP-K3W7sBZ2XkVP8qQgcZA.roa (hash: xLwNX/y+vwTWgRCupLXSnIneiG+nmEB41RZKrsckRT8=) 9: E_XsrZw3WqGMs5VmPLVxGcnlMCY.roa (hash: 2D+oUitD46TfrbaoAd0xRO/fd4Hsgz+E1RH5vXR/vSA=) 10: FmZg-bW3hE1ru2pRCONVrvD3Qy8.roa (hash: 01XBXhI4ohSZEUimcwiN6YwEt7OYVjfuP0CIc0/Aghs=) 11: Ipq3DVKETg8P3AR2d3v53XRHP8E.roa (hash: OexlMNg1bkCu+ze+kDH7HWalEhLxpKBrfkNHr92XQtw=) 12: Mcb7zLrwq-IZQkpW29I1rFsQ0Pw.roa (hash: pUyyiQNHGkW4PQD5zR5m+kJdH4T6tnzkxl5t96JY/rY=) 13: NzvJC_KMleGhtmNpsqKr65nFwKw.roa (hash: xdkY4pIv1Ov6lhrcogUMNsybPzhiBPJCRk9I0apg674=) 14: PPR9iY6e7wB8dBG4hPjEf_bXgrE.roa (hash: rVsXHJx7s3hFoA+dVNyfw/DyXL6OOCw5L+m6ouelVRM=) 15: RJf-yUIMAhTeHpw5w0dxvSvA-T0.roa (hash: ByePBlZXfscW9XsJ3W1m30RSO4fXTm44BH7JPgnXxLw=) 16: SIanYXi3_Td_KBjzKBHJ7l1iE-Q.roa (hash: Dal4pj3Xjjtf0SlnyAHbIFvMCSsx6mApd3Zdi3IhoXE=) 17: Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl (hash: lpO+M5Z6HaphSk4omTE5QXlZylGHyKcYYBDIHDo0UuU=) 18: Ur8FLPafl7NLCGJMZdM86uXJeOE.roa (hash: XYYsdiGwo/GgWz447XdpK9VNCxb25m7GWU+Jc4A5wfc=) 19: WlHGR7Ev-NUqGa5lly6f0ty8jbU.roa (hash: 3wdvSOUkCXlAdB149RZu9MzpB/eNTTakMeLIkJ4Gg0A=) 20: Z3tFdufgPl6EBqM83ZZTUlCsxeU.roa (hash: bg7JnMjL5ADxpVlyak0KcCSpMSEHMIGLxB84iGem6Ng=) 21: ZediFr-kiNcab3zFz4eXtCdrDDY.roa (hash: ADnthEU+Brh9wA//ELyNS+LJVvpzl9jC3U47kC784aw=) 22: Zy4u8OQmpS--VuyxpTtEdgQj7u8.roa (hash: 3tm5LplJNsUwv6QzEI2j7o9juIR/DbsW3Y8t7c94ZKY=) 23: bLqAv8qJ1yamxnSzN-ZJySLZiH4.roa (hash: X+3tvGzRayA2xyP8S1hTpfCmnILZBZQ0R1nzlin9oHw=) 24: bg5OuQwu_G2wxecDYapAVTrKZSU.roa (hash: ggkhRBAvbvqvsvnY0841/FOrSyw9xDw7h9YsiZA8oaM=) 25: eLeqe7_YpZFz_8QwJKi3Unc8HqQ.roa (hash: US9Oa3u4UtqaGF2sA8nZWPbipyXsj6nuL34f5I+dpv0=) 26: fZyAK4-7mQSEWnWBipSmG29XhLg.roa (hash: VyEh3g7KQaKsqvuCH4j2Vw0hondgOxxQ+lgKbocRpTM=) 27: gQWGyIZoZwBBRCaHOpnA4s1PFK0.roa (hash: PsU55lQjR+ZPtUxXH0qMW6J5RZfPVGGea/JdpTz/Gas=) 28: kNLGNQYYVKNNtz4NPXzfNfaO2yA.roa (hash: VJmnS5B5bfBOwQGEw3DwSY9zU3wS19eOtw0ATx1JGzk=) 29: l4lKElWg8jkb3S2y8G5HtpLv_8E.roa (hash: eAlM3UbqMidzWRUNV68Iw9JlOfYfEzuWB2gx059CUzU=) 30: mbBTqwtKUVY2Xjg363e72K-RKfE.roa (hash: b5Y7+f0OIKBDytvrnxS0YgZNpnf7Br1yoO+WvW+HE8w=) 31: rxFdQ8wHm79-KwtfCQQduhZ5MX4.roa (hash: 4fE5VLNDidIj7JkBBuOBn6AqwpO9aA+OzOMLJ27mh8o=) 32: x7UH7ZJrApI32sK581_akJQW4t8.roa (hash: 7fHtqcAW0zaDA/MAx+F9yZB2mEvSMVFZMHyQwzDUnVo=) 33: zKqnquuEn-McTEol5oGnIhYAmy0.roa (hash: oCtvyo+fDE9JdHJIxhwHi/+Z9/aIRkF4L/I9VIjuKP0=) 34: zocALgimkWCVbzszBR2uphEiBtI.roa (hash: 4ANr/Owql6aOh54xvEE6sr/jfbMHNepGi5TVeFJshk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:02:50:d7:ce:90:02:01:98:df:59:00:48:2a:83:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09 Validity Not Before: Mar 25 17:19:39 2026 GMT Not After : Mar 26 17:19:39 2026 GMT Subject: CN=b9b5e15e845b21a62fbbef94967ba8cec1ec3014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:38:63:1b:39:a3:0f:03:02:7a:0c:52:14: bf:14:7c:ab:82:19:24:a9:66:ba:e8:57:ce:26:e3: cf:a9:87:e1:8c:6d:f4:fb:d4:2c:3d:e4:4b:6f:19: 3a:12:7b:14:e6:d6:fa:c2:f0:0d:ea:7a:c4:c5:ec: 78:85:4c:ec:4b:91:f1:a7:d7:73:53:f6:6a:bc:3e: b1:69:a1:ec:03:5d:bd:87:c3:aa:e7:a6:d9:43:49: fe:97:6f:45:cd:ca:f1:5c:c8:de:d7:66:43:9b:18: ba:06:8f:58:ad:6b:a2:b6:a7:82:c1:f3:c1:88:ca: 65:87:7a:bc:05:89:bb:24:a7:9c:44:18:97:0a:18: 0b:78:d4:3b:6c:2d:9e:68:38:70:ca:b6:0d:ea:55: 1c:9d:3b:34:57:09:bc:ee:3e:05:f0:bb:a4:cf:7e: 23:89:d8:12:4e:ca:20:4d:b7:32:f5:cd:36:a6:96: 29:1f:16:0b:ab:c2:9d:94:29:2e:1c:18:b7:20:21: 54:fc:bb:a7:d1:e7:ed:10:da:4e:6e:a6:e1:93:b4: 20:f4:ab:3f:47:1b:2d:75:9e:e3:a2:ce:e8:5b:36: 49:4e:42:cb:e4:89:f1:fc:bb:56:df:8e:de:3f:46: d8:d0:c1:0b:da:0c:49:b2:82:e6:61:30:98:72:fc: c8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B5:E1:5E:84:5B:21:A6:2F:BB:EF:94:96:7B:A8:CE:C1:EC:30:14 X509v3 Authority Key Identifier: keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:77:ae:1f:cf:f0:c1:21:44:d9:02:1b:0b:cc:8f:27:53:34: fa:b5:a1:57:92:ca:de:a6:29:2e:f4:42:64:da:40:51:20:3d: ae:07:1b:e1:09:74:b3:c7:95:a3:72:8e:0d:a2:b4:8b:7d:a6: 29:9c:c7:5d:53:b4:db:8f:49:63:f1:98:0e:77:3f:90:c5:f6: 19:e0:08:e6:b7:b5:8a:b5:3d:0c:64:31:c2:06:37:b8:49:1e: f4:a5:0a:ab:d3:1d:79:40:3f:a5:b1:66:4c:95:59:21:1c:75: 37:05:13:2c:0c:c3:82:79:69:ff:38:88:bf:c8:a0:69:a6:e0: e6:24:f6:5d:54:ee:85:9d:1b:85:b4:5c:b1:ef:5e:a1:67:2c: 0b:4c:0e:10:08:73:f7:04:ca:73:45:57:0a:23:09:65:66:fb: 98:b8:ed:58:b5:a7:5d:17:ae:29:d0:6b:45:f7:23:11:58:1a: d6:e9:e9:4d:75:8f:e3:17:8a:4b:80:49:0c:3f:08:93:10:a7: b4:3e:88:ec:d4:50:3e:44:0f:aa:28:bf:41:2a:47:7d:b2:d7: 6c:3c:08:74:c9:77:5a:c6:dc:89:d7:69:d5:e3:e3:20:48:20: 71:d5:e9:89:8d:b5:37:36:23:a8:a5:97:d5:0f:b5:a4:3b:03: 0e:c2:79:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mAlDXzpACAZjfWQBIKoOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1 MzBiMDkwHhcNMjYwMzI1MTcxOTM5WhcNMjYwMzI2MTcxOTM5WjAzMTEwLwYDVQQD EyhiOWI1ZTE1ZTg0NWIyMWE2MmZiYmVmOTQ5NjdiYThjZWMxZWMzMDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujI4Yxs5ow8DAnoMUhS/FHyrghkk qWa66FfOJuPPqYfhjG30+9QsPeRLbxk6EnsU5tb6wvAN6nrExex4hUzsS5Hxp9dz U/ZqvD6xaaHsA129h8Oq56bZQ0n+l29FzcrxXMje12ZDmxi6Bo9YrWuitqeCwfPB iMplh3q8BYm7JKecRBiXChgLeNQ7bC2eaDhwyrYN6lUcnTs0Vwm87j4F8Lukz34j idgSTsogTbcy9c02ppYpHxYLq8KdlCkuHBi3ICFU/Lun0eftENpObqbhk7Qg9Ks/ RxstdZ7jos7oWzZJTkLL5Inx/LtW347eP0bY0MEL2gxJsoLmYTCYcvzIswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLm14V6EWyGmL7vvlJZ7qM7B7DAUMB8GA1UdIwQY MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt M2JiOGIwNzVkNjlmLzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3euH8/w wSFE2QIbC8yPJ1M0+rWhV5LK3qYpLvRCZNpAUSA9rgcb4Ql0s8eVo3KODaK0i32m KZzHXVO0249JY/GYDnc/kMX2GeAI5re1irU9DGQxwgY3uEke9KUKq9MdeUA/pbFm TJVZIRx1NwUTLAzDgnlp/ziIv8igaabg5iT2XVTuhZ0bhbRcse9eoWcsC0wOEAhz 9wTKc0VXCiMJZWb7mLjtWLWnXReuKdBrRfcjEVga1unpTXWP4xeKS4BJDD8IkxCn tD6I7NRQPkQPqii/QSpHfbLXbDwIdMl3Wsbciddp1ePjIEggcdXpiY21NzYjqKWX 1Q+1pDsDDsJ55A== -----END CERTIFICATE-----Generated at Wed Mar 25 22:46:53 2026 by rpki-client