$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: 06y3/LhS44geusuHV81xjUZ5McmkGv+dui/yOBdOezQ= Subject key identifier: 70:A6:50:1E:0A:6D:AF:86:D2:E3:75:22:58:C5:DF:76:6E:37:90:F4 Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019D9A074CF0178DAA7B9480B796EF1D658A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 113F Signing time: Fri 17 Apr 2026 06:01:02 +0000 Manifest this update: Fri 17 Apr 2026 06:01:02 +0000 Manifest next update: Sat 18 Apr 2026 06:01:02 +0000 Files and hashes: 1: 1-E2eDnplntvlwe4dqvPIQjAUIhc.roa (hash: 9/Z1jYPf+fJJ28ARuzFgbWJGXm1CGkGx0/9J9dd55no=) 2: DiGtvUzmZAjH_XRU7fEE9dtFAko.roa (hash: VN3eL01e4plHrv0UjJUEXbnazkjQUDK4S/f50F+hnyA=) 3: MXOis4gKQU6T3fl9u9emfKn1I0g.roa (hash: J1k882H86FIPdqzqztH19RHHRsts9XhSK+QsDtFdrlA=) 4: PP9oA_E391BIuSGTuqgWVwQAMqM.roa (hash: 9n4A9VESg3N8stGG4GCkTD8TQyZX/jvYGa+MvIUmNaE=) 5: PxYDGFFeIMnR3R8ylA8SbuIB6xI.roa (hash: B8FamIOBKJ45rwoZ7RLg7M2fC1zz0YHW8ls9Ia37tyM=) 6: YbeGTIIokJMHl8QEnhR1xFC_ito.roa (hash: HgRFonCxtpdWKTM6rOV0crS0CJsk7MECWgrxxnYsFJU=) 7: jLSzdmpt6mZmgqvhH7NETi0wAYA.roa (hash: txBTBvHgOk8b8SenBZIk3YFAcUyYo3TaX05F0Mt13EA=) 8: mLqJvMc3MqTE99dcKgalJ1ySRfQ.roa (hash: a5WjFx/pe+eZo9TTWVHbhlSmGqGor+/PHYnJbWo/eU8=) 9: myEKyS0ln_CS39qAu-1GdjmG9R0.roa (hash: aW1PpyHp9Pdui/hT7n4EmATj8R60gaAAQo+Y1BQJBTw=) 10: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: oO9PPsH/ULY9318yLub1Ma6HX1bJnAnl7UhE0IzWNV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9a:07:4c:f0:17:8d:aa:7b:94:80:b7:96:ef:1d:65:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Apr 17 06:01:02 2026 GMT Not After : Apr 18 06:01:02 2026 GMT Subject: CN=70a6501e0a6daf86d2e3752258c5df766e3790f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:57:6e:8d:18:1b:7b:55:55:6e:bd:e9:d3: 36:ec:1e:be:12:94:bf:8e:34:52:ce:8d:d6:69:62: dd:6f:7e:e8:61:d3:93:c8:28:03:31:86:77:ab:65: 32:c8:f6:c8:d6:ff:c5:62:00:98:97:ff:e4:c1:11: b3:17:bb:e6:8e:ad:c5:4a:da:e1:3a:f5:8b:11:e7: 5f:3c:94:f9:35:4e:60:f5:8d:c1:3a:61:11:15:68: e5:fb:7f:8d:79:73:2c:ba:55:a8:dd:65:d3:6a:68: ff:2d:4e:20:f8:7b:d3:41:a8:32:e4:72:4d:a8:4a: 4c:58:30:4e:ef:aa:6f:b8:73:ce:33:ed:ca:68:b0: f9:ee:b1:38:c1:71:13:98:42:0b:a4:c5:c7:a5:b7: 17:a5:13:3a:a7:5a:9d:9f:9a:b5:38:1a:26:04:a8: 05:e1:c0:ce:32:f1:34:21:6f:d1:00:16:8b:dc:b4: 6a:28:17:b5:e7:94:f7:1e:f5:47:0b:f0:bf:44:ac: ba:4a:28:e2:e7:16:c6:8f:32:46:7e:20:d0:be:7c: af:29:84:37:36:df:0b:7f:d8:ed:c6:4f:17:3e:b3: 97:71:fa:75:74:c8:66:7f:20:7e:7d:38:f7:9b:cb: 8b:d3:6b:d1:79:13:97:a2:20:fe:b4:e3:85:33:cc: ac:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A6:50:1E:0A:6D:AF:86:D2:E3:75:22:58:C5:DF:76:6E:37:90:F4 X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a6:06:07:c0:ee:5c:70:ac:db:ef:fb:b7:90:0b:62:99:86: 14:6d:f8:27:2b:5c:fc:00:84:2e:f9:7e:e1:83:10:02:09:3e: 5f:ce:68:3d:d5:ab:22:a1:df:c0:b9:b9:f3:08:25:d3:22:96: f1:e7:70:ba:15:82:c1:96:a9:ea:d0:d3:a1:bf:d2:16:31:5b: 2f:bb:e8:25:0a:82:b1:c9:b3:d1:ad:4a:ac:22:f5:90:e2:4b: 81:1c:ee:69:85:86:d9:d9:3a:5e:d6:59:e4:de:4b:ea:8c:e1: b3:02:e8:3f:d6:e2:e0:7a:33:05:8c:62:7c:f7:ad:f5:44:9a: ac:8f:f8:ed:5b:5a:4f:00:da:e2:d3:b4:e2:c6:41:fd:83:c1: b5:90:61:5c:6b:2c:78:a2:41:85:ef:8d:cd:10:25:02:26:26: cb:38:af:0f:43:a8:c0:d7:15:5f:3c:3e:d4:7f:6a:3a:a7:8c: 4c:c9:ca:aa:9e:87:54:ad:64:95:2d:09:6b:59:a6:76:8c:34: 54:29:62:fb:7e:60:da:96:ea:27:b2:f4:1f:6b:1a:e7:b9:96: c1:0b:63:ee:37:a5:c3:f4:45:e0:f1:b3:8d:61:ae:ed:12:f9: ec:41:f7:b2:59:83:4e:67:38:0f:65:44:92:dd:90:09:d1:14: 0a:15:21:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2aB0zwF42qe5SAt5bvHWWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjYwNDE3MDYwMTAyWhcNMjYwNDE4MDYwMTAyWjAzMTEwLwYDVQQD Eyg3MGE2NTAxZTBhNmRhZjg2ZDJlMzc1MjI1OGM1ZGY3NjZlMzc5MGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt61Xbo0YG3tVVW696dM27B6+EpS/ jjRSzo3WaWLdb37oYdOTyCgDMYZ3q2UyyPbI1v/FYgCYl//kwRGzF7vmjq3FStrh OvWLEedfPJT5NU5g9Y3BOmERFWjl+3+NeXMsulWo3WXTamj/LU4g+HvTQagy5HJN qEpMWDBO76pvuHPOM+3KaLD57rE4wXETmEILpMXHpbcXpRM6p1qdn5q1OBomBKgF 4cDOMvE0IW/RABaL3LRqKBe155T3HvVHC/C/RKy6Siji5xbGjzJGfiDQvnyvKYQ3 Nt8Lf9jtxk8XPrOXcfp1dMhmfyB+fTj3m8uL02vReROXoiD+tOOFM8ysAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCmUB4Kba+G0uN1IljF33ZuN5D0MB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqYGB8Du XHCs2+/7t5ALYpmGFG34Jytc/ACELvl+4YMQAgk+X85oPdWrIqHfwLm58wgl0yKW 8edwuhWCwZap6tDTob/SFjFbL7voJQqCscmz0a1KrCL1kOJLgRzuaYWG2dk6XtZZ 5N5L6ozhswLoP9bi4HozBYxifPet9USarI/47VtaTwDa4tO04sZB/YPBtZBhXGss eKJBhe+NzRAlAiYmyzivD0OowNcVXzw+1H9qOqeMTMnKqp6HVK1klS0Ja1mmdow0 VCli+35g2pbqJ7L0H2sa57mWwQtj7jelw/RF4PGzjWGu7RL57EH3slmDTmc4D2VE kt2QCdEUChUhrw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:15:43 2026 by rpki-client