$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json) Hash identifier: /w2xF4p+O57CSA42auSwDLWOr8ja2txGpCfOB/vnmaA= Subject key identifier: 8C:30:D2:1E:2D:47:C7:C1:25:3A:90:0B:E8:6C:BF:8D:98:84:92:56 Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 019DCCAB4FFFA4D7D1BE637EC774C33D670D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft Manifest number: 041E Signing time: Mon 27 Apr 2026 02:01:12 +0000 Manifest this update: Mon 27 Apr 2026 02:01:12 +0000 Manifest next update: Tue 28 Apr 2026 02:01:12 +0000 Files and hashes: 1: 4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa (hash: 3YYvrIPQh3ZlkWIDJWGzPef2omYQb9s0JIFyF3ZtUx0=) 2: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=) 3: 7_KuEvRi_14zb6ajXHwy-1HJpm0.roa (hash: y9zbrYx6KIqniGx302kiI/eIzCLca5mKO3xeDDaCZf0=) 4: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=) 5: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=) 6: Dx-Vy-swUiVNsZKUlolPXBZOZMI.roa (hash: 5aft0BRUbiVKXn588IybsdkKIbt9YKxjDesbktvL34g=) 7: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=) 8: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=) 9: PjcfmGvCF3Jo8bSPGEurQgZgvHI.roa (hash: nN0nspQjOZYATjn1JnM2nPvB9KoYFsNTbycrrE1wEhQ=) 10: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=) 11: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=) 12: WskagO6bCwTQcwB7d_fzf3cdeI0.roa (hash: uVNMY6xrkiM26LXeGtpPm7fSn/FV5Pa+qtC9Vr6WBRk=) 13: YuYmQaJNtuOBq3fPKH-8v6Xr9Qk.roa (hash: U5rEQ3u5XOjHhPmf1nGbyQ/BjTbyBdisgzm75iFjhvQ=) 14: dqsYbbjCxnAptr8zjkd-iezgLz4.roa (hash: 1Yhk6OnIeIea3uiPYWd+rgtl98a+2OVsjXwz+GeFDuw=) 15: n4PyCzNuArzvMMSs4_9M2Rr_Pcc.roa (hash: v767wGXxzM+38xa2Dth+I2XGtOv/gRqhBPQGRj3YQas=) 16: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=) 17: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=) 18: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: aZsGRSkfnKTSzGrHa94Q7bGty52eVEjpWgl6Z1Trluk=) 19: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:ab:4f:ff:a4:d7:d1:be:63:7e:c7:74:c3:3d:67:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Apr 27 02:01:12 2026 GMT Not After : Apr 28 02:01:12 2026 GMT Subject: CN=8c30d21e2d47c7c1253a900be86cbf8d98849256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c2:0f:8d:9c:1a:e3:de:50:86:1d:aa:5f:32: 98:ae:b8:ab:30:29:dd:32:4f:e2:ca:4e:8e:f0:ae: 65:82:35:ca:a5:38:58:c2:bb:8f:8e:26:d9:f9:b0: a2:42:9c:f0:7f:35:2c:b4:30:d8:b4:18:2e:2f:bb: 67:f7:36:a6:39:85:d1:bf:55:f6:36:02:22:d4:4d: 79:61:79:de:07:96:81:44:f1:56:f6:dc:3c:a8:b9: 4e:aa:cd:8d:6a:51:8a:f5:3a:81:23:d7:4d:b7:04: 67:89:79:83:e8:83:b3:53:a1:2a:d4:fe:a5:3b:10: af:4f:b2:81:9a:c7:1c:f2:b9:88:1b:44:7b:a9:f9: 26:af:86:53:6c:7f:01:ce:27:1c:16:41:b3:d7:38: f9:2f:fa:c2:43:e1:a9:2e:c5:9f:72:8a:c2:ca:34: e8:0a:37:0a:23:bd:f5:8d:5b:85:65:22:09:68:49: 7d:96:29:14:58:6a:cd:c5:78:3a:0e:18:d0:3b:c2: f0:db:70:ef:00:29:81:28:74:c6:ea:81:35:c5:a5: c8:d4:3c:33:4f:53:53:20:36:c6:18:4e:72:d6:8b: 88:01:c9:e8:dc:31:66:da:83:db:35:ca:ef:d7:f0: f8:d6:5e:d3:60:cf:fe:a5:d9:38:16:5b:cf:f5:82: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:30:D2:1E:2D:47:C7:C1:25:3A:90:0B:E8:6C:BF:8D:98:84:92:56 X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:36:b2:67:39:d5:19:9e:09:3d:31:6c:0c:c4:c5:03:18:e4: bd:5b:62:56:78:e6:76:04:6e:25:07:3f:4d:ed:94:6b:a2:96: 45:d8:cf:61:dd:a8:c1:3c:b2:0c:6d:a2:16:db:a1:1f:d3:00: 5a:d0:b7:2c:b7:55:75:17:52:4a:e9:d3:24:42:a4:61:89:b1: 18:49:b2:16:b4:d3:ac:9f:06:4c:09:0c:dd:bc:13:b5:af:1e: 5c:da:ba:00:d7:5b:74:32:4b:90:2f:1b:13:9a:dd:12:69:c6: c5:3b:8f:d4:4f:28:0a:ee:b8:75:15:ad:3a:de:7f:b4:d3:b3: 98:9c:d1:cc:3d:94:8c:45:b7:df:e5:29:6c:e4:a7:58:f8:25: f7:ef:1a:17:9c:72:44:00:e8:c2:0a:d9:99:41:69:6a:18:90: 8b:2d:38:05:b1:22:6b:00:68:5a:2d:6d:48:5d:44:c6:89:9e: b3:f1:28:f9:94:fa:ad:93:32:ff:b3:5c:1d:4e:c4:7d:ce:9e: 19:de:ac:35:83:ad:9f:62:fc:a2:e8:39:0e:78:fd:83:03:1c: 4b:c0:47:e8:b6:a9:e1:75:e5:f3:06:56:90:2f:4b:e1:13:67: 4e:3d:ac:28:67:2b:bc:d3:8e:e5:1a:fa:54:ec:22:2d:76:60: 28:87:2b:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3Mq0//pNfRvmN+x3TDPWcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjYwNDI3MDIwMTEyWhcNMjYwNDI4MDIwMTEyWjAzMTEwLwYDVQQD Eyg4YzMwZDIxZTJkNDdjN2MxMjUzYTkwMGJlODZjYmY4ZDk4ODQ5MjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MIPjZwa495Qhh2qXzKYrrirMCnd Mk/iyk6O8K5lgjXKpThYwruPjibZ+bCiQpzwfzUstDDYtBguL7tn9zamOYXRv1X2 NgIi1E15YXneB5aBRPFW9tw8qLlOqs2NalGK9TqBI9dNtwRniXmD6IOzU6Eq1P6l OxCvT7KBmscc8rmIG0R7qfkmr4ZTbH8BziccFkGz1zj5L/rCQ+GpLsWfcorCyjTo CjcKI731jVuFZSIJaEl9likUWGrNxXg6DhjQO8Lw23DvACmBKHTG6oE1xaXI1Dwz T1NTIDbGGE5y1ouIAcno3DFm2oPbNcrv1/D41l7TYM/+pdk4FlvP9YJy0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIww0h4tR8fBJTqQC+hsv42YhJJWMB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDayZznV GZ4JPTFsDMTFAxjkvVtiVnjmdgRuJQc/Te2Ua6KWRdjPYd2owTyyDG2iFtuhH9MA WtC3LLdVdRdSSunTJEKkYYmxGEmyFrTTrJ8GTAkM3bwTta8eXNq6ANdbdDJLkC8b E5rdEmnGxTuP1E8oCu64dRWtOt5/tNOzmJzRzD2UjEW33+UpbOSnWPgl9+8aF5xy RADowgrZmUFpahiQiy04BbEiawBoWi1tSF1Exomes/Eo+ZT6rZMy/7NcHU7Efc6e Gd6sNYOtn2L8oug5Dnj9gwMcS8BH6Lap4XXl8wZWkC9L4RNnTj2sKGcrvNOO5Rr6 VOwiLXZgKIcrIA== -----END CERTIFICATE-----Generated at Mon Apr 27 10:45:32 2026 by rpki-client