$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: uQcesYoOjOw8I0hDClDN5DyCJ3BEFKWKhm2d5pcqrNY= Subject key identifier: D5:EA:D5:5B:85:DD:9F:88:04:F2:6B:C0:49:59:91:C7:F5:A9:4F:48 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 01A02544C2639A37A8413C0D69258A49E08F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0B8F Signing time: Fri 21 Aug 2026 17:00:57 +0000 Manifest this update: Fri 21 Aug 2026 17:00:57 +0000 Manifest next update: Sat 22 Aug 2026 17:00:57 +0000 Files and hashes: 1: 1Sr3XlRMdOOTtgFuWxYuksL0q1Q.roa (hash: B5Hi1pSq4zSPtgjd0H6RjrLTOi+xC4NeoTHBHA0Y6V0=) 2: 6wzIbn6Z7lp5PtbDLTxG-zmILxY.asa (hash: z38nmLbA27NPlhWOJNNoq+Tpqv3KWZDwtJ61CNlRP7U=) 3: E0LjC16RPCZ5hpD4WFdDxF5LlHE.roa (hash: RyjtviV2ZAdeYx+bfRs7MHOlCOY1wdBP3jEg0sH70hY=) 4: E9lSvPkTyfehQZ_95ZGhVa_8x8M.roa (hash: WUentB+d3Lz9YdSmzLFH2jcG2u/aMY3AJfcL/ardcY0=) 5: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (hash: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc=) 6: HMA2ZtQEUUESlekRi4gag5MnMYg.roa (hash: WXWR7w4pd3KlcqRos9CfTAAkxNUchXhAITT3lQuU4qA=) 7: JsvAKxpvJqyb8yAFTKDjRveqxBs.roa (hash: qe4UhW0wRdEmM6o2xgOckG1A6kOvtRM6+eGMVxUmOIo=) 8: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: Wsh+N2N6AA8Wp5sthCBUZo8lpdcrtDdkia1XodSeDbA=) 9: X-k71aDoZWtFtR_cnu9r97seWXY.asa (hash: lw8Nl/kqTmv0YBXcCPnKH/oG1mGI+Wcg8DdG5SlWra4=) 10: eXtaXlJWZH23ll7knRXRdkzsGvg.roa (hash: HywxRLnxQvioIPz9BGbNrZiBKbYiXQ2ViXRAoEo2E+Q=) 11: mJUpivoVuXF15nMJ-kikrEJbyCo.roa (hash: 8m5Jcr8sW+1ubMqm2cWbO+Jv8v5uXQWJ9RSY0KaT5FU=) 12: yUI0ol2D7NKC0wmPoOYbnSO0OAU.roa (hash: VrfZRHbwNUuJCG6SkR3/uzrGqb4L2R0YFXg3gGN6hno=) 13: zZg0Csl_RNDwZdyAxjZIHwPI4Ko.roa (hash: +iKsjZKuaFbNprJ0yY57zMqSiVyavttDTITQNXHNItw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Aug 2026 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:25:44:c2:63:9a:37:a8:41:3c:0d:69:25:8a:49:e0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Aug 21 17:00:57 2026 GMT Not After : Aug 22 17:00:57 2026 GMT Subject: CN=d5ead55b85dd9f8804f26bc0495991c7f5a94f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:50:62:d8:ca:25:8b:3d:a4:23:4a:71:e0:78: 2a:ce:86:6a:58:b9:97:7b:d9:3e:4f:16:06:11:d4: cc:2d:d5:4a:a5:aa:d9:ad:05:11:b8:25:83:03:47: b1:11:1e:5b:fd:36:8f:49:88:a3:7d:56:f8:16:b0: 3d:3b:85:b8:03:b8:ca:2c:9d:59:c1:24:8c:68:2b: 62:93:04:fd:fe:46:1e:14:00:a4:5c:66:8d:5d:95: a0:26:30:86:4a:0d:cf:7e:94:e9:b7:0a:8f:98:01: 48:22:af:f1:1e:87:7c:2a:0b:8f:b7:b4:46:96:15: ec:7b:4e:e0:58:66:6e:47:fb:35:53:86:13:9e:ff: 59:e9:fb:b3:d2:23:cc:ae:53:bb:b8:94:b5:35:59: 4d:94:53:84:4d:8b:87:d4:a3:ab:6e:04:31:2c:19: bb:c9:f5:47:da:a3:6a:0f:ad:72:a7:b2:e9:10:58: a6:1f:bc:b6:ee:fc:16:1f:c7:7f:58:e1:fc:01:b1: be:8a:c3:7e:31:19:9d:7e:3e:41:e0:de:51:77:6e: a5:db:3a:3e:fa:75:1b:34:15:d6:38:f6:59:14:67: a7:d1:cb:3a:c9:92:7c:47:69:aa:1e:6b:e3:3e:35: a4:57:a9:77:08:aa:a1:94:e4:56:f5:74:c2:49:0e: 6c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EA:D5:5B:85:DD:9F:88:04:F2:6B:C0:49:59:91:C7:F5:A9:4F:48 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:1b:25:3a:c9:48:c8:76:d9:b2:dc:3e:c8:76:89:4f:af:b7: 0a:18:cf:90:b3:25:dc:d9:f3:77:c5:89:4b:c7:92:6d:bb:ab: cc:a1:f9:54:94:79:4e:da:9e:61:e7:a5:6f:d2:76:ed:2b:61: b9:ba:b1:9b:4f:e0:d4:3e:b1:9e:dc:e3:05:73:d0:b1:e8:e2: 93:95:8d:af:11:ed:bb:17:71:8e:f4:2e:0b:32:d0:a1:c0:cc: cf:81:ba:68:87:a7:1a:29:8d:fc:f9:72:3a:be:1b:64:97:63: d7:f2:3a:e3:42:22:e0:3b:22:c6:45:7a:a5:ee:c7:b6:e8:8e: e8:ab:21:de:b0:64:c9:fd:f4:6a:ae:28:2c:2d:3c:16:66:5b: ed:2d:b1:96:e9:80:18:94:a1:81:79:b8:be:3b:64:ea:77:0e: 98:00:03:be:a7:bb:13:be:55:68:18:c1:f6:34:8f:ca:c3:f9: cb:13:97:4f:7f:1b:f5:66:1f:40:27:26:b3:15:ef:bf:0b:e2: 01:fe:1e:0c:d5:8a:9b:dc:50:70:ef:a5:ff:02:72:ad:be:4a: 39:cb:53:1e:59:e1:5a:64:62:8a:10:77:4f:a2:aa:5a:d1:64: cf:53:da:7f:89:63:95:95:07:6c:96:78:ad:ce:10:09:ce:dc: e6:59:04:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAlRMJjmjeoQTwNaSWKSeCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwODIxMTcwMDU3WhcNMjYwODIyMTcwMDU3WjAzMTEwLwYDVQQD EyhkNWVhZDU1Yjg1ZGQ5Zjg4MDRmMjZiYzA0OTU5OTFjN2Y1YTk0ZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VBi2Moliz2kI0px4HgqzoZqWLmX e9k+TxYGEdTMLdVKparZrQURuCWDA0exER5b/TaPSYijfVb4FrA9O4W4A7jKLJ1Z wSSMaCtikwT9/kYeFACkXGaNXZWgJjCGSg3PfpTptwqPmAFIIq/xHod8KguPt7RG lhXse07gWGZuR/s1U4YTnv9Z6fuz0iPMrlO7uJS1NVlNlFOETYuH1KOrbgQxLBm7 yfVH2qNqD61yp7LpEFimH7y27vwWH8d/WOH8AbG+isN+MRmdfj5B4N5Rd26l2zo+ +nUbNBXWOPZZFGen0cs6yZJ8R2mqHmvjPjWkV6l3CKqhlORW9XTCSQ5stQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXq1VuF3Z+IBPJrwElZkcf1qU9IMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBslOslI yHbZstw+yHaJT6+3ChjPkLMl3Nnzd8WJS8eSbburzKH5VJR5TtqeYeelb9J27Sth ubqxm0/g1D6xntzjBXPQsejik5WNrxHtuxdxjvQuCzLQocDMz4G6aIenGimN/Ply Or4bZJdj1/I640Ii4DsixkV6pe7HtuiO6Ksh3rBkyf30aq4oLC08FmZb7S2xlumA GJShgXm4vjtk6ncOmAADvqe7E75VaBjB9jSPysP5yxOXT38b9WYfQCcmsxXvvwvi Af4eDNWKm9xQcO+l/wJyrb5KOctTHlnhWmRiihB3T6KqWtFkz1Paf4ljlZUHbJZ4 rc4QCc7c5lkEzg== -----END CERTIFICATE-----Generated at Fri Aug 21 23:09:57 2026 by rpki-client