$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: Yp6tMrM9YS27tOXqEtZvwGFitamfmxptvKOqDFxkVVI= Subject key identifier: 64:7D:81:C4:B4:E9:0E:5F:73:DC:16:CA:6A:C6:5B:06:1A:48:74:61 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 01A0EBC13620A2C299620BB5C784219E49B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 162E Signing time: Tue 29 Sep 2026 06:01:43 +0000 Manifest this update: Tue 29 Sep 2026 06:01:43 +0000 Manifest next update: Wed 30 Sep 2026 06:01:43 +0000 Files and hashes: 1: BK_uZd5RIdvcCcnIrkl91Qf2mFw.roa (hash: wV2RNnXCJX3V+Medw8LdpmAEbR5QwEUgTvufx7pFq14=) 2: FtL8JAR5L3QuiWjveQYYqx5Vysc.roa (hash: TDzblppwWN3R0n7X/3t6Y/QCHzmL0n6aO41HLuZVCKU=) 3: G9O4g34wmhpRqqqyNq64bnjh27k.roa (hash: lYlheaBAaMmywrolWQWx4QnBFOXnz365592aJuQe6Mw=) 4: NeWc7fV2xerzCZLqJxMH7S9Rnq0.roa (hash: edl6dCh63hg4Y8AUvmK5tlCPTiU0Nu0TVS0oTDNYUII=) 5: XppJI7pSNx6BdFrEbdtPboTQL6o.roa (hash: Cty7u06Lt5vOCxE5CLtni9wB/17m9CZOi2zJp+IGXYM=) 6: ZmU2dSStEk_zeXSWwEBaw5tcl0Q.roa (hash: Y1sWpxD5SobS8QA6Ihwhvzg6iQQ+93Pu+DpnTFJR+xM=) 7: hHQPymz7nrurWK651cK6wH1WQB4.roa (hash: dwQ4oAHDFe0oAQKlctscRR06w5cemCjD8MkqMj9iTyk=) 8: hn8HZ87MGm21OeAakwo0L7epBvo.roa (hash: K2tDb7I5NoqsKa5/k7EGMMNhy8l68r1VCX67mnoFnXs=) 9: kyFQugjVSgHbKP7Cp3yvdfTkM7Y.roa (hash: lYivRiiWhdQqSTdJmm6RVAol+uwcwmFLCfnYj2bvGyA=) 10: th-tx_kJ7veQ1scNgs5J6K1YnW4.roa (hash: CptKWeu/KjIE3Xe0fo+dZtItTKDZJuUjeV7GErUniCg=) 11: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: YMiK1WJThlLvOBns9LjferAJO2+qXwXzHo5RIecIGLI=) 12: uibhPc4NbRy01honmhOVxxl-SbI.roa (hash: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ=) 13: utkmbyJ1-9TI5Iy29JQnzvwfdgw.roa (hash: MQitkqvZxc85BEfsLrabuKg5Cbpd+JVUjJLsFQDLJCQ=) 14: xxR8mx-20J_lo55Rh1660v5SUI4.roa (hash: 2Y9dBCwd98Bba/rHT3QIRjMGiqefSe3zB38HBIRd3qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 06:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:eb:c1:36:20:a2:c2:99:62:0b:b5:c7:84:21:9e:49:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Sep 29 06:01:43 2026 GMT Not After : Sep 30 06:01:43 2026 GMT Subject: CN=647d81c4b4e90e5f73dc16ca6ac65b061a487461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:9e:0a:a5:73:c5:35:13:a3:3a:f5:87:82: a2:30:61:47:e7:e6:f4:64:7d:a1:26:6f:29:b1:8e: 2e:10:0b:86:46:61:96:0f:6d:b0:1c:d9:7f:e8:ef: ca:c0:60:10:be:75:04:27:1d:43:1c:3b:92:1f:78: 81:88:3c:ff:62:60:52:0f:5b:8f:7e:f0:a4:bc:dd: 12:c8:37:2d:bf:cf:3b:3c:35:6c:79:19:15:14:19: b8:b6:bc:d7:83:82:50:e3:60:f2:89:bd:41:ba:ec: d0:4f:ff:71:b2:36:8e:ab:4c:28:d2:90:ad:0a:43: 56:3b:3e:a6:50:84:9f:28:b2:24:a6:44:83:db:f5: 39:cc:56:7d:e3:e6:90:79:93:1b:98:45:e0:ee:91: ed:97:42:c5:14:f9:af:af:96:92:2e:8a:fa:68:a3: bc:05:c2:05:47:5d:a4:f0:0d:09:50:0a:57:2f:bb: 7c:04:50:dd:be:a5:33:d2:f2:21:f3:c7:3b:1a:62: a6:f7:87:08:05:ca:92:58:ff:03:ee:dd:c3:1f:b6: c8:6d:1c:f2:93:d4:34:10:30:03:4c:2f:ca:10:0d: f4:22:8b:14:22:1e:02:e7:fd:5c:8f:ce:ef:10:77: 7a:35:ae:a8:66:e3:98:6a:f3:5a:01:10:4b:04:a8: 6c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7D:81:C4:B4:E9:0E:5F:73:DC:16:CA:6A:C6:5B:06:1A:48:74:61 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:86:e2:e7:29:8a:bc:18:bf:5c:48:7a:58:af:79:fd:9a:a9: dc:9e:a7:4d:3c:f3:3e:e0:ca:92:b2:bc:4a:4c:3d:3a:85:56: 1b:b7:3f:b0:50:d0:ce:25:6b:a1:dc:96:82:73:ea:49:c3:a8: 5c:cc:68:44:21:bb:1d:41:45:2b:67:7c:49:43:85:9f:13:90: 9d:ec:78:88:fb:85:ec:a8:bc:f8:29:76:7e:a3:64:41:18:97: 1f:17:7e:65:50:df:fa:36:01:33:68:68:a6:8d:bf:f0:f3:e3: f2:18:a4:50:a1:f5:2b:b5:b7:40:eb:b5:3d:bc:55:58:50:e7: cd:5c:d7:12:22:51:84:09:b4:64:72:e3:bb:91:17:28:87:0a: 09:ed:39:55:fd:29:03:42:d6:86:90:9e:aa:d4:7e:93:be:ab: 6c:b7:e2:63:28:f5:aa:01:0a:ad:b6:e2:89:b5:b9:bb:63:08: 83:ba:38:33:3f:7d:f5:7d:d2:c8:a0:61:6d:16:fb:64:4c:aa: 9a:3e:7a:e0:ca:aa:17:5a:ee:ea:43:29:5a:e3:15:3c:bb:92: be:62:f3:da:be:07:1d:a9:e0:0a:07:51:07:2f:67:c4:88:b0: 84:b2:ea:1f:a9:63:d3:f0:21:b8:f1:f8:14:f4:13:a4:bd:47: 1e:c8:0f:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDrwTYgosKZYgu1x4QhnkmwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwOTI5MDYwMTQzWhcNMjYwOTMwMDYwMTQzWjAzMTEwLwYDVQQD Eyg2NDdkODFjNGI0ZTkwZTVmNzNkYzE2Y2E2YWM2NWIwNjFhNDg3NDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6KeCqVzxTUTozr1h4KiMGFH5+b0 ZH2hJm8psY4uEAuGRmGWD22wHNl/6O/KwGAQvnUEJx1DHDuSH3iBiDz/YmBSD1uP fvCkvN0SyDctv887PDVseRkVFBm4trzXg4JQ42Dyib1BuuzQT/9xsjaOq0wo0pCt CkNWOz6mUISfKLIkpkSD2/U5zFZ94+aQeZMbmEXg7pHtl0LFFPmvr5aSLor6aKO8 BcIFR12k8A0JUApXL7t8BFDdvqUz0vIh88c7GmKm94cIBcqSWP8D7t3DH7bIbRzy k9Q0EDADTC/KEA30IosUIh4C5/1cj87vEHd6Na6oZuOYavNaARBLBKhsMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGR9gcS06Q5fc9wWymrGWwYaSHRhMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4bi5ymK vBi/XEh6WK95/Zqp3J6nTTzzPuDKkrK8Skw9OoVWG7c/sFDQziVrodyWgnPqScOo XMxoRCG7HUFFK2d8SUOFnxOQnex4iPuF7Ki8+Cl2fqNkQRiXHxd+ZVDf+jYBM2ho po2/8PPj8hikUKH1K7W3QOu1PbxVWFDnzVzXEiJRhAm0ZHLju5EXKIcKCe05Vf0p A0LWhpCeqtR+k76rbLfiYyj1qgEKrbbiibW5u2MIg7o4Mz999X3SyKBhbRb7ZEyq mj564MqqF1ru6kMpWuMVPLuSvmLz2r4HHangCgdRBy9nxIiwhLLqH6lj0/AhuPH4 FPQTpL1HHsgPqA== -----END CERTIFICATE-----Generated at Tue Sep 29 17:12:55 2026 by rpki-client