$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: iDJNDcS7BV2CNvJK8NBdqV55FCV81xOhc+Z/nlAYb+Y= Subject key identifier: E5:DC:7D:56:6C:38:D9:8D:0A:8C:AA:38:A4:37:98:B3:B8:06:76:03 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019D97E16E4C08B7A11792CE091F8A6503E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0A3C Signing time: Thu 16 Apr 2026 20:00:26 +0000 Manifest this update: Thu 16 Apr 2026 20:00:26 +0000 Manifest next update: Fri 17 Apr 2026 20:00:26 +0000 Files and hashes: 1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=) 2: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=) 3: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=) 4: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=) 5: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=) 6: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=) 7: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: 5y8hl7H+nI4nknWFmpyKHL0dwyviln2OcS93HrIRGzI=) 8: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=) 9: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=) 10: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=) 11: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 20:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:97:e1:6e:4c:08:b7:a1:17:92:ce:09:1f:8a:65:03:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Apr 16 20:00:26 2026 GMT Not After : Apr 17 20:00:26 2026 GMT Subject: CN=e5dc7d566c38d98d0a8caa38a43798b3b8067603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:77:e1:7f:bc:7f:11:63:61:5f:23:25:81:a6: 48:90:65:fd:3d:3f:90:d6:6d:ac:68:85:1d:e1:6c: 15:87:b4:82:04:3b:00:49:0f:39:06:8e:43:50:a4: 8f:0a:e4:17:82:7b:f8:05:96:dc:a5:9a:e8:53:90: 45:81:08:5e:79:e2:3f:06:2a:9a:db:c5:1d:73:9f: 7b:f1:73:6f:26:f8:41:8d:2c:91:f3:d3:5b:5a:6b: db:5e:e7:b7:3e:10:62:03:4a:87:33:93:7f:f0:74: 33:b5:13:c1:fc:33:05:02:7d:43:88:00:fc:d9:dc: a0:39:ca:2a:f3:bd:18:cd:09:e5:24:cd:08:78:60: 33:79:85:4f:4d:7d:5d:90:59:1d:6d:2d:8f:20:67: 13:da:d6:b6:03:29:3c:97:c7:73:5c:3e:51:d7:29: 7b:9e:84:1c:13:75:f6:01:d8:75:c7:89:10:68:87: 21:d5:54:85:c5:0b:9a:42:ff:57:9f:6f:1f:88:2a: a5:b4:b5:ba:90:f8:da:aa:51:e4:c2:9d:14:98:38: a5:8e:69:fd:ec:f4:48:db:8c:60:4d:1e:20:82:a8: bb:ca:58:58:cd:29:6c:5b:21:9e:6f:81:6e:05:b3: 75:af:4b:31:de:64:94:65:b4:de:86:79:67:2a:eb: 33:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DC:7D:56:6C:38:D9:8D:0A:8C:AA:38:A4:37:98:B3:B8:06:76:03 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a6:5f:38:9d:b2:ac:b8:64:77:d0:9a:49:f8:db:e2:91:9e: 3a:a2:2c:5a:c0:f2:5a:20:ff:2f:84:98:6f:8a:29:c9:db:ab: 21:2c:f6:ee:3a:82:63:05:b7:e2:80:cb:92:11:c0:29:4e:b1: 22:f2:6c:0d:c7:48:01:e8:08:e7:75:b4:10:46:2b:d5:e3:57: 43:e0:28:0f:f9:ea:63:52:c7:2b:aa:67:14:37:69:c6:a5:d4: f3:96:f7:b4:c3:50:9b:18:b7:a3:55:50:ca:b3:51:eb:0e:3d: 82:41:cb:45:a7:7e:e3:e5:f1:da:15:a4:5c:e6:0a:9f:a0:66: 4a:3e:7c:10:23:e4:dc:a9:89:cf:78:87:00:90:bf:54:f4:fd: b9:9e:4e:0a:40:f9:58:14:e2:2e:33:4f:b0:39:e8:fe:1e:5b: 3a:4c:85:47:9a:0d:4d:1b:83:b6:46:6d:f6:1d:f5:61:d6:8c: ff:18:08:b5:f1:1e:97:6f:7f:83:ec:7f:2b:28:b8:75:1c:dc: 7b:0f:e2:c3:ca:39:17:e6:67:67:12:37:a0:c9:07:8c:19:e1: 3e:6b:7f:e0:31:6d:5c:f1:f6:db:1a:3d:3e:69:87:64:d6:3c: 9e:d3:1c:21:e0:d4:d5:44:e2:69:26:75:ec:11:6b:a3:45:01: d3:c3:2f:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2X4W5MCLehF5LOCR+KZQPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwNDE2MjAwMDI2WhcNMjYwNDE3MjAwMDI2WjAzMTEwLwYDVQQD EyhlNWRjN2Q1NjZjMzhkOThkMGE4Y2FhMzhhNDM3OThiM2I4MDY3NjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHfhf7x/EWNhXyMlgaZIkGX9PT+Q 1m2saIUd4WwVh7SCBDsASQ85Bo5DUKSPCuQXgnv4BZbcpZroU5BFgQheeeI/Biqa 28Udc5978XNvJvhBjSyR89NbWmvbXue3PhBiA0qHM5N/8HQztRPB/DMFAn1DiAD8 2dygOcoq870YzQnlJM0IeGAzeYVPTX1dkFkdbS2PIGcT2ta2Ayk8l8dzXD5R1yl7 noQcE3X2Adh1x4kQaIch1VSFxQuaQv9Xn28fiCqltLW6kPjaqlHkwp0UmDiljmn9 7PRI24xgTR4ggqi7ylhYzSlsWyGeb4FuBbN1r0sx3mSUZbTehnlnKuszGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXcfVZsONmNCoyqOKQ3mLO4BnYDMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaZfOJ2y rLhkd9CaSfjb4pGeOqIsWsDyWiD/L4SYb4opydurISz27jqCYwW34oDLkhHAKU6x IvJsDcdIAegI53W0EEYr1eNXQ+AoD/nqY1LHK6pnFDdpxqXU85b3tMNQmxi3o1VQ yrNR6w49gkHLRad+4+Xx2hWkXOYKn6BmSj58ECPk3KmJz3iHAJC/VPT9uZ5OCkD5 WBTiLjNPsDno/h5bOkyFR5oNTRuDtkZt9h31YdaM/xgItfEel29/g+x/Kyi4dRzc ew/iw8o5F+ZnZxI3oMkHjBnhPmt/4DFtXPH22xo9PmmHZNY8ntMcIeDU1UTiaSZ1 7BFro0UB08MvEA== -----END CERTIFICATE-----Generated at Thu Apr 16 23:55:53 2026 by rpki-client