$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: nXyORb74SmiioFBH5oIlqXOy7nts7FikKgMF0++sL7I= Subject key identifier: FF:F8:AD:F8:6C:DA:4C:43:62:CF:ED:96:95:B2:AE:DA:64:E2:F6:44 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 01A0C3A04C69A83B5E2945841B693D2B8F44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0BE1 Signing time: Mon 21 Sep 2026 11:00:57 +0000 Manifest this update: Mon 21 Sep 2026 11:00:57 +0000 Manifest next update: Tue 22 Sep 2026 11:00:57 +0000 Files and hashes: 1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=) 2: 6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa (hash: z38nmLbA27NPlhWOJNNoq+Tpqv3KWZDwtJ61CNlRP7U=) 3: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=) 4: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=) 5: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=) 6: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=) 7: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=) 8: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: H0O1xg8zxfpAfTx3LcHgcnE41jXA6ShIfkwMFBJ9MN0=) 9: X-k71aDoZWtFtR_cnu9r97seWXY.asa (hash: lw8Nl/kqTmv0YBXcCPnKH/oG1mGI+Wcg8DdG5SlWra4=) 10: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=) 11: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=) 12: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=) 13: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:a0:4c:69:a8:3b:5e:29:45:84:1b:69:3d:2b:8f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Sep 21 11:00:57 2026 GMT Not After : Sep 22 11:00:57 2026 GMT Subject: CN=fff8adf86cda4c4362cfed9695b2aeda64e2f644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:2d:5f:6b:87:60:18:1f:68:a0:ce:64:b0: e3:f4:3a:0f:77:dc:1b:23:c2:9b:38:15:1c:32:17: 29:4c:ce:eb:6e:d1:a6:e4:48:d0:05:9e:1c:65:51: 6a:76:ee:77:13:ee:e5:d4:cc:b5:a3:a4:65:a4:10: 55:9e:ad:4b:60:b7:25:1c:98:fa:9e:35:ff:e6:85: 84:49:86:dd:7c:39:15:66:0a:9a:67:55:6b:d1:4e: f4:e7:8d:f5:6a:f8:49:43:b7:67:78:18:ba:da:97: bc:82:27:ed:37:87:bf:73:21:6d:5b:7f:e7:21:0d: 14:d5:33:8f:af:ab:80:08:4d:65:61:f4:a0:02:b9: a5:ec:28:2a:16:d8:00:4f:55:0e:d2:45:47:d1:d8: 78:65:cb:b4:e7:52:53:79:27:d3:18:cd:c0:86:35: 94:d5:14:37:e1:bb:69:24:de:5d:70:d9:07:cb:59: e9:40:e1:a4:ae:30:54:49:41:19:dd:4a:e9:f8:71: 98:7f:5c:7d:85:7d:f0:a7:f6:f3:23:9b:e9:c0:d6: 53:42:7e:44:63:e6:25:c3:48:67:e7:90:a4:73:06: 22:66:43:54:8f:71:e5:39:d5:95:2e:20:a5:48:0d: a6:d8:fb:bb:c2:08:f4:87:54:59:80:c5:82:c4:60: 17:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F8:AD:F8:6C:DA:4C:43:62:CF:ED:96:95:B2:AE:DA:64:E2:F6:44 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:eb:f4:6b:65:ac:0d:a9:ca:a4:51:73:31:c3:a0:46:85:b7: da:8f:06:4a:26:80:86:c5:10:1a:ab:82:42:00:1d:2f:b1:3f: 99:3d:60:52:3e:36:5f:14:bd:84:bc:b9:2c:38:8f:da:eb:6c: e5:1a:b5:5f:89:52:5a:f7:8c:5d:3a:a4:2d:c7:1b:61:d2:08: c3:fc:82:34:d1:0c:07:4e:7b:ee:2f:d4:31:29:f7:99:40:6b: 30:85:34:d3:60:e7:b8:c7:00:70:8b:b4:88:25:58:51:46:cb: 19:a4:f4:c0:11:d2:19:ee:1e:6a:2f:19:9f:2a:ee:1c:ff:83: 02:58:16:57:b5:3e:1e:d9:a1:1a:db:2c:e9:eb:7c:50:0d:99: 80:ef:a1:c6:5c:4a:c6:60:69:3a:1a:15:90:8f:bb:73:a6:00: 7e:48:cc:2e:7a:f5:5d:37:8b:16:ec:07:b5:40:b2:3f:33:00: 9a:2b:64:5d:bd:45:28:ac:a4:b1:25:31:b3:07:2f:10:8d:b9: cf:f7:30:b1:9c:4c:28:5c:a8:a5:28:b2:9c:1c:78:b5:69:e3: a5:5c:bd:2e:0c:dd:98:96:41:67:11:97:38:a5:19:a6:9e:91: e9:ff:16:6d:26:7f:01:9f:25:16:af:90:40:04:92:41:89:ea: 4f:25:69:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDoExpqDteKUWEG2k9K49EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwOTIxMTEwMDU3WhcNMjYwOTIyMTEwMDU3WjAzMTEwLwYDVQQD EyhmZmY4YWRmODZjZGE0YzQzNjJjZmVkOTY5NWIyYWVkYTY0ZTJmNjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfgtX2uHYBgfaKDOZLDj9DoPd9wb I8KbOBUcMhcpTM7rbtGm5EjQBZ4cZVFqdu53E+7l1My1o6RlpBBVnq1LYLclHJj6 njX/5oWESYbdfDkVZgqaZ1Vr0U705431avhJQ7dneBi62pe8giftN4e/cyFtW3/n IQ0U1TOPr6uACE1lYfSgArml7CgqFtgAT1UO0kVH0dh4Zcu051JTeSfTGM3AhjWU 1RQ34btpJN5dcNkHy1npQOGkrjBUSUEZ3Urp+HGYf1x9hX3wp/bzI5vpwNZTQn5E Y+Ylw0hn55CkcwYiZkNUj3HlOdWVLiClSA2m2Pu7wgj0h1RZgMWCxGAX2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/4rfhs2kxDYs/tlpWyrtpk4vZEMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuv0a2Ws DanKpFFzMcOgRoW32o8GSiaAhsUQGquCQgAdL7E/mT1gUj42XxS9hLy5LDiP2uts 5Rq1X4lSWveMXTqkLccbYdIIw/yCNNEMB0577i/UMSn3mUBrMIU002DnuMcAcIu0 iCVYUUbLGaT0wBHSGe4eai8ZnyruHP+DAlgWV7U+HtmhGtss6et8UA2ZgO+hxlxK xmBpOhoVkI+7c6YAfkjMLnr1XTeLFuwHtUCyPzMAmitkXb1FKKyksSUxswcvEI25 z/cwsZxMKFyopSiynBx4tWnjpVy9LgzdmJZBZxGXOKUZpp6R6f8WbSZ/AZ8lFq+Q QASSQYnqTyVpdA== -----END CERTIFICATE-----Generated at Mon Sep 21 19:57:58 2026 by rpki-client