$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: 9o1JeFdma+9+4H8dmLRPWDozMUBD9ea4sN84/rystEM= Subject key identifier: 56:55:A2:59:81:2F:B6:BC:15:ED:05:C4:D1:99:28:69:E2:95:AE:E0 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 01A0DC4E242567D3D378A52BFF56DC2E9B9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 1626 Signing time: Sat 26 Sep 2026 06:01:43 +0000 Manifest this update: Sat 26 Sep 2026 06:01:43 +0000 Manifest next update: Sun 27 Sep 2026 06:01:43 +0000 Files and hashes: 1: BK_uZd5RIdvcCcnIrkl91Qf2mFw.roa (hash: wV2RNnXCJX3V+Medw8LdpmAEbR5QwEUgTvufx7pFq14=) 2: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (hash: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=) 3: G9O4g34wmhpRqqqyNq64bnjh27k.roa (hash: lYlheaBAaMmywrolWQWx4QnBFOXnz365592aJuQe6Mw=) 4: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (hash: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII=) 5: XppJI7pSNx6BdFrEbdtPboTQL6o.roa (hash: Cty7u06Lt5vOCxE5CLtni9wB/17m9CZOi2zJp+IGXYM=) 6: ZmU2dSStEk_zeXSWwEBaw5tcl0Q.roa (hash: Y1sWpxD5SobS8QA6Ihwhvzg6iQQ+93Pu+DpnTFJR+xM=) 7: hHQPymz7nrurWK651cK6wH1WQB4.roa (hash: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk=) 8: hn8HZ87MGm21OeAakwo0L7epBvo.roa (hash: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs=) 9: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (hash: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA=) 10: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (hash: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg=) 11: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: BHw3+0csMYkiMzIJI6gOM5K6vZjYeg8/1u62rzMCO5k=) 12: uibhPc4NbRy01honmhOVxxl-SbI.roa (hash: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ=) 13: utkmbyJ1-9TI5Iy29JQnzvwfdgw.roa (hash: MQitkqvZxc85BEfsLrabuKg5Cbpd+JVUjJLsFQDLJCQ=) 14: xxR8mx-20J_lo55Rh1660v5SUI4.roa (hash: 2Y9dBCwd98Bba/rHT3QIRjMGiqefSe3zB38HBIRd3qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 06:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dc:4e:24:25:67:d3:d3:78:a5:2b:ff:56:dc:2e:9b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Sep 26 06:01:43 2026 GMT Not After : Sep 27 06:01:43 2026 GMT Subject: CN=5655a259812fb6bc15ed05c4d1992869e295aee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:4e:4a:1a:35:e0:29:9d:81:08:fe:e8:bc: 0c:5e:35:bb:c5:17:a3:3b:89:d3:d3:43:04:0e:43: d7:08:b9:f6:86:7a:0f:5e:44:95:9d:c4:b4:bd:77: 2c:8a:ae:67:32:5f:e0:96:af:6d:f2:17:83:39:0a: d0:62:38:4b:c2:4b:a6:9c:e5:63:26:ab:bd:4f:42: df:bb:74:b9:11:5f:08:ee:b7:9f:8c:60:c9:36:45: a1:e7:67:0d:65:b1:7e:94:5b:a0:43:14:5d:13:98: 82:07:de:b1:21:86:a1:a8:b7:b8:d3:e1:a1:de:9f: 64:db:9f:8f:c7:e8:11:cb:f3:18:11:96:be:39:df: 3e:a9:15:bb:a5:a4:0b:71:bd:d8:74:9c:c6:b9:58: 54:c9:28:be:eb:ff:7e:28:06:6a:03:fd:59:82:09: 53:cf:2c:fa:99:8a:cb:a1:cc:8d:d4:90:5b:88:08: d1:1a:44:89:e6:f7:da:bc:84:85:4d:91:e2:52:54: 2a:76:b6:77:a8:ef:1b:5e:55:64:d5:4d:b2:82:66: cb:c9:92:ae:18:d6:d1:a6:72:34:2c:21:b7:32:cb: db:b0:b7:0f:fb:7c:36:12:9d:e4:b8:26:31:1d:63: 97:a2:e5:8e:15:98:9a:c9:09:96:30:7c:64:96:20: 59:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:55:A2:59:81:2F:B6:BC:15:ED:05:C4:D1:99:28:69:E2:95:AE:E0 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f5:df:04:60:55:ba:9b:d5:65:58:55:aa:0b:73:c1:71:c6: fb:2a:39:22:85:2c:a8:33:77:e7:8b:8b:4e:9a:34:ce:6b:19: a9:de:84:11:fa:65:4c:6f:68:93:aa:12:eb:61:94:66:8f:52: 68:7c:15:75:15:a7:36:3a:7a:2c:0b:8b:ed:e1:99:d5:db:19: f4:a1:dd:97:d5:f0:a8:d7:61:8f:35:df:42:26:60:9b:6a:26: f5:3a:83:36:fa:3e:58:34:0d:92:24:61:08:33:06:89:cb:bd: 93:0b:ab:aa:5e:ce:dd:33:54:2a:a3:47:f3:a6:f8:6b:5a:9f: 1c:61:8b:6e:7f:68:db:7c:2d:ef:b3:19:a1:98:63:df:47:2c: a7:97:84:3c:c0:e8:13:71:cf:46:67:77:53:b8:96:94:aa:a7: 9c:a4:76:92:34:1f:4e:92:dc:34:b5:23:0b:40:34:ab:3e:3b: 72:57:83:89:5d:1d:8a:ec:a8:f3:64:fb:05:b0:5b:7f:a4:5f: 7a:99:72:8a:fe:bb:40:f5:95:5c:37:29:1c:1f:60:16:0b:24: 1f:dd:aa:be:d3:9f:ce:d3:26:cf:07:16:0b:35:0c:d4:af:31: 35:bf:47:ea:fb:fe:4f:ef:99:6f:5b:11:1d:aa:52:14:ee:0d: e0:92:68:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDcTiQlZ9PTeKUr/1bcLpufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwOTI2MDYwMTQzWhcNMjYwOTI3MDYwMTQzWjAzMTEwLwYDVQQD Eyg1NjU1YTI1OTgxMmZiNmJjMTVlZDA1YzRkMTk5Mjg2OWUyOTVhZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbtOSho14CmdgQj+6LwMXjW7xRej O4nT00MEDkPXCLn2hnoPXkSVncS0vXcsiq5nMl/glq9t8heDOQrQYjhLwkumnOVj Jqu9T0Lfu3S5EV8I7refjGDJNkWh52cNZbF+lFugQxRdE5iCB96xIYahqLe40+Gh 3p9k25+Px+gRy/MYEZa+Od8+qRW7paQLcb3YdJzGuVhUySi+6/9+KAZqA/1ZgglT zyz6mYrLocyN1JBbiAjRGkSJ5vfavISFTZHiUlQqdrZ3qO8bXlVk1U2ygmbLyZKu GNbRpnI0LCG3MsvbsLcP+3w2Ep3kuCYxHWOXouWOFZiayQmWMHxkliBZ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZVolmBL7a8Fe0FxNGZKGnila7gMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvXfBGBV upvVZVhVqgtzwXHG+yo5IoUsqDN354uLTpo0zmsZqd6EEfplTG9ok6oS62GUZo9S aHwVdRWnNjp6LAuL7eGZ1dsZ9KHdl9XwqNdhjzXfQiZgm2om9TqDNvo+WDQNkiRh CDMGicu9kwurql7O3TNUKqNH86b4a1qfHGGLbn9o23wt77MZoZhj30csp5eEPMDo E3HPRmd3U7iWlKqnnKR2kjQfTpLcNLUjC0A0qz47cleDiV0diuyo82T7BbBbf6Rf eplyiv67QPWVXDcpHB9gFgskH92qvtOfztMmzwcWCzUM1K8xNb9H6vv+T++Zb1sR HapSFO4N4JJoYQ== -----END CERTIFICATE-----Generated at Sat Sep 26 13:35:11 2026 by rpki-client