$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json) Hash identifier: yryD9yeaSLefUm825hXBYrSaZsnrq2ezDcKB1RCXshc= Subject key identifier: B0:AF:E6:AC:0E:FA:A5:85:BB:60:AB:80:4E:94:61:F0:49:BF:47:24 Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 019CAAFD0A2C7F8F393B42833B6236948CBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft Manifest number: 0382 Signing time: Sun 01 Mar 2026 20:00:35 +0000 Manifest this update: Sun 01 Mar 2026 20:00:35 +0000 Manifest next update: Mon 02 Mar 2026 20:00:35 +0000 Files and hashes: 1: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=) 2: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=) 3: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=) 4: Dx-Vy-swUiVNsZKUlolPXBZOZMI.roa (hash: 5aft0BRUbiVKXn588IybsdkKIbt9YKxjDesbktvL34g=) 5: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=) 6: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=) 7: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=) 8: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=) 9: THki-C7K0guSV_ZsZ9wyQdtYLho.roa (hash: ZWzAxxCBDEL9WjLGKgQ7WjQgHQWR8ZxZuQyS8uWcrRY=) 10: WskagO6bCwTQcwB7d_fzf3cdeI0.roa (hash: uVNMY6xrkiM26LXeGtpPm7fSn/FV5Pa+qtC9Vr6WBRk=) 11: YuYmQaJNtuOBq3fPKH-8v6Xr9Qk.roa (hash: U5rEQ3u5XOjHhPmf1nGbyQ/BjTbyBdisgzm75iFjhvQ=) 12: ZvzZunjDlBYEEo5tXrgzyLt_dGg.roa (hash: UPsyzhi87SZnZ58kTtKE+18tmkXvGwl7y+zmR4Y6hbw=) 13: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=) 14: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=) 15: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: Q15cgURuvs3tztWk2+W5KCm9p1kskwQ50LKaafVuBV0=) 16: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:fd:0a:2c:7f:8f:39:3b:42:83:3b:62:36:94:8c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Mar 1 20:00:35 2026 GMT Not After : Mar 2 20:00:35 2026 GMT Subject: CN=b0afe6ac0efaa585bb60ab804e9461f049bf4724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2d:92:6b:82:07:70:fd:51:35:1f:c7:32:e8: fb:ee:02:83:d5:b1:b9:69:0c:b6:a6:37:94:09:07: 55:19:70:1e:cd:90:76:4c:23:f0:88:16:61:53:a8: 6d:ed:a1:c2:cf:0f:a4:de:c9:9f:79:ba:fc:35:ea: 15:12:88:03:d8:af:60:94:a5:72:a8:b0:9e:4c:83: 6f:72:da:8c:19:e1:4b:94:8c:6e:4d:21:bf:f5:85: d0:d7:b2:1a:3a:42:55:dd:b5:ec:97:3c:22:4c:09: 2d:3e:ba:51:e0:d0:99:18:07:a0:f9:d6:55:8b:0f: bd:0a:2c:12:be:02:92:3e:80:ee:3f:a1:12:18:51: f9:0e:d0:72:05:c4:64:f3:51:cc:ad:d0:cb:1c:6f: c7:ea:51:68:09:9a:df:72:0e:1c:ad:a7:b8:ec:90: 82:fc:29:93:3d:41:8b:ae:a2:18:64:a3:ac:29:e9: 5b:d5:cd:66:fb:a0:d8:cc:c0:64:2e:d9:05:43:43: e4:ba:60:22:8a:88:a7:8b:16:6e:76:7f:91:56:96: 5a:be:42:95:c5:91:f1:7a:31:e2:67:6d:cf:1c:6e: 8d:54:57:04:79:ba:b7:64:b6:6a:0d:95:ad:09:e8: 11:a3:f9:f1:8e:22:b0:ce:24:ab:42:eb:10:fe:3d: a8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AF:E6:AC:0E:FA:A5:85:BB:60:AB:80:4E:94:61:F0:49:BF:47:24 X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:31:bd:99:45:8e:0d:0e:7f:2a:07:94:49:ad:f0:2b:a8:30: 32:44:f5:bc:33:6c:e9:4b:5b:f3:22:ca:98:74:c6:85:c7:fa: f2:dc:12:b2:f8:24:98:65:54:af:8f:13:b9:ac:42:89:66:c3: d7:8e:52:8f:92:6e:52:d6:70:97:f8:44:3e:f9:83:e7:d4:19: fc:a1:21:3b:00:33:55:1a:a4:03:1b:88:63:57:42:60:9c:a8: 8f:90:83:6a:ff:a1:7c:7b:ec:b6:9f:54:a7:0c:f1:98:82:01: a9:ae:98:5b:d3:72:17:3b:f8:3a:7d:c1:d4:f4:28:10:1d:f4: 66:7b:05:ff:0f:94:70:ff:e0:73:33:28:a1:a0:ad:a4:3e:08: d9:97:87:df:ef:a4:ea:8c:19:5c:54:4d:2a:62:87:e7:74:50: 62:93:91:e5:77:de:34:77:f7:0c:45:8c:c7:ab:89:e8:ec:d9: 64:a1:cf:41:9f:b1:a2:66:95:06:1d:fa:4d:b3:1a:1d:1e:21: 00:20:6d:11:9a:13:48:6b:e3:ed:2d:c3:bd:b7:b8:12:77:7f: d6:2c:0c:d5:9a:bc:a1:2a:9d:fd:2d:a1:c8:22:8a:78:53:fa: e0:30:e7:35:6b:6d:25:ad:9b:ab:7c:39:b3:2d:65:d7:5b:64: 63:86:b8:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyq/Qosf485O0KDO2I2lIy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjYwMzAxMjAwMDM1WhcNMjYwMzAyMjAwMDM1WjAzMTEwLwYDVQQD EyhiMGFmZTZhYzBlZmFhNTg1YmI2MGFiODA0ZTk0NjFmMDQ5YmY0NzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S2Sa4IHcP1RNR/HMuj77gKD1bG5 aQy2pjeUCQdVGXAezZB2TCPwiBZhU6ht7aHCzw+k3smfebr8NeoVEogD2K9glKVy qLCeTINvctqMGeFLlIxuTSG/9YXQ17IaOkJV3bXslzwiTAktPrpR4NCZGAeg+dZV iw+9CiwSvgKSPoDuP6ESGFH5DtByBcRk81HMrdDLHG/H6lFoCZrfcg4crae47JCC /CmTPUGLrqIYZKOsKelb1c1m+6DYzMBkLtkFQ0PkumAiioinixZudn+RVpZavkKV xZHxejHiZ23PHG6NVFcEebq3ZLZqDZWtCegRo/nxjiKwziSrQusQ/j2opwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCv5qwO+qWFu2CrgE6UYfBJv0ckMB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzG9mUWO DQ5/KgeUSa3wK6gwMkT1vDNs6Utb8yLKmHTGhcf68twSsvgkmGVUr48TuaxCiWbD 145Sj5JuUtZwl/hEPvmD59QZ/KEhOwAzVRqkAxuIY1dCYJyoj5CDav+hfHvstp9U pwzxmIIBqa6YW9NyFzv4On3B1PQoEB30ZnsF/w+UcP/gczMooaCtpD4I2ZeH3++k 6owZXFRNKmKH53RQYpOR5XfeNHf3DEWMx6uJ6OzZZKHPQZ+xomaVBh36TbMaHR4h ACBtEZoTSGvj7S3Dvbe4End/1iwM1Zq8oSqd/S2hyCKKeFP64DDnNWttJa2bq3w5 sy1l11tkY4a4Lg== -----END CERTIFICATE-----Generated at Mon Mar 2 06:26:32 2026 by rpki-client