$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json) Hash identifier: wqFEdpEBQm7BKQsyfclG8d/FF7+pqPHBqnNeKXmUxJw= Subject key identifier: 1F:19:48:51:37:EA:DB:4A:95:89:1C:A6:09:F5:A3:1F:B0:0F:D0:55 Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea Certificate serial: 019F0E893F568FBB571F85DE83154BF39E11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft Manifest number: 19A5 Signing time: Sun 28 Jun 2026 14:01:43 +0000 Manifest this update: Sun 28 Jun 2026 14:01:43 +0000 Manifest next update: Mon 29 Jun 2026 14:01:43 +0000 Files and hashes: 1: CDdW7nCuQzH6NAMjfPJaFceRmv8.roa (hash: 3y28X5gdOE3EjaGMFkwpZSr7meiX5mPuhbh7+VXJVdg=) 2: HEx-RsoPSS1-4AEL4nR6cbVjZ7A.roa (hash: OBW2Q/LUj4tZid4mlqZd2x7RITBDuxBD4NRaa4u8dMo=) 3: JExJtb-2H86T5l_2TNtSXSkGdK4.roa (hash: PhyjLCVkG5sspCrwOMxylvOtWm2ph/t/PSTEggPhL8U=) 4: JpLt0eAZnL6ST2YsvKR8EUyz5UY.roa (hash: GOeZGmONFSdc/WiqqDPSlmBrz6YUzxzb2MPmyB3PzQ0=) 5: PkLF5Qe23NpZ0qUxVzRcrTiMnQg.roa (hash: WhFKLI35lPl0xgI1Abtq0FpDyLm3DVBgk69s+Al9tJ0=) 6: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: bkOHuDkfIuWEK9wQ+0VFCekgO0qjI9cq4JKNm7ioYDU=) 7: Yb9vCcyQmQMFL5-scd9hVRKRUuk.roa (hash: vaem7vSa0EXihJOMuPrl+fivQ7RqxRTgfRhViumpdEc=) 8: e2wYsPl0c2v5jvUrMJ-FcsncdaQ.roa (hash: N1xgKMxZ6JNLp0L0Qd+l/YBBESUI4Q2awE17GKoo6Lc=) 9: gZMt62YXB3fOXlkUgEoT0ISZk38.roa (hash: 7CvKQ04ac0nYoFEHRru1nH3qJSkBG+4xElv372aI5mM=) 10: ijx72sOLkdFwyQPnNALm-uXb8bM.roa (hash: kfeWR9mNoEB+1dBFEGtvr8qeUJFz99AzeH22Swmzpw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:0e:89:3f:56:8f:bb:57:1f:85:de:83:15:4b:f3:9e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea Validity Not Before: Jun 28 14:01:43 2026 GMT Not After : Jun 29 14:01:43 2026 GMT Subject: CN=1f19485137eadb4a95891ca609f5a31fb00fd055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6e:51:7d:13:9c:ee:39:b9:c5:47:9d:ca:3c: cc:3a:33:81:2c:61:17:d0:b3:65:29:eb:2b:ce:67: f2:da:54:bc:af:bf:26:58:bb:ff:6c:79:22:e2:eb: 0b:2f:22:ba:88:51:22:98:71:85:37:01:c5:c8:d7: 01:3a:ab:8b:50:ae:a1:94:17:11:a7:48:2d:8d:d4: ff:b8:1e:f7:1a:d6:a8:d7:07:7d:30:f3:ec:ce:69: 00:90:ad:94:81:2d:0c:3c:1a:8e:ad:5b:b3:72:f1: 8b:81:14:68:73:52:aa:62:2d:64:4d:10:67:30:aa: 0c:c5:e6:12:86:81:5d:b8:57:e4:6f:35:d9:e6:13: c4:df:ef:7d:95:66:cd:98:55:dd:58:d7:13:a5:ed: d5:a9:fe:cd:07:f0:e4:9c:b8:95:31:b4:31:db:13: 66:b4:c9:a2:fe:3e:8d:3a:08:e8:8e:a1:3f:0c:9e: 57:d6:8b:af:96:ca:6d:8d:ea:73:6d:43:c7:75:aa: 57:38:93:5a:e7:95:df:1b:6f:28:16:d5:03:71:a5: 39:2f:74:50:37:0a:39:62:db:b2:2a:6a:3c:c1:2c: fe:2b:9c:db:f3:50:56:2f:9d:d0:57:29:33:a4:86: 0a:f6:0c:55:00:78:6d:e7:8b:d1:0c:03:df:b9:cf: fb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:19:48:51:37:EA:DB:4A:95:89:1C:A6:09:F5:A3:1F:B0:0F:D0:55 X509v3 Authority Key Identifier: keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:9d:36:c4:a1:4f:5e:09:c4:00:b5:b8:b6:53:0c:8b:dd:3f: 81:cb:66:a5:a5:2b:2b:6e:a0:19:aa:58:c4:ae:0e:3a:08:7c: 75:62:43:d4:1c:dc:15:d5:99:f8:a9:62:1d:bc:2a:22:54:66: 04:3a:31:ec:89:67:27:70:a7:78:13:1a:26:e6:62:50:5a:9f: 79:9f:63:91:6f:87:e0:99:50:8d:51:27:69:40:8a:31:c0:9f: a9:7a:7f:b1:55:ac:fa:c8:f1:2d:24:33:b9:87:94:e9:a8:f7: e1:53:4c:95:99:6f:1e:75:a6:5f:32:00:22:54:23:76:f5:29: 30:a0:7f:51:48:5e:80:99:71:37:1e:19:74:b8:64:c3:75:ea: 06:03:a4:cd:50:fc:84:a1:f9:19:2e:06:9b:de:25:73:49:58: 96:83:87:58:fa:12:97:89:f6:97:9d:92:05:bf:3b:8f:ef:36: f8:7f:61:2a:24:4e:8d:78:e0:e4:1d:54:35:e9:a3:5a:32:46: 73:51:c0:3e:a0:87:53:a4:3f:c6:a4:6a:9b:16:25:62:7e:b7: 9d:67:12:ca:07:2d:85:08:7f:a7:2a:bd:84:fd:7b:e0:31:99: 4e:fe:84:21:d0:23:ae:4c:d5:49:e8:3c:0b:49:04:1b:7e:3b: 94:e2:7a:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8OiT9Wj7tXH4XegxVL854RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz ZTIwZWEwHhcNMjYwNjI4MTQwMTQzWhcNMjYwNjI5MTQwMTQzWjAzMTEwLwYDVQQD EygxZjE5NDg1MTM3ZWFkYjRhOTU4OTFjYTYwOWY1YTMxZmIwMGZkMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8m5RfROc7jm5xUedyjzMOjOBLGEX 0LNlKesrzmfy2lS8r78mWLv/bHki4usLLyK6iFEimHGFNwHFyNcBOquLUK6hlBcR p0gtjdT/uB73Gtao1wd9MPPszmkAkK2UgS0MPBqOrVuzcvGLgRRoc1KqYi1kTRBn MKoMxeYShoFduFfkbzXZ5hPE3+99lWbNmFXdWNcTpe3Vqf7NB/DknLiVMbQx2xNm tMmi/j6NOgjojqE/DJ5X1ouvlsptjepzbUPHdapXOJNa55XfG28oFtUDcaU5L3RQ Nwo5YtuyKmo8wSz+K5zb81BWL53QVykzpIYK9gxVAHht54vRDAPfuc/70wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8ZSFE36ttKlYkcpgn1ox+wD9BVMB8GA1UdIwQY MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt NTU2MDhiNjk0NDU2LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2 LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZ02xKFP XgnEALW4tlMMi90/gctmpaUrK26gGapYxK4OOgh8dWJD1BzcFdWZ+KliHbwqIlRm BDox7IlnJ3CneBMaJuZiUFqfeZ9jkW+H4JlQjVEnaUCKMcCfqXp/sVWs+sjxLSQz uYeU6aj34VNMlZlvHnWmXzIAIlQjdvUpMKB/UUhegJlxNx4ZdLhkw3XqBgOkzVD8 hKH5GS4Gm94lc0lYloOHWPoSl4n2l52SBb87j+82+H9hKiROjXjg5B1UNemjWjJG c1HAPqCHU6Q/xqRqmxYlYn63nWcSygcthQh/pyq9hP174DGZTv6EIdAjrkzVSeg8 C0kEG347lOJ6Fw== -----END CERTIFICATE-----Generated at Sun Jun 28 16:26:38 2026 by rpki-client