$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft File: UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft (raw, json) Hash identifier: U09IclISAeEonFWE7mXr1p7j1ZjU32du5AYpQrsCT1c= Subject key identifier: CA:C6:68:75:49:09:3B:92:32:70:D5:2B:07:7B:5D:56:6E:36:55:BE Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1 Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1 Certificate serial: 01A0C821BCEA924FCA39AE193453FC48F39A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft Manifest number: BD Signing time: Tue 22 Sep 2026 08:00:49 +0000 Manifest this update: Tue 22 Sep 2026 08:00:49 +0000 Manifest next update: Wed 23 Sep 2026 08:00:49 +0000 Files and hashes: 1: 2B2WsXFKrE0PsjMLGDLFgrkoQHk.roa (hash: I2f8cSCJ55gr+41EbqG2bCbVCSI6WYHHpiTlmKWKwag=) 2: 351arMODSIyd3CJc9fgPAtsmlNI.roa (hash: Yo2IiguJDajHZ2abX/Lenjc2Oi/XsPFxr+IXj+TfOw0=) 3: O1bRHs3xt5FsIbl_ziUUS70e2Oo.roa (hash: GDAX7A9G25jk6iCRuWUSO9OYN1CP4Rha8hkEH61irKE=) 4: QnubMT8LlGCKqDGLx2msA8oQFZE.roa (hash: F29CsKJrPeic4M/8FQtLYPOvQ2ukLb2sF2KJke9Fycg=) 5: TVciBvbG1XVG5ssHlr4AadQK2fk.roa (hash: QwF4SWXY6yBXWUo8zo5vTIE9qB3GoAOkQodC/dlqVwc=) 6: UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl (hash: B5RWn4+88ji2vWPBS6IyYh0ltoXVFoyGLA3zmX4V0jw=) 7: hs3fngFJt1NiocNCIA7qGPYWsTU.roa (hash: ToEvpANK+Yu0KXslqAyftUZpThJvK58TLmLx0aI2m1A=) 8: q8Tmc6EzFqnUmMxMTIt9c3dEYxI.roa (hash: v/Ru9OVe1/q99gN31o9CAbNDujPce0SS4XxW2atJ/R0=) 9: slPI9aN-JbfbvX_GY814pCJ8UFA.roa (hash: EeGAyjsGw6lAKae9brKTE8ngKeD+Md25/vDKFnzwqig=) 10: tm-LFqSPmanwgI1syFmGkI6nKdc.roa (hash: lIW2bmaFFTJOzvB2HW/qgxs6vnJmoBOrm3elLnIZeZI=) 11: tygQWENVMllkytSnL6uy2BmJtDA.roa (hash: NRsdT+DiuF+skvZYNUC1kJYT3am+ZHBeil1YQrMV2pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:21:bc:ea:92:4f:ca:39:ae:19:34:53:fc:48:f3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1 Validity Not Before: Sep 22 08:00:49 2026 GMT Not After : Sep 23 08:00:49 2026 GMT Subject: CN=cac6687549093b923270d52b077b5d566e3655be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:91:3b:0c:0f:25:6f:b3:58:88:10:26:85:ab: 2f:11:d2:d3:dd:af:68:1d:c7:f4:ed:01:8d:e6:9e: bb:b2:9f:96:18:e3:47:0d:c1:4d:a1:9b:4f:6e:e6: 63:91:5e:64:82:27:79:46:21:69:5f:23:b3:29:e9: 75:3e:05:27:7f:a2:1f:58:7c:04:bc:c9:85:ba:23: c0:6a:e1:72:db:5e:6e:10:b9:6d:f5:ab:e5:ae:50: 72:96:59:61:9a:d5:43:71:c7:f5:6f:61:c6:ce:f9: 48:8a:f6:3e:03:82:b5:b3:a7:c6:00:ca:42:0b:be: eb:03:48:4b:22:a1:7b:3a:a5:90:f0:47:6d:e0:f5: 92:5f:c6:3a:a6:43:63:e6:5d:b0:d1:9f:5f:4f:6d: fb:21:8f:14:23:3e:eb:bb:29:97:d4:d2:2a:43:16: f6:51:00:32:dc:d4:41:04:9f:b3:38:8f:5e:cc:1e: ac:9d:23:0e:60:37:69:cb:9b:0a:73:65:66:2e:a6: 3d:18:bc:74:86:56:4d:40:a1:05:8f:3e:5f:a9:a9: 46:a6:f2:6f:0f:50:cb:ce:e6:58:cc:3b:f3:00:41: 98:fe:4b:8a:f8:56:d8:86:43:0e:aa:5e:b9:98:fa: 8e:bc:3c:56:52:b3:4e:ca:41:80:bf:a1:cb:c5:c0: 5b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C6:68:75:49:09:3B:92:32:70:D5:2B:07:7B:5D:56:6E:36:55:BE X509v3 Authority Key Identifier: keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:97:17:0b:1b:a4:f3:d5:0f:ed:aa:8f:47:f1:b6:45:f6:5b: 07:c9:8a:a6:0f:d2:4a:3c:48:d6:90:0c:fa:7c:67:fd:c5:2f: db:9b:66:5f:fa:2d:17:fc:8f:9a:4a:5c:f3:2c:01:cb:f5:f4: 81:cf:01:14:65:49:d3:4d:a1:76:e5:19:82:57:ef:4c:c4:c2: 1a:43:c9:bf:a6:dc:76:ff:30:56:76:96:9c:7f:c7:e1:a5:9f: 12:66:0d:fd:a1:a9:a4:21:f3:e5:19:7a:11:eb:4b:df:79:2d: fc:2e:03:4c:c3:3f:89:dc:a0:8f:a3:a2:01:bf:88:a3:15:b0: a6:83:a4:b4:04:1e:ca:b5:09:54:83:b5:5f:e0:ec:55:5d:89: d7:f9:14:61:ed:e8:72:c4:b3:b5:c3:98:63:08:9f:22:a9:0b: ec:37:0b:b1:c1:ba:03:9b:f0:f6:7a:39:13:a8:07:06:a1:66: 15:2f:42:bb:bd:7f:88:12:c1:b0:09:18:fe:fb:cf:76:02:17: 20:a5:80:03:ba:19:a2:7b:cc:50:d7:cf:e0:04:d2:42:ea:a5: d7:bb:a4:8e:4b:f2:6e:2e:b3:09:f5:14:f9:1f:a8:45:08:ac: c2:ac:63:33:d1:d7:a4:fd:6b:2d:89:a2:8d:05:c5:fd:2a:e1: cb:95:e0:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIIbzqkk/KOa4ZNFP8SPOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOWQ4MDJjYWY5YWE4ZjQyN2YxZGQwODU1NmM4OTk5NWYw NDc4ZDEwHhcNMjYwOTIyMDgwMDQ5WhcNMjYwOTIzMDgwMDQ5WjAzMTEwLwYDVQQD EyhjYWM2Njg3NTQ5MDkzYjkyMzI3MGQ1MmIwNzdiNWQ1NjZlMzY1NWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05E7DA8lb7NYiBAmhasvEdLT3a9o Hcf07QGN5p67sp+WGONHDcFNoZtPbuZjkV5kgid5RiFpXyOzKel1PgUnf6IfWHwE vMmFuiPAauFy215uELlt9avlrlBylllhmtVDccf1b2HGzvlIivY+A4K1s6fGAMpC C77rA0hLIqF7OqWQ8Edt4PWSX8Y6pkNj5l2w0Z9fT237IY8UIz7ruymX1NIqQxb2 UQAy3NRBBJ+zOI9ezB6snSMOYDdpy5sKc2VmLqY9GLx0hlZNQKEFjz5fqalGpvJv D1DLzuZYzDvzAEGY/kuK+FbYhkMOql65mPqOvDxWUrNOykGAv6HLxcBbtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrGaHVJCTuSMnDVKwd7XVZuNlW+MB8GA1UdIwQY MBaAFFGdgCyvmqj0J/HdCFVsiZlfBHjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jZDM3OWMtYzk1MS00NjMzLWJiNTYt MDcxNzY0NjkwZWNmLzEvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jZDM3OWMtYzk1MS00NjMzLWJiNTYtMDcxNzY0NjkwZWNm LzEvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZcXCxuk 89UP7aqPR/G2RfZbB8mKpg/SSjxI1pAM+nxn/cUv25tmX/otF/yPmkpc8ywBy/X0 gc8BFGVJ002hduUZglfvTMTCGkPJv6bcdv8wVnaWnH/H4aWfEmYN/aGppCHz5Rl6 EetL33kt/C4DTMM/idygj6OiAb+IoxWwpoOktAQeyrUJVIO1X+DsVV2J1/kUYe3o csSztcOYYwifIqkL7DcLscG6A5vw9no5E6gHBqFmFS9Cu71/iBLBsAkY/vvPdgIX IKWAA7oZonvMUNfP4ATSQuql17ukjkvybi6zCfUU+R+oRQiswqxjM9HXpP1rLYmi jQXF/Srhy5Xghw== -----END CERTIFICATE-----Generated at Tue Sep 22 17:46:34 2026 by rpki-client