$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft File: UJgPtq3oWPJlLnNpkxJshXWfBtk.mft (raw, json) Hash identifier: VuUzIZ5LbDQouJutBCz65QZeoPYWx7a/4OyQVSomr8I= Subject key identifier: C8:29:20:EB:BD:AA:42:69:7B:76:C5:CD:74:B4:8A:0B:7F:37:FD:CB Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9 Certificate serial: 019CE2C7153DCE6DC99F219F8FBCDEA9230A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft Manifest number: 17D1 Signing time: Thu 12 Mar 2026 16:00:23 +0000 Manifest this update: Thu 12 Mar 2026 16:00:23 +0000 Manifest next update: Fri 13 Mar 2026 16:00:23 +0000 Files and hashes: 1: 4zPyCmOCOHn0UmU25C34lBLrfsc.roa (hash: mYeF9TieLkXAP7pTIPCY5kfzmWlfrZulfwAKyol+I8w=) 2: 8U9Wp8aMDTMHire9KsQQwLfqs00.roa (hash: X/erkao+YL7ZRtCVh/gBhtM8++R5nL+zCJPtIYT4ET0=) 3: HUNURVAA892dDIzCfcEspa0FlqE.roa (hash: zuRP0sT5Q7shDkaltBQBAdM4I77s5Z8T+hSw7WgROyk=) 4: Hd3ojefiZSO4EQV3qaL7pExW__U.roa (hash: gRRtQEbW2/M2MaLd+m10UeRJYblia3Rho50OsDCy5PY=) 5: OB9RZiF89Z1uRZeWn1vTQcGDais.roa (hash: jAA2Lpyh8IWvH3ZZq1p0bZ1EbJHY9jTF1clJ6M81wgk=) 6: Ti8i0UIny7Sj-LCspkWODf7h3eQ.roa (hash: iUMW9CXtMXsoO7pWBR6eDo8RzWNspIapoeSgUIgm3y8=) 7: UJgPtq3oWPJlLnNpkxJshXWfBtk.crl (hash: 5YulfKtkcRot7x1aumbZoBNw5zEkkpY8ZJO6c9TUBdE=) 8: _IW__XFXehaq9QdxRfT864VriOU.roa (hash: k90WCGYeq167jhMKLuGJ73HDgSUqj5sLLRTsPnjXIoA=) 9: cxkZbn0blHBZhN_WVkm447mHt1o.roa (hash: PIh/jQ39BbhdqKW9+Xaf1VMc438vWZrDb53e0GQNo2w=) 10: jgOsHUWcbSDiI_fNSViiorGknbI.roa (hash: ExxFYpwqdFjHSrJxztsKKOJte37WACbeefcX87tcqNs=) 11: nD5UUoUGQF8Rxq4gzZbVuJa8PJE.roa (hash: RvmrVvYCv5AOaoQZhyeX78k0GCJb5MBQlGW4Cu7wFrA=) 12: prmQZEtK7d8LPnJ5d9AMaIwx-vE.roa (hash: a0MOVqD8PQL7h5XQHdpb3HadDSEFipAD1XuOUI4ggCg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 15:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e2:c7:15:3d:ce:6d:c9:9f:21:9f:8f:bc:de:a9:23:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9 Validity Not Before: Mar 12 16:00:23 2026 GMT Not After : Mar 13 16:00:23 2026 GMT Subject: CN=c82920ebbdaa42697b76c5cd74b48a0b7f37fdcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0e:07:a7:1a:9e:c7:7c:c3:96:33:1a:69:68: df:1b:a1:38:96:4a:df:65:67:f0:76:11:9d:5f:cb: f4:e8:85:d5:90:09:f5:3c:fd:d2:1f:88:03:db:8f: bc:a4:bd:19:37:c9:40:9b:b6:4a:45:9e:f6:92:34: 64:a5:f4:bf:21:04:3b:66:69:9f:fb:d3:fe:8e:48: 5f:de:fc:1c:6a:2c:ae:86:1d:89:4a:d2:4b:3d:8e: dd:93:68:b1:29:a4:71:26:4a:c2:ce:a7:46:08:28: 7d:88:3b:c6:87:d2:40:fa:ea:b5:74:62:35:2a:f7: fb:fe:f5:02:d8:7f:de:31:fe:a1:6d:27:a4:64:89: 66:49:f3:0b:d0:67:08:29:21:b3:24:23:ba:9f:c0: 3a:2e:08:4e:e4:98:c1:6a:15:15:ea:10:00:29:c1: b5:44:0c:47:bc:cc:a5:ac:17:5f:bb:24:e5:02:91: f0:bb:d4:67:d9:ac:db:69:24:18:b9:92:09:19:80: 8d:4f:cd:d8:2e:14:ad:35:de:86:a7:b5:40:95:0e: ca:9b:aa:fd:78:b0:bb:5f:84:be:3d:bf:c1:25:af: 28:ba:cf:9d:d3:96:bf:42:b6:c5:f3:8b:1d:0e:6c: a4:6e:60:42:a2:1c:ac:f8:03:1c:a7:58:cc:fc:7f: 89:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:29:20:EB:BD:AA:42:69:7B:76:C5:CD:74:B4:8A:0B:7F:37:FD:CB X509v3 Authority Key Identifier: keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:bd:48:82:3b:3f:a8:0d:d5:93:b3:46:bc:a0:89:ce:46:b5: a8:a7:63:47:2e:a2:40:e0:24:ad:da:57:9e:e3:be:d0:a9:d9: 4a:af:91:06:78:20:6c:9a:e0:74:9f:33:77:ca:95:7b:34:88: de:f9:35:f5:d8:23:e9:85:86:f2:75:93:6a:5f:d1:4b:d4:2a: f6:e1:bc:03:52:ce:99:14:42:03:79:c6:0d:c9:d1:5e:4f:f0: 3c:5b:18:b5:23:cc:da:48:1a:eb:69:c7:02:c1:78:11:51:82: 2c:d4:ee:dd:a4:c1:83:e0:53:9a:2f:a2:59:21:a3:84:a3:a3: bb:e4:90:63:28:cf:67:21:68:bd:cf:c6:94:80:7f:41:06:9a: 6e:49:55:5b:18:f2:94:23:94:c6:6a:86:5e:da:c3:15:88:74: ce:a0:e8:52:bf:2d:31:d0:52:9b:3b:f4:73:45:9e:9b:2c:47: 57:74:16:75:bc:5b:41:6a:50:f0:17:b0:42:26:d4:6f:0d:1e: 4f:47:e6:a8:d6:00:4a:0c:d5:fe:f9:c2:47:49:d4:12:da:d0: 08:20:b4:8d:29:05:27:a3:2f:70:b3:0e:60:d1:29:34:ef:3b: 77:59:5f:d5:a1:a1:6d:9b:84:5e:b8:7a:58:79:ad:6b:7b:02: a7:be:9d:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzixxU9zm3JnyGfj7zeqSMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5 ZjA2ZDkwHhcNMjYwMzEyMTYwMDIzWhcNMjYwMzEzMTYwMDIzWjAzMTEwLwYDVQQD EyhjODI5MjBlYmJkYWE0MjY5N2I3NmM1Y2Q3NGI0OGEwYjdmMzdmZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4g4Hpxqex3zDljMaaWjfG6E4lkrf ZWfwdhGdX8v06IXVkAn1PP3SH4gD24+8pL0ZN8lAm7ZKRZ72kjRkpfS/IQQ7Zmmf +9P+jkhf3vwcaiyuhh2JStJLPY7dk2ixKaRxJkrCzqdGCCh9iDvGh9JA+uq1dGI1 Kvf7/vUC2H/eMf6hbSekZIlmSfML0GcIKSGzJCO6n8A6LghO5JjBahUV6hAAKcG1 RAxHvMylrBdfuyTlApHwu9Rn2azbaSQYuZIJGYCNT83YLhStNd6Gp7VAlQ7Km6r9 eLC7X4S+Pb/BJa8ous+d05a/QrbF84sdDmykbmBCohys+AMcp1jM/H+JJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgpIOu9qkJpe3bFzXS0igt/N/3LMB8GA1UdIwQY MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkb1Igjs/ qA3Vk7NGvKCJzka1qKdjRy6iQOAkrdpXnuO+0KnZSq+RBnggbJrgdJ8zd8qVezSI 3vk19dgj6YWG8nWTal/RS9Qq9uG8A1LOmRRCA3nGDcnRXk/wPFsYtSPM2kga62nH AsF4EVGCLNTu3aTBg+BTmi+iWSGjhKOju+SQYyjPZyFovc/GlIB/QQaabklVWxjy lCOUxmqGXtrDFYh0zqDoUr8tMdBSmzv0c0WemyxHV3QWdbxbQWpQ8BewQibUbw0e T0fmqNYASgzV/vnCR0nUEtrQCCC0jSkFJ6MvcLMOYNEpNO87d1lf1aGhbZuEXrh6 WHmta3sCp76dow== -----END CERTIFICATE-----Generated at Thu Mar 12 19:37:45 2026 by rpki-client