$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: zUaRmEGuv2ZqvGTDxJsn9jn18eW8XGy6ZqKSGPLfQxs= Subject key identifier: D5:81:F5:E8:02:8D:3D:8B:56:4A:1C:36:62:88:36:A5:24:90:B0:1F Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019D0DB262645F1418CB9DAB143D3F19EE07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 1735 Signing time: Sat 21 Mar 2026 00:01:27 +0000 Manifest this update: Sat 21 Mar 2026 00:01:27 +0000 Manifest next update: Sun 22 Mar 2026 00:01:27 +0000 Files and hashes: 1: CPZG4XxfF0vIUqKLlml-DnAhI78.roa (hash: yghX+xOCfCSz2UxV0M4ErScOYQQ+0s+V03bXtP9h8Jg=) 2: H_VfesekEwBudWH_8DQh6aKcOw0.roa (hash: 56IhWo+MgCgnD6PDWUOyAjOU3jZFSSsm3KQcc9WaOgw=) 3: ItbVNmV7D7Xz58HIXd8OUA10ZIk.roa (hash: 60qPs4eG3CJz9Jr0RllpZz1JwhEoHqZ3z8/Wkwni7OI=) 4: J0cgNdbp82xwSAhTcid--cSnvw8.roa (hash: NnNH2xB6swJJVG31LQ5vR+z5/IV/mvlmseViZQ49RZ0=) 5: N1eNUoekf98MkfeCq0d0_JdTGoc.roa (hash: nz2HilLDytUZJAVqDqHSq82uJ9Gp52F9hu+UGahbmAM=) 6: TikKdyhcJJHNVP2QcDSQnnbiCHs.roa (hash: neErNQQSzB6BBUr7/9orHxARcJ3yH0azsWxDsn+hb5M=) 7: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: zUuFYBKIiiANcPQ1Lwm8KTHfnRAJdgC63yfAw8pQP6I=) 8: YIodQuf58n6NPD3S4ZwYWU4G05Q.roa (hash: hAnlQcSr3iSrVyOVrTtnTihoMBTYOjvFhdRAdMoSe+c=) 9: htEsk8is-3HwvISfO35xc7PdVM0.roa (hash: uHKztBgJ/wsTm8pbbSDKTc7meGtHJJGVbbj9VG266W0=) 10: j3hTOTMf81Nkcr0TsIH3WU1Dvd4.roa (hash: QfmXcXNN1Wd563NtKkGqTEqV9zXIuZBoL2/KRKrrmGo=) 11: r1wL1w6v-FmiJM6wTPegvCqzZVs.roa (hash: PHGHhjoRjtnu5vlNwMrqr/W1vzuZLgPWKcRcTuuiLy4=) 12: rbHMZH-yOzDb95f5uZ_DwfVDX-g.roa (hash: hyrGoGmheB3UHC4U69Q9VZBQns7Aig366oUvSyshDX8=) 13: uBecXrloW4prw2ylSn0_Ivng2VY.roa (hash: yFhPh9rE6yKyFP6xCMVODHQKX7tLrcXL5wGXXwvK1tU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 00:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0d:b2:62:64:5f:14:18:cb:9d:ab:14:3d:3f:19:ee:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Mar 21 00:01:27 2026 GMT Not After : Mar 22 00:01:27 2026 GMT Subject: CN=d581f5e8028d3d8b564a1c36628836a52490b01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:db:2d:07:61:75:b7:a7:a9:56:91:97:74: 7f:29:83:e9:a7:ef:53:05:41:6d:0e:37:51:b3:a5: a6:30:11:99:41:8a:78:fb:c1:6d:08:88:01:71:13: 39:cf:74:c4:3a:f2:ce:59:4f:cf:59:58:d4:d5:57: f9:03:13:23:d3:87:12:29:00:62:e5:67:6c:49:fe: bd:6c:98:60:03:6e:cf:64:5a:81:78:c7:18:d2:d6: 61:64:30:4d:8c:3a:3e:f9:f9:fa:5b:ca:04:b9:54: 2b:91:8a:85:1c:bf:1a:7d:55:99:dc:09:7c:99:49: 2f:7a:fb:08:03:5d:31:58:17:e6:64:fb:32:ef:48: b0:3c:3b:6e:43:58:76:a4:22:76:b5:9c:6d:b2:72: 46:de:65:c3:4c:92:1f:08:f6:71:0a:6d:cf:87:36: 0b:93:04:ee:c7:2f:44:6d:c3:d7:62:a5:a1:57:ff: eb:f5:67:98:f4:62:dc:d5:08:b1:f1:dc:a6:ea:6d: c8:3b:89:29:96:3b:c5:23:77:3a:97:cc:23:c9:54: ca:f2:03:f5:62:94:6e:24:d9:28:32:42:31:06:97: ce:c1:de:25:84:89:06:04:3c:ac:58:a4:07:c4:11: a0:b2:63:ee:5e:94:67:16:b7:47:ba:1f:18:7a:a1: b0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:81:F5:E8:02:8D:3D:8B:56:4A:1C:36:62:88:36:A5:24:90:B0:1F X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:dd:24:d5:aa:3a:1d:ea:f1:dc:69:71:03:4a:e4:c4:c0:92: f5:5e:eb:2f:79:f6:c7:43:2c:9b:ac:c5:2c:79:a4:2a:f6:5d: de:96:db:ab:70:91:42:89:e4:f5:ea:86:76:fc:5c:30:7c:46: 63:21:ed:4e:80:9f:a0:98:b0:63:51:0a:32:f6:5d:b0:34:1d: 32:30:8e:ba:40:f4:6f:56:f3:1c:50:3a:c9:f7:3c:f7:c5:6a: 06:1c:54:02:fe:c8:6d:49:be:bf:90:c1:f8:7a:48:69:07:86: ba:43:fb:38:d5:00:a6:16:fb:9a:58:87:7f:b1:ac:fc:99:d2: 48:51:28:25:a3:a6:cc:1f:dd:f1:69:bf:02:d9:7d:af:7a:2f: 45:02:74:d4:05:19:f5:ff:a2:81:e8:88:77:d5:e9:cf:51:9c: 43:cd:06:9d:d7:e2:1b:ca:e0:4c:04:ba:bb:d1:17:d7:28:3d: 80:8e:0b:45:71:1a:b0:e9:18:93:5c:48:c7:7d:24:94:07:dd: e9:84:ba:23:57:0d:6a:d3:44:f8:be:f1:5a:2e:4d:7b:85:e2: 1e:70:f1:99:50:a5:20:dd:dd:02:39:db:40:b8:16:18:7d:fa: 8a:83:e2:78:53:d3:ea:7d:e7:e3:31:a4:07:f7:2d:07:1a:2a: fa:d1:85:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0NsmJkXxQYy52rFD0/Ge4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjYwMzIxMDAwMTI3WhcNMjYwMzIyMDAwMTI3WjAzMTEwLwYDVQQD EyhkNTgxZjVlODAyOGQzZDhiNTY0YTFjMzY2Mjg4MzZhNTI0OTBiMDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHTbLQdhdbenqVaRl3R/KYPpp+9T BUFtDjdRs6WmMBGZQYp4+8FtCIgBcRM5z3TEOvLOWU/PWVjU1Vf5AxMj04cSKQBi 5WdsSf69bJhgA27PZFqBeMcY0tZhZDBNjDo++fn6W8oEuVQrkYqFHL8afVWZ3Al8 mUkvevsIA10xWBfmZPsy70iwPDtuQ1h2pCJ2tZxtsnJG3mXDTJIfCPZxCm3PhzYL kwTuxy9EbcPXYqWhV//r9WeY9GLc1Qix8dym6m3IO4kpljvFI3c6l8wjyVTK8gP1 YpRuJNkoMkIxBpfOwd4lhIkGBDysWKQHxBGgsmPuXpRnFrdHuh8YeqGwcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWB9egCjT2LVkocNmKINqUkkLAfMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFN0k1ao6 Herx3GlxA0rkxMCS9V7rL3n2x0Msm6zFLHmkKvZd3pbbq3CRQonk9eqGdvxcMHxG YyHtToCfoJiwY1EKMvZdsDQdMjCOukD0b1bzHFA6yfc898VqBhxUAv7IbUm+v5DB +HpIaQeGukP7ONUAphb7mliHf7Gs/JnSSFEoJaOmzB/d8Wm/Atl9r3ovRQJ01AUZ 9f+igeiId9Xpz1GcQ80GndfiG8rgTAS6u9EX1yg9gI4LRXEasOkYk1xIx30klAfd 6YS6I1cNatNE+L7xWi5Ne4XiHnDxmVClIN3dAjnbQLgWGH36ioPieFPT6n3n4zGk B/ctBxoq+tGF0Q== -----END CERTIFICATE-----Generated at Sat Mar 21 08:05:26 2026 by rpki-client