$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft File: UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft (raw, json) Hash identifier: /UnXwRGrib5qkieRAfU+kyrYuUaRn90WZ5HevpSicL4= Subject key identifier: 44:CA:3C:F9:45:24:00:3B:82:19:0A:FB:4C:08:2A:45:FB:D9:34:E0 Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e Certificate serial: 01A0C8FD10F1D8854573588F82C6480704D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft Manifest number: 1592 Signing time: Tue 22 Sep 2026 12:00:23 +0000 Manifest this update: Tue 22 Sep 2026 12:00:23 +0000 Manifest next update: Wed 23 Sep 2026 12:00:23 +0000 Files and hashes: 1: 5LP1tFsYxrSifJx4g3QCwnwqEE0.roa (hash: KN3CpVDHemmKFo5Hvty6pP9rTH9gXzF1gwHa0T5DRaI=) 2: 9okxpKR53j_wPBq5poJcbcWbCuU.roa (hash: g6ME8XCY/1PYlaKndRMLOkvVq06aR4XG5jU3acn3n1Q=) 3: NEN0LXaSfRY1LnULdkJtj6mRNJQ.roa (hash: 3VMJ8FAcJtXYQQFiElHCi0MUd/IBCd2Oo6ayYD6ZuQI=) 4: UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl (hash: 3WuC7FQmJNBp6AWlTJQ6CgYntjXOoqwwDmVFd+eEAUE=) 5: Vvg_eRMXx1wM0ykfa7tuZT2JbiU.roa (hash: y54xWJIZgynMkSzzpbyHXRwEQLJEaYo5XZHrl4z8vdo=) 6: aF8HdNDR8v9GbRHA9AUlpw1JBio.roa (hash: D5TksZpwG3SQ7rtD3PvQaY0VIClKXUQssfssM3S6CMo=) 7: c72wk2piK98wT4mJw8_ZtS1RplA.roa (hash: sWf1C2L00m53zAy7UBc4ltRNb1KloYEQlgh8zb6I1Tg=) 8: q5ijRhsoQMXQqvexZ__tLFhWfbE.roa (hash: RKODKNUK1hXqxPnqoVYe1vULFOrntBOl4JYsmeK1KQ4=) 9: vqgsCdnQjdwb8knW65OqR5JZyMQ.roa (hash: vaE98kS/d3xxz0YZliXnz/1dmO+QWIKwmXrkaJQJaCI=) 10: xyPRxt8gyN4UvPVCARX1LVhRpNY.roa (hash: 6Z0OEqU5ZvJLP8MHSq0j/bl+XSlDKyhwlrMFSdH8iSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 12:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:fd:10:f1:d8:85:45:73:58:8f:82:c6:48:07:04:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e Validity Not Before: Sep 22 12:00:23 2026 GMT Not After : Sep 23 12:00:23 2026 GMT Subject: CN=44ca3cf94524003b82190afb4c082a45fbd934e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:64:29:6e:32:39:cd:26:e1:4e:6f:5c:2f:79: 11:dc:18:c2:95:cf:cd:8c:e6:a7:e1:f1:8e:28:20: d6:d8:76:90:98:72:4d:74:40:40:a1:e0:0b:c2:89: 2c:80:94:5f:b5:c6:cf:6a:ac:a0:c2:0c:fb:58:83: 92:a8:c0:07:cd:91:20:6f:79:d4:14:fa:09:d6:b3: 1b:77:c3:7e:45:de:53:14:e2:32:29:99:10:c5:5a: 1f:a3:ae:a0:b9:ca:11:b3:b6:c1:ab:8f:72:ef:f6: d8:05:e9:cd:eb:57:19:93:11:a2:04:51:0a:b9:fe: ed:b3:05:cf:ec:c2:8d:9a:18:4b:ae:b8:c9:4d:bf: dc:f0:c2:2d:b3:1b:88:a3:3c:c2:5d:ac:49:77:fb: d1:c1:f6:63:34:ac:52:79:de:1a:db:41:1b:63:7c: 8b:6a:ab:de:f7:1b:20:e4:3a:13:47:0d:00:50:6b: 44:b0:98:72:15:17:28:b5:53:ae:2d:f7:7c:97:b1: ad:1b:f1:7b:58:8f:d0:bd:6c:75:09:05:a7:57:c4: 9b:35:a7:0d:b4:93:6c:53:d7:b0:aa:7e:63:b3:09: 0e:89:ac:9d:cf:b2:11:ee:dd:fc:eb:15:a3:ba:1c: 93:ed:fa:b0:9b:75:fb:47:69:be:13:10:f5:44:08: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CA:3C:F9:45:24:00:3B:82:19:0A:FB:4C:08:2A:45:FB:D9:34:E0 X509v3 Authority Key Identifier: keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:ea:b9:a9:25:63:7d:24:03:66:47:05:a2:02:81:70:e5:fb: 64:cd:a5:f4:49:07:ee:ac:de:1e:70:9c:94:72:00:5c:e9:c7: 0e:d6:47:1a:a3:b0:92:17:4b:b8:41:7f:84:98:55:2b:f6:b9: d9:34:4e:1a:a3:16:29:ae:ce:c7:a5:c2:76:79:8c:fb:9a:ef: ec:03:0b:d2:3d:f2:2e:8b:ed:19:d1:d0:cc:84:6c:63:40:e7: b4:db:0d:f8:d4:28:ae:8a:26:02:ed:98:e5:94:ab:42:d9:88: 96:82:03:05:2a:ef:58:81:bf:8a:53:6c:a2:15:64:89:03:5f: 9f:f3:eb:b0:33:d7:d9:50:20:e3:e7:db:4c:e0:e5:26:0d:86: eb:80:93:df:10:90:89:f7:e0:d7:99:0b:72:69:a2:5a:c1:53: 9c:ea:1b:88:17:46:b4:b3:85:ab:74:5a:bc:a9:59:3b:8d:aa: 03:61:f0:db:a6:38:4e:ce:63:e5:86:02:6b:24:14:53:57:dd: 08:05:f1:b9:cb:e7:85:d5:b0:dc:31:2d:b6:a0:37:4a:4a:6c: 1b:df:af:9d:97:78:0f:c4:19:93:76:4b:6a:79:40:1b:6b:0f: 3f:a1:97:72:d2:61:7b:84:33:42:55:84:fd:73:33:9a:79:f1: 8f:a6:cc:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDI/RDx2IVFc1iPgsZIBwTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMGI0MTlmMGMxN2I0YzhiZTIxN2Y2NDM4OGQyNjhkMTRk YzI2MWUwHhcNMjYwOTIyMTIwMDIzWhcNMjYwOTIzMTIwMDIzWjAzMTEwLwYDVQQD Eyg0NGNhM2NmOTQ1MjQwMDNiODIxOTBhZmI0YzA4MmE0NWZiZDkzNGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGQpbjI5zSbhTm9cL3kR3BjClc/N jOan4fGOKCDW2HaQmHJNdEBAoeALwoksgJRftcbPaqygwgz7WIOSqMAHzZEgb3nU FPoJ1rMbd8N+Rd5TFOIyKZkQxVofo66gucoRs7bBq49y7/bYBenN61cZkxGiBFEK uf7tswXP7MKNmhhLrrjJTb/c8MItsxuIozzCXaxJd/vRwfZjNKxSed4a20EbY3yL aqve9xsg5DoTRw0AUGtEsJhyFRcotVOuLfd8l7GtG/F7WI/QvWx1CQWnV8SbNacN tJNsU9ewqn5jswkOiaydz7IR7t386xWjuhyT7fqwm3X7R2m+ExD1RAglnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETKPPlFJAA7ghkK+0wIKkX72TTgMB8GA1UdIwQY MBaAFFELQZ8MF7TIviF/ZDiNJo0U3CYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYt MTRhMDk5OTNkNjcxLzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zMGNkMGEtOTNjZi00NWRjLTkzNTYtMTRhMDk5OTNkNjcx LzEvVVF0Qm53d1h0TWktSVg5a09JMG1qUlRjSmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAweq5qSVj fSQDZkcFogKBcOX7ZM2l9EkH7qzeHnCclHIAXOnHDtZHGqOwkhdLuEF/hJhVK/a5 2TROGqMWKa7Ox6XCdnmM+5rv7AML0j3yLovtGdHQzIRsY0DntNsN+NQoroomAu2Y 5ZSrQtmIloIDBSrvWIG/ilNsohVkiQNfn/PrsDPX2VAg4+fbTODlJg2G64CT3xCQ iffg15kLcmmiWsFTnOobiBdGtLOFq3RavKlZO42qA2Hw26Y4Ts5j5YYCayQUU1fd CAXxucvnhdWw3DEttqA3SkpsG9+vnZd4D8QZk3ZLanlAG2sPP6GXctJhe4QzQlWE /XMzmnnxj6bMkQ== -----END CERTIFICATE-----Generated at Tue Sep 22 21:04:22 2026 by rpki-client