$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft File: UST7oeQBwD5boc13rp7jnP1jG_s.mft (raw, json) Hash identifier: YueqVAD4bByDR6S4PhlCbbsGJWF+kcO3qPP1em1PULk= Subject key identifier: 43:5C:64:B2:74:27:A2:CB:24:46:8B:07:4E:1D:74:2D:86:43:5B:51 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 01A0C8E330FEACA36610EB6DF34C5DCEEDB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft Manifest number: 1718 Signing time: Tue 22 Sep 2026 11:32:07 +0000 Manifest this update: Tue 22 Sep 2026 11:32:07 +0000 Manifest next update: Wed 23 Sep 2026 11:32:07 +0000 Files and hashes: 1: 1-kcZNt23iw1RBz4Gt3pzD1CfBpE.roa (hash: EXKCmselguxEWJqVjaQNd8s2v6f02y8BzJbbVd7d/lo=) 2: 4TqP4VztD-rYbZ16oiZUvEP0D1Q.roa (hash: 1+Dj9DjkqqJBKSFukY3ZLUFpE2kBLC6OJYlV3ZzlDHE=) 3: 51RV5bLUK5swpjii_ClMr0Z0LK4.roa (hash: eaEFcr3Fzwqgey9xkzHTc526Wfs17vHkTkKlWZDr6V4=) 4: 7Gfdl5k6T4Nt-xZrQUmYT2Wb0Q4.roa (hash: praaG5V4IjeUDRh2H9CpWs4rx+iMgs/zDPv4j89TbtU=) 5: 7meu7s1H44zdKfP25MFBcQbtGHI.roa (hash: WvFf3T5R9dDcoqBxFhAiq7tVRoIpj2LekmR2mNGzL1E=) 6: 7u4RVlV52XWyTyDw_qznuD0UgXs.roa (hash: vYm6Nz0cS2O84RBnN+siuod691AUb0y3q4ys6CicPZI=) 7: 9sk7o3-J1zppXpr20oFx7pS_U0c.roa (hash: pBXnQfzjUWzJ2ZBcFMKN6xODjJ4zYHByfhzLBkNvrdQ=) 8: Bg8twJPEwYB0D5B_GtWNKpxTLS0.roa (hash: ynqd0KCyFtJRjOR/0svNxwFZHTwpowqTTrTl+O/mp0E=) 9: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (hash: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw=) 10: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (hash: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA=) 11: GWUpBhLv0PHDsIV3w3GIbM6-96s.roa (hash: qr4GrREKG7A3hhdS3Agv52m1MsgGN/WZ20ATzaaaiuk=) 12: HxGP4RyCdmbtsC_X7rEOMPaadGs.roa (hash: E1pPUcXW5mPkpSrQhelqafY4OsK2tjQxSmKWda1vbOE=) 13: MZUJ_YtPrARksG8JiNeh9h5bxjU.roa (hash: gULv6+Niu5hf2ZuzY/CCoAvGjaEsELBZ6B3Mi+f8gPo=) 14: NNB2avyCldcIMCL0f0MRWjsmPGg.roa (hash: DEfqSuvzloP85jcJKk7ZgGBFiOXRfF0MqFeO19BqKn0=) 15: UST7oeQBwD5boc13rp7jnP1jG_s.crl (hash: WhvoR6KsEYbDESJ8uxTGiA6jyXEMOq6njGmJKmDl4sk=) 16: ZwUA3La-CLO2vo7n-4O0XOh48Xw.roa (hash: U8GSnZZoap+4gf9xVbyRxlPJkgOVmU3uHH07WIciOyM=) 17: aFnh6dX02Plbz29YBmV3SD7j9Q0.roa (hash: sc7xU6BRSHAeMTFIhYVFzlvkouO1NHCbhFZvW8ZQGuY=) 18: bKOziSP_XttR6KXVx43_hKvo5UM.roa (hash: 4QTv2mKHqsuXG6X8b61ridnXdKspO+S1hN2ZP7mulZY=) 19: fZ_Btht45xaHLpXNFdVYnxZ50Ow.roa (hash: JpN5XVDZY1IahuGnYijyyeq5BW4QE/s6DEijCb+GpS0=) 20: j4qiTlmyE2UTELOd_dWPpgYgT7g.roa (hash: tL7gSkajUFv82zTjqwfcJA15HYbXtYeZkwl/AW0YDBU=) 21: nrPLRJPmPFUNnRKVYlt5xynJqbQ.roa (hash: I11fElTQunbRvyiT3+4v3tCdsssjfQCu5kwVzj1TuOs=) 22: ql7rOmZ_btr3d4A37f2Df8JDM0E.roa (hash: /SRzz/yYDf39iuJ35shny0PsFk2f1QMbJVc74yAIIqU=) 23: waLcrNH7uHQklmGVHpfmCMZcL3o.roa (hash: G6P6bFBr2kZHKhtwrt4aC293o8D2o+Zw99eQaBr2bOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 11:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:e3:30:fe:ac:a3:66:10:eb:6d:f3:4c:5d:ce:ed:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Sep 22 11:32:07 2026 GMT Not After : Sep 23 11:32:07 2026 GMT Subject: CN=435c64b27427a2cb24468b074e1d742d86435b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:03:8e:64:94:14:01:fc:cc:43:2b:e5:a5:4e: 27:dd:92:6c:ce:04:73:51:1d:14:3f:d3:0e:35:04: e3:47:6d:64:9e:01:f7:1d:2b:bd:f8:e3:4e:7d:84: b0:88:17:15:fe:bc:10:ad:f0:33:db:1a:de:0d:eb: 46:18:63:cd:0e:07:60:14:85:3a:98:2e:4b:73:80: 48:e5:b3:77:a9:8c:da:6c:6d:f2:b9:7d:ce:26:69: 79:27:af:d8:85:95:f1:b9:00:82:24:fb:f7:83:bb: a2:69:25:34:9b:29:7c:ca:49:4c:d1:f5:db:de:4d: 62:65:f0:53:e0:b2:46:54:b3:07:1b:4f:02:13:76: 61:06:56:b9:56:58:a3:70:9d:e1:a3:aa:fd:35:6a: e4:84:fd:7b:5b:6c:42:8a:f0:ad:b9:17:d3:ea:94: 5a:5b:60:47:c5:85:a7:26:46:ba:11:af:2b:a5:ab: bf:ae:8b:4b:1f:f9:2d:c4:57:53:d9:8f:a9:df:66: e8:95:84:52:5e:38:bb:ec:e2:ab:53:f5:a0:ac:fc: b3:2c:e9:93:0e:4d:fc:5e:33:88:2c:ef:c2:aa:7c: f2:29:26:f0:17:14:99:f3:ab:a5:b8:02:e6:d7:0a: 29:82:78:7c:9f:75:fb:c1:24:47:10:18:a5:14:f4: 7e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:5C:64:B2:74:27:A2:CB:24:46:8B:07:4E:1D:74:2D:86:43:5B:51 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a5:22:08:07:fc:7a:2d:39:cb:12:5d:d2:0a:22:31:99:cb: fb:2b:aa:84:54:cd:e7:1c:b4:48:82:32:86:92:bb:f5:52:df: a9:5d:49:f1:23:d5:ed:35:7d:16:b1:e2:7c:bf:ed:60:9b:74: 22:9d:1f:d6:07:8c:52:d5:df:dd:e0:73:90:8a:3a:88:3b:08: 70:e5:c7:f2:b0:36:09:f2:66:45:5e:fc:51:7b:da:89:ab:87: e3:83:dd:7e:8d:8e:da:0b:98:0d:4c:21:df:b3:14:44:c2:7f: 51:51:ab:44:65:0b:68:a2:a7:61:f7:9d:b2:33:6f:0c:44:13: 2d:6b:38:46:35:13:86:2f:35:a9:8c:fc:03:fd:ec:ab:0b:0f: de:99:e1:39:f9:95:cd:69:14:cf:72:9f:83:a5:b3:34:0b:04: f9:e4:6b:ee:a6:b0:75:68:37:ee:fb:d0:29:c8:2e:af:99:f9: e2:cb:3e:d1:40:a7:66:ec:51:7f:ee:c8:d4:3d:6f:26:ce:92: 56:11:8e:6e:07:05:b2:70:cd:83:d1:a4:44:8a:84:5d:e1:e9: f3:3f:d3:ad:04:5b:c3:80:7b:25:2c:33:35:42:aa:51:fc:71: cf:91:d3:17:ff:fd:dd:76:f2:d5:c9:9c:8a:9c:34:ba:a1:10: eb:ac:09:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDI4zD+rKNmEOtt80xdzu20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwOTIyMTEzMjA3WhcNMjYwOTIzMTEzMjA3WjAzMTEwLwYDVQQD Eyg0MzVjNjRiMjc0MjdhMmNiMjQ0NjhiMDc0ZTFkNzQyZDg2NDM1YjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAOOZJQUAfzMQyvlpU4n3ZJszgRz UR0UP9MONQTjR21kngH3HSu9+ONOfYSwiBcV/rwQrfAz2xreDetGGGPNDgdgFIU6 mC5Lc4BI5bN3qYzabG3yuX3OJml5J6/YhZXxuQCCJPv3g7uiaSU0myl8yklM0fXb 3k1iZfBT4LJGVLMHG08CE3ZhBla5VlijcJ3ho6r9NWrkhP17W2xCivCtuRfT6pRa W2BHxYWnJka6Ea8rpau/rotLH/ktxFdT2Y+p32bolYRSXji77OKrU/WgrPyzLOmT Dk38XjOILO/CqnzyKSbwFxSZ86uluALm1wopgnh8n3X7wSRHEBilFPR+3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENcZLJ0J6LLJEaLB04ddC2GQ1tRMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqUiCAf8 ei05yxJd0goiMZnL+yuqhFTN5xy0SIIyhpK79VLfqV1J8SPV7TV9FrHifL/tYJt0 Ip0f1geMUtXf3eBzkIo6iDsIcOXH8rA2CfJmRV78UXvaiauH44Pdfo2O2guYDUwh 37MURMJ/UVGrRGULaKKnYfedsjNvDEQTLWs4RjUThi81qYz8A/3sqwsP3pnhOfmV zWkUz3Kfg6WzNAsE+eRr7qawdWg37vvQKcgur5n54ss+0UCnZuxRf+7I1D1vJs6S VhGObgcFsnDNg9GkRIqEXeHp8z/TrQRbw4B7JSwzNUKqUfxxz5HTF//93Xby1cmc ipw0uqEQ66wJQw== -----END CERTIFICATE-----Generated at Tue Sep 22 17:32:47 2026 by rpki-client