$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: 1oF8upYw8KhZQCQG8s8EVAbzQChdxBj0Rya6ZGbelqI= Subject key identifier: E8:D3:90:34:1E:47:7C:54:1D:D7:D5:AB:AA:45:9A:98:FF:92:5A:70 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019D265FA599421CF236EB25EE5A90C66703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1892 Signing time: Wed 25 Mar 2026 19:01:35 +0000 Manifest this update: Wed 25 Mar 2026 19:01:35 +0000 Manifest next update: Thu 26 Mar 2026 19:01:35 +0000 Files and hashes: 1: McQ1AOjlDwgZAqlNis7OMo30suU.roa (hash: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE=) 2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: MACDjszl4PpQilJFuawcB+krul8oDrqf7bJjJBwsun4=) 4: SPId_SWHbv84MaBpzxcBFitrFiA.roa (hash: fkjaLtVx/IVOE485FOawltfAwHKBTGzzIXUgCRCBDeg=) 5: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 6: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 7: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 8: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (hash: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY=) 9: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (hash: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0=) 10: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 11: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 12: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 13: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 19:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:5f:a5:99:42:1c:f2:36:eb:25:ee:5a:90:c6:67:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Mar 25 19:01:35 2026 GMT Not After : Mar 26 19:01:35 2026 GMT Subject: CN=e8d390341e477c541dd7d5abaa459a98ff925a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:64:d8:cb:a9:cb:62:56:be:a7:72:14:60: 9e:a0:7b:3e:fa:88:59:ba:5f:51:2a:62:83:65:2e: ce:05:c0:04:4e:a7:ef:d2:20:c4:59:49:ab:2c:3c: 45:b6:50:75:4e:3c:53:f1:c1:5a:c4:37:4a:42:78: 92:40:5b:8b:fe:48:89:63:bc:df:ca:80:8b:e7:ff: 9a:5b:eb:a5:bf:4b:99:8f:ba:d2:b8:6c:d9:8b:c9: bc:35:5c:2c:c3:30:6b:a7:67:c7:f5:5b:bd:22:c7: 3f:d4:2d:9d:93:7c:36:7a:33:de:3a:10:b3:de:65: f4:d0:c3:3f:fe:78:18:be:ac:78:6a:e5:b4:a6:f9: d7:2a:a5:e5:58:c2:ed:92:ae:ab:a0:77:b6:f7:2a: d3:92:df:34:5c:a5:40:b8:c5:26:03:b8:56:a5:5b: 1e:b3:29:6e:19:2c:57:24:5a:b0:14:b5:4a:f6:ae: aa:f4:c1:4f:40:69:2e:b5:56:cd:a4:3d:ff:44:59: 6b:37:bf:fb:3d:ce:c3:82:cc:9d:1b:bc:aa:80:4a: 06:e3:23:53:d7:f8:64:99:4f:07:4a:67:fb:61:1c: 54:ce:e9:23:55:db:96:c0:44:4d:d9:5a:52:f9:0a: a3:20:2e:5c:9c:3f:7a:46:c5:c3:83:48:e2:94:cc: 39:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D3:90:34:1E:47:7C:54:1D:D7:D5:AB:AA:45:9A:98:FF:92:5A:70 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b5:48:0a:e6:66:8d:8b:e6:23:99:e1:06:01:d9:df:f6:f5: 7c:88:2d:ad:cf:b3:8a:b4:bd:7a:69:a1:f6:fd:b0:d2:88:89: ff:88:bd:b3:0e:48:77:71:dd:53:be:2e:48:74:20:b8:cb:5e: 59:5f:08:63:df:fa:e2:87:bf:1d:fe:cb:ce:66:8f:0d:25:59: b3:5b:8b:c2:ad:01:54:54:97:04:90:30:47:60:1e:16:28:a9: 40:3d:53:46:55:79:c3:82:7d:e1:64:4e:1b:19:6f:b8:83:b6: 3b:a4:0d:c2:00:12:21:02:4b:96:a9:99:a9:46:f7:a1:07:8e: ac:92:7a:6a:c1:4d:1f:aa:ff:90:43:76:5f:a1:20:ab:e6:0b: 6e:df:e9:94:13:87:96:25:48:ef:4f:bd:34:13:a4:7e:b8:6e: 96:bb:87:91:3d:4d:17:6c:9a:75:21:98:e5:b3:90:9d:88:94: f5:c6:88:98:03:3a:bc:45:6e:25:d2:56:08:ee:c7:46:b8:07: 5e:35:26:7a:66:e2:c5:9d:3a:b7:90:f6:3e:e1:dc:86:1c:c4: 6f:dc:00:99:32:a7:39:e7:ab:62:5e:8e:fa:49:9c:30:ed:e7: 29:b5:d4:1b:56:c0:9d:33:ed:c5:56:30:50:d5:26:db:a7:46: e4:d0:49:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mX6WZQhzyNusl7lqQxmcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwMzI1MTkwMTM1WhcNMjYwMzI2MTkwMTM1WjAzMTEwLwYDVQQD EyhlOGQzOTAzNDFlNDc3YzU0MWRkN2Q1YWJhYTQ1OWE5OGZmOTI1YTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtChk2Mupy2JWvqdyFGCeoHs++ohZ ul9RKmKDZS7OBcAETqfv0iDEWUmrLDxFtlB1TjxT8cFaxDdKQniSQFuL/kiJY7zf yoCL5/+aW+ulv0uZj7rSuGzZi8m8NVwswzBrp2fH9Vu9Isc/1C2dk3w2ejPeOhCz 3mX00MM//ngYvqx4auW0pvnXKqXlWMLtkq6roHe29yrTkt80XKVAuMUmA7hWpVse syluGSxXJFqwFLVK9q6q9MFPQGkutVbNpD3/RFlrN7/7Pc7DgsydG7yqgEoG4yNT 1/hkmU8HSmf7YRxUzukjVduWwERN2VpS+QqjIC5cnD96RsXDg0jilMw5mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjTkDQeR3xUHdfVq6pFmpj/klpwMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7VICuZm jYvmI5nhBgHZ3/b1fIgtrc+zirS9emmh9v2w0oiJ/4i9sw5Id3HdU74uSHQguMte WV8IY9/64oe/Hf7LzmaPDSVZs1uLwq0BVFSXBJAwR2AeFiipQD1TRlV5w4J94WRO GxlvuIO2O6QNwgASIQJLlqmZqUb3oQeOrJJ6asFNH6r/kEN2X6Egq+YLbt/plBOH liVI70+9NBOkfrhulruHkT1NF2yadSGY5bOQnYiU9caImAM6vEVuJdJWCO7HRrgH XjUmembixZ06t5D2PuHchhzEb9wAmTKnOeerYl6O+kmcMO3nKbXUG1bAnTPtxVYw UNUm26dG5NBJnA== -----END CERTIFICATE-----Generated at Thu Mar 26 03:50:58 2026 by rpki-client