$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json) Hash identifier: Au+ACrUy1sugeJbY8wMQx652Be1+oujixHICwyLRNcY= Subject key identifier: D5:B0:8A:D8:F5:95:83:49:55:23:E6:98:21:6A:6D:FA:8F:D1:01:A2 Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 019CE1101C96B4CC8B9BDDAA1EDA13C4F9DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft Manifest number: 039E Signing time: Thu 12 Mar 2026 08:00:55 +0000 Manifest this update: Thu 12 Mar 2026 08:00:55 +0000 Manifest next update: Fri 13 Mar 2026 08:00:55 +0000 Files and hashes: 1: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=) 2: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=) 3: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=) 4: Dx-Vy-swUiVNsZKUlolPXBZOZMI.roa (hash: 5aft0BRUbiVKXn588IybsdkKIbt9YKxjDesbktvL34g=) 5: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=) 6: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=) 7: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=) 8: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=) 9: THki-C7K0guSV_ZsZ9wyQdtYLho.roa (hash: ZWzAxxCBDEL9WjLGKgQ7WjQgHQWR8ZxZuQyS8uWcrRY=) 10: WskagO6bCwTQcwB7d_fzf3cdeI0.roa (hash: uVNMY6xrkiM26LXeGtpPm7fSn/FV5Pa+qtC9Vr6WBRk=) 11: YuYmQaJNtuOBq3fPKH-8v6Xr9Qk.roa (hash: U5rEQ3u5XOjHhPmf1nGbyQ/BjTbyBdisgzm75iFjhvQ=) 12: ZvzZunjDlBYEEo5tXrgzyLt_dGg.roa (hash: UPsyzhi87SZnZ58kTtKE+18tmkXvGwl7y+zmR4Y6hbw=) 13: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=) 14: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=) 15: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: DuDa2X8ZHp1Vv0NyHgZxajzYyItu8qfneVVFz7KBjX0=) 16: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e1:10:1c:96:b4:cc:8b:9b:dd:aa:1e:da:13:c4:f9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Mar 12 08:00:55 2026 GMT Not After : Mar 13 08:00:55 2026 GMT Subject: CN=d5b08ad8f59583495523e698216a6dfa8fd101a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:d3:4a:85:6c:db:22:a8:a7:07:47:4e:02: 66:26:3a:73:16:2b:70:36:02:80:ce:33:76:22:ca: f4:30:80:b5:96:45:25:1d:8c:47:dd:e2:15:af:f9: 20:e7:07:0f:bc:d8:ba:8b:51:d3:81:27:27:17:d1: c3:4c:37:db:98:d8:3d:c1:7d:b1:32:55:d3:8a:ff: 73:cd:d6:1c:9f:7d:84:2a:aa:7e:64:1e:15:0f:37: e3:76:79:bc:68:9f:02:df:06:24:fb:60:d2:87:06: f9:63:33:44:ff:6a:cd:48:96:3c:dc:48:4a:55:76: 0b:29:20:1f:0f:2d:7f:d5:a8:a7:76:89:55:9a:78: 90:65:7f:2d:1f:f2:de:cf:65:7f:e0:6a:d1:07:f5: 12:e9:49:10:fc:82:b6:4b:3b:b4:19:49:89:1a:df: f4:ce:cb:4e:c7:22:04:39:61:ce:40:cd:a5:57:b3: 49:2c:49:4e:d0:44:84:0c:fb:ba:9d:63:42:b8:bb: bb:de:2c:ca:3a:bc:74:51:8f:60:3f:3a:4a:83:1e: 85:b3:02:71:37:7d:0e:a5:2f:ed:72:21:bd:78:c5: 68:6e:fc:eb:a8:f9:73:ea:9d:9c:91:1e:60:d1:c6: b3:ef:44:61:68:b5:b0:21:86:c0:97:23:90:ea:d1: b2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B0:8A:D8:F5:95:83:49:55:23:E6:98:21:6A:6D:FA:8F:D1:01:A2 X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4d:21:df:f4:73:5f:40:eb:52:4f:8e:af:6e:b5:d4:76:b4: a4:ee:95:74:64:0d:65:8a:25:ed:4b:7d:5d:e4:d0:25:c9:c2: 7c:1a:b1:d2:ed:ad:14:23:b6:98:d1:ee:d7:ae:3a:88:14:30: af:3f:f3:f2:15:d8:93:34:6e:49:b0:d3:b0:31:4a:7b:5d:08: d1:e6:35:8d:fd:54:29:b8:aa:a7:ba:0e:a1:a8:e2:05:e1:9d: ec:7b:81:2a:5a:79:23:11:2b:2a:2e:e0:2a:b7:e5:4a:af:0a: 87:75:ef:e8:5b:68:0c:1e:b3:70:ab:a1:7b:12:e0:73:3a:9e: 3e:a7:87:9e:7d:43:79:4b:0e:58:d5:df:20:47:5a:5a:76:a7: 50:49:52:bf:69:ba:77:8c:cd:19:74:0d:da:a5:df:47:5a:8a: 89:a8:73:3f:15:3e:6b:8e:6d:9a:ce:45:c5:1a:41:80:a9:28: 64:2f:d4:70:c9:58:a1:7a:66:5e:eb:2e:87:95:7c:57:f1:0b: c2:12:9e:14:26:84:56:53:d5:e8:07:1e:c0:46:90:73:ca:90: f0:3f:f5:21:fb:59:80:06:8e:54:2e:3e:27:fa:15:ab:06:e2: 05:e4:da:0a:e3:94:d2:40:22:2b:50:ed:7a:82:e0:37:8f:e7: ea:fb:b9:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzhEByWtMyLm92qHtoTxPneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjYwMzEyMDgwMDU1WhcNMjYwMzEzMDgwMDU1WjAzMTEwLwYDVQQD EyhkNWIwOGFkOGY1OTU4MzQ5NTUyM2U2OTgyMTZhNmRmYThmZDEwMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKfTSoVs2yKopwdHTgJmJjpzFitw NgKAzjN2Isr0MIC1lkUlHYxH3eIVr/kg5wcPvNi6i1HTgScnF9HDTDfbmNg9wX2x MlXTiv9zzdYcn32EKqp+ZB4VDzfjdnm8aJ8C3wYk+2DShwb5YzNE/2rNSJY83EhK VXYLKSAfDy1/1aindolVmniQZX8tH/Lez2V/4GrRB/US6UkQ/IK2Szu0GUmJGt/0 zstOxyIEOWHOQM2lV7NJLElO0ESEDPu6nWNCuLu73izKOrx0UY9gPzpKgx6FswJx N30OpS/tciG9eMVobvzrqPlz6p2ckR5g0caz70RhaLWwIYbAlyOQ6tGySwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWwitj1lYNJVSPmmCFqbfqP0QGiMB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXE0h3/Rz X0DrUk+Or2611Ha0pO6VdGQNZYol7Ut9XeTQJcnCfBqx0u2tFCO2mNHu1646iBQw rz/z8hXYkzRuSbDTsDFKe10I0eY1jf1UKbiqp7oOoajiBeGd7HuBKlp5IxErKi7g KrflSq8Kh3Xv6FtoDB6zcKuhexLgczqePqeHnn1DeUsOWNXfIEdaWnanUElSv2m6 d4zNGXQN2qXfR1qKiahzPxU+a45tms5FxRpBgKkoZC/UcMlYoXpmXusuh5V8V/EL whKeFCaEVlPV6AcewEaQc8qQ8D/1IftZgAaOVC4+J/oVqwbiBeTaCuOU0kAiK1Dt eoLgN4/n6vu5+w== -----END CERTIFICATE-----Generated at Thu Mar 12 12:26:05 2026 by rpki-client