$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: CCvagWgkMVQOPUl2XhX9C11JV/eOSSRYyGC1KHg8zDo= Subject key identifier: A4:18:87:C5:1D:34:CB:BD:76:9F:C6:32:55:A1:4C:CE:F8:F7:A8:AE Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019CA9B3D126A86746D9F5C0BEF31EF36179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 1896 Signing time: Sun 01 Mar 2026 14:00:59 +0000 Manifest this update: Sun 01 Mar 2026 14:00:59 +0000 Manifest next update: Mon 02 Mar 2026 14:00:59 +0000 Files and hashes: 1: 1-OlVpNxRszjxmjMWSuuMXpZOpfY.roa (hash: etdjbA76Sv9FnoMTJ6w4NbuXIKXN/yCoWSnBpCSOyLg=) 2: 1Cwbh-EBkqRBbTaTb-Y36KV1_f4.roa (hash: KaOvvLBbfyfPARr7O7r9zR6vas9QNYiMvTjqvCPXEUI=) 3: 2BmKC7Ao1aRSr4Cg66zffNdrunE.roa (hash: HcsscwJ/VuVcTV3kH/59/X4RCs3dMy2ECBZo7Txdi0o=) 4: 4vDYopNfblYxNyrSl7_Y8BBd78I.roa (hash: 9L22tlP5yMozusESHvaSo7CwK7JqSGuZhoMXYx5tMKw=) 5: 5cE4cXv9NfAhTzlsvseSXv-Va78.roa (hash: imOu3NBS+5L3w9gmNSjFTt0fMM+20Ow725s46hfVaoM=) 6: 6TVF3dArdPB2NJxy7_Pdt8ium4c.roa (hash: TnqA7ATOZWUWRWUjYZnrgFVgbRIJUV3+W+Bfc18gIck=) 7: 7_hKJNCWOqs8t2EHuZj_d2dqY80.roa (hash: oy0SSTc3SuINToqj7/oP07vHJ6DF+ESaKkvhl2mG+rc=) 8: 9dzcaLIqbqLLjoq0zYXtDd1PnhY.roa (hash: qxt/JZrhSAN1jPHN0Hazm3PY3+cu+jvBRtI3PEduO0E=) 9: 9myGapApVrb4JbejkloU4P66zLc.roa (hash: 6EFV77uWAJvDV9lSFY6CsxJphPSKH4/4PVdWuftIQJ8=) 10: AINcwmRM2PiJl3bMkFrzxQDkhpk.roa (hash: FjiZq5IDyOXJDGmE0DFVsFGnpZhWC68Kn1wBUMVqjoE=) 11: AxycDmx0_sRBRNwROaLXtKkwrSA.roa (hash: /OH19GJSnVpqoFUA2l9v57qAgYy75+THHbmUdJGT9/U=) 12: BgaPpw4QZZFq8BjvHJztJJvHVPk.roa (hash: 1bdyBEdjzw65JHZi7PKNdH+OzNLoot3lZr9JxQYu6k4=) 13: CePoxKEHwCSRTbVngcfu2MheeDA.roa (hash: 9sLFIyTUP2/uR3ROEWPVyAdEpgJBgZOMxIEue+PDcrc=) 14: DfQSPmYelNb0NF30t1iTQWlUs5o.roa (hash: QnQiSZ4dExtUn1E1FxF2JPdUhkzoCuIvrEqj49xiXjQ=) 15: G_vLaWL_4n0xx6AmTZKeOZFeQ1M.roa (hash: 2JUl1gxV4a+1huqyyhuozz6EfwwCu7xROBFLG6lBkXQ=) 16: HmPFJkjojfXkQXnX-ShV0bymoms.roa (hash: qiXaZzgKfCkOjQoBV7iB0khwdnyrdRGDGRMiD17+W5Q=) 17: HtxrMlw1XYD3O00XvDNyUfXKFD8.roa (hash: okOUXYArEcKSjt4C2XgrkB0y7IllxSkE0rtSnZOlw/I=) 18: IHON2rn_CAk-QTZRxcf294uBItk.roa (hash: GpSTLre0+QFMoobK7dgqzWVvBqhjML/zcMCSHc91zfI=) 19: LfPTL7ZW-A5mmvN1zdwvatohGGM.roa (hash: ozraq4O9mZcm6giPdikSak7iJBai30VVr/xRbiF+gKI=) 20: NvAf-nH1w6EiGE9EpJz1duIzkVw.roa (hash: bwe7C45RRQtIzIlIMP4B3/mPa5O8hzeJmz+qxMwmGW8=) 21: Tqg7OHqJVQA5mkNW3ZN7tWwejr4.roa (hash: D+gy7cLckRRSrklWvJRd2Z44Dw8nmd5jQhzfOPZiZtA=) 22: Wfqf17fPNrqhYEuomD94h7cLzTQ.roa (hash: +K1HlQK29dpjLdYpqFFk3MJakrfyvQ2V89xPZB0rlNk=) 23: ZNXbO3wa73OxZsGaC73Tv6OfGL4.roa (hash: lhKT5GFgOwPiLaKmkEPqlSiSwbXyE2FWLpI/hBm483Q=) 24: aBHHIsoOk3cwdTg01_-s4u0Jsjk.roa (hash: PbrAA8TMsU9WP0enV5kXL9Tl3hHucxigMTmbYxEfjpk=) 25: c2OTgD7SJ-vOU2BnpOm4w9MqsgA.roa (hash: XBITRKn+SQfBgNtBqxuCcsnPrL0WkQhuSGqNDgb7udo=) 26: dnBR3jW0Kh4UVx_oWTNX9npKj2M.roa (hash: ogXmRAS68aAykUp/xTYTY3s+V2LuvqBkBMoKuQRwEjk=) 27: ib3eXdJ0h8wtIzIl2cBYokJr_9Q.roa (hash: NphbwdgT6fB0qOIn0HJy/kyHWoDJIQz8cXWMiK9ya4Y=) 28: igm3-NIqQRhNu9yZxNTMh_1HJYo.roa (hash: cfGF5AAxd5HmRNRxM7Asm85cxUZHuluzpiB9gp54keg=) 29: k5L4tohXQ4Ed_n59tNNB1TzR1Q4.roa (hash: 3rnORVw3E2u078fD2E2EbKJTg0lHYsmpc4uiLB3Yv/8=) 30: lSanMDeIzNXvZBhpiuO2WcMcnGA.roa (hash: z1k+Po4k1NiDxL5nJsZYdntctP6qEJPsnJ4NvYoS3GU=) 31: lueVV_jKMeHO5Ubr9jZ-cwt5lHo.roa (hash: 9c+KFKnP0O3swEyj7ofbRvYd449L+eQRnVpdXmf8AiM=) 32: sdcvoTQBQgoeAFopLsTr-xpMuPs.roa (hash: WtnlbPaLYL1j+j4AclbHMyJ9VcWAM1c5WBmY3q72Npc=) 33: uO2NHQ5TTdNCQ22ZCOS8lC2JSs8.roa (hash: pOQFIMx25jyK9Z1HP3/nkQhmDqp4NhXL4Z7xwh9pM0A=) 34: uhrmeJIDBf0UOu2SKTeGKN2KLdU.roa (hash: 6yakXLB9HxwcEdeaop2mfVwvTXAmim03f6ri7g4Sfy8=) 35: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: 5BZAr/HmPeH97why67HFYSolwa3sQLJEb/aSbpRO/NM=) 36: uqK8RxQN9LvzCAlm9cz-JPc33k0.roa (hash: QBT2sv9FfNzV4E0o6WzeRcOpOw1Nw/sc0uB77lAIYy8=) 37: vloaPvYoyY7lftrTQCapPW0IXOY.roa (hash: jGy6XOMpTVxN0ST97KCkF87I0GrKB16LjlLEWBSNbCQ=) 38: xEGlR8AyR4zdleMn0h5pddeRX14.roa (hash: ZkNfc0IpugjxRFp85te3h6YIm1ECTC91UgGg0apvU/I=) 39: xyaLQZsDAvrm7P96t1P_1iQ01ug.roa (hash: 8WV+5vFShCRtn2TW6yJKkPCd8zXeEaaVVDKdZ+jH3aY=) 40: yflRQXgc3sRXtlMhgbPQejPgA54.roa (hash: ELCJ/0UNTdR4XmPGdTDQGIRX33BsOogxgdA0Xu5bAP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:b3:d1:26:a8:67:46:d9:f5:c0:be:f3:1e:f3:61:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Mar 1 14:00:59 2026 GMT Not After : Mar 2 14:00:59 2026 GMT Subject: CN=a41887c51d34cbbd769fc63255a14ccef8f7a8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:05:16:6f:1b:ab:32:dc:eb:57:59:92:36: 65:ff:9a:e7:8f:f9:f7:a6:22:15:f9:9e:c5:92:db: 6a:20:f1:42:b8:29:e9:3e:e5:87:cd:86:34:15:11: 67:76:f9:fd:db:a4:36:94:a0:06:21:bc:4e:d5:4f: b2:1f:50:18:15:5f:c0:35:ab:0d:8b:7a:fe:0a:1d: 0e:60:bd:13:c7:8f:8e:f7:2f:ca:ed:65:1c:91:8f: 65:80:55:39:f5:72:b5:7a:4c:f5:44:5a:6d:d5:57: d6:10:e7:5e:07:6f:c2:ea:72:2c:2b:b7:ad:48:2c: b5:86:04:7b:42:9d:a4:ae:d1:ec:90:33:ae:c2:c5: ad:3e:f3:31:31:db:28:fe:50:b5:bf:e6:95:d0:fe: 6a:ef:26:a2:46:85:f5:fe:a4:89:4b:48:b3:26:d5: d6:66:4d:6f:87:64:38:4e:30:70:23:0c:fe:97:82: 58:b8:bc:9a:ba:93:62:ae:03:59:c9:99:29:6c:86: 9d:30:94:a9:48:1d:d2:c5:5a:76:8a:b4:49:63:6d: 14:a1:e3:d9:f2:87:65:a9:4d:2c:18:33:fd:04:c1: 57:d4:9c:ab:f3:4a:4f:8f:09:21:46:f0:de:95:56: 71:d2:37:ae:81:a5:0f:14:f8:65:51:9a:4f:e5:67: a8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:18:87:C5:1D:34:CB:BD:76:9F:C6:32:55:A1:4C:CE:F8:F7:A8:AE X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:06:fb:fe:a4:8e:9c:f6:18:01:a5:3c:e5:8d:db:8c:55:f9: d8:75:ba:cd:ea:7c:e6:3e:52:0a:06:69:cb:3a:27:0c:9e:32: 50:86:04:5c:07:23:14:28:8c:9f:34:49:b7:c9:e9:16:97:2e: 6a:3c:02:a1:84:ce:f4:42:27:02:01:97:38:48:89:5a:e2:83: 8e:a9:10:19:52:62:de:2c:7a:c1:40:0a:b2:f0:69:7f:d7:ca: ba:20:20:14:81:c7:9a:24:e8:a2:a4:02:53:fd:f2:ca:ab:aa: f5:95:33:22:cf:ea:c7:4f:7f:e4:0f:d4:29:6d:2c:01:fc:6f: d5:0b:02:ff:ce:bc:cc:ea:6a:b4:81:eb:45:f1:12:d2:21:1c: ba:99:fe:6d:49:d7:5c:15:b6:cf:42:cd:5b:9e:65:62:0b:29: b8:4a:83:97:c6:2c:1a:3e:37:40:fb:6e:09:06:68:87:85:ce: 08:53:6a:c3:be:fa:25:4a:aa:e3:64:ec:8e:0a:80:bb:f0:e3: 87:79:d6:31:5e:f4:16:57:2c:ea:4f:94:34:79:c9:ee:d4:1f: b6:8a:5b:c3:04:6f:d1:a4:c0:7d:61:5f:2b:47:8a:73:1c:74: 5e:76:6e:c4:b3:c0:a4:95:74:2f:aa:04:07:c3:62:05:8e:f3: 92:02:f6:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyps9EmqGdG2fXAvvMe82F5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwMzAxMTQwMDU5WhcNMjYwMzAyMTQwMDU5WjAzMTEwLwYDVQQD EyhhNDE4ODdjNTFkMzRjYmJkNzY5ZmM2MzI1NWExNGNjZWY4ZjdhOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnywFFm8bqzLc61dZkjZl/5rnj/n3 piIV+Z7FkttqIPFCuCnpPuWHzYY0FRFndvn926Q2lKAGIbxO1U+yH1AYFV/ANasN i3r+Ch0OYL0Tx4+O9y/K7WUckY9lgFU59XK1ekz1RFpt1VfWEOdeB2/C6nIsK7et SCy1hgR7Qp2krtHskDOuwsWtPvMxMdso/lC1v+aV0P5q7yaiRoX1/qSJS0izJtXW Zk1vh2Q4TjBwIwz+l4JYuLyaupNirgNZyZkpbIadMJSpSB3SxVp2irRJY20UoePZ 8odlqU0sGDP9BMFX1Jyr80pPjwkhRvDelVZx0jeugaUPFPhlUZpP5WeoLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQYh8UdNMu9dp/GMlWhTM7496iuMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAb7/qSO nPYYAaU85Y3bjFX52HW6zep85j5SCgZpyzonDJ4yUIYEXAcjFCiMnzRJt8npFpcu ajwCoYTO9EInAgGXOEiJWuKDjqkQGVJi3ix6wUAKsvBpf9fKuiAgFIHHmiTooqQC U/3yyquq9ZUzIs/qx09/5A/UKW0sAfxv1QsC/868zOpqtIHrRfES0iEcupn+bUnX XBW2z0LNW55lYgspuEqDl8YsGj43QPtuCQZoh4XOCFNqw776JUqq42TsjgqAu/Dj h3nWMV70Flcs6k+UNHnJ7tQftopbwwRv0aTAfWFfK0eKcxx0XnZuxLPApJV0L6oE B8NiBY7zkgL2xQ== -----END CERTIFICATE-----Generated at Sun Mar 1 21:10:39 2026 by rpki-client