$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json) Hash identifier: vhI59AtPxF3sRW3EF1FV1Ma5u2x4ZYSnMm8EUMyd8lM= Subject key identifier: 46:4C:AF:82:BB:DA:52:92:71:9B:14:1E:9E:62:5D:E0:CC:56:9C:AD Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f Certificate serial: 019D9886DE9D4182BC81B3DA3D037560F840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft Manifest number: 18FF Signing time: Thu 16 Apr 2026 23:01:08 +0000 Manifest this update: Thu 16 Apr 2026 23:01:08 +0000 Manifest next update: Fri 17 Apr 2026 23:01:08 +0000 Files and hashes: 1: 6cPzePL8SbPhYxlEre30SLCYl-Y.roa (hash: bpE4jQ6I0nBPjXRqOCXt82xgQ0N1iRPYG2gk58BlGfE=) 2: 7qKC_f93I4x5vZAkFd7YPrFcC7k.roa (hash: Fej8whp10bdKNIubAsMMxHxf8nDoH0W086yoYql/4Y0=) 3: AglMX7mwwb3rspJEIopyVPwTx-E.roa (hash: S+AWhAQbQR4GQpkHiPCQOCsaczJj/pHTNHnGM4CmrlA=) 4: H02yV6HgXbkB7Sblo8iq_zMpEUA.roa (hash: wdaj1AYOG7ohn8sLP/a8ErBCpxjqgUG9MpQNoEmcpoE=) 5: MNvipI6k91242S53W3jqVcArQhc.roa (hash: 7sDpPYB99HElo2KA5xuF+lvuTcscLhsFKunpulQrN5o=) 6: MiUKM4-anjUIiLLo25o4aW1endE.roa (hash: 8GJk2lpNvqF8G6oHGKOgI8d2pjeWdDUhOm/xZPhFJK8=) 7: NFAuHU7LF_HyqchSKTj8EafONIY.roa (hash: 6n1a8gPcx7eZe6weWqKlrMFgR6RhTx10TMdXBJFAWF4=) 8: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: HgyeHXglsKwrLOYYpbRm7zjbE95XciHiZRFDUQaiFRI=) 9: WFdUi3XXatfTABnfBpngGAHzARo.roa (hash: kKjPRwwZCBaY9u1h1EFLYB9g9DPTFuUTOwPzWAxE6M4=) 10: Zpq31QxZEBIlYUReZR_zQ9fqz_s.roa (hash: kvahSoEODcR6XaCVi1n2GMeJPQJl3cEsFyNEhPCk3BY=) 11: bHuZc9mUYBcqpEDyA_8H3U2OWFM.roa (hash: LIqVQ9mxztvdOqUbAJcArQV2MAsX+TwnaJ0MIMH4BK4=) 12: dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (hash: fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 22:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:86:de:9d:41:82:bc:81:b3:da:3d:03:75:60:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Validity Not Before: Apr 16 23:01:08 2026 GMT Not After : Apr 17 23:01:08 2026 GMT Subject: CN=464caf82bbda5292719b141e9e625de0cc569cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:68:89:a8:14:67:5c:4a:2a:7a:4a:da:b6: 0b:50:2d:0e:d6:c5:8c:c1:33:0a:91:3d:83:6f:23: e6:41:81:a2:d4:73:8a:27:a3:ee:23:ff:86:9c:3d: 36:5d:d3:ec:6d:98:15:cb:5f:8e:2d:56:ba:d4:1f: eb:2d:30:8a:5d:dc:d1:b5:b9:04:ba:a8:44:5c:b1: 2a:ae:23:db:14:1e:8b:4c:19:8c:79:d2:c8:93:66: 94:a9:30:1f:77:04:1d:79:43:89:3c:2f:66:c9:83: 50:35:a5:a5:34:97:97:9e:71:2d:b4:8d:b4:99:87: 34:7f:1f:04:21:cd:de:33:cc:17:65:aa:23:11:be: b3:94:86:ea:63:5d:6a:0f:8d:f0:db:cc:23:ac:7e: bb:c0:54:fe:4a:65:dc:c5:18:33:e0:27:70:c6:78: a8:32:55:5a:af:6c:ee:5a:bb:90:63:8e:47:57:1c: 0a:8c:59:f3:84:85:28:d0:4c:3d:ac:50:16:15:a9: a9:e3:b5:7f:2f:53:58:b6:6d:b4:00:a6:4a:03:29: 4c:49:80:fb:7b:cf:68:3b:04:4c:c4:66:51:a8:8b: da:e4:8f:cb:13:44:89:d7:45:a2:34:45:15:6d:bf: 54:3a:a2:41:73:b8:93:45:2a:79:52:9e:02:27:a1: 65:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4C:AF:82:BB:DA:52:92:71:9B:14:1E:9E:62:5D:E0:CC:56:9C:AD X509v3 Authority Key Identifier: keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6c:f0:e8:00:e6:17:5b:f4:e1:ef:1b:00:38:3a:3f:cc:e0: a3:60:40:cc:71:1c:77:d6:a0:8f:2f:be:44:3c:ef:e1:ce:f3: 90:74:59:43:52:0f:b8:37:99:c7:bb:a2:b8:54:17:79:34:70: fd:1e:9a:aa:5c:57:d2:47:99:2c:d3:fd:1b:a8:4b:8f:72:81: 4b:33:16:d1:d6:ae:6a:86:0c:ed:cd:86:61:44:3c:42:fe:80: c6:d6:c9:67:cd:29:92:ba:3b:1b:8c:4a:84:aa:8f:14:9d:34: c1:e0:39:cd:12:ee:d3:aa:42:7e:04:c6:a6:b3:33:cc:f2:9f: 76:b3:d5:97:db:c9:d7:51:c2:a7:e2:7d:f8:42:b6:ac:1e:93: 86:1b:ab:c6:72:ac:48:87:5c:26:39:43:a9:f6:d8:9c:d2:a9: 64:3c:04:36:7b:6e:48:36:9d:2c:19:d2:94:21:20:c4:31:0e: b7:92:e2:e2:35:6e:f4:36:28:13:9e:a5:86:65:9e:8b:4f:6c: 39:28:b6:0f:29:45:65:96:99:cf:66:28:26:5f:33:7a:0b:c8: a1:8c:22:78:af:ff:63:ac:ec:21:fd:d4:aa:55:35:3d:85:ef: 72:36:44:49:7e:bd:2c:89:5a:65:76:51:f4:d8:62:63:f8:30: 0e:31:80:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Yht6dQYK8gbPaPQN1YPhAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi ZDBhNWYwHhcNMjYwNDE2MjMwMTA4WhcNMjYwNDE3MjMwMTA4WjAzMTEwLwYDVQQD Eyg0NjRjYWY4MmJiZGE1MjkyNzE5YjE0MWU5ZTYyNWRlMGNjNTY5Y2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9VoiagUZ1xKKnpK2rYLUC0O1sWM wTMKkT2DbyPmQYGi1HOKJ6PuI/+GnD02XdPsbZgVy1+OLVa61B/rLTCKXdzRtbkE uqhEXLEqriPbFB6LTBmMedLIk2aUqTAfdwQdeUOJPC9myYNQNaWlNJeXnnEttI20 mYc0fx8EIc3eM8wXZaojEb6zlIbqY11qD43w28wjrH67wFT+SmXcxRgz4Cdwxnio MlVar2zuWruQY45HVxwKjFnzhIUo0Ew9rFAWFamp47V/L1NYtm20AKZKAylMSYD7 e89oOwRMxGZRqIva5I/LE0SJ10WiNEUVbb9UOqJBc7iTRSp5Up4CJ6FlBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZMr4K72lKScZsUHp5iXeDMVpytMB8GA1UdIwQY MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt N2JiZDI4Y2U0YTc1LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1 LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2zw6ADm F1v04e8bADg6P8zgo2BAzHEcd9agjy++RDzv4c7zkHRZQ1IPuDeZx7uiuFQXeTRw /R6aqlxX0keZLNP9G6hLj3KBSzMW0dauaoYM7c2GYUQ8Qv6AxtbJZ80pkro7G4xK hKqPFJ00weA5zRLu06pCfgTGprMzzPKfdrPVl9vJ11HCp+J9+EK2rB6ThhurxnKs SIdcJjlDqfbYnNKpZDwENntuSDadLBnSlCEgxDEOt5Li4jVu9DYoE56lhmWei09s OSi2DylFZZaZz2YoJl8zegvIoYwieK//Y6zsIf3UqlU1PYXvcjZESX69LIlaZXZR 9NhiY/gwDjGAhA== -----END CERTIFICATE-----Generated at Fri Apr 17 03:53:00 2026 by rpki-client