$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json) Hash identifier: D783YPj5k+1KGtUXP0DOtr2rT2X1ltOWXGLZn4KWOT8= Subject key identifier: B3:09:E7:3A:5E:14:43:81:CE:B2:A4:4E:B9:E2:44:A0:5F:94:3E:D7 Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Certificate serial: 01A08E31FEE1FD9907E4090594B03E713425 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft Manifest number: 058E Signing time: Fri 11 Sep 2026 02:00:36 +0000 Manifest this update: Fri 11 Sep 2026 02:00:36 +0000 Manifest next update: Sat 12 Sep 2026 02:00:36 +0000 Files and hashes: 1: 4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa (hash: 3YYvrIPQh3ZlkWIDJWGzPef2omYQb9s0JIFyF3ZtUx0=) 2: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=) 3: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=) 4: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=) 5: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=) 6: KuCSaCEOTSfMj8uwOknmWfQSUeo.roa (hash: 3+MmnXuvI/JOfNZCrj8AZFjZyZJa2SF9JSTpsOfpZ38=) 7: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=) 8: PjcfmGvCF3Jo8bSPGEurQgZgvHI.roa (hash: nN0nspQjOZYATjn1JnM2nPvB9KoYFsNTbycrrE1wEhQ=) 9: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=) 10: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=) 11: dqsYbbjCxnAptr8zjkd-iezgLz4.roa (hash: 1Yhk6OnIeIea3uiPYWd+rgtl98a+2OVsjXwz+GeFDuw=) 12: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=) 13: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=) 14: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: ojXIIX08w6mZR883i1mQ7ciXQF/V4J8rOuwL8ULNuEY=) 15: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8e:31:fe:e1:fd:99:07:e4:09:05:94:b0:3e:71:34:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Validity Not Before: Sep 11 02:00:36 2026 GMT Not After : Sep 12 02:00:36 2026 GMT Subject: CN=b309e73a5e144381ceb2a44eb9e244a05f943ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:05:f9:59:1b:f7:eb:d1:f3:1e:68:fa:9b:95: 45:2d:81:e4:d7:b3:88:1f:8d:e6:69:18:5a:91:ff: f3:40:6c:7a:8b:03:26:25:71:4e:03:dc:11:31:ac: a7:a9:a1:38:73:e6:af:0a:ab:a7:c9:3c:07:21:e0: 1b:e6:9f:c0:ee:cb:14:bf:0c:e3:d7:e3:e1:8e:c9: df:a2:0e:56:08:0f:03:94:5b:a8:e5:08:5e:50:d4: 1a:26:46:f4:dc:ff:4a:de:e1:40:01:5f:3c:dc:bf: 11:dd:96:9d:f8:a9:bb:c6:15:47:dc:db:4c:82:59: 0a:d2:7c:32:f3:f0:98:b1:f1:b6:3e:87:b7:68:bb: 24:3d:70:d7:68:cf:32:ae:3c:a7:32:73:ba:00:7d: 48:69:17:1f:24:c9:de:a7:43:19:1a:af:46:6c:8b: 93:3c:dc:11:81:16:15:4c:18:bb:20:44:45:8a:11: 43:bd:6e:b5:74:b0:4f:c4:c6:8c:dd:1d:67:72:6e: 51:83:80:ed:36:36:12:47:44:fa:9b:ed:50:1c:be: 12:97:2e:c1:7e:eb:1c:d0:14:21:61:5e:6c:c9:4a: 30:07:7a:87:30:46:72:12:af:27:74:f1:d3:76:c4: 7b:36:8e:45:46:b5:39:2e:50:a0:89:e3:51:7b:08: 57:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:09:E7:3A:5E:14:43:81:CE:B2:A4:4E:B9:E2:44:A0:5F:94:3E:D7 X509v3 Authority Key Identifier: keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7f:85:c5:bf:da:93:47:fc:11:13:77:22:5e:55:10:7b:6a: 40:e7:ba:33:d2:5c:05:15:1c:aa:ec:5f:c3:1c:da:c9:08:46: 1b:00:c8:61:86:c5:8a:b5:de:4c:60:b0:fd:f5:ca:b4:25:de: fd:0f:1a:86:39:13:d0:14:eb:9c:4e:01:19:20:92:a7:5d:eb: 52:e6:3f:d5:eb:c7:df:85:fe:00:ac:88:05:cc:15:c6:65:59: f8:37:ea:38:5d:49:c1:7e:31:6a:32:6b:b1:29:da:91:87:90: 19:51:cd:df:a1:33:49:53:32:5c:28:f3:33:0f:78:7b:5b:0e: 2a:44:dd:bb:ca:41:dc:be:9c:7f:84:bf:30:c4:e0:ff:b7:bb: 87:53:d7:6b:ae:99:ca:53:0c:d8:6a:b5:64:55:01:95:7c:3b: 14:1a:6b:6f:b0:7b:e0:49:da:cc:cf:5f:ff:45:16:8b:40:3c: 7f:c8:88:de:74:8d:79:4a:5e:b9:59:6d:4e:1f:3b:2d:85:0b: 53:01:ab:d1:79:4b:cf:1c:82:43:15:f9:d1:e7:c2:cf:9b:df: 2a:b7:1a:6a:e8:c9:2c:93:9b:53:5f:19:f5:f0:cf:81:ac:cb: 28:a9:b8:4d:ac:1c:be:d6:07:9e:6e:63:73:1f:97:a0:64:9a: 6b:df:23:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCOMf7h/ZkH5AkFlLA+cTQlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYTBmMjU4ZWVmNGIyYmY0YmJhYTg0MzBjMWU1OGNhOGMx ODhlYTcwHhcNMjYwOTExMDIwMDM2WhcNMjYwOTEyMDIwMDM2WjAzMTEwLwYDVQQD EyhiMzA5ZTczYTVlMTQ0MzgxY2ViMmE0NGViOWUyNDRhMDVmOTQzZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wX5WRv369HzHmj6m5VFLYHk17OI H43maRhakf/zQGx6iwMmJXFOA9wRMaynqaE4c+avCqunyTwHIeAb5p/A7ssUvwzj 1+Phjsnfog5WCA8DlFuo5QheUNQaJkb03P9K3uFAAV883L8R3Zad+Km7xhVH3NtM glkK0nwy8/CYsfG2Poe3aLskPXDXaM8yrjynMnO6AH1IaRcfJMnep0MZGq9GbIuT PNwRgRYVTBi7IERFihFDvW61dLBPxMaM3R1ncm5Rg4DtNjYSR0T6m+1QHL4Sly7B fusc0BQhYV5syUowB3qHMEZyEq8ndPHTdsR7No5FRrU5LlCgieNRewhXtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMJ5zpeFEOBzrKkTrniRKBflD7XMB8GA1UdIwQY MBaAFLqg8lju9LK/S7qoQwweWMqMGI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEt ZTU3NjhkNmIxODJjLzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZTBlZTEtYzgzMy00MjQxLTk2MGEtZTU3NjhkNmIxODJj LzEvdXFEeVdPNzBzcjlMdXFoRERCNVl5b3dZanFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAen+Fxb/a k0f8ERN3Il5VEHtqQOe6M9JcBRUcquxfwxzayQhGGwDIYYbFirXeTGCw/fXKtCXe /Q8ahjkT0BTrnE4BGSCSp13rUuY/1evH34X+AKyIBcwVxmVZ+DfqOF1JwX4xajJr sSnakYeQGVHN36EzSVMyXCjzMw94e1sOKkTdu8pB3L6cf4S/MMTg/7e7h1PXa66Z ylMM2Gq1ZFUBlXw7FBprb7B74EnazM9f/0UWi0A8f8iI3nSNeUpeuVltTh87LYUL UwGr0XlLzxyCQxX50efCz5vfKrcaaujJLJObU18Z9fDPgazLKKm4TawcvtYHnm5j cx+XoGSaa98jGQ== -----END CERTIFICATE-----Generated at Fri Sep 11 05:07:49 2026 by rpki-client