$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: cgJ2STVZJIDqLTqP560EIMHNt4RP67tjOkMXODeXxDM= Subject key identifier: B1:75:40:49:E9:37:B5:31:3F:26:06:C3:EB:0F:EB:59:5D:A5:9D:45 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 01A1114E4307238B87D734F5D1211B9E467D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0C0A Signing time: Tue 06 Oct 2026 13:01:44 +0000 Manifest this update: Tue 06 Oct 2026 13:01:44 +0000 Manifest next update: Wed 07 Oct 2026 13:01:44 +0000 Files and hashes: 1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=) 2: 6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa (hash: z38nmLbA27NPlhWOJNNoq+Tpqv3KWZDwtJ61CNlRP7U=) 3: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=) 4: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=) 5: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=) 6: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=) 7: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=) 8: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: iZhJAtV9yiFFF4hwK1W8G8stBkzFy4KXvypYu823dLA=) 9: X-k71aDoZWtFtR_cnu9r97seWXY.asa (hash: lw8Nl/kqTmv0YBXcCPnKH/oG1mGI+Wcg8DdG5SlWra4=) 10: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=) 11: ky6aEM3QS8sYnRUJTuZ6SDwhAAg.roa (hash: fxV90Eu9cbxWk8vMXSQhqbwJr0KJjyMYtXo9QWz1xhA=) 12: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=) 13: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=) 14: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 13:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:11:4e:43:07:23:8b:87:d7:34:f5:d1:21:1b:9e:46:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Oct 6 13:01:44 2026 GMT Not After : Oct 7 13:01:44 2026 GMT Subject: CN=b1754049e937b5313f2606c3eb0feb595da59d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9e:2d:d9:a3:df:28:ae:c1:0d:45:a4:ac:e5: 4f:ef:2b:7b:44:e6:cd:6d:ab:e7:99:c6:25:f7:3c: aa:f1:e9:44:0b:66:91:59:9f:73:4c:40:d8:1a:a8: 51:ce:86:67:67:33:25:9d:26:f5:64:65:28:ab:16: 71:6f:a8:82:51:9d:84:20:85:ba:09:63:8e:51:9b: cf:44:6e:3f:2f:03:8a:f1:3b:4b:0f:06:ec:3e:e0: 6c:af:3a:71:e1:8e:34:b3:dd:65:e7:ea:a6:3e:93: 05:2a:d9:b2:c9:79:df:fe:34:86:5b:2a:16:e3:3d: f2:86:4e:08:ee:e5:e2:78:6a:26:6e:bb:2d:fe:b3: cc:51:29:87:03:b9:d2:0d:f9:19:c1:2a:0a:34:4d: 01:c2:00:b9:27:d9:19:5b:8c:73:32:72:d7:37:1a: dc:ed:c7:c4:a5:c0:c3:1d:c4:90:36:71:45:51:63: e9:43:91:1e:82:32:9f:cd:11:b0:d0:f6:00:ef:34: fe:20:4d:95:f1:1f:d7:e2:1b:d2:93:f1:81:fb:bd: 35:ae:a3:a1:f1:98:81:3c:0a:0b:c0:8f:a2:b4:bd: 50:13:18:62:a2:a5:95:fd:b6:bf:bb:b5:3b:03:a3: f2:da:bd:b2:7d:17:67:9f:86:fd:a1:17:19:a1:7b: 17:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:75:40:49:E9:37:B5:31:3F:26:06:C3:EB:0F:EB:59:5D:A5:9D:45 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c1:5c:64:1e:a0:0f:dc:1f:59:23:e7:69:f4:bb:f5:41:e7: 73:bf:24:94:3f:94:1c:69:68:c2:b8:51:b9:50:99:e0:6a:d3: ad:ca:02:e0:24:1d:a2:a9:e4:18:94:c1:38:ec:69:68:c6:82: 28:8b:44:66:5f:12:be:a5:51:df:d7:04:db:de:40:96:32:20: 51:33:ef:aa:ac:d2:50:b1:35:7e:9f:fd:34:7f:50:e4:d7:84: ca:38:08:06:03:fd:0c:ac:00:be:4d:19:c9:fb:55:0f:cd:4d: 14:78:b3:45:24:2b:5b:2d:70:21:99:76:91:f6:f3:39:20:3b: 64:9e:10:44:5f:bf:f3:24:7b:b7:1f:ca:62:61:2f:3f:14:4b: 9e:b1:b3:e5:96:6a:81:f5:73:51:9e:33:78:3b:a9:ec:aa:4d: 10:ff:bb:58:8e:eb:b3:3f:35:2e:43:81:c7:28:b1:ed:2d:d1: 43:ef:37:fb:6e:16:82:df:5c:7e:f0:09:2a:f5:c3:e8:4a:cf: e8:e0:cf:a7:1a:31:7e:34:40:4b:ec:d6:d4:be:32:e9:c1:43: cf:1f:f4:1d:35:d3:07:1a:38:c2:84:bc:fd:36:3e:ec:23:44: 25:a3:6a:b4:1c:7c:a8:5e:89:00:6e:1d:38:ca:ef:63:08:63: fe:75:ab:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaERTkMHI4uH1zT10SEbnkZ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYxMDA2MTMwMTQ0WhcNMjYxMDA3MTMwMTQ0WjAzMTEwLwYDVQQD EyhiMTc1NDA0OWU5MzdiNTMxM2YyNjA2YzNlYjBmZWI1OTVkYTU5ZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ4t2aPfKK7BDUWkrOVP7yt7RObN bavnmcYl9zyq8elEC2aRWZ9zTEDYGqhRzoZnZzMlnSb1ZGUoqxZxb6iCUZ2EIIW6 CWOOUZvPRG4/LwOK8TtLDwbsPuBsrzpx4Y40s91l5+qmPpMFKtmyyXnf/jSGWyoW 4z3yhk4I7uXieGombrst/rPMUSmHA7nSDfkZwSoKNE0BwgC5J9kZW4xzMnLXNxrc 7cfEpcDDHcSQNnFFUWPpQ5EegjKfzRGw0PYA7zT+IE2V8R/X4hvSk/GB+701rqOh 8ZiBPAoLwI+itL1QExhioqWV/ba/u7U7A6Py2r2yfRdnn4b9oRcZoXsXzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLF1QEnpN7UxPyYGw+sP61ldpZ1FMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecFcZB6g D9wfWSPnafS79UHnc78klD+UHGlowrhRuVCZ4GrTrcoC4CQdoqnkGJTBOOxpaMaC KItEZl8SvqVR39cE295AljIgUTPvqqzSULE1fp/9NH9Q5NeEyjgIBgP9DKwAvk0Z yftVD81NFHizRSQrWy1wIZl2kfbzOSA7ZJ4QRF+/8yR7tx/KYmEvPxRLnrGz5ZZq gfVzUZ4zeDup7KpNEP+7WI7rsz81LkOBxyix7S3RQ+83+24Wgt9cfvAJKvXD6ErP 6ODPpxoxfjRAS+zW1L4y6cFDzx/0HTXTBxo4woS8/TY+7CNEJaNqtBx8qF6JAG4d OMrvYwhj/nWrsQ== -----END CERTIFICATE-----Generated at Tue Oct 6 21:56:40 2026 by rpki-client