$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: CCB7cLTc+b4JF/AcRSt7LbiEH9UPXtoVQ7x5S664XJc= Subject key identifier: CC:EA:F0:A0:24:47:AC:3D:B5:9F:C4:05:42:8C:0A:09:EF:36:3D:5F Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019CE290B576815CDB50661BF881EDD884B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 10E0 Signing time: Thu 12 Mar 2026 15:01:00 +0000 Manifest this update: Thu 12 Mar 2026 15:01:00 +0000 Manifest next update: Fri 13 Mar 2026 15:01:00 +0000 Files and hashes: 1: 1-E2eDnplntvlwe4dqvPIQjAUIhc.roa (hash: 9/Z1jYPf+fJJ28ARuzFgbWJGXm1CGkGx0/9J9dd55no=) 2: DiGtvUzmZAjH_XRU7fEE9dtFAko.roa (hash: VN3eL01e4plHrv0UjJUEXbnazkjQUDK4S/f50F+hnyA=) 3: MXOis4gKQU6T3fl9u9emfKn1I0g.roa (hash: J1k882H86FIPdqzqztH19RHHRsts9XhSK+QsDtFdrlA=) 4: PP9oA_E391BIuSGTuqgWVwQAMqM.roa (hash: 9n4A9VESg3N8stGG4GCkTD8TQyZX/jvYGa+MvIUmNaE=) 5: PxYDGFFeIMnR3R8ylA8SbuIB6xI.roa (hash: B8FamIOBKJ45rwoZ7RLg7M2fC1zz0YHW8ls9Ia37tyM=) 6: YbeGTIIokJMHl8QEnhR1xFC_ito.roa (hash: HgRFonCxtpdWKTM6rOV0crS0CJsk7MECWgrxxnYsFJU=) 7: jLSzdmpt6mZmgqvhH7NETi0wAYA.roa (hash: txBTBvHgOk8b8SenBZIk3YFAcUyYo3TaX05F0Mt13EA=) 8: mLqJvMc3MqTE99dcKgalJ1ySRfQ.roa (hash: a5WjFx/pe+eZo9TTWVHbhlSmGqGor+/PHYnJbWo/eU8=) 9: myEKyS0ln_CS39qAu-1GdjmG9R0.roa (hash: aW1PpyHp9Pdui/hT7n4EmATj8R60gaAAQo+Y1BQJBTw=) 10: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: 0RqrX3vHuF27Oc5yiF6/LLS2BQm8aJz1tjG6byyHN2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e2:90:b5:76:81:5c:db:50:66:1b:f8:81:ed:d8:84:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Mar 12 15:01:00 2026 GMT Not After : Mar 13 15:01:00 2026 GMT Subject: CN=cceaf0a02447ac3db59fc405428c0a09ef363d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:16:aa:a9:85:ab:9b:1f:57:42:9f:59:36: 99:e3:7b:13:af:34:83:31:98:48:6d:20:44:1c:38: 9f:dc:92:38:0b:31:7a:61:63:e8:66:4a:fa:3c:50: f7:5b:e2:ca:63:98:9a:04:41:c3:d5:b6:8b:23:ef: 88:12:3b:36:51:93:2c:65:b3:14:a7:45:97:ce:06: 6b:dc:8b:66:af:6c:4f:84:e4:50:8c:3e:73:8c:55: 8b:63:0c:6b:bf:77:51:82:31:14:1d:de:2b:f7:bb: a1:72:51:af:7a:c0:4d:76:12:20:c4:1c:79:60:f5: 00:eb:3a:3e:ba:0e:2c:61:cd:7c:50:a2:9f:35:78: e4:2f:95:3b:5b:56:b9:c9:ed:82:9d:95:c4:ab:72: 93:e3:24:87:23:8f:86:c5:54:5d:b3:b8:51:f9:1a: 72:e8:6a:b7:97:a9:53:29:00:ab:c8:1e:a9:90:30: ed:6a:37:99:e4:17:d6:cc:0b:8d:42:af:a6:4e:d7: d7:bb:46:fd:f1:5d:2c:63:5d:2e:92:9b:0a:1f:e9: e3:4f:d6:04:37:0e:23:7f:1f:25:b2:da:fa:ba:63: a8:0f:b3:6b:7b:10:01:3c:ca:5a:33:99:ba:b3:83: 87:1d:af:5c:4e:cc:d8:d6:98:37:1a:46:3d:70:dc: 8d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EA:F0:A0:24:47:AC:3D:B5:9F:C4:05:42:8C:0A:09:EF:36:3D:5F X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:82:7d:06:94:02:7c:4e:e6:bb:f6:7b:0f:db:8b:6b:c5:d2: 86:fe:7f:f0:b3:42:7a:7f:9c:75:f2:be:d6:bf:ca:76:57:18: 83:d4:6e:12:05:8f:06:6f:6f:91:43:0f:62:a7:be:f9:ca:78: 57:f9:92:b5:71:f2:7c:27:b1:40:27:b7:5c:2b:e6:e6:12:13: 9b:b2:67:46:cb:13:0e:d1:41:f7:19:f9:9a:14:9b:ba:34:1f: 66:3e:78:85:29:bf:a3:bd:b1:69:11:be:1a:cf:30:4b:9a:72: 5a:71:e7:d6:2e:30:db:03:d0:5c:6c:c8:31:e8:7c:d5:61:a3: 48:43:03:d7:2f:c9:60:df:3d:17:77:eb:29:95:26:cf:4f:dc: e8:06:56:d5:b6:32:ca:4e:2a:78:7c:49:cb:0f:cd:43:be:b9: a0:c5:76:c7:82:94:3c:e0:49:7b:ac:d8:47:2c:60:17:18:89: f2:dc:cc:4c:c1:e8:a0:cd:91:8a:a1:cf:74:d6:e5:23:9e:53: 0d:09:38:a9:ea:5c:16:21:08:40:f0:b6:10:f1:fa:2c:c3:64: 2e:2a:bd:50:3b:4c:be:9d:2a:88:82:a7:b2:0c:b8:bc:b5:db: e6:1b:4a:52:b2:4f:52:62:55:2d:88:6a:54:36:17:f0:2c:da: f3:e8:92:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzikLV2gVzbUGYb+IHt2IS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjYwMzEyMTUwMTAwWhcNMjYwMzEzMTUwMTAwWjAzMTEwLwYDVQQD EyhjY2VhZjBhMDI0NDdhYzNkYjU5ZmM0MDU0MjhjMGEwOWVmMzYzZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIEWqqmFq5sfV0KfWTaZ43sTrzSD MZhIbSBEHDif3JI4CzF6YWPoZkr6PFD3W+LKY5iaBEHD1baLI++IEjs2UZMsZbMU p0WXzgZr3Itmr2xPhORQjD5zjFWLYwxrv3dRgjEUHd4r97uhclGvesBNdhIgxBx5 YPUA6zo+ug4sYc18UKKfNXjkL5U7W1a5ye2CnZXEq3KT4ySHI4+GxVRds7hR+Rpy 6Gq3l6lTKQCryB6pkDDtajeZ5BfWzAuNQq+mTtfXu0b98V0sY10ukpsKH+njT9YE Nw4jfx8lstr6umOoD7NrexABPMpaM5m6s4OHHa9cTszY1pg3GkY9cNyNSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzq8KAkR6w9tZ/EBUKMCgnvNj1fMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsoJ9BpQC fE7mu/Z7D9uLa8XShv5/8LNCen+cdfK+1r/KdlcYg9RuEgWPBm9vkUMPYqe++cp4 V/mStXHyfCexQCe3XCvm5hITm7JnRssTDtFB9xn5mhSbujQfZj54hSm/o72xaRG+ Gs8wS5pyWnHn1i4w2wPQXGzIMeh81WGjSEMD1y/JYN89F3frKZUmz0/c6AZW1bYy yk4qeHxJyw/NQ765oMV2x4KUPOBJe6zYRyxgFxiJ8tzMTMHooM2RiqHPdNblI55T DQk4qepcFiEIQPC2EPH6LMNkLiq9UDtMvp0qiIKnsgy4vLXb5htKUrJPUmJVLYhq VDYX8Cza8+iSMw== -----END CERTIFICATE-----Generated at Thu Mar 12 20:55:57 2026 by rpki-client