$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: F21To/8TKNLUXG81f4FYIAQUCgDaOapMFP4LLlTrHBk= Subject key identifier: 1E:AD:5F:81:C0:4D:22:7C:30:95:E7:70:BF:3E:9E:4A:B1:71:88:72 Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019EB5E96B6FAFD8C65480188D00C89497A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 11D2 Signing time: Thu 11 Jun 2026 09:00:33 +0000 Manifest this update: Thu 11 Jun 2026 09:00:33 +0000 Manifest next update: Fri 12 Jun 2026 09:00:33 +0000 Files and hashes: 1: 1-E2eDnplntvlwe4dqvPIQjAUIhc.roa (hash: 9/Z1jYPf+fJJ28ARuzFgbWJGXm1CGkGx0/9J9dd55no=) 2: DiGtvUzmZAjH_XRU7fEE9dtFAko.roa (hash: VN3eL01e4plHrv0UjJUEXbnazkjQUDK4S/f50F+hnyA=) 3: MXOis4gKQU6T3fl9u9emfKn1I0g.roa (hash: J1k882H86FIPdqzqztH19RHHRsts9XhSK+QsDtFdrlA=) 4: PP9oA_E391BIuSGTuqgWVwQAMqM.roa (hash: 9n4A9VESg3N8stGG4GCkTD8TQyZX/jvYGa+MvIUmNaE=) 5: PxYDGFFeIMnR3R8ylA8SbuIB6xI.roa (hash: B8FamIOBKJ45rwoZ7RLg7M2fC1zz0YHW8ls9Ia37tyM=) 6: YbeGTIIokJMHl8QEnhR1xFC_ito.roa (hash: HgRFonCxtpdWKTM6rOV0crS0CJsk7MECWgrxxnYsFJU=) 7: jLSzdmpt6mZmgqvhH7NETi0wAYA.roa (hash: txBTBvHgOk8b8SenBZIk3YFAcUyYo3TaX05F0Mt13EA=) 8: mLqJvMc3MqTE99dcKgalJ1ySRfQ.roa (hash: a5WjFx/pe+eZo9TTWVHbhlSmGqGor+/PHYnJbWo/eU8=) 9: myEKyS0ln_CS39qAu-1GdjmG9R0.roa (hash: aW1PpyHp9Pdui/hT7n4EmATj8R60gaAAQo+Y1BQJBTw=) 10: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: YV11kJhJPb7mTTKARlf0pumaGbom57UHvioihPDf0F4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b5:e9:6b:6f:af:d8:c6:54:80:18:8d:00:c8:94:97:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Jun 11 09:00:33 2026 GMT Not After : Jun 12 09:00:33 2026 GMT Subject: CN=1ead5f81c04d227c3095e770bf3e9e4ab1718872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6c:9a:05:36:2f:5e:31:6a:e9:c1:63:9e:a6: 17:ab:98:27:37:b3:70:3b:19:43:50:7b:f7:aa:4d: 18:0c:e0:d7:08:fd:6d:95:fe:82:9b:46:e8:50:c2: 4e:a3:90:bd:54:8a:77:24:b5:64:8b:f6:5d:10:89: 7c:87:68:ef:93:37:42:e2:d5:85:2e:83:e8:a5:77: d5:44:7d:23:55:2a:ed:9a:2d:c3:fa:10:a5:ce:41: 07:36:35:42:ca:86:77:b2:02:1b:ff:0f:50:86:12: 9c:52:38:81:26:63:d3:c2:c9:9a:01:60:a5:4b:75: 56:4f:79:26:a7:14:60:38:89:b4:fb:27:3a:23:c4: 95:81:19:97:5e:a5:51:97:ad:ff:70:87:00:82:3b: a1:26:e3:c6:be:35:a9:67:83:06:0c:7b:7a:e7:14: f3:c9:ad:7a:56:40:63:b3:2b:77:7c:45:ac:83:df: 6b:2c:ed:38:55:00:54:e0:bc:54:33:0d:6f:2f:4f: 8f:77:a2:4e:d6:df:4f:1b:b1:87:72:d1:36:58:7b: a8:11:6c:6a:15:de:e5:ba:d9:d1:ed:a5:e9:a7:65: 82:b9:5c:10:97:07:46:1f:41:a9:52:c5:96:b9:5d: d9:49:d1:4f:77:7b:35:d6:35:85:c9:f5:f1:77:b7: 37:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AD:5F:81:C0:4D:22:7C:30:95:E7:70:BF:3E:9E:4A:B1:71:88:72 X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:64:02:a2:1c:11:01:9d:0d:01:8f:43:84:0d:3e:1e:f3:ab: 88:e7:c3:4c:39:55:24:52:e9:15:2c:54:4a:f8:b7:f6:5a:76: 81:91:0d:51:f8:4c:f7:fb:e8:be:5c:5f:18:a6:28:2a:3b:1d: 93:86:7e:e5:d6:26:f0:d2:bc:0b:d4:48:22:4e:a8:7f:c5:04: b3:ba:82:44:68:4e:80:c2:5b:45:d0:26:01:36:d4:c7:6d:e2: eb:b3:dd:61:da:06:f5:fc:79:7c:7f:e5:b8:53:ea:3e:fd:f3: f8:cb:c2:a4:23:0c:45:45:b5:2b:de:31:e1:d3:81:f4:4a:2c: 47:7b:7a:9a:28:46:7e:c7:20:ef:5a:cd:ef:68:9f:1e:32:26: de:f6:3e:c8:e6:a0:5f:95:16:70:aa:2f:db:41:4b:82:f8:75: c0:14:c5:dc:e5:04:2b:8c:46:9f:2f:72:53:53:a8:d8:97:0a: 4c:b6:66:9d:44:d4:ae:93:55:54:46:37:84:ed:ba:90:11:ab: 37:89:34:cc:81:bd:0d:76:74:9c:2d:de:7e:da:fd:b0:1c:6f: 9f:39:5c:de:d2:aa:54:ac:53:eb:5f:92:a5:71:23:3b:f8:04: a4:17:7c:28:6b:b8:19:12:57:70:e9:94:b0:3f:6b:ad:2f:cd: 6c:b3:ff:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ616Wtvr9jGVIAYjQDIlJejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjYwNjExMDkwMDMzWhcNMjYwNjEyMDkwMDMzWjAzMTEwLwYDVQQD EygxZWFkNWY4MWMwNGQyMjdjMzA5NWU3NzBiZjNlOWU0YWIxNzE4ODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWyaBTYvXjFq6cFjnqYXq5gnN7Nw OxlDUHv3qk0YDODXCP1tlf6Cm0boUMJOo5C9VIp3JLVki/ZdEIl8h2jvkzdC4tWF LoPopXfVRH0jVSrtmi3D+hClzkEHNjVCyoZ3sgIb/w9QhhKcUjiBJmPTwsmaAWCl S3VWT3kmpxRgOIm0+yc6I8SVgRmXXqVRl63/cIcAgjuhJuPGvjWpZ4MGDHt65xTz ya16VkBjsyt3fEWsg99rLO04VQBU4LxUMw1vL0+Pd6JO1t9PG7GHctE2WHuoEWxq Fd7lutnR7aXpp2WCuVwQlwdGH0GpUsWWuV3ZSdFPd3s11jWFyfXxd7c3MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6tX4HATSJ8MJXncL8+nkqxcYhyMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWQCohwR AZ0NAY9DhA0+HvOriOfDTDlVJFLpFSxUSvi39lp2gZENUfhM9/vovlxfGKYoKjsd k4Z+5dYm8NK8C9RIIk6of8UEs7qCRGhOgMJbRdAmATbUx23i67PdYdoG9fx5fH/l uFPqPv3z+MvCpCMMRUW1K94x4dOB9EosR3t6mihGfscg71rN72ifHjIm3vY+yOag X5UWcKov20FLgvh1wBTF3OUEK4xGny9yU1Oo2JcKTLZmnUTUrpNVVEY3hO26kBGr N4k0zIG9DXZ0nC3eftr9sBxvnzlc3tKqVKxT61+SpXEjO/gEpBd8KGu4GRJXcOmU sD9rrS/NbLP/1w== -----END CERTIFICATE-----Generated at Thu Jun 11 19:37:17 2026 by rpki-client