$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: zuxbLX1VuzNZG1+KEjIZOp1loUcmFVgOtGUstpHdK7c= Subject key identifier: 28:E3:19:45:70:B3:26:E6:29:6B:0F:91:89:94:71:56:9C:3F:D0:5C Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019E1F7F59F23E944423554C36083BF06EC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1913 Signing time: Wed 13 May 2026 04:01:40 +0000 Manifest this update: Wed 13 May 2026 04:01:40 +0000 Manifest next update: Thu 14 May 2026 04:01:40 +0000 Files and hashes: 1: McQ1AOjlDwgZAqlNis7OMo30suU.roa (hash: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE=) 2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: qAZLxe2wf2lWsgsNquWhnJoV+qZSH13VCUhcCZ2wZb4=) 4: SPId_SWHbv84MaBpzxcBFitrFiA.roa (hash: fkjaLtVx/IVOE485FOawltfAwHKBTGzzIXUgCRCBDeg=) 5: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 6: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 7: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 8: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (hash: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY=) 9: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (hash: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0=) 10: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 11: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 12: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 13: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 04:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:7f:59:f2:3e:94:44:23:55:4c:36:08:3b:f0:6e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: May 13 04:01:40 2026 GMT Not After : May 14 04:01:40 2026 GMT Subject: CN=28e3194570b326e6296b0f91899471569c3fd05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:22:0b:f0:d0:1d:92:2c:76:14:5b:09:46: 0b:c2:86:f0:3e:46:a3:0b:00:b9:3e:64:20:fd:b3: bc:71:82:8b:06:e0:8c:fc:5c:e5:63:90:3f:7e:51: 34:cc:17:e5:98:5e:cd:a3:a0:77:a0:cd:7a:d3:dd: d2:32:61:bf:91:08:e6:9b:ca:6e:3b:79:66:68:7f: ce:68:2e:43:72:ce:07:36:0c:7b:47:a5:0e:48:bd: 29:ce:f0:ae:e8:48:ae:08:e2:7e:89:37:14:48:21: a4:32:b5:c8:14:97:04:1b:91:16:7e:c8:8a:1d:04: e3:39:e4:79:82:e9:2c:73:21:0d:6f:10:71:3c:0d: 88:6a:06:1b:4a:9d:9b:7d:cd:23:79:17:1c:3b:83: 22:51:0d:e9:76:7c:5f:26:2e:e1:12:54:bf:9c:88: 38:c7:a2:97:7a:a0:c5:f9:a2:01:a9:0e:18:9d:85: 30:57:cc:a2:d3:30:ef:ce:40:da:e1:9d:86:37:ff: 7b:cc:27:4b:a2:a5:84:88:97:85:a8:43:f0:63:06: 5e:11:79:b7:ed:55:5b:df:ad:93:73:68:c3:ee:ad: 58:4b:ca:03:90:59:d6:62:e8:0e:c2:62:34:37:f9: 78:7d:1d:2c:36:6a:a4:2b:6c:e0:f0:f3:8c:22:12: 7e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E3:19:45:70:B3:26:E6:29:6B:0F:91:89:94:71:56:9C:3F:D0:5C X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:56:f4:9f:c6:d4:b2:8f:8d:05:5e:e4:63:1e:78:ce:57:fe: 0f:cb:b1:b7:0c:f8:66:a6:a3:39:6b:45:d7:34:71:be:bd:2d: 3b:34:c9:07:17:90:3c:12:18:d4:26:96:53:fc:b3:08:f0:f9: 9e:9c:ff:f6:d9:98:6e:fe:6b:d9:b7:d6:6e:83:2b:38:1e:03: 89:2e:14:21:de:a6:2c:0c:39:0f:c8:66:99:cc:de:ab:e2:86: 7d:93:25:2c:c7:f6:ff:02:79:7b:a0:52:d9:0b:a0:a6:37:dd: 7f:c5:1a:59:1d:e7:74:37:63:a5:d5:f7:2d:31:8a:15:1d:d9: 1d:08:64:a9:1b:0a:51:c9:b7:4a:9e:52:52:a9:35:31:e0:54: 88:ca:81:e1:64:d9:88:1d:9c:f4:b7:71:34:e7:81:6f:a7:a2: 53:24:6d:44:fb:63:39:32:05:05:fa:cb:c9:84:86:66:1a:94: 20:c3:f7:ab:9b:d8:df:4e:0a:a7:1e:3c:16:86:92:3c:19:02: 70:6e:2c:20:1b:33:de:b0:ca:a9:9e:35:92:9e:6d:ff:6d:b1: 10:c4:88:95:08:07:41:5b:a5:72:4d:b0:17:d2:32:8f:6a:45: e9:88:29:62:5e:ce:1e:a3:d1:e0:b9:bf:23:c1:c5:04:88:e5: d5:52:12:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ff1nyPpREI1VMNgg78G7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwNTEzMDQwMTQwWhcNMjYwNTE0MDQwMTQwWjAzMTEwLwYDVQQD EygyOGUzMTk0NTcwYjMyNmU2Mjk2YjBmOTE4OTk0NzE1NjljM2ZkMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzwiC/DQHZIsdhRbCUYLwobwPkaj CwC5PmQg/bO8cYKLBuCM/FzlY5A/flE0zBflmF7No6B3oM16093SMmG/kQjmm8pu O3lmaH/OaC5Dcs4HNgx7R6UOSL0pzvCu6EiuCOJ+iTcUSCGkMrXIFJcEG5EWfsiK HQTjOeR5gukscyENbxBxPA2IagYbSp2bfc0jeRccO4MiUQ3pdnxfJi7hElS/nIg4 x6KXeqDF+aIBqQ4YnYUwV8yi0zDvzkDa4Z2GN/97zCdLoqWEiJeFqEPwYwZeEXm3 7VVb362Tc2jD7q1YS8oDkFnWYugOwmI0N/l4fR0sNmqkK2zg8POMIhJ+twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjjGUVwsybmKWsPkYmUcVacP9BcMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlb0n8bU so+NBV7kYx54zlf+D8uxtwz4ZqajOWtF1zRxvr0tOzTJBxeQPBIY1CaWU/yzCPD5 npz/9tmYbv5r2bfWboMrOB4DiS4UId6mLAw5D8hmmczeq+KGfZMlLMf2/wJ5e6BS 2Qugpjfdf8UaWR3ndDdjpdX3LTGKFR3ZHQhkqRsKUcm3Sp5SUqk1MeBUiMqB4WTZ iB2c9LdxNOeBb6eiUyRtRPtjOTIFBfrLyYSGZhqUIMP3q5vY304Kpx48FoaSPBkC cG4sIBsz3rDKqZ41kp5t/22xEMSIlQgHQVulck2wF9Iyj2pF6YgpYl7OHqPR4Lm/ I8HFBIjl1VISkg== -----END CERTIFICATE-----Generated at Wed May 13 10:02:48 2026 by rpki-client