$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: sF2e0nQ1MzwjvAOD71uiXPw0gvzIwqnJ52Y4S+5SeQE= Subject key identifier: C1:85:62:7F:A3:A1:C8:29:56:7B:12:8C:6D:07:F3:2D:B0:F5:4D:59 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019D9B19D90C88FFE5821D5D3947962051F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 1913 Signing time: Fri 17 Apr 2026 11:00:55 +0000 Manifest this update: Fri 17 Apr 2026 11:00:55 +0000 Manifest next update: Sat 18 Apr 2026 11:00:55 +0000 Files and hashes: 1: 1-OlVpNxRszjxmjMWSuuMXpZOpfY.roa (hash: etdjbA76Sv9FnoMTJ6w4NbuXIKXN/yCoWSnBpCSOyLg=) 2: 1Cwbh-EBkqRBbTaTb-Y36KV1_f4.roa (hash: KaOvvLBbfyfPARr7O7r9zR6vas9QNYiMvTjqvCPXEUI=) 3: 2BmKC7Ao1aRSr4Cg66zffNdrunE.roa (hash: HcsscwJ/VuVcTV3kH/59/X4RCs3dMy2ECBZo7Txdi0o=) 4: 4vDYopNfblYxNyrSl7_Y8BBd78I.roa (hash: 9L22tlP5yMozusESHvaSo7CwK7JqSGuZhoMXYx5tMKw=) 5: 5cE4cXv9NfAhTzlsvseSXv-Va78.roa (hash: imOu3NBS+5L3w9gmNSjFTt0fMM+20Ow725s46hfVaoM=) 6: 6TVF3dArdPB2NJxy7_Pdt8ium4c.roa (hash: TnqA7ATOZWUWRWUjYZnrgFVgbRIJUV3+W+Bfc18gIck=) 7: 7_hKJNCWOqs8t2EHuZj_d2dqY80.roa (hash: oy0SSTc3SuINToqj7/oP07vHJ6DF+ESaKkvhl2mG+rc=) 8: 9dzcaLIqbqLLjoq0zYXtDd1PnhY.roa (hash: qxt/JZrhSAN1jPHN0Hazm3PY3+cu+jvBRtI3PEduO0E=) 9: 9myGapApVrb4JbejkloU4P66zLc.roa (hash: 6EFV77uWAJvDV9lSFY6CsxJphPSKH4/4PVdWuftIQJ8=) 10: AINcwmRM2PiJl3bMkFrzxQDkhpk.roa (hash: FjiZq5IDyOXJDGmE0DFVsFGnpZhWC68Kn1wBUMVqjoE=) 11: AxycDmx0_sRBRNwROaLXtKkwrSA.roa (hash: /OH19GJSnVpqoFUA2l9v57qAgYy75+THHbmUdJGT9/U=) 12: BgaPpw4QZZFq8BjvHJztJJvHVPk.roa (hash: 1bdyBEdjzw65JHZi7PKNdH+OzNLoot3lZr9JxQYu6k4=) 13: CePoxKEHwCSRTbVngcfu2MheeDA.roa (hash: 9sLFIyTUP2/uR3ROEWPVyAdEpgJBgZOMxIEue+PDcrc=) 14: DfQSPmYelNb0NF30t1iTQWlUs5o.roa (hash: QnQiSZ4dExtUn1E1FxF2JPdUhkzoCuIvrEqj49xiXjQ=) 15: G_vLaWL_4n0xx6AmTZKeOZFeQ1M.roa (hash: 2JUl1gxV4a+1huqyyhuozz6EfwwCu7xROBFLG6lBkXQ=) 16: HmPFJkjojfXkQXnX-ShV0bymoms.roa (hash: qiXaZzgKfCkOjQoBV7iB0khwdnyrdRGDGRMiD17+W5Q=) 17: HtxrMlw1XYD3O00XvDNyUfXKFD8.roa (hash: okOUXYArEcKSjt4C2XgrkB0y7IllxSkE0rtSnZOlw/I=) 18: IHON2rn_CAk-QTZRxcf294uBItk.roa (hash: GpSTLre0+QFMoobK7dgqzWVvBqhjML/zcMCSHc91zfI=) 19: LfPTL7ZW-A5mmvN1zdwvatohGGM.roa (hash: ozraq4O9mZcm6giPdikSak7iJBai30VVr/xRbiF+gKI=) 20: NvAf-nH1w6EiGE9EpJz1duIzkVw.roa (hash: bwe7C45RRQtIzIlIMP4B3/mPa5O8hzeJmz+qxMwmGW8=) 21: Tqg7OHqJVQA5mkNW3ZN7tWwejr4.roa (hash: D+gy7cLckRRSrklWvJRd2Z44Dw8nmd5jQhzfOPZiZtA=) 22: Wfqf17fPNrqhYEuomD94h7cLzTQ.roa (hash: +K1HlQK29dpjLdYpqFFk3MJakrfyvQ2V89xPZB0rlNk=) 23: ZNXbO3wa73OxZsGaC73Tv6OfGL4.roa (hash: lhKT5GFgOwPiLaKmkEPqlSiSwbXyE2FWLpI/hBm483Q=) 24: aBHHIsoOk3cwdTg01_-s4u0Jsjk.roa (hash: PbrAA8TMsU9WP0enV5kXL9Tl3hHucxigMTmbYxEfjpk=) 25: c2OTgD7SJ-vOU2BnpOm4w9MqsgA.roa (hash: XBITRKn+SQfBgNtBqxuCcsnPrL0WkQhuSGqNDgb7udo=) 26: dnBR3jW0Kh4UVx_oWTNX9npKj2M.roa (hash: ogXmRAS68aAykUp/xTYTY3s+V2LuvqBkBMoKuQRwEjk=) 27: ib3eXdJ0h8wtIzIl2cBYokJr_9Q.roa (hash: NphbwdgT6fB0qOIn0HJy/kyHWoDJIQz8cXWMiK9ya4Y=) 28: igm3-NIqQRhNu9yZxNTMh_1HJYo.roa (hash: cfGF5AAxd5HmRNRxM7Asm85cxUZHuluzpiB9gp54keg=) 29: k5L4tohXQ4Ed_n59tNNB1TzR1Q4.roa (hash: 3rnORVw3E2u078fD2E2EbKJTg0lHYsmpc4uiLB3Yv/8=) 30: lSanMDeIzNXvZBhpiuO2WcMcnGA.roa (hash: z1k+Po4k1NiDxL5nJsZYdntctP6qEJPsnJ4NvYoS3GU=) 31: lueVV_jKMeHO5Ubr9jZ-cwt5lHo.roa (hash: 9c+KFKnP0O3swEyj7ofbRvYd449L+eQRnVpdXmf8AiM=) 32: sdcvoTQBQgoeAFopLsTr-xpMuPs.roa (hash: WtnlbPaLYL1j+j4AclbHMyJ9VcWAM1c5WBmY3q72Npc=) 33: uO2NHQ5TTdNCQ22ZCOS8lC2JSs8.roa (hash: pOQFIMx25jyK9Z1HP3/nkQhmDqp4NhXL4Z7xwh9pM0A=) 34: uhrmeJIDBf0UOu2SKTeGKN2KLdU.roa (hash: 6yakXLB9HxwcEdeaop2mfVwvTXAmim03f6ri7g4Sfy8=) 35: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: vq+fMgNYTb2ESRok+RfgukC91tHub13MJfV5/iWv2tg=) 36: uqK8RxQN9LvzCAlm9cz-JPc33k0.roa (hash: QBT2sv9FfNzV4E0o6WzeRcOpOw1Nw/sc0uB77lAIYy8=) 37: vloaPvYoyY7lftrTQCapPW0IXOY.roa (hash: jGy6XOMpTVxN0ST97KCkF87I0GrKB16LjlLEWBSNbCQ=) 38: xEGlR8AyR4zdleMn0h5pddeRX14.roa (hash: ZkNfc0IpugjxRFp85te3h6YIm1ECTC91UgGg0apvU/I=) 39: xyaLQZsDAvrm7P96t1P_1iQ01ug.roa (hash: 8WV+5vFShCRtn2TW6yJKkPCd8zXeEaaVVDKdZ+jH3aY=) 40: yflRQXgc3sRXtlMhgbPQejPgA54.roa (hash: ELCJ/0UNTdR4XmPGdTDQGIRX33BsOogxgdA0Xu5bAP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:19:d9:0c:88:ff:e5:82:1d:5d:39:47:96:20:51:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Apr 17 11:00:55 2026 GMT Not After : Apr 18 11:00:55 2026 GMT Subject: CN=c185627fa3a1c829567b128c6d07f32db0f54d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:7a:7a:74:20:7f:8b:be:75:cf:62:98:7e: 5f:0b:03:4b:d5:80:e8:06:ff:a8:3a:8f:e7:b6:29: 8a:2d:cc:78:79:7a:eb:03:93:6e:ee:a2:29:c1:35: 81:1a:bd:59:8a:0a:eb:86:a6:99:6e:d6:9c:53:e5: 79:73:07:43:f7:c9:28:3b:f7:11:f0:7d:fd:87:ef: 30:94:da:bc:7d:c0:3f:5a:f5:d5:58:31:ce:13:f3: 93:c9:19:b4:5a:9f:c9:5c:79:4d:03:ea:79:72:4a: 7d:5f:df:f2:12:38:af:dd:a2:cb:2a:38:3a:74:ce: ad:85:ab:d6:4a:31:d9:58:f0:30:90:fa:1e:69:12: 66:6f:7f:07:fa:0b:53:28:c1:fa:87:f7:79:df:76: 67:d4:45:fc:80:05:65:d3:90:6c:0a:b3:28:c0:85: 13:a0:97:f1:c7:82:f1:3d:8b:1a:7c:c5:9c:43:c8: da:4d:ab:25:6f:9c:41:68:1c:95:4f:98:2c:51:b9: eb:e6:24:96:d0:cf:c7:34:72:1f:70:b3:ed:ca:1c: de:3f:33:41:1c:1d:12:b9:e0:e2:d3:37:88:db:b4: 7e:c2:b3:0b:77:4a:75:31:3f:70:28:35:d6:a7:23: 3a:3b:0c:b3:ba:4c:4a:85:b4:bd:a8:3b:8c:c7:7b: fd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:85:62:7F:A3:A1:C8:29:56:7B:12:8C:6D:07:F3:2D:B0:F5:4D:59 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:18:08:23:21:76:02:80:e1:16:04:02:9a:f5:33:28:9a:4c: a6:e1:a8:d9:9e:63:c1:65:19:62:ee:0d:03:81:6c:72:a9:8c: f3:89:42:13:0e:31:64:43:b6:71:d0:60:59:cf:2e:67:6a:cc: e7:45:d9:6a:64:34:88:b2:1b:f4:8f:61:08:c0:7c:0f:37:a3: 0a:a0:63:e2:2f:0f:19:b8:7c:b9:15:80:b5:c3:ed:60:7a:23: b0:66:a2:92:fe:89:d2:a0:8b:43:67:95:19:33:c3:58:64:0a: 52:f6:6e:28:5d:e9:25:b1:c4:c5:3f:c0:83:61:b5:25:ac:ea: 38:54:23:1d:73:98:ad:45:69:c8:c1:de:52:40:72:63:2f:5e: 18:ba:85:7f:ed:f9:6c:de:8e:bb:fb:75:2d:63:f0:9b:be:cb: 40:15:d7:4a:9b:46:fc:40:f8:fd:11:12:b1:09:a6:60:9e:a7: 07:59:a7:bc:bb:26:f4:01:f2:83:f0:df:f0:83:d4:5e:20:81: e7:3e:38:8c:e9:2a:ae:01:95:1e:fb:b3:a6:24:ea:4f:3a:82: 04:32:82:15:fc:d2:38:94:ff:59:cf:81:97:74:94:b2:86:f6: 63:9c:29:36:7c:76:1f:1f:8b:86:62:a4:76:ee:6e:17:ad:c0: 32:07:2b:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bGdkMiP/lgh1dOUeWIFHyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwNDE3MTEwMDU1WhcNMjYwNDE4MTEwMDU1WjAzMTEwLwYDVQQD EyhjMTg1NjI3ZmEzYTFjODI5NTY3YjEyOGM2ZDA3ZjMyZGIwZjU0ZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU56enQgf4u+dc9imH5fCwNL1YDo Bv+oOo/ntimKLcx4eXrrA5Nu7qIpwTWBGr1ZigrrhqaZbtacU+V5cwdD98koO/cR 8H39h+8wlNq8fcA/WvXVWDHOE/OTyRm0Wp/JXHlNA+p5ckp9X9/yEjiv3aLLKjg6 dM6thavWSjHZWPAwkPoeaRJmb38H+gtTKMH6h/d533Zn1EX8gAVl05BsCrMowIUT oJfxx4LxPYsafMWcQ8jaTaslb5xBaByVT5gsUbnr5iSW0M/HNHIfcLPtyhzePzNB HB0SueDi0zeI27R+wrMLd0p1MT9wKDXWpyM6OwyzukxKhbS9qDuMx3v9pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGFYn+jocgpVnsSjG0H8y2w9U1ZMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABgIIyF2 AoDhFgQCmvUzKJpMpuGo2Z5jwWUZYu4NA4FscqmM84lCEw4xZEO2cdBgWc8uZ2rM 50XZamQ0iLIb9I9hCMB8DzejCqBj4i8PGbh8uRWAtcPtYHojsGaikv6J0qCLQ2eV GTPDWGQKUvZuKF3pJbHExT/Ag2G1JazqOFQjHXOYrUVpyMHeUkByYy9eGLqFf+35 bN6Ou/t1LWPwm77LQBXXSptG/ED4/RESsQmmYJ6nB1mnvLsm9AHyg/Df8IPUXiCB 5z44jOkqrgGVHvuzpiTqTzqCBDKCFfzSOJT/Wc+Bl3SUsob2Y5wpNnx2Hx+LhmKk du5uF63AMgcr7A== -----END CERTIFICATE-----Generated at Fri Apr 17 20:04:22 2026 by rpki-client