$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: o8GeLvdOmh2/NB2q39Ddf2QeDYkeM4/nBQ7gQa3bqec= Subject key identifier: 9F:A6:A8:10:D5:DB:BC:55:B2:E1:DC:3C:C2:D1:40:A6:D6:2E:5D:CE Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019EF9F03415A9921CAE329C644B8B218378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 19CA Signing time: Wed 24 Jun 2026 14:02:09 +0000 Manifest this update: Wed 24 Jun 2026 14:02:09 +0000 Manifest next update: Thu 25 Jun 2026 14:02:09 +0000 Files and hashes: 1: 1-OlVpNxRszjxmjMWSuuMXpZOpfY.roa (hash: etdjbA76Sv9FnoMTJ6w4NbuXIKXN/yCoWSnBpCSOyLg=) 2: 1Cwbh-EBkqRBbTaTb-Y36KV1_f4.roa (hash: KaOvvLBbfyfPARr7O7r9zR6vas9QNYiMvTjqvCPXEUI=) 3: 2BmKC7Ao1aRSr4Cg66zffNdrunE.roa (hash: HcsscwJ/VuVcTV3kH/59/X4RCs3dMy2ECBZo7Txdi0o=) 4: 4vDYopNfblYxNyrSl7_Y8BBd78I.roa (hash: 9L22tlP5yMozusESHvaSo7CwK7JqSGuZhoMXYx5tMKw=) 5: 5cE4cXv9NfAhTzlsvseSXv-Va78.roa (hash: imOu3NBS+5L3w9gmNSjFTt0fMM+20Ow725s46hfVaoM=) 6: 6TVF3dArdPB2NJxy7_Pdt8ium4c.roa (hash: TnqA7ATOZWUWRWUjYZnrgFVgbRIJUV3+W+Bfc18gIck=) 7: 7_hKJNCWOqs8t2EHuZj_d2dqY80.roa (hash: oy0SSTc3SuINToqj7/oP07vHJ6DF+ESaKkvhl2mG+rc=) 8: 9dzcaLIqbqLLjoq0zYXtDd1PnhY.roa (hash: qxt/JZrhSAN1jPHN0Hazm3PY3+cu+jvBRtI3PEduO0E=) 9: 9myGapApVrb4JbejkloU4P66zLc.roa (hash: 6EFV77uWAJvDV9lSFY6CsxJphPSKH4/4PVdWuftIQJ8=) 10: AINcwmRM2PiJl3bMkFrzxQDkhpk.roa (hash: FjiZq5IDyOXJDGmE0DFVsFGnpZhWC68Kn1wBUMVqjoE=) 11: AxycDmx0_sRBRNwROaLXtKkwrSA.roa (hash: /OH19GJSnVpqoFUA2l9v57qAgYy75+THHbmUdJGT9/U=) 12: BgaPpw4QZZFq8BjvHJztJJvHVPk.roa (hash: 1bdyBEdjzw65JHZi7PKNdH+OzNLoot3lZr9JxQYu6k4=) 13: CePoxKEHwCSRTbVngcfu2MheeDA.roa (hash: 9sLFIyTUP2/uR3ROEWPVyAdEpgJBgZOMxIEue+PDcrc=) 14: DfQSPmYelNb0NF30t1iTQWlUs5o.roa (hash: QnQiSZ4dExtUn1E1FxF2JPdUhkzoCuIvrEqj49xiXjQ=) 15: G_vLaWL_4n0xx6AmTZKeOZFeQ1M.roa (hash: 2JUl1gxV4a+1huqyyhuozz6EfwwCu7xROBFLG6lBkXQ=) 16: HmPFJkjojfXkQXnX-ShV0bymoms.roa (hash: qiXaZzgKfCkOjQoBV7iB0khwdnyrdRGDGRMiD17+W5Q=) 17: HtxrMlw1XYD3O00XvDNyUfXKFD8.roa (hash: okOUXYArEcKSjt4C2XgrkB0y7IllxSkE0rtSnZOlw/I=) 18: LfPTL7ZW-A5mmvN1zdwvatohGGM.roa (hash: ozraq4O9mZcm6giPdikSak7iJBai30VVr/xRbiF+gKI=) 19: Tqg7OHqJVQA5mkNW3ZN7tWwejr4.roa (hash: D+gy7cLckRRSrklWvJRd2Z44Dw8nmd5jQhzfOPZiZtA=) 20: Wfqf17fPNrqhYEuomD94h7cLzTQ.roa (hash: +K1HlQK29dpjLdYpqFFk3MJakrfyvQ2V89xPZB0rlNk=) 21: ZNXbO3wa73OxZsGaC73Tv6OfGL4.roa (hash: lhKT5GFgOwPiLaKmkEPqlSiSwbXyE2FWLpI/hBm483Q=) 22: aBHHIsoOk3cwdTg01_-s4u0Jsjk.roa (hash: PbrAA8TMsU9WP0enV5kXL9Tl3hHucxigMTmbYxEfjpk=) 23: c2OTgD7SJ-vOU2BnpOm4w9MqsgA.roa (hash: XBITRKn+SQfBgNtBqxuCcsnPrL0WkQhuSGqNDgb7udo=) 24: dnBR3jW0Kh4UVx_oWTNX9npKj2M.roa (hash: ogXmRAS68aAykUp/xTYTY3s+V2LuvqBkBMoKuQRwEjk=) 25: ib3eXdJ0h8wtIzIl2cBYokJr_9Q.roa (hash: NphbwdgT6fB0qOIn0HJy/kyHWoDJIQz8cXWMiK9ya4Y=) 26: igm3-NIqQRhNu9yZxNTMh_1HJYo.roa (hash: cfGF5AAxd5HmRNRxM7Asm85cxUZHuluzpiB9gp54keg=) 27: k5L4tohXQ4Ed_n59tNNB1TzR1Q4.roa (hash: 3rnORVw3E2u078fD2E2EbKJTg0lHYsmpc4uiLB3Yv/8=) 28: lSanMDeIzNXvZBhpiuO2WcMcnGA.roa (hash: z1k+Po4k1NiDxL5nJsZYdntctP6qEJPsnJ4NvYoS3GU=) 29: lueVV_jKMeHO5Ubr9jZ-cwt5lHo.roa (hash: 9c+KFKnP0O3swEyj7ofbRvYd449L+eQRnVpdXmf8AiM=) 30: q87YasPi0P-A4RG5sPV3wuAufYQ.roa (hash: kJZPr94cnSfkBS7GDeJfwaSpjY+FpnvEJHJB2hPmYoo=) 31: sdcvoTQBQgoeAFopLsTr-xpMuPs.roa (hash: WtnlbPaLYL1j+j4AclbHMyJ9VcWAM1c5WBmY3q72Npc=) 32: uO2NHQ5TTdNCQ22ZCOS8lC2JSs8.roa (hash: pOQFIMx25jyK9Z1HP3/nkQhmDqp4NhXL4Z7xwh9pM0A=) 33: uaYE5V2zqlkxFilciFUOq7CjWZw.roa (hash: PCiK7eyJf1Lc5VeA8orNlbLV1UFE7CUmS9PTtgP0Kig=) 34: uhrmeJIDBf0UOu2SKTeGKN2KLdU.roa (hash: 6yakXLB9HxwcEdeaop2mfVwvTXAmim03f6ri7g4Sfy8=) 35: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: Cx0nU+Djpt9M3Sh5Cln4l+dkDQIB0XY/q/Lnw3rDXqM=) 36: uqK8RxQN9LvzCAlm9cz-JPc33k0.roa (hash: QBT2sv9FfNzV4E0o6WzeRcOpOw1Nw/sc0uB77lAIYy8=) 37: vloaPvYoyY7lftrTQCapPW0IXOY.roa (hash: jGy6XOMpTVxN0ST97KCkF87I0GrKB16LjlLEWBSNbCQ=) 38: xEGlR8AyR4zdleMn0h5pddeRX14.roa (hash: ZkNfc0IpugjxRFp85te3h6YIm1ECTC91UgGg0apvU/I=) 39: xyaLQZsDAvrm7P96t1P_1iQ01ug.roa (hash: 8WV+5vFShCRtn2TW6yJKkPCd8zXeEaaVVDKdZ+jH3aY=) 40: yflRQXgc3sRXtlMhgbPQejPgA54.roa (hash: ELCJ/0UNTdR4XmPGdTDQGIRX33BsOogxgdA0Xu5bAP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Jun 2026 14:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:f9:f0:34:15:a9:92:1c:ae:32:9c:64:4b:8b:21:83:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Jun 24 14:02:09 2026 GMT Not After : Jun 25 14:02:09 2026 GMT Subject: CN=9fa6a810d5dbbc55b2e1dc3cc2d140a6d62e5dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:34:be:84:07:53:6c:83:bd:63:45:5a:42:87: e3:a5:ba:0e:c0:c9:ff:19:23:7c:4f:97:4d:ba:9e: 19:03:61:de:ba:12:e7:6e:f8:9c:63:54:44:7f:41: 17:20:28:6a:b5:18:07:1b:bc:9e:c2:92:77:b4:40: 02:ac:70:05:ae:58:72:1c:49:2c:8d:4f:8c:96:bb: bd:ae:89:4b:73:b3:04:b8:52:da:1d:ff:2b:7f:d7: 8a:90:c6:b1:b1:7d:2c:6d:51:00:2d:d1:e6:9b:13: 31:6e:27:34:b5:a0:a7:2f:bc:4f:4a:47:44:4c:bb: 9d:1c:57:32:aa:aa:af:3d:f1:2d:66:9a:04:38:24: d8:21:47:d8:a0:ad:5a:ef:99:15:b7:8a:36:bc:20: 5c:40:d1:43:32:f6:18:4e:e0:8e:99:db:88:bb:01: 76:74:35:57:c0:a4:59:17:09:7d:67:24:60:f9:bb: 38:da:21:e9:0b:d7:4a:5c:97:06:91:6c:8c:31:fd: 40:c9:08:b5:50:38:be:e0:fe:78:0e:25:ad:c6:7e: 60:12:54:70:2f:3e:1a:09:17:e7:44:9f:ff:ce:1b: bb:db:a5:50:7b:cf:69:26:47:c5:f3:66:fb:c6:ef: b8:ff:a1:c5:8f:a5:31:3e:b5:a6:04:92:6c:f9:37: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A6:A8:10:D5:DB:BC:55:B2:E1:DC:3C:C2:D1:40:A6:D6:2E:5D:CE X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a2:15:37:0b:df:0d:32:93:09:50:b8:1c:42:0f:b6:95:54: 36:18:27:60:82:4b:b8:a0:80:86:a4:e1:fe:f2:36:43:14:8d: 36:88:76:f8:b2:54:2a:17:c7:a4:4c:bd:a6:f1:6a:42:9a:57: c0:e4:2f:34:b4:6e:3c:b3:38:88:2f:6d:35:1a:e3:99:d9:b4: 34:6f:5f:d4:35:de:7e:03:fb:82:1b:ae:c2:15:56:61:7b:a6: 35:1b:58:14:51:3d:0b:b5:43:b1:46:37:00:56:66:49:01:e0: f4:79:dd:49:3e:1a:d1:cd:56:5d:cf:3d:f5:18:6e:9f:88:71: 40:74:ee:41:f8:63:ed:b1:d4:f3:83:61:18:09:17:c2:45:68: 1d:b0:7e:b9:19:f8:ec:ed:0d:76:15:ff:9c:e9:55:7e:36:ea: 5d:c0:96:c7:71:86:2f:6e:a5:16:66:0f:0b:3d:5b:89:e5:36: 8a:fa:af:74:ae:85:1c:4a:20:ae:f3:47:83:d6:b0:5f:1d:03: c4:b3:9b:95:65:84:a2:14:40:8b:a3:8e:b7:6b:50:00:8a:1d: 73:8c:7c:3c:ba:b2:94:17:64:bf:30:ef:15:7a:b8:51:6f:fe: 76:85:82:71:c5:11:5a:75:e3:f2:bd:63:7f:e7:78:e9:63:cc: 01:e4:c7:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ758DQVqZIcrjKcZEuLIYN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwNjI0MTQwMjA5WhcNMjYwNjI1MTQwMjA5WjAzMTEwLwYDVQQD Eyg5ZmE2YTgxMGQ1ZGJiYzU1YjJlMWRjM2NjMmQxNDBhNmQ2MmU1ZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTS+hAdTbIO9Y0VaQofjpboOwMn/ GSN8T5dNup4ZA2HeuhLnbvicY1REf0EXIChqtRgHG7yewpJ3tEACrHAFrlhyHEks jU+Mlru9rolLc7MEuFLaHf8rf9eKkMaxsX0sbVEALdHmmxMxbic0taCnL7xPSkdE TLudHFcyqqqvPfEtZpoEOCTYIUfYoK1a75kVt4o2vCBcQNFDMvYYTuCOmduIuwF2 dDVXwKRZFwl9ZyRg+bs42iHpC9dKXJcGkWyMMf1AyQi1UDi+4P54DiWtxn5gElRw Lz4aCRfnRJ//zhu726VQe89pJkfF82b7xu+4/6HFj6UxPrWmBJJs+TcykwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+mqBDV27xVsuHcPMLRQKbWLl3OMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaIVNwvf DTKTCVC4HEIPtpVUNhgnYIJLuKCAhqTh/vI2QxSNNoh2+LJUKhfHpEy9pvFqQppX wOQvNLRuPLM4iC9tNRrjmdm0NG9f1DXefgP7ghuuwhVWYXumNRtYFFE9C7VDsUY3 AFZmSQHg9HndST4a0c1WXc899Rhun4hxQHTuQfhj7bHU84NhGAkXwkVoHbB+uRn4 7O0NdhX/nOlVfjbqXcCWx3GGL26lFmYPCz1bieU2ivqvdK6FHEogrvNHg9awXx0D xLOblWWEohRAi6OOt2tQAIodc4x8PLqylBdkvzDvFXq4UW/+doWCccURWnXj8r1j f+d46WPMAeTHxg== -----END CERTIFICATE-----Generated at Wed Jun 24 21:23:00 2026 by rpki-client