$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: oP1j3cgQthmvFawYQ1uXBn1Dw0E6a+75K+vYjlTkqPc= Subject key identifier: 26:F4:DB:53:E5:D4:6B:17:15:BB:7C:2C:C9:2A:7F:D1:38:4C:36:1F Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019CACEB6D6FCA66867A8A7238491ECB974A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 13FA Signing time: Mon 02 Mar 2026 05:00:35 +0000 Manifest this update: Mon 02 Mar 2026 05:00:35 +0000 Manifest next update: Tue 03 Mar 2026 05:00:35 +0000 Files and hashes: 1: BK_uZd5RIdvcCcnIrkl91Qf2mFw.roa (hash: wV2RNnXCJX3V+Medw8LdpmAEbR5QwEUgTvufx7pFq14=) 2: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (hash: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=) 3: G9O4g34wmhpRqqqyNq64bnjh27k.roa (hash: lYlheaBAaMmywrolWQWx4QnBFOXnz365592aJuQe6Mw=) 4: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (hash: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII=) 5: XppJI7pSNx6BdFrEbdtPboTQL6o.roa (hash: Cty7u06Lt5vOCxE5CLtni9wB/17m9CZOi2zJp+IGXYM=) 6: hHQPymz7nrurWK651cK6wH1WQB4.roa (hash: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk=) 7: hn8HZ87MGm21OeAakwo0L7epBvo.roa (hash: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs=) 8: kV_BrjVm5ak2BohajWeFXkU5WnY.roa (hash: gf0jyat4SEAG7hpeZ/XK4zeXtnW9UimqB92MtzK9bjk=) 9: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (hash: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA=) 10: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (hash: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg=) 11: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: inED6G4mtpUQFnBueyEKvdHR03Vw7YYz1fpDjR6tTIA=) 12: uibhPc4NbRy01honmhOVxxl-SbI.roa (hash: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ=) 13: xxR8mx-20J_lo55Rh1660v5SUI4.roa (hash: 2Y9dBCwd98Bba/rHT3QIRjMGiqefSe3zB38HBIRd3qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:eb:6d:6f:ca:66:86:7a:8a:72:38:49:1e:cb:97:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Mar 2 05:00:35 2026 GMT Not After : Mar 3 05:00:35 2026 GMT Subject: CN=26f4db53e5d46b1715bb7c2cc92a7fd1384c361f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ce:0f:ce:c7:42:d2:d3:77:c4:59:e6:65:62: b8:69:09:73:ac:60:8b:b4:c8:17:ee:b3:fe:e9:9a: 6e:12:d9:f9:ef:1f:9f:c1:61:bc:e6:59:36:a2:31: 98:71:d1:6d:6b:42:b7:04:a1:49:4b:c0:d5:8e:b4: b4:01:6e:f2:37:f9:ba:b8:4e:96:96:de:47:1d:1f: 6b:18:2d:f3:58:7b:ed:f1:72:51:fb:7c:2f:bd:22: 9f:cd:e6:cd:d1:4b:4d:42:30:bb:17:08:f5:ff:42: a5:f5:e1:57:90:2b:74:b5:c6:19:72:d6:52:67:cf: 7f:53:bc:09:45:28:d6:0a:14:c8:6f:67:32:9c:91: 37:6c:b7:41:86:75:d4:84:7c:22:c1:c6:88:e1:26: ca:ea:77:bc:7c:14:78:87:75:fe:fc:af:39:53:17: d0:d8:5d:82:17:b8:e1:50:d1:27:47:21:30:e1:f4: 8c:d7:11:29:98:92:25:2b:ab:13:70:81:58:ec:80: e9:74:fb:c1:5e:25:63:90:c5:04:22:62:fd:8a:b7: f8:dc:00:70:b9:2e:d7:1e:b8:18:4d:32:80:63:c8: 30:bd:2b:2b:c4:62:8b:53:9c:7f:45:d4:3a:ef:72: 6f:c8:35:b2:56:e0:b3:74:ec:0f:65:4c:cb:8c:d6: cd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F4:DB:53:E5:D4:6B:17:15:BB:7C:2C:C9:2A:7F:D1:38:4C:36:1F X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:0b:64:f4:5e:70:4f:8c:22:68:67:1f:ca:0d:20:74:73:7a: 3d:29:e6:72:55:d9:12:07:d8:41:76:81:00:ee:35:f9:58:98: a6:13:29:f5:b2:58:a6:05:3b:e3:09:01:29:4f:19:4f:bc:f2: 97:11:7e:53:41:5a:c5:1f:e2:dc:fa:a8:b2:e2:a9:77:7a:8c: d1:13:ef:68:d8:1b:b1:19:35:ac:07:d8:a3:e2:b2:8c:b3:b9: 06:13:6a:d2:37:9d:a4:92:83:b7:63:cf:e8:09:10:92:38:2f: 15:e2:a7:79:8a:d0:67:98:37:fa:df:6c:2b:8c:6a:94:fe:bd: 42:33:ba:63:d1:89:4a:01:aa:18:92:d1:53:9a:b3:16:b2:a4: c8:fe:3d:cc:4f:d9:83:31:d8:9b:58:5e:14:b1:55:6b:41:b9: 61:8c:aa:8f:7b:a3:2a:a9:4c:30:d1:5b:34:c9:0d:21:e2:b8: 97:74:b2:9e:0a:12:72:3e:76:23:1a:16:23:98:39:60:49:93: 85:5c:e1:78:5f:78:22:89:91:e4:6f:a8:f7:92:1f:ef:f5:82: 35:0e:76:ad:26:b7:66:d4:d0:dd:af:31:9f:53:16:c1:80:e7: de:4f:a0:45:d0:f3:2a:4e:d9:44:82:b7:a3:c8:06:a2:83:26: 1a:52:73:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZys621vymaGeopyOEkey5dKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwMzAyMDUwMDM1WhcNMjYwMzAzMDUwMDM1WjAzMTEwLwYDVQQD EygyNmY0ZGI1M2U1ZDQ2YjE3MTViYjdjMmNjOTJhN2ZkMTM4NGMzNjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA084PzsdC0tN3xFnmZWK4aQlzrGCL tMgX7rP+6ZpuEtn57x+fwWG85lk2ojGYcdFta0K3BKFJS8DVjrS0AW7yN/m6uE6W lt5HHR9rGC3zWHvt8XJR+3wvvSKfzebN0UtNQjC7Fwj1/0Kl9eFXkCt0tcYZctZS Z89/U7wJRSjWChTIb2cynJE3bLdBhnXUhHwiwcaI4SbK6ne8fBR4h3X+/K85UxfQ 2F2CF7jhUNEnRyEw4fSM1xEpmJIlK6sTcIFY7IDpdPvBXiVjkMUEImL9irf43ABw uS7XHrgYTTKAY8gwvSsrxGKLU5x/RdQ673JvyDWyVuCzdOwPZUzLjNbNpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCb021Pl1GsXFbt8LMkqf9E4TDYfMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAtk9F5w T4wiaGcfyg0gdHN6PSnmclXZEgfYQXaBAO41+ViYphMp9bJYpgU74wkBKU8ZT7zy lxF+U0FaxR/i3PqosuKpd3qM0RPvaNgbsRk1rAfYo+KyjLO5BhNq0jedpJKDt2PP 6AkQkjgvFeKneYrQZ5g3+t9sK4xqlP69QjO6Y9GJSgGqGJLRU5qzFrKkyP49zE/Z gzHYm1heFLFVa0G5YYyqj3ujKqlMMNFbNMkNIeK4l3SyngoScj52IxoWI5g5YEmT hVzheF94IomR5G+o95If7/WCNQ52rSa3ZtTQ3a8xn1MWwYDn3k+gRdDzKk7ZRIK3 o8gGooMmGlJzTA== -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:14 2026 by rpki-client