$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: YVoSnKTZVT1Uzs0QXdt/yzlKbbSg+iSJju/ptH63Yqw= Subject key identifier: 42:04:F9:5D:9C:82:C3:9F:E1:F7:59:69:A3:0A:24:2A:11:0E:30:12 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019CF1281EEEC19354BEC7026FA1D4F2EF92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 18BB Signing time: Sun 15 Mar 2026 11:01:04 +0000 Manifest this update: Sun 15 Mar 2026 11:01:04 +0000 Manifest next update: Mon 16 Mar 2026 11:01:04 +0000 Files and hashes: 1: 1-OlVpNxRszjxmjMWSuuMXpZOpfY.roa (hash: etdjbA76Sv9FnoMTJ6w4NbuXIKXN/yCoWSnBpCSOyLg=) 2: 1Cwbh-EBkqRBbTaTb-Y36KV1_f4.roa (hash: KaOvvLBbfyfPARr7O7r9zR6vas9QNYiMvTjqvCPXEUI=) 3: 2BmKC7Ao1aRSr4Cg66zffNdrunE.roa (hash: HcsscwJ/VuVcTV3kH/59/X4RCs3dMy2ECBZo7Txdi0o=) 4: 4vDYopNfblYxNyrSl7_Y8BBd78I.roa (hash: 9L22tlP5yMozusESHvaSo7CwK7JqSGuZhoMXYx5tMKw=) 5: 5cE4cXv9NfAhTzlsvseSXv-Va78.roa (hash: imOu3NBS+5L3w9gmNSjFTt0fMM+20Ow725s46hfVaoM=) 6: 6TVF3dArdPB2NJxy7_Pdt8ium4c.roa (hash: TnqA7ATOZWUWRWUjYZnrgFVgbRIJUV3+W+Bfc18gIck=) 7: 7_hKJNCWOqs8t2EHuZj_d2dqY80.roa (hash: oy0SSTc3SuINToqj7/oP07vHJ6DF+ESaKkvhl2mG+rc=) 8: 9dzcaLIqbqLLjoq0zYXtDd1PnhY.roa (hash: qxt/JZrhSAN1jPHN0Hazm3PY3+cu+jvBRtI3PEduO0E=) 9: 9myGapApVrb4JbejkloU4P66zLc.roa (hash: 6EFV77uWAJvDV9lSFY6CsxJphPSKH4/4PVdWuftIQJ8=) 10: AINcwmRM2PiJl3bMkFrzxQDkhpk.roa (hash: FjiZq5IDyOXJDGmE0DFVsFGnpZhWC68Kn1wBUMVqjoE=) 11: AxycDmx0_sRBRNwROaLXtKkwrSA.roa (hash: /OH19GJSnVpqoFUA2l9v57qAgYy75+THHbmUdJGT9/U=) 12: BgaPpw4QZZFq8BjvHJztJJvHVPk.roa (hash: 1bdyBEdjzw65JHZi7PKNdH+OzNLoot3lZr9JxQYu6k4=) 13: CePoxKEHwCSRTbVngcfu2MheeDA.roa (hash: 9sLFIyTUP2/uR3ROEWPVyAdEpgJBgZOMxIEue+PDcrc=) 14: DfQSPmYelNb0NF30t1iTQWlUs5o.roa (hash: QnQiSZ4dExtUn1E1FxF2JPdUhkzoCuIvrEqj49xiXjQ=) 15: G_vLaWL_4n0xx6AmTZKeOZFeQ1M.roa (hash: 2JUl1gxV4a+1huqyyhuozz6EfwwCu7xROBFLG6lBkXQ=) 16: HmPFJkjojfXkQXnX-ShV0bymoms.roa (hash: qiXaZzgKfCkOjQoBV7iB0khwdnyrdRGDGRMiD17+W5Q=) 17: HtxrMlw1XYD3O00XvDNyUfXKFD8.roa (hash: okOUXYArEcKSjt4C2XgrkB0y7IllxSkE0rtSnZOlw/I=) 18: IHON2rn_CAk-QTZRxcf294uBItk.roa (hash: GpSTLre0+QFMoobK7dgqzWVvBqhjML/zcMCSHc91zfI=) 19: LfPTL7ZW-A5mmvN1zdwvatohGGM.roa (hash: ozraq4O9mZcm6giPdikSak7iJBai30VVr/xRbiF+gKI=) 20: NvAf-nH1w6EiGE9EpJz1duIzkVw.roa (hash: bwe7C45RRQtIzIlIMP4B3/mPa5O8hzeJmz+qxMwmGW8=) 21: Tqg7OHqJVQA5mkNW3ZN7tWwejr4.roa (hash: D+gy7cLckRRSrklWvJRd2Z44Dw8nmd5jQhzfOPZiZtA=) 22: Wfqf17fPNrqhYEuomD94h7cLzTQ.roa (hash: +K1HlQK29dpjLdYpqFFk3MJakrfyvQ2V89xPZB0rlNk=) 23: ZNXbO3wa73OxZsGaC73Tv6OfGL4.roa (hash: lhKT5GFgOwPiLaKmkEPqlSiSwbXyE2FWLpI/hBm483Q=) 24: aBHHIsoOk3cwdTg01_-s4u0Jsjk.roa (hash: PbrAA8TMsU9WP0enV5kXL9Tl3hHucxigMTmbYxEfjpk=) 25: c2OTgD7SJ-vOU2BnpOm4w9MqsgA.roa (hash: XBITRKn+SQfBgNtBqxuCcsnPrL0WkQhuSGqNDgb7udo=) 26: dnBR3jW0Kh4UVx_oWTNX9npKj2M.roa (hash: ogXmRAS68aAykUp/xTYTY3s+V2LuvqBkBMoKuQRwEjk=) 27: ib3eXdJ0h8wtIzIl2cBYokJr_9Q.roa (hash: NphbwdgT6fB0qOIn0HJy/kyHWoDJIQz8cXWMiK9ya4Y=) 28: igm3-NIqQRhNu9yZxNTMh_1HJYo.roa (hash: cfGF5AAxd5HmRNRxM7Asm85cxUZHuluzpiB9gp54keg=) 29: k5L4tohXQ4Ed_n59tNNB1TzR1Q4.roa (hash: 3rnORVw3E2u078fD2E2EbKJTg0lHYsmpc4uiLB3Yv/8=) 30: lSanMDeIzNXvZBhpiuO2WcMcnGA.roa (hash: z1k+Po4k1NiDxL5nJsZYdntctP6qEJPsnJ4NvYoS3GU=) 31: lueVV_jKMeHO5Ubr9jZ-cwt5lHo.roa (hash: 9c+KFKnP0O3swEyj7ofbRvYd449L+eQRnVpdXmf8AiM=) 32: sdcvoTQBQgoeAFopLsTr-xpMuPs.roa (hash: WtnlbPaLYL1j+j4AclbHMyJ9VcWAM1c5WBmY3q72Npc=) 33: uO2NHQ5TTdNCQ22ZCOS8lC2JSs8.roa (hash: pOQFIMx25jyK9Z1HP3/nkQhmDqp4NhXL4Z7xwh9pM0A=) 34: uhrmeJIDBf0UOu2SKTeGKN2KLdU.roa (hash: 6yakXLB9HxwcEdeaop2mfVwvTXAmim03f6ri7g4Sfy8=) 35: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: cUzqGCzZCKQ275bkZh7BO5bCsYnyJh2YHBIaMwWHx9c=) 36: uqK8RxQN9LvzCAlm9cz-JPc33k0.roa (hash: QBT2sv9FfNzV4E0o6WzeRcOpOw1Nw/sc0uB77lAIYy8=) 37: vloaPvYoyY7lftrTQCapPW0IXOY.roa (hash: jGy6XOMpTVxN0ST97KCkF87I0GrKB16LjlLEWBSNbCQ=) 38: xEGlR8AyR4zdleMn0h5pddeRX14.roa (hash: ZkNfc0IpugjxRFp85te3h6YIm1ECTC91UgGg0apvU/I=) 39: xyaLQZsDAvrm7P96t1P_1iQ01ug.roa (hash: 8WV+5vFShCRtn2TW6yJKkPCd8zXeEaaVVDKdZ+jH3aY=) 40: yflRQXgc3sRXtlMhgbPQejPgA54.roa (hash: ELCJ/0UNTdR4XmPGdTDQGIRX33BsOogxgdA0Xu5bAP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Mar 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:f1:28:1e:ee:c1:93:54:be:c7:02:6f:a1:d4:f2:ef:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Mar 15 11:01:04 2026 GMT Not After : Mar 16 11:01:04 2026 GMT Subject: CN=4204f95d9c82c39fe1f75969a30a242a110e3012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c8:aa:84:21:f6:34:86:bf:0b:c7:2f:d9:be: a5:02:30:85:55:80:e7:b1:11:a9:60:ba:81:a8:cc: 7f:63:27:4f:14:32:be:56:6e:ab:95:66:22:fe:4b: f6:5b:b7:3c:99:fc:bb:23:50:e2:1e:c6:63:3d:be: ab:58:9b:c3:c2:55:12:0b:50:64:6f:5b:22:cc:56: c2:07:6c:15:3a:51:4e:37:9f:db:68:92:77:03:48: 55:f1:a8:98:82:47:fd:73:cd:96:f4:d6:1e:9e:9c: 0b:a2:06:d2:a9:55:fd:d6:3d:fb:73:da:db:bc:70: 77:43:18:0a:30:ea:8e:b5:e1:b4:0a:88:96:2c:6a: f3:d7:cd:b3:4e:bb:eb:9c:77:75:5b:52:aa:fa:2b: 38:43:6a:fb:a7:3c:ee:37:a7:5a:26:40:54:e2:fc: 48:e9:4e:0c:6f:41:4c:e8:6d:51:3b:ea:f8:4e:21: 4b:86:4d:3c:6c:32:dd:68:4a:0b:71:0c:e5:ac:d9: 73:4e:4d:c2:10:d9:60:17:6f:fd:c5:11:b4:61:b0: fc:52:a8:61:0c:47:78:54:9b:65:0f:66:0e:e4:9f: dd:a1:54:37:e2:8b:f7:ac:83:68:2e:a6:64:01:c1: 35:19:07:86:f9:69:ab:64:f3:41:2e:26:d5:e3:d0: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:04:F9:5D:9C:82:C3:9F:E1:F7:59:69:A3:0A:24:2A:11:0E:30:12 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:25:47:38:9f:fe:35:98:9b:d5:b5:e6:6b:2b:11:91:38:79: 68:05:14:6b:1f:06:f1:01:39:a8:da:3c:5b:6e:c0:81:6e:57: 04:f7:f0:9f:01:0d:ce:e2:66:9b:6a:ee:1a:1c:2c:f3:35:92: 7c:52:96:d3:ec:89:44:06:91:df:aa:fe:22:e5:a6:17:fa:e6: 9b:ae:c8:d0:57:3a:64:f7:ec:50:51:61:13:01:42:fb:c9:9e: 67:a0:70:ed:59:fe:78:7d:08:30:60:2f:26:77:a3:f5:87:ce: d4:8f:27:bb:d7:db:88:80:3d:be:5a:a6:7f:1a:89:38:7c:93: b1:26:84:a1:9b:83:f4:2b:c6:ac:7e:1d:9a:fb:2b:a2:7f:07: 58:d3:a1:9e:4a:70:3b:f8:57:ce:9f:3a:4b:e3:fd:d9:d2:91: 65:09:8a:95:d4:75:04:50:f5:f9:87:10:06:34:71:a3:93:bf: dd:26:8b:10:34:68:cf:d1:a6:03:05:bb:72:57:7f:ec:bf:f4: e2:db:da:de:af:1f:31:79:89:53:2a:c3:19:09:f9:7a:79:21: ca:b7:25:ca:dd:21:9e:b3:9b:85:93:ef:20:e4:24:ff:da:c0: 57:8c:6d:f9:0a:b8:2e:e6:88:4c:f9:ac:d2:ca:34:37:c6:a1: 3b:cf:27:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzxKB7uwZNUvscCb6HU8u+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwMzE1MTEwMTA0WhcNMjYwMzE2MTEwMTA0WjAzMTEwLwYDVQQD Eyg0MjA0Zjk1ZDljODJjMzlmZTFmNzU5NjlhMzBhMjQyYTExMGUzMDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ciqhCH2NIa/C8cv2b6lAjCFVYDn sRGpYLqBqMx/YydPFDK+Vm6rlWYi/kv2W7c8mfy7I1DiHsZjPb6rWJvDwlUSC1Bk b1sizFbCB2wVOlFON5/baJJ3A0hV8aiYgkf9c82W9NYenpwLogbSqVX91j37c9rb vHB3QxgKMOqOteG0CoiWLGrz182zTrvrnHd1W1Kq+is4Q2r7pzzuN6daJkBU4vxI 6U4Mb0FM6G1RO+r4TiFLhk08bDLdaEoLcQzlrNlzTk3CENlgF2/9xRG0YbD8Uqhh DEd4VJtlD2YO5J/doVQ34ov3rINoLqZkAcE1GQeG+WmrZPNBLibV49AlaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIE+V2cgsOf4fdZaaMKJCoRDjASMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyVHOJ/+ NZib1bXmaysRkTh5aAUUax8G8QE5qNo8W27AgW5XBPfwnwENzuJmm2ruGhws8zWS fFKW0+yJRAaR36r+IuWmF/rmm67I0Fc6ZPfsUFFhEwFC+8meZ6Bw7Vn+eH0IMGAv Jnej9YfO1I8nu9fbiIA9vlqmfxqJOHyTsSaEoZuD9CvGrH4dmvsron8HWNOhnkpw O/hXzp86S+P92dKRZQmKldR1BFD1+YcQBjRxo5O/3SaLEDRoz9GmAwW7cld/7L/0 4tva3q8fMXmJUyrDGQn5enkhyrclyt0hnrObhZPvIOQk/9rAV4xt+Qq4LuaITPms 0so0N8ahO88ncw== -----END CERTIFICATE-----Generated at Sun Mar 15 18:24:52 2026 by rpki-client