$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: 42wLHYE/k9JzGaZRqeA0ZNU99/z+vMmK/EUWs9jieJU= Subject key identifier: A9:94:DA:A0:DC:97:D2:35:C6:3A:44:D0:5A:F9:A1:A4:4B:4D:53:5A Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019DCC3CD980406AC84C39708C3FFD7FF193 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 1159 Signing time: Mon 27 Apr 2026 00:00:33 +0000 Manifest this update: Mon 27 Apr 2026 00:00:33 +0000 Manifest next update: Tue 28 Apr 2026 00:00:33 +0000 Files and hashes: 1: 1-E2eDnplntvlwe4dqvPIQjAUIhc.roa (hash: 9/Z1jYPf+fJJ28ARuzFgbWJGXm1CGkGx0/9J9dd55no=) 2: DiGtvUzmZAjH_XRU7fEE9dtFAko.roa (hash: VN3eL01e4plHrv0UjJUEXbnazkjQUDK4S/f50F+hnyA=) 3: MXOis4gKQU6T3fl9u9emfKn1I0g.roa (hash: J1k882H86FIPdqzqztH19RHHRsts9XhSK+QsDtFdrlA=) 4: PP9oA_E391BIuSGTuqgWVwQAMqM.roa (hash: 9n4A9VESg3N8stGG4GCkTD8TQyZX/jvYGa+MvIUmNaE=) 5: PxYDGFFeIMnR3R8ylA8SbuIB6xI.roa (hash: B8FamIOBKJ45rwoZ7RLg7M2fC1zz0YHW8ls9Ia37tyM=) 6: YbeGTIIokJMHl8QEnhR1xFC_ito.roa (hash: HgRFonCxtpdWKTM6rOV0crS0CJsk7MECWgrxxnYsFJU=) 7: jLSzdmpt6mZmgqvhH7NETi0wAYA.roa (hash: txBTBvHgOk8b8SenBZIk3YFAcUyYo3TaX05F0Mt13EA=) 8: mLqJvMc3MqTE99dcKgalJ1ySRfQ.roa (hash: a5WjFx/pe+eZo9TTWVHbhlSmGqGor+/PHYnJbWo/eU8=) 9: myEKyS0ln_CS39qAu-1GdjmG9R0.roa (hash: aW1PpyHp9Pdui/hT7n4EmATj8R60gaAAQo+Y1BQJBTw=) 10: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: Qi3oGfI1e5FVXXtCiI6jWFtrK2omfSWZBnt9PyKIYnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:3c:d9:80:40:6a:c8:4c:39:70:8c:3f:fd:7f:f1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Apr 27 00:00:33 2026 GMT Not After : Apr 28 00:00:33 2026 GMT Subject: CN=a994daa0dc97d235c63a44d05af9a1a44b4d535a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:de:08:d4:72:25:3f:61:85:f1:5d:0c:8a: e8:77:ed:ec:ca:34:9e:c8:f3:ae:c8:70:db:b4:7f: 4b:29:60:e5:17:85:d2:fa:ac:cb:98:e3:f1:4d:d7: 48:e2:3d:a0:ec:09:7f:c8:6d:11:99:d6:97:2f:53: 15:c5:dd:48:e9:9f:ae:43:56:63:48:9f:b1:c4:e7: 2a:45:7a:f1:e7:2d:71:fa:fb:b0:e1:0f:b1:a9:a7: 6b:39:d8:e0:91:99:3a:5b:eb:3e:cc:3b:85:d8:c0: ea:2d:52:a2:0c:7c:be:75:bb:c4:d4:4a:64:d8:bf: 12:cf:3e:23:51:52:42:79:c5:66:fa:0b:59:7c:5d: a6:a5:8a:17:f5:a6:9b:05:84:21:52:0c:7b:66:9f: ac:17:13:5f:5f:fb:69:cb:8a:46:1b:7f:31:89:b5: c2:2c:57:2d:52:54:2a:6f:33:bb:a4:03:f6:7f:c2: d5:80:37:30:d4:b5:8c:4a:c5:a5:1f:17:a4:88:32: 96:a1:01:8a:83:cb:15:3b:47:83:ac:d3:5f:7d:25: 07:49:86:11:61:f5:22:bc:2d:9c:29:e3:24:01:c1: 5f:59:17:4f:7b:2b:f6:03:6c:0f:ac:f3:c6:c9:9a: 11:c8:8c:62:ff:cd:51:1d:14:e6:c1:70:07:b6:c7: 83:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:94:DA:A0:DC:97:D2:35:C6:3A:44:D0:5A:F9:A1:A4:4B:4D:53:5A X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:45:da:a5:90:fb:13:83:42:b3:8a:e2:9b:69:d6:ab:65:eb: 72:52:52:22:31:5f:ea:51:ed:b4:77:7e:10:5b:7a:a8:f9:85: 84:94:8d:98:3e:3a:6d:d3:68:2a:dc:cd:dc:2f:24:fd:6c:48: 7a:07:c5:7d:8f:77:9a:70:77:30:87:06:0b:b6:7a:28:4a:6d: 73:ed:59:98:25:08:9a:eb:29:3b:c1:00:75:cc:bc:e0:74:9c: 3a:9e:8f:34:a3:e2:a5:81:38:52:bc:77:0f:d3:85:1e:42:08: 44:a2:d8:31:a4:8b:5e:6e:70:c3:8b:2f:9b:c2:6b:7e:4a:98: 6d:03:84:ac:01:dc:76:be:da:5f:8a:1b:ec:7b:92:9c:6d:25: c4:c5:11:05:f9:e6:0f:1e:2b:93:e0:62:df:9f:c2:01:20:c7: 36:ed:aa:a8:8f:f2:18:8d:50:bc:6f:46:05:cf:72:7b:ef:b5: 15:fc:5f:d2:8d:ac:dd:b4:89:3b:da:24:f2:be:b8:c0:2f:38: ed:b3:da:43:f4:25:05:16:24:aa:55:53:69:77:1e:0c:67:f8: 3d:38:63:b6:96:0f:8b:cc:76:36:89:38:ab:f0:74:f1:59:6f: 99:fa:05:4e:b0:34:57:b0:0b:b2:d9:89:1d:7f:b5:d4:51:c0: 45:90:27:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MPNmAQGrITDlwjD/9f/GTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjYwNDI3MDAwMDMzWhcNMjYwNDI4MDAwMDMzWjAzMTEwLwYDVQQD EyhhOTk0ZGFhMGRjOTdkMjM1YzYzYTQ0ZDA1YWY5YTFhNDRiNGQ1MzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDreCNRyJT9hhfFdDIrod+3syjSe yPOuyHDbtH9LKWDlF4XS+qzLmOPxTddI4j2g7Al/yG0RmdaXL1MVxd1I6Z+uQ1Zj SJ+xxOcqRXrx5y1x+vuw4Q+xqadrOdjgkZk6W+s+zDuF2MDqLVKiDHy+dbvE1Epk 2L8Szz4jUVJCecVm+gtZfF2mpYoX9aabBYQhUgx7Zp+sFxNfX/tpy4pGG38xibXC LFctUlQqbzO7pAP2f8LVgDcw1LWMSsWlHxekiDKWoQGKg8sVO0eDrNNffSUHSYYR YfUivC2cKeMkAcFfWRdPeyv2A2wPrPPGyZoRyIxi/81RHRTmwXAHtseDBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmU2qDcl9I1xjpE0Fr5oaRLTVNaMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5kXapZD7 E4NCs4rim2nWq2XrclJSIjFf6lHttHd+EFt6qPmFhJSNmD46bdNoKtzN3C8k/WxI egfFfY93mnB3MIcGC7Z6KEptc+1ZmCUImuspO8EAdcy84HScOp6PNKPipYE4Urx3 D9OFHkIIRKLYMaSLXm5ww4svm8JrfkqYbQOErAHcdr7aX4ob7HuSnG0lxMURBfnm Dx4rk+Bi35/CASDHNu2qqI/yGI1QvG9GBc9ye++1Ffxf0o2s3bSJO9ok8r64wC84 7bPaQ/QlBRYkqlVTaXceDGf4PThjtpYPi8x2Nok4q/B08VlvmfoFTrA0V7ALstmJ HX+11FHARZAnOw== -----END CERTIFICATE-----Generated at Mon Apr 27 08:29:27 2026 by rpki-client