$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json) Hash identifier: UwRArcblIZUppK25s5wYdFOZbkO8LUjASA4B7r9vAqo= Subject key identifier: DD:87:7A:A6:0B:18:AA:27:2B:10:92:A4:BB:F9:6B:BF:9F:9F:17:E5 Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 019EB76A6C1B5B4BAF2460F46530B5A83915 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft Manifest number: 0498 Signing time: Thu 11 Jun 2026 16:01:05 +0000 Manifest this update: Thu 11 Jun 2026 16:01:05 +0000 Manifest next update: Fri 12 Jun 2026 16:01:05 +0000 Files and hashes: 1: 4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa (hash: 3YYvrIPQh3ZlkWIDJWGzPef2omYQb9s0JIFyF3ZtUx0=) 2: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=) 3: 7_KuEvRi_14zb6ajXHwy-1HJpm0.roa (hash: y9zbrYx6KIqniGx302kiI/eIzCLca5mKO3xeDDaCZf0=) 4: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=) 5: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=) 6: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=) 7: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=) 8: PjcfmGvCF3Jo8bSPGEurQgZgvHI.roa (hash: nN0nspQjOZYATjn1JnM2nPvB9KoYFsNTbycrrE1wEhQ=) 9: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=) 10: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=) 11: WskagO6bCwTQcwB7d_fzf3cdeI0.roa (hash: uVNMY6xrkiM26LXeGtpPm7fSn/FV5Pa+qtC9Vr6WBRk=) 12: dqsYbbjCxnAptr8zjkd-iezgLz4.roa (hash: 1Yhk6OnIeIea3uiPYWd+rgtl98a+2OVsjXwz+GeFDuw=) 13: n4PyCzNuArzvMMSs4_9M2Rr_Pcc.roa (hash: v767wGXxzM+38xa2Dth+I2XGtOv/gRqhBPQGRj3YQas=) 14: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=) 15: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=) 16: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: ANWdwIOtOOctDsBKw8i7TdO9dqiBvmaEC3CwfQ+vRcg=) 17: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:6a:6c:1b:5b:4b:af:24:60:f4:65:30:b5:a8:39:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Jun 11 16:01:05 2026 GMT Not After : Jun 12 16:01:05 2026 GMT Subject: CN=dd877aa60b18aa272b1092a4bbf96bbf9f9f17e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:6b:79:ca:ca:51:3e:f9:0c:4d:f1:83:d4: ae:b8:35:b0:73:dc:30:a0:12:53:49:fe:7e:4f:1c: 0a:c4:98:ab:76:87:00:0c:8d:9a:7d:99:ab:1a:df: fb:41:49:30:cd:cf:3b:37:ae:76:6f:b0:36:31:11: d0:9e:0a:86:50:08:eb:90:5f:58:f6:e5:58:b6:ec: dc:c0:8a:4c:dc:e9:37:6c:77:2c:f4:ff:05:75:0a: 5b:f0:dc:2c:e9:5f:4f:e5:32:97:a3:d7:32:51:9b: 7c:6a:99:b0:3e:94:9d:8e:a3:52:c1:a5:3d:c0:a9: 8a:3c:ef:d7:9e:f7:2e:92:a0:12:bc:75:35:65:c3: db:71:a0:60:2a:4f:b6:02:2b:d8:b6:fb:38:18:93: c6:8f:fc:38:d8:df:e6:51:df:e6:64:85:84:7d:96: c0:31:94:ab:30:1f:49:ba:e0:8a:3e:34:9c:cd:ca: 54:88:88:f4:d8:13:b9:65:0e:89:bc:c2:6e:57:0b: 5f:e2:a6:77:88:30:f8:a6:1a:ac:8d:9e:ff:67:7d: 7d:b6:68:5c:de:79:73:5c:4c:6a:9a:e0:7d:48:8d: 46:51:3a:2a:13:48:eb:d1:f7:36:06:59:02:10:83: 4f:ed:33:aa:1e:2a:5d:12:01:e2:d5:06:7c:5d:ed: ff:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:87:7A:A6:0B:18:AA:27:2B:10:92:A4:BB:F9:6B:BF:9F:9F:17:E5 X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:38:03:96:99:9a:4d:83:b7:ea:46:22:00:e7:70:38:1f:84: ac:68:84:8a:bf:a0:1c:5f:57:9f:6b:71:ce:58:3d:fe:4d:a3: a7:1b:0d:c7:aa:77:a6:fe:9d:9b:ba:77:52:07:8d:a3:33:70: ff:cc:c1:b9:ce:a9:7d:ef:6a:eb:81:99:64:60:7f:d3:8a:ed: 1c:61:20:75:86:e0:2d:ad:ab:99:4a:c6:45:8f:41:c4:5d:ab: 0e:f9:1a:7b:e4:77:1b:b6:f9:c0:0d:ba:03:a4:52:68:15:35: 96:49:8e:97:fb:73:6c:03:fd:ec:2b:a5:12:92:42:d4:b8:56: b7:c3:c4:af:49:c3:d1:e1:d3:06:f0:ef:f9:9a:1f:a6:28:06: 27:a2:be:38:4d:ac:2b:28:c4:91:03:55:f2:14:35:23:21:72: 22:87:9a:a9:5a:e9:f9:e6:c0:26:2f:ae:8f:c0:21:54:a8:7d: f1:2e:2f:6c:51:d1:10:ec:06:28:3c:87:52:f5:23:f9:b5:7c: b9:13:d3:29:21:d5:59:15:79:26:fb:d8:29:8d:f7:af:30:5b: 3b:59:64:14:91:02:3b:a0:3c:7f:76:b1:57:b4:24:c8:27:9b: d8:ef:7c:8b:6d:4d:10:89:54:04:04:f1:e4:d3:ec:c0:22:11: ef:26:4a:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ63amwbW0uvJGD0ZTC1qDkVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjYwNjExMTYwMTA1WhcNMjYwNjEyMTYwMTA1WjAzMTEwLwYDVQQD EyhkZDg3N2FhNjBiMThhYTI3MmIxMDkyYTRiYmY5NmJiZjlmOWYxN2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSNrecrKUT75DE3xg9SuuDWwc9ww oBJTSf5+TxwKxJirdocADI2afZmrGt/7QUkwzc87N652b7A2MRHQngqGUAjrkF9Y 9uVYtuzcwIpM3Ok3bHcs9P8FdQpb8Nws6V9P5TKXo9cyUZt8apmwPpSdjqNSwaU9 wKmKPO/XnvcukqASvHU1ZcPbcaBgKk+2AivYtvs4GJPGj/w42N/mUd/mZIWEfZbA MZSrMB9JuuCKPjSczcpUiIj02BO5ZQ6JvMJuVwtf4qZ3iDD4phqsjZ7/Z319tmhc 3nlzXExqmuB9SI1GUToqE0jr0fc2BlkCEINP7TOqHipdEgHi1QZ8Xe3/BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2HeqYLGKonKxCSpLv5a7+fnxflMB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDgDlpma TYO36kYiAOdwOB+ErGiEir+gHF9Xn2txzlg9/k2jpxsNx6p3pv6dm7p3UgeNozNw /8zBuc6pfe9q64GZZGB/04rtHGEgdYbgLa2rmUrGRY9BxF2rDvkae+R3G7b5wA26 A6RSaBU1lkmOl/tzbAP97CulEpJC1LhWt8PEr0nD0eHTBvDv+ZofpigGJ6K+OE2s KyjEkQNV8hQ1IyFyIoeaqVrp+ebAJi+uj8AhVKh98S4vbFHREOwGKDyHUvUj+bV8 uRPTKSHVWRV5JvvYKY33rzBbO1lkFJECO6A8f3axV7QkyCeb2O98i21NEIlUBATx 5NPswCIR7yZKYA== -----END CERTIFICATE-----Generated at Thu Jun 11 22:24:31 2026 by rpki-client