$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft File: UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft (raw, json) Hash identifier: 51N18tUtnEmRAMQMxrm7PNrEKmDImQavw0XJ/yw8IQU= Subject key identifier: E9:7B:E8:BF:4D:99:B3:17:37:5B:F5:6C:70:96:55:04:A1:7A:A6:BB Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1 Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1 Certificate serial: 01A08C43FD9F8E9E8718AD21B02A13ACB150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft Manifest number: 9E Signing time: Thu 10 Sep 2026 17:01:01 +0000 Manifest this update: Thu 10 Sep 2026 17:01:01 +0000 Manifest next update: Fri 11 Sep 2026 17:01:01 +0000 Files and hashes: 1: 2B2WsXFKrE0PsjMLGDLFgrkoQHk.roa (hash: I2f8cSCJ55gr+41EbqG2bCbVCSI6WYHHpiTlmKWKwag=) 2: 351arMODSIyd3CJc9fgPAtsmlNI.roa (hash: Yo2IiguJDajHZ2abX/Lenjc2Oi/XsPFxr+IXj+TfOw0=) 3: O1bRHs3xt5FsIbl_ziUUS70e2Oo.roa (hash: GDAX7A9G25jk6iCRuWUSO9OYN1CP4Rha8hkEH61irKE=) 4: QnubMT8LlGCKqDGLx2msA8oQFZE.roa (hash: F29CsKJrPeic4M/8FQtLYPOvQ2ukLb2sF2KJke9Fycg=) 5: TVciBvbG1XVG5ssHlr4AadQK2fk.roa (hash: QwF4SWXY6yBXWUo8zo5vTIE9qB3GoAOkQodC/dlqVwc=) 6: UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl (hash: NnaPssidEIMkM46NFVMnALsOZf02C02ou8kbXtzIfZo=) 7: hs3fngFJt1NiocNCIA7qGPYWsTU.roa (hash: ToEvpANK+Yu0KXslqAyftUZpThJvK58TLmLx0aI2m1A=) 8: q8Tmc6EzFqnUmMxMTIt9c3dEYxI.roa (hash: v/Ru9OVe1/q99gN31o9CAbNDujPce0SS4XxW2atJ/R0=) 9: slPI9aN-JbfbvX_GY814pCJ8UFA.roa (hash: EeGAyjsGw6lAKae9brKTE8ngKeD+Md25/vDKFnzwqig=) 10: tm-LFqSPmanwgI1syFmGkI6nKdc.roa (hash: lIW2bmaFFTJOzvB2HW/qgxs6vnJmoBOrm3elLnIZeZI=) 11: tygQWENVMllkytSnL6uy2BmJtDA.roa (hash: NRsdT+DiuF+skvZYNUC1kJYT3am+ZHBeil1YQrMV2pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8c:43:fd:9f:8e:9e:87:18:ad:21:b0:2a:13:ac:b1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1 Validity Not Before: Sep 10 17:01:01 2026 GMT Not After : Sep 11 17:01:01 2026 GMT Subject: CN=e97be8bf4d99b317375bf56c70965504a17aa6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:7d:9a:2b:60:f1:58:27:12:03:be:95:cc: 2c:e9:11:6e:b7:59:ae:a5:66:32:9d:f8:a6:2c:69: 71:3d:07:f5:55:08:13:a6:af:67:88:06:55:85:4b: d8:2d:e7:a2:67:dc:6c:48:f8:01:fd:96:ef:f3:f4: a2:6a:70:28:64:d3:77:59:72:49:20:77:4b:ed:a5: 9d:2d:71:b4:9f:ef:69:d4:a1:c8:47:07:99:f6:dc: 61:94:0a:23:0c:59:9d:8a:ee:08:08:8d:7f:69:84: 71:2f:24:6e:82:e4:23:da:ac:ee:d4:a2:74:13:42: a7:dd:0b:68:97:24:89:7b:7a:4e:bd:b2:46:71:78: dc:f8:49:21:14:54:c8:35:68:06:ed:20:c4:ea:63: c4:5b:5b:a1:ae:3c:85:34:43:3f:a9:33:6c:b7:86: 0a:fb:3b:6e:3f:87:f3:78:0a:e6:e2:bf:9b:b5:d7: f2:6f:de:4f:c0:0d:cb:e7:e8:6d:90:d6:9b:36:30: be:8a:f9:ea:bf:dd:85:c7:44:d4:fd:4b:b0:95:6c: 03:28:a8:f2:db:50:63:9a:04:bf:41:06:b6:7a:6a: 24:cf:bd:20:78:e7:ee:56:6f:3e:5f:43:b1:cb:ed: a1:6a:61:f8:33:3f:82:06:c2:12:7a:9b:d1:4f:b6: c2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7B:E8:BF:4D:99:B3:17:37:5B:F5:6C:70:96:55:04:A1:7A:A6:BB X509v3 Authority Key Identifier: keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:90:66:0c:5b:78:01:83:c2:37:e8:40:17:1a:a6:1d:23:56: 44:87:e2:31:bd:28:92:5b:ee:97:89:85:72:20:10:48:f0:b3: 90:bd:59:52:ed:72:6b:1c:ef:1f:f3:ea:c1:05:e2:90:9e:56: bc:46:67:49:aa:2f:57:9a:57:31:4b:8e:2f:ce:e4:70:41:2f: 53:ab:93:d3:0b:55:63:16:6a:f5:3b:ba:ae:9b:67:36:4f:f5: 47:a0:3d:97:04:64:d7:4c:a1:6b:fc:9e:a5:54:0d:d7:62:2b: 06:66:38:1e:b8:45:51:5a:ef:e3:88:48:69:9e:2c:64:85:71: de:f2:3c:bb:e9:2a:49:ad:21:4b:83:dd:8d:cb:1a:05:6f:d3: 1d:05:1c:16:7f:c8:73:13:ac:71:2a:8a:bf:24:53:63:a1:40: 8d:72:f4:e0:92:6e:ee:43:09:64:18:10:44:da:46:f9:a2:79: 9c:14:15:f0:b1:80:fd:ca:f8:19:b1:41:14:30:a5:eb:3a:63: 2e:f6:d8:55:77:db:31:3c:5d:24:da:26:06:7c:aa:1d:cb:3b: 81:cb:b1:5a:99:dd:bd:d0:f5:f4:be:d6:e8:12:b2:fa:2d:f6: 9f:00:38:eb:2c:30:6f:69:fa:02:06:58:e7:89:52:5c:56:02: ae:b5:54:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCMQ/2fjp6HGK0hsCoTrLFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxOWQ4MDJjYWY5YWE4ZjQyN2YxZGQwODU1NmM4OTk5NWYw NDc4ZDEwHhcNMjYwOTEwMTcwMTAxWhcNMjYwOTExMTcwMTAxWjAzMTEwLwYDVQQD EyhlOTdiZThiZjRkOTliMzE3Mzc1YmY1NmM3MDk2NTUwNGExN2FhNmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN59mitg8VgnEgO+lcws6RFut1mu pWYynfimLGlxPQf1VQgTpq9niAZVhUvYLeeiZ9xsSPgB/Zbv8/SianAoZNN3WXJJ IHdL7aWdLXG0n+9p1KHIRweZ9txhlAojDFmdiu4ICI1/aYRxLyRuguQj2qzu1KJ0 E0Kn3QtolySJe3pOvbJGcXjc+EkhFFTINWgG7SDE6mPEW1uhrjyFNEM/qTNst4YK +ztuP4fzeArm4r+btdfyb95PwA3L5+htkNabNjC+ivnqv92Fx0TU/UuwlWwDKKjy 21BjmgS/QQa2emokz70geOfuVm8+X0Oxy+2hamH4Mz+CBsISepvRT7bCKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOl76L9NmbMXN1v1bHCWVQSheqa7MB8GA1UdIwQY MBaAFFGdgCyvmqj0J/HdCFVsiZlfBHjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jZDM3OWMtYzk1MS00NjMzLWJiNTYt MDcxNzY0NjkwZWNmLzEvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jZDM3OWMtYzk1MS00NjMzLWJiNTYtMDcxNzY0NjkwZWNm LzEvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJBmDFt4 AYPCN+hAFxqmHSNWRIfiMb0oklvul4mFciAQSPCzkL1ZUu1yaxzvH/PqwQXikJ5W vEZnSaovV5pXMUuOL87kcEEvU6uT0wtVYxZq9Tu6rptnNk/1R6A9lwRk10yha/ye pVQN12IrBmY4HrhFUVrv44hIaZ4sZIVx3vI8u+kqSa0hS4PdjcsaBW/THQUcFn/I cxOscSqKvyRTY6FAjXL04JJu7kMJZBgQRNpG+aJ5nBQV8LGA/cr4GbFBFDCl6zpj LvbYVXfbMTxdJNomBnyqHcs7gcuxWpndvdD19L7W6BKy+i32nwA46ywwb2n6AgZY 54lSXFYCrrVUvA== -----END CERTIFICATE-----Generated at Thu Sep 10 20:41:15 2026 by rpki-client