$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: DpIETzciQHVjIatTzquZjh3z1pVE9LajsLgJ/5Pgb6w= Subject key identifier: 04:C3:18:47:87:A3:7E:75:4C:F5:8B:78:9E:63:93:36:7C:FE:C5:89 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 01A0E2BDF81BA907AA2C0D45B84B5A067AF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1A8D Signing time: Sun 27 Sep 2026 12:01:35 +0000 Manifest this update: Sun 27 Sep 2026 12:01:35 +0000 Manifest next update: Mon 28 Sep 2026 12:01:35 +0000 Files and hashes: 1: 7MWrSKdEmt_KvsVn1wCa40GQvZo.roa (hash: GfjKe1qpCh2floSl6pe5xQjH6bPFI/79DRvpHWVwdEE=) 2: 9cNKQWK3wk1irmE7oa8T4PR8mc0.roa (hash: u5fJLnWvAGQzCGewqpUpjr9+ttOL7JnpgPLBPCMOWKk=) 3: GAkPYv8UHYs_EoZPb4jWXtDDAC0.roa (hash: lnLCFUL9tM4n3iWBg5iwZCi3PtIQMScXWDpeh/kO248=) 4: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 5: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: tfmon5IJUCUCEhN38p6n7NSc+0V7nrSr6JTwRmQlXGw=) 6: a1bVO0ckGyR5RAdUKb14doqmY1Y.roa (hash: DiKvMb/S5/tIEx2dVRhu5wKcRs0L0R0Ljnjm6cmc2r0=) 7: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 8: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 9: ijbiJD7TGtArmmQdogwgJNz_Iss.roa (hash: pWVbgHKQTvi3IHOIcmkXTEU92wiUS9n0t7V8IM2/M4U=) 10: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 11: nlzsv5_4ztHk87YIpIDNp8kA-LY.roa (hash: I+evjHY278SDlMs7AgnRI/W35THgRR/EtPMQ/T244gg=) 12: sZCbmYQyfGpH4iaOrLx2v2yCTAg.roa (hash: ZUhSIpiNJj1ft9rDQsYCHKV1UDkkyNZJvSyHieA9rEU=) 13: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 14: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 15: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 16: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 10:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e2:bd:f8:1b:a9:07:aa:2c:0d:45:b8:4b:5a:06:7a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Sep 27 12:01:35 2026 GMT Not After : Sep 28 12:01:35 2026 GMT Subject: CN=04c3184787a37e754cf58b789e6393367cfec589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:33:b0:75:33:ad:f3:fe:d5:08:21:f8:96:4c: 05:93:d6:38:be:ce:ac:94:8f:d1:22:c2:b1:b7:b7: c2:51:84:da:79:e6:e5:f7:d1:82:72:56:7b:35:cb: 13:9d:67:13:ad:a8:77:63:a0:33:52:71:ad:45:bb: 27:1c:40:87:49:eb:a9:44:6c:3e:56:ef:ce:0a:b1: a8:3e:79:b5:21:0b:a6:84:9e:23:74:07:c6:be:f4: ce:81:b2:9d:a3:fc:80:f9:b8:45:6b:62:5a:f6:02: 00:2b:bb:6b:e0:31:93:67:77:ed:c5:5d:18:89:40: 03:38:ac:aa:75:77:43:58:af:12:28:e0:8e:c6:b2: 2c:db:da:9a:84:8c:29:b7:ce:95:b3:d0:3f:a1:8e: 43:94:17:e4:16:e0:a2:d7:f7:09:4b:80:07:1b:de: f4:0f:87:70:df:26:b1:c6:d1:5b:26:16:10:87:b2: 1a:e4:1c:55:aa:88:ef:9f:84:c1:d8:b7:8c:42:e6: 1f:e1:e6:fa:59:75:85:67:b7:18:0e:31:6f:24:a4: 7c:88:ca:9d:e9:1a:2c:38:78:87:0d:04:92:67:85: 64:0f:e9:75:ef:74:64:dd:ec:76:38:cf:b6:94:8d: 7f:bb:34:20:51:25:82:c4:b2:41:80:f7:5f:a5:2a: ca:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C3:18:47:87:A3:7E:75:4C:F5:8B:78:9E:63:93:36:7C:FE:C5:89 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d9:78:24:a8:d0:8c:26:b6:c3:f0:f3:66:12:3d:f5:26:6b: 90:00:96:e7:0c:c9:78:74:29:af:7d:90:18:bb:00:51:98:e6: 76:5e:fb:fe:6e:c0:de:92:3a:9f:bf:93:33:20:84:bd:e2:fb: f2:7e:57:e3:da:94:47:87:fd:c6:28:c5:2a:23:72:58:7d:c0: 34:d7:28:2c:e8:02:6f:5b:e4:8c:a3:40:43:a2:7d:72:ec:50: a0:ab:0a:f5:89:56:c7:7a:4d:40:6d:04:93:77:b3:ae:5f:5f: 94:36:2c:71:56:9f:98:b3:b4:f7:1a:c0:f8:1a:3b:25:f6:66: 84:c4:9d:71:9a:51:73:f9:66:1c:dd:a8:5a:d0:e3:ed:79:8c: 4c:ed:9c:e2:60:16:39:16:33:39:cd:9e:10:c3:93:00:c7:d5: 49:69:f8:9f:f6:17:10:85:a9:70:3c:e0:3f:d9:b5:94:c2:41: cf:7b:cd:05:9a:e6:28:80:ee:8b:4e:ae:4c:64:2f:ff:86:16: ca:66:8c:ac:61:80:a1:7e:14:9c:47:c0:2a:63:74:a0:5f:e3: db:2a:d1:f6:7e:7f:17:99:72:f3:92:6f:8f:20:93:c7:e4:1b: 04:6b:f1:7d:e3:4f:aa:c6:3c:cd:bb:e0:1c:dd:79:05:53:d3: 00:81:a2:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDivfgbqQeqLA1FuEtaBnrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwOTI3MTIwMTM1WhcNMjYwOTI4MTIwMTM1WjAzMTEwLwYDVQQD EygwNGMzMTg0Nzg3YTM3ZTc1NGNmNThiNzg5ZTYzOTMzNjdjZmVjNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzOwdTOt8/7VCCH4lkwFk9Y4vs6s lI/RIsKxt7fCUYTaeebl99GCclZ7NcsTnWcTrah3Y6AzUnGtRbsnHECHSeupRGw+ Vu/OCrGoPnm1IQumhJ4jdAfGvvTOgbKdo/yA+bhFa2Ja9gIAK7tr4DGTZ3ftxV0Y iUADOKyqdXdDWK8SKOCOxrIs29qahIwpt86Vs9A/oY5DlBfkFuCi1/cJS4AHG970 D4dw3yaxxtFbJhYQh7Ia5BxVqojvn4TB2LeMQuYf4eb6WXWFZ7cYDjFvJKR8iMqd 6RosOHiHDQSSZ4VkD+l173Rk3ex2OM+2lI1/uzQgUSWCxLJBgPdfpSrKnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATDGEeHo351TPWLeJ5jkzZ8/sWJMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtl4JKjQ jCa2w/DzZhI99SZrkACW5wzJeHQpr32QGLsAUZjmdl77/m7A3pI6n7+TMyCEveL7 8n5X49qUR4f9xijFKiNyWH3ANNcoLOgCb1vkjKNAQ6J9cuxQoKsK9YlWx3pNQG0E k3ezrl9flDYscVafmLO09xrA+Bo7JfZmhMSdcZpRc/lmHN2oWtDj7XmMTO2c4mAW ORYzOc2eEMOTAMfVSWn4n/YXEIWpcDzgP9m1lMJBz3vNBZrmKIDui06uTGQv/4YW ymaMrGGAoX4UnEfAKmN0oF/j2yrR9n5/F5ly85JvjyCTx+QbBGvxfeNPqsY8zbvg HN15BVPTAIGiRA== -----END CERTIFICATE-----Generated at Sun Sep 27 19:12:27 2026 by rpki-client