$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft File: Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft (raw, json) Hash identifier: dV+EjBTW+AcF+eFDX4oGdahQxBRhUr0o8Exr8tDYNKo= Subject key identifier: 7E:9D:65:BB:33:3F:45:56:57:40:7B:55:CD:13:C6:A2:47:9A:52:66 Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09 Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09 Certificate serial: 019D2DE12633AC6B91FA2801FA7548235730 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft Manifest number: 013D Signing time: Fri 27 Mar 2026 06:00:23 +0000 Manifest this update: Fri 27 Mar 2026 06:00:23 +0000 Manifest next update: Sat 28 Mar 2026 06:00:23 +0000 Files and hashes: 1: 7bUBJxfta8YWGQeRb5fl37Yaaxo.roa (hash: XQf9kxSl4sRFbthfZQdIsbNBSDsU9+N1iQ8oM1kavXM=) 2: 8Wa9_vPZrMT6pIcho3_TYjVtqk8.roa (hash: h7V44SoFq4shpd3Oi+k/Fm8gG7BNoMR2fp5YWnkKrKs=) 3: 8fi5iM7BFQj_Bt75OCC-P5CN6zk.roa (hash: Bsmzr3yLe5P1CEDMP39xK9eBS/Zhsocr2KSbPcvXVlc=) 4: 9IXwTzzllCJjNWjosEw9IqDjZZ4.roa (hash: qwbUB4pGtNvNetLT365Cb9mkywkHbHRPACK7i2qfcIU=) 5: 9anljo1u38WRWdyUlNqYgyIsWkc.roa (hash: njj9lvf50nQWay0CSc0j5wmaZyV9ulWW8W8UXJFVS5Y=) 6: 9uJevseWtHq9WwkYBlyBhrsiipI.roa (hash: XWHVmAdhqAX/5wURmMpdbLR+UcMWugrpYTC02rWpXjA=) 7: B7uJFcLqc7Xu9qJ8s4tqACmUV88.roa (hash: izOIKuTGDVS/wOGTAaBbH31pYgKeWIaPte5X/+hKw+s=) 8: D8MTwdqOGoqiadxznmbc58GGyCw.roa (hash: hWg4hQ21GnKD+Kub0XusadCxYjYanrHdJMGDk68zWQI=) 9: E1p-EiP-K3W7sBZ2XkVP8qQgcZA.roa (hash: xLwNX/y+vwTWgRCupLXSnIneiG+nmEB41RZKrsckRT8=) 10: E_XsrZw3WqGMs5VmPLVxGcnlMCY.roa (hash: 2D+oUitD46TfrbaoAd0xRO/fd4Hsgz+E1RH5vXR/vSA=) 11: FmZg-bW3hE1ru2pRCONVrvD3Qy8.roa (hash: 01XBXhI4ohSZEUimcwiN6YwEt7OYVjfuP0CIc0/Aghs=) 12: Ipq3DVKETg8P3AR2d3v53XRHP8E.roa (hash: OexlMNg1bkCu+ze+kDH7HWalEhLxpKBrfkNHr92XQtw=) 13: Mcb7zLrwq-IZQkpW29I1rFsQ0Pw.roa (hash: pUyyiQNHGkW4PQD5zR5m+kJdH4T6tnzkxl5t96JY/rY=) 14: NzvJC_KMleGhtmNpsqKr65nFwKw.roa (hash: xdkY4pIv1Ov6lhrcogUMNsybPzhiBPJCRk9I0apg674=) 15: PPR9iY6e7wB8dBG4hPjEf_bXgrE.roa (hash: rVsXHJx7s3hFoA+dVNyfw/DyXL6OOCw5L+m6ouelVRM=) 16: RJf-yUIMAhTeHpw5w0dxvSvA-T0.roa (hash: ByePBlZXfscW9XsJ3W1m30RSO4fXTm44BH7JPgnXxLw=) 17: Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl (hash: kQAGcSCSFDRuC34pkDopogqs6n8jP7PQw5sOeucdtnI=) 18: Ur8FLPafl7NLCGJMZdM86uXJeOE.roa (hash: XYYsdiGwo/GgWz447XdpK9VNCxb25m7GWU+Jc4A5wfc=) 19: WlHGR7Ev-NUqGa5lly6f0ty8jbU.roa (hash: 3wdvSOUkCXlAdB149RZu9MzpB/eNTTakMeLIkJ4Gg0A=) 20: Z3tFdufgPl6EBqM83ZZTUlCsxeU.roa (hash: bg7JnMjL5ADxpVlyak0KcCSpMSEHMIGLxB84iGem6Ng=) 21: ZediFr-kiNcab3zFz4eXtCdrDDY.roa (hash: ADnthEU+Brh9wA//ELyNS+LJVvpzl9jC3U47kC784aw=) 22: Zy4u8OQmpS--VuyxpTtEdgQj7u8.roa (hash: 3tm5LplJNsUwv6QzEI2j7o9juIR/DbsW3Y8t7c94ZKY=) 23: bLqAv8qJ1yamxnSzN-ZJySLZiH4.roa (hash: X+3tvGzRayA2xyP8S1hTpfCmnILZBZQ0R1nzlin9oHw=) 24: bg5OuQwu_G2wxecDYapAVTrKZSU.roa (hash: ggkhRBAvbvqvsvnY0841/FOrSyw9xDw7h9YsiZA8oaM=) 25: eLeqe7_YpZFz_8QwJKi3Unc8HqQ.roa (hash: US9Oa3u4UtqaGF2sA8nZWPbipyXsj6nuL34f5I+dpv0=) 26: erAqQdv4ek0okgzNUjEJUbHDl-M.roa (hash: UjC8V5nT2fjyaHmBG/uU01LBvVikDDo0eoyOrTbxKr4=) 27: fZyAK4-7mQSEWnWBipSmG29XhLg.roa (hash: VyEh3g7KQaKsqvuCH4j2Vw0hondgOxxQ+lgKbocRpTM=) 28: gQWGyIZoZwBBRCaHOpnA4s1PFK0.roa (hash: PsU55lQjR+ZPtUxXH0qMW6J5RZfPVGGea/JdpTz/Gas=) 29: kNLGNQYYVKNNtz4NPXzfNfaO2yA.roa (hash: VJmnS5B5bfBOwQGEw3DwSY9zU3wS19eOtw0ATx1JGzk=) 30: l4lKElWg8jkb3S2y8G5HtpLv_8E.roa (hash: eAlM3UbqMidzWRUNV68Iw9JlOfYfEzuWB2gx059CUzU=) 31: mbBTqwtKUVY2Xjg363e72K-RKfE.roa (hash: b5Y7+f0OIKBDytvrnxS0YgZNpnf7Br1yoO+WvW+HE8w=) 32: n_b4kM7Nf4_ETJGD5sv_9At60LM.roa (hash: /RycuISVv9R6CTevSvfxxs9xKu6q4LT2+Ms2DmWVV6Q=) 33: rxFdQ8wHm79-KwtfCQQduhZ5MX4.roa (hash: 4fE5VLNDidIj7JkBBuOBn6AqwpO9aA+OzOMLJ27mh8o=) 34: x7UH7ZJrApI32sK581_akJQW4t8.roa (hash: 7fHtqcAW0zaDA/MAx+F9yZB2mEvSMVFZMHyQwzDUnVo=) 35: zKqnquuEn-McTEol5oGnIhYAmy0.roa (hash: oCtvyo+fDE9JdHJIxhwHi/+Z9/aIRkF4L/I9VIjuKP0=) 36: zocALgimkWCVbzszBR2uphEiBtI.roa (hash: 4ANr/Owql6aOh54xvEE6sr/jfbMHNepGi5TVeFJshk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2d:e1:26:33:ac:6b:91:fa:28:01:fa:75:48:23:57:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09 Validity Not Before: Mar 27 06:00:23 2026 GMT Not After : Mar 28 06:00:23 2026 GMT Subject: CN=7e9d65bb333f455657407b55cd13c6a2479a5266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:25:58:42:e9:47:39:70:3e:45:81:e9:92:c0: 65:18:0d:0a:df:86:75:dc:b6:d5:03:1d:25:1d:24: 35:49:8d:48:b0:a1:9b:30:80:dc:5f:bc:7a:f8:7c: 31:7a:02:5b:6d:3f:09:46:21:02:b2:8f:a8:e1:d6: 43:62:4e:28:ed:dd:7b:27:3c:a5:a6:5e:87:03:be: 8b:de:cb:2d:fc:94:ed:cc:00:3e:3a:18:86:6b:ce: d0:a5:f4:36:b0:7e:87:52:2c:a3:a1:20:02:01:f9: d6:43:15:c6:21:d0:ba:c9:d8:69:12:a8:9b:54:c5: 04:77:bb:28:2d:48:8c:4c:78:a5:c6:a6:18:af:29: 90:80:6a:2c:0d:d4:56:39:1a:1d:3e:ae:f8:00:bd: 56:c1:79:36:29:ac:e2:2f:de:4b:b8:56:74:bb:34: b4:44:95:e0:60:ff:e0:05:71:d9:6a:3f:29:b5:aa: 49:c2:30:0a:7b:c8:fe:e5:98:54:c0:1f:69:1b:d0: 88:c7:18:18:05:5b:b2:3f:f5:e8:c8:10:70:70:d9: b9:1c:94:12:2a:ba:c3:ae:4d:ed:b6:88:d1:47:26: 43:07:c4:a3:b5:27:58:ae:cb:d4:e3:5f:53:4f:21: 3b:5d:f3:21:0a:c2:71:7c:53:b0:26:3a:12:b0:c3: d8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9D:65:BB:33:3F:45:56:57:40:7B:55:CD:13:C6:A2:47:9A:52:66 X509v3 Authority Key Identifier: keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b4:6b:e5:ed:2a:2d:94:dc:e0:de:b7:ec:71:50:16:1c:3e: 02:72:97:40:88:e6:e9:22:6b:bf:8a:67:f6:9e:f6:e8:77:46: bc:e3:f5:b9:81:0a:5c:f7:08:0e:98:19:c6:a2:fc:84:11:1b: 5e:9d:5a:97:b2:a2:68:95:79:d7:21:1b:fc:a1:59:1d:18:f3: aa:25:f8:3b:ab:96:8e:6a:85:2a:60:5b:c4:fd:8d:36:2e:71: e2:5f:d2:8e:1b:00:10:53:8f:8a:25:ee:d9:9c:ac:90:04:5a: d6:56:b1:c9:09:53:61:1d:2b:7f:0b:7c:84:48:47:40:2c:00: 75:a9:6e:a7:3f:96:1b:f0:30:ad:1a:45:5a:09:7b:00:0c:1b: 74:95:0d:1e:e0:17:76:26:11:87:24:4a:1d:b8:37:7d:52:86: ce:43:5f:d1:96:56:ca:8b:67:08:31:a4:a7:8e:27:9d:0c:8a: bc:e3:24:56:59:32:14:64:90:1b:8a:c9:eb:60:88:09:aa:32: 63:90:73:6a:11:12:62:a7:98:b8:38:a3:27:36:31:28:37:99: f8:95:49:34:24:2c:32:e7:71:85:1e:76:94:a7:3e:c1:a6:70: 31:cb:66:d5:7a:c1:6b:ab:61:a1:b2:9a:c4:73:c7:2d:ba:31: af:fd:60:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0t4SYzrGuR+igB+nVII1cwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1 MzBiMDkwHhcNMjYwMzI3MDYwMDIzWhcNMjYwMzI4MDYwMDIzWjAzMTEwLwYDVQQD Eyg3ZTlkNjViYjMzM2Y0NTU2NTc0MDdiNTVjZDEzYzZhMjQ3OWE1MjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SVYQulHOXA+RYHpksBlGA0K34Z1 3LbVAx0lHSQ1SY1IsKGbMIDcX7x6+HwxegJbbT8JRiECso+o4dZDYk4o7d17Jzyl pl6HA76L3sst/JTtzAA+OhiGa87QpfQ2sH6HUiyjoSACAfnWQxXGIdC6ydhpEqib VMUEd7soLUiMTHilxqYYrymQgGosDdRWORodPq74AL1WwXk2KaziL95LuFZ0uzS0 RJXgYP/gBXHZaj8ptapJwjAKe8j+5ZhUwB9pG9CIxxgYBVuyP/XoyBBwcNm5HJQS KrrDrk3ttojRRyZDB8SjtSdYrsvU419TTyE7XfMhCsJxfFOwJjoSsMPYiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6dZbszP0VWV0B7Vc0TxqJHmlJmMB8GA1UdIwQY MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt M2JiOGIwNzVkNjlmLzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbRr5e0q LZTc4N637HFQFhw+AnKXQIjm6SJrv4pn9p726HdGvOP1uYEKXPcIDpgZxqL8hBEb Xp1al7KiaJV51yEb/KFZHRjzqiX4O6uWjmqFKmBbxP2NNi5x4l/SjhsAEFOPiiXu 2ZyskARa1laxyQlTYR0rfwt8hEhHQCwAdalupz+WG/AwrRpFWgl7AAwbdJUNHuAX diYRhyRKHbg3fVKGzkNf0ZZWyotnCDGkp44nnQyKvOMkVlkyFGSQG4rJ62CICaoy Y5BzahESYqeYuDijJzYxKDeZ+JVJNCQsMudxhR52lKc+waZwMctm1XrBa6thobKa xHPHLboxr/1g5Q== -----END CERTIFICATE-----Generated at Fri Mar 27 10:40:40 2026 by rpki-client