$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: cF7yGJ5lHHBypFKzFEUVg1ngn2moJOjDqGA8d9X/rpE= Subject key identifier: 41:7E:A1:D2:69:E3:39:AD:F9:2C:78:6B:68:65:CB:90:36:A7:C4:62 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019D9C9AAA02E20F505D4CDC95D74F9F05EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 1477 Signing time: Fri 17 Apr 2026 18:01:14 +0000 Manifest this update: Fri 17 Apr 2026 18:01:14 +0000 Manifest next update: Sat 18 Apr 2026 18:01:14 +0000 Files and hashes: 1: BK_uZd5RIdvcCcnIrkl91Qf2mFw.roa (hash: wV2RNnXCJX3V+Medw8LdpmAEbR5QwEUgTvufx7pFq14=) 2: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (hash: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=) 3: G9O4g34wmhpRqqqyNq64bnjh27k.roa (hash: lYlheaBAaMmywrolWQWx4QnBFOXnz365592aJuQe6Mw=) 4: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (hash: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII=) 5: XppJI7pSNx6BdFrEbdtPboTQL6o.roa (hash: Cty7u06Lt5vOCxE5CLtni9wB/17m9CZOi2zJp+IGXYM=) 6: hHQPymz7nrurWK651cK6wH1WQB4.roa (hash: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk=) 7: hn8HZ87MGm21OeAakwo0L7epBvo.roa (hash: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs=) 8: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (hash: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA=) 9: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (hash: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg=) 10: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: tWHiKHVd9xj++KbmV/WIQrCrQtImo4YJfRt4OZTjAzM=) 11: uibhPc4NbRy01honmhOVxxl-SbI.roa (hash: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ=) 12: utkmbyJ1-9TI5Iy29JQnzvwfdgw.roa (hash: MQitkqvZxc85BEfsLrabuKg5Cbpd+JVUjJLsFQDLJCQ=) 13: xxR8mx-20J_lo55Rh1660v5SUI4.roa (hash: 2Y9dBCwd98Bba/rHT3QIRjMGiqefSe3zB38HBIRd3qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9c:9a:aa:02:e2:0f:50:5d:4c:dc:95:d7:4f:9f:05:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Apr 17 18:01:14 2026 GMT Not After : Apr 18 18:01:14 2026 GMT Subject: CN=417ea1d269e339adf92c786b6865cb9036a7c462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2d:ec:a3:3e:52:b2:c7:0d:26:06:7b:86:73: a4:46:7f:91:50:11:b2:d0:fd:37:f5:db:e5:10:8e: 2d:f8:3d:42:ec:3b:81:d5:33:30:ad:b1:d8:c0:38: e4:40:25:ea:da:f8:04:12:c1:a1:2a:77:17:e3:37: bf:be:a3:7a:3f:7f:cd:b8:e7:68:a6:dc:72:55:78: 96:54:57:6e:4d:39:fa:62:12:10:1e:ec:5b:e0:0b: c6:1d:83:a0:36:19:09:c9:46:24:46:d8:e5:90:78: e7:a6:4a:5e:6a:91:88:49:ca:87:20:8a:3e:e8:86: 5d:6d:2d:db:54:b0:a3:db:97:15:8f:f5:e2:92:4e: fa:fe:f4:3a:65:e1:05:bd:46:78:2d:bb:2f:32:2c: ec:bd:5a:fc:67:ea:16:23:54:e1:9a:bd:45:dd:e0: 84:81:24:a3:f3:7a:9d:24:7a:b6:37:9a:1e:ff:eb: 56:c1:43:6c:52:32:85:a9:44:da:db:35:3b:14:8c: 51:e7:83:1b:93:28:68:2b:03:be:68:64:6e:c0:84: a6:21:61:f1:4b:6b:ec:fa:e5:21:33:4e:e5:1d:fc: 36:3d:d5:54:6a:2f:5a:f4:cf:1c:b8:24:4f:cd:6b: 89:48:1d:24:c8:ca:d8:b5:e4:39:0c:01:41:09:7d: bb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7E:A1:D2:69:E3:39:AD:F9:2C:78:6B:68:65:CB:90:36:A7:C4:62 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7e:67:d3:eb:65:59:81:5f:a7:5e:a4:46:6c:d5:c5:02:e3: 21:91:fe:84:34:cd:f7:85:ed:bf:89:fc:7c:dc:38:53:c4:f6: 17:91:6b:27:cb:f8:60:86:39:93:99:be:c9:b0:98:80:bd:16: 24:ab:77:33:ba:7a:91:ad:ad:90:6a:3d:23:a4:cd:6b:70:1a: 28:bb:66:5e:59:ae:cb:34:f9:15:52:f8:dd:e9:55:15:bd:97: a0:70:4d:b4:15:29:1c:c6:c8:80:b1:b9:10:e9:1b:49:73:8a: 12:a3:57:bd:a8:98:5b:25:e2:f3:c2:6a:da:e2:97:5c:d4:dc: 53:69:13:bc:22:6e:42:c5:54:0d:5c:8d:18:f0:e1:75:fd:f4: f5:f5:e9:24:7f:c7:ba:7f:61:14:2e:0f:db:f2:26:69:b2:6a: af:35:09:67:0b:e6:72:a7:82:fd:08:58:b7:70:4f:a2:4b:a3: 1e:db:2e:8d:27:cb:fc:e4:bd:7d:7a:11:f9:f6:8b:c1:40:bf: d0:a4:e2:d1:6f:e1:79:40:e2:b9:ab:38:68:31:6d:1e:39:2c: 02:6a:e2:fc:4a:7f:be:2c:dd:60:24:2e:66:d2:cf:57:2f:92: be:a6:74:f3:ef:e3:4e:06:24:73:bd:30:7b:66:5d:fe:22:5b: ec:32:4c:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2cmqoC4g9QXUzclddPnwXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwNDE3MTgwMTE0WhcNMjYwNDE4MTgwMTE0WjAzMTEwLwYDVQQD Eyg0MTdlYTFkMjY5ZTMzOWFkZjkyYzc4NmI2ODY1Y2I5MDM2YTdjNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC3soz5SsscNJgZ7hnOkRn+RUBGy 0P039dvlEI4t+D1C7DuB1TMwrbHYwDjkQCXq2vgEEsGhKncX4ze/vqN6P3/NuOdo ptxyVXiWVFduTTn6YhIQHuxb4AvGHYOgNhkJyUYkRtjlkHjnpkpeapGIScqHIIo+ 6IZdbS3bVLCj25cVj/Xikk76/vQ6ZeEFvUZ4LbsvMizsvVr8Z+oWI1Thmr1F3eCE gSSj83qdJHq2N5oe/+tWwUNsUjKFqUTa2zU7FIxR54MbkyhoKwO+aGRuwISmIWHx S2vs+uUhM07lHfw2PdVUai9a9M8cuCRPzWuJSB0kyMrYteQ5DAFBCX273QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEF+odJp4zmt+Sx4a2hly5A2p8RiMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe35n0+tl WYFfp16kRmzVxQLjIZH+hDTN94Xtv4n8fNw4U8T2F5FrJ8v4YIY5k5m+ybCYgL0W JKt3M7p6ka2tkGo9I6TNa3AaKLtmXlmuyzT5FVL43elVFb2XoHBNtBUpHMbIgLG5 EOkbSXOKEqNXvaiYWyXi88Jq2uKXXNTcU2kTvCJuQsVUDVyNGPDhdf309fXpJH/H un9hFC4P2/ImabJqrzUJZwvmcqeC/QhYt3BPokujHtsujSfL/OS9fXoR+faLwUC/ 0KTi0W/heUDiuas4aDFtHjksAmri/Ep/vizdYCQuZtLPVy+SvqZ08+/jTgYkc70w e2Zd/iJb7DJMbw== -----END CERTIFICATE-----Generated at Sat Apr 18 02:31:34 2026 by rpki-client