$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: +902RaCuPqcehHsyZRnyKVsHrmB4geGL26ZUuCSp8yA= Subject key identifier: A9:62:94:59:33:1E:EA:7C:14:70:74:E4:5E:39:99:84:4D:6B:F3:D0 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 01A1DF1590CA225A973D132439F317E80BDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 16AC Signing time: Sun 15 Nov 2026 12:01:34 +0000 Manifest this update: Sun 15 Nov 2026 12:01:34 +0000 Manifest next update: Mon 16 Nov 2026 12:01:34 +0000 Files and hashes: 1: BK_uZd5RIdvcCcnIrkl91Qf2mFw.roa (hash: wV2RNnXCJX3V+Medw8LdpmAEbR5QwEUgTvufx7pFq14=) 2: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (hash: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=) 3: G9O4g34wmhpRqqqyNq64bnjh27k.roa (hash: lYlheaBAaMmywrolWQWx4QnBFOXnz365592aJuQe6Mw=) 4: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (hash: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII=) 5: XppJI7pSNx6BdFrEbdtPboTQL6o.roa (hash: Cty7u06Lt5vOCxE5CLtni9wB/17m9CZOi2zJp+IGXYM=) 6: ZmU2dSStEk_zeXSWwEBaw5tcl0Q.roa (hash: Y1sWpxD5SobS8QA6Ihwhvzg6iQQ+93Pu+DpnTFJR+xM=) 7: hHQPymz7nrurWK651cK6wH1WQB4.roa (hash: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk=) 8: hn8HZ87MGm21OeAakwo0L7epBvo.roa (hash: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs=) 9: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (hash: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA=) 10: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (hash: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg=) 11: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: K8aHdVZ3dhpySJGa/uBXLsQQ4q2B2QUclvCIXeuXvyE=) 12: uibhPc4NbRy01honmhOVxxl-SbI.roa (hash: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ=) 13: utkmbyJ1-9TI5Iy29JQnzvwfdgw.roa (hash: MQitkqvZxc85BEfsLrabuKg5Cbpd+JVUjJLsFQDLJCQ=) 14: xxR8mx-20J_lo55Rh1660v5SUI4.roa (hash: 2Y9dBCwd98Bba/rHT3QIRjMGiqefSe3zB38HBIRd3qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 12:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:df:15:90:ca:22:5a:97:3d:13:24:39:f3:17:e8:0b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Nov 15 12:01:34 2026 GMT Not After : Nov 16 12:01:34 2026 GMT Subject: CN=a9629459331eea7c147074e45e3999844d6bf3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2b:35:50:4b:ab:3e:02:cc:4d:d4:94:c2:63: eb:d6:35:b9:d2:ff:65:ee:18:48:e9:b4:8a:16:f2: bc:aa:a9:89:69:a4:45:82:68:52:c6:31:cd:69:fb: a8:b6:36:3b:d1:fb:5d:2d:cd:85:7a:d7:c9:02:0c: cc:42:1a:87:82:61:1b:08:6f:e6:cb:5a:a7:66:9b: 96:d8:b6:7d:24:19:23:33:b8:20:fc:e3:a0:9f:07: 35:a4:1e:24:55:07:3c:62:98:9e:21:ab:59:0e:ad: 82:a6:67:61:25:0b:4d:e9:1e:19:0f:4e:09:82:83: e3:53:d0:89:af:76:ae:0d:11:81:61:c4:09:af:e2: 73:e7:4d:1e:8a:4e:94:6c:ce:73:9d:35:9c:b0:8a: 06:98:06:35:79:b5:99:35:7d:ca:b4:01:a3:15:07: 98:5f:19:a9:2f:e8:c8:9f:bf:3d:e1:60:b2:ee:30: f6:a2:e2:4e:66:95:0b:61:99:90:cb:b3:5d:bc:46: 89:ca:95:ed:22:f0:d4:a7:2a:58:5d:62:9f:9a:23: d7:d7:41:40:6a:b2:b8:6b:06:12:b6:3b:a5:9a:84: 29:e9:68:f5:75:8b:41:e8:4a:99:60:a0:fa:27:26: 65:82:8a:58:5c:99:9f:b1:46:fa:f2:8b:85:f9:33: 17:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:62:94:59:33:1E:EA:7C:14:70:74:E4:5E:39:99:84:4D:6B:F3:D0 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2e:1b:4f:94:e0:6e:97:68:74:fd:9a:4a:24:e5:1c:00:10: 46:4d:ac:94:fa:d0:da:06:fa:53:bd:98:fe:9e:6b:eb:a7:59: 29:f9:4f:2c:80:0a:65:94:5b:51:be:58:8e:70:bf:77:e5:5b: 7c:e1:c9:90:b5:54:62:db:eb:95:9c:14:74:f8:26:b1:82:b1: a9:fe:c8:c6:e2:0a:04:ea:fd:c9:37:15:16:15:44:41:29:4b: 82:d4:a5:14:10:9a:e6:13:9d:0c:aa:ba:28:b3:6f:97:81:de: 1d:67:fb:e6:93:c4:61:7c:02:ad:c7:95:67:69:5c:e4:ce:98: f4:7d:50:ef:69:ec:ac:d2:6a:a8:54:07:d1:5b:9d:82:cd:f8: d3:a4:cc:f7:f8:bb:cb:82:a5:ed:ad:2b:a9:bc:b8:ec:64:8f: 04:4c:53:e0:44:1c:49:1b:7f:6d:01:fb:bd:35:08:a9:a7:36: 3d:46:2c:9a:f9:dc:97:41:8e:64:5b:4f:c5:f8:67:3f:53:8a: de:08:8b:60:97:e6:75:1e:eb:ca:ac:29:1c:4b:2c:c1:73:c2: 33:08:a7:b5:f1:e2:ab:50:b5:1f:05:6f:5c:77:30:cf:c4:5f: 62:a8:1a:b1:cd:d3:d9:c0:ac:e0:7d:a5:60:8d:54:f7:ea:e3: 43:f0:cb:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHfFZDKIlqXPRMkOfMX6AvcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYxMTE1MTIwMTM0WhcNMjYxMTE2MTIwMTM0WjAzMTEwLwYDVQQD EyhhOTYyOTQ1OTMzMWVlYTdjMTQ3MDc0ZTQ1ZTM5OTk4NDRkNmJmM2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmis1UEurPgLMTdSUwmPr1jW50v9l 7hhI6bSKFvK8qqmJaaRFgmhSxjHNafuotjY70ftdLc2FetfJAgzMQhqHgmEbCG/m y1qnZpuW2LZ9JBkjM7gg/OOgnwc1pB4kVQc8YpieIatZDq2CpmdhJQtN6R4ZD04J goPjU9CJr3auDRGBYcQJr+Jz500eik6UbM5znTWcsIoGmAY1ebWZNX3KtAGjFQeY XxmpL+jIn7894WCy7jD2ouJOZpULYZmQy7NdvEaJypXtIvDUpypYXWKfmiPX10FA arK4awYStjulmoQp6Wj1dYtB6EqZYKD6JyZlgopYXJmfsUb68ouF+TMXNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlilFkzHup8FHB05F45mYRNa/PQMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAay4bT5Tg bpdodP2aSiTlHAAQRk2slPrQ2gb6U72Y/p5r66dZKflPLIAKZZRbUb5YjnC/d+Vb fOHJkLVUYtvrlZwUdPgmsYKxqf7IxuIKBOr9yTcVFhVEQSlLgtSlFBCa5hOdDKq6 KLNvl4HeHWf75pPEYXwCrceVZ2lc5M6Y9H1Q72nsrNJqqFQH0Vudgs3406TM9/i7 y4Kl7a0rqby47GSPBExT4EQcSRt/bQH7vTUIqac2PUYsmvncl0GOZFtPxfhnP1OK 3giLYJfmdR7ryqwpHEsswXPCMwintfHiq1C1HwVvXHcwz8RfYqgasc3T2cCs4H2l YI1U9+rjQ/DLPQ== -----END CERTIFICATE-----Generated at Sun Nov 15 22:08:12 2026 by rpki-client