$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: qBsmllKC4Zuxxya8s+MambnePffIbwuY1Bq2yk6lwGQ= Subject key identifier: 05:B7:8B:B8:68:99:49:2A:71:CF:C3:28:0A:DE:1F:06:70:8E:BE:53 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019F8FECC72A346B022CB20952826EB97801 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 19D3 Signing time: Thu 23 Jul 2026 17:01:26 +0000 Manifest this update: Thu 23 Jul 2026 17:01:26 +0000 Manifest next update: Fri 24 Jul 2026 17:01:26 +0000 Files and hashes: 1: McQ1AOjlDwgZAqlNis7OMo30suU.roa (hash: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE=) 2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: DCRraXzVBlRHo1nQtH18stBWrYzX8bnP2GFJ2N+1BYk=) 4: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 5: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 6: go5zmIjMFUbuaVU7TDIK6GCVKzE.roa (hash: SFdYPGfWYCvWnl4ngcgtIbNB25CwfARixTuIkg+0AKI=) 7: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 8: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (hash: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY=) 9: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (hash: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0=) 10: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 11: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 12: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 13: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:ec:c7:2a:34:6b:02:2c:b2:09:52:82:6e:b9:78:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jul 23 17:01:26 2026 GMT Not After : Jul 24 17:01:26 2026 GMT Subject: CN=05b78bb86899492a71cfc3280ade1f06708ebe53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:39:31:d6:97:91:f2:7b:a4:d6:dd:93:7e: 9f:1c:fe:bc:b4:1c:1c:5b:cd:b8:fc:9f:33:eb:f9: 6a:13:36:b3:f0:a7:bc:15:fa:8b:1b:14:71:c9:c6: 95:66:f5:4a:8e:3d:45:23:1d:29:40:10:01:c1:b9: 33:76:19:dc:c9:c3:40:3b:c1:f9:0d:30:d4:99:37: 00:92:70:65:b5:47:31:8f:e5:aa:a3:21:1f:a2:8a: 64:15:a0:e3:6e:f9:13:cb:c8:88:99:52:fd:52:b7: 82:88:bd:e0:bc:fc:ca:ba:ed:95:52:0e:e1:0e:77: d1:44:4c:c6:39:a9:da:16:c7:f5:6b:3a:f1:2f:df: d6:a1:a6:4e:dd:a3:b3:dd:4c:fc:7a:43:e6:05:df: b7:ea:dc:86:9e:1b:53:92:72:7c:db:ea:90:de:b5: 8d:5d:5a:9b:69:92:63:7c:59:7a:f0:ac:50:13:c8: 4b:50:60:ee:3b:25:c2:24:9d:46:55:f9:83:aa:41: fa:31:0c:41:44:43:22:4d:2b:55:68:d6:23:68:c9: a5:ca:c9:26:7e:c0:3f:27:f0:d7:46:86:aa:78:7d: b8:d0:4e:2f:ab:e6:62:91:63:69:42:fe:06:7f:e8: 7c:e6:58:6c:31:ba:1d:0f:72:56:ca:9b:f6:4e:9c: f9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B7:8B:B8:68:99:49:2A:71:CF:C3:28:0A:DE:1F:06:70:8E:BE:53 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:87:c0:6d:5d:82:54:9e:14:70:18:2a:f9:22:13:3a:f1:7c: e4:4a:03:99:ae:5a:69:16:8d:fa:49:d7:b7:ea:d2:b5:e9:66: 79:26:95:56:2c:fb:1f:ca:74:1d:ef:ab:fd:a8:f1:f4:53:ce: b6:59:f4:27:d6:f6:65:40:37:a5:47:45:85:b7:64:13:d9:c6: 38:56:5f:6b:66:68:b3:f4:28:21:89:fa:70:0d:a8:7e:e5:2b: 48:62:43:a9:cd:4a:11:eb:14:1d:b2:d5:75:be:2e:e8:89:49: 00:a7:64:30:d7:14:86:c8:90:2e:21:36:34:95:b1:4a:f5:6a: f4:e5:94:0b:89:ca:e2:a5:83:bd:9f:87:0a:bc:15:99:e4:54: 7f:34:1b:0f:3c:4c:69:52:6a:d8:66:c2:c4:84:1b:80:d8:64: 3e:d1:6f:ba:d6:02:3b:73:07:dd:a6:bf:d4:74:75:98:07:07: 6b:8b:3a:54:d9:7c:26:2a:59:4c:bf:9f:61:aa:03:ce:0e:45: 38:51:9c:4c:2c:d9:25:36:bf:9b:37:fb:78:aa:90:93:38:2e: 47:43:eb:05:30:92:ac:c8:09:aa:bb:9f:07:95:0d:7a:f3:bc: 4c:d0:a1:04:4d:af:b3:47:e8:14:15:a8:46:7a:83:52:1f:a3: 7d:ca:0d:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+P7McqNGsCLLIJUoJuuXgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwNzIzMTcwMTI2WhcNMjYwNzI0MTcwMTI2WjAzMTEwLwYDVQQD EygwNWI3OGJiODY4OTk0OTJhNzFjZmMzMjgwYWRlMWYwNjcwOGViZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQM5MdaXkfJ7pNbdk36fHP68tBwc W824/J8z6/lqEzaz8Ke8FfqLGxRxycaVZvVKjj1FIx0pQBABwbkzdhncycNAO8H5 DTDUmTcAknBltUcxj+WqoyEfoopkFaDjbvkTy8iImVL9UreCiL3gvPzKuu2VUg7h DnfRREzGOanaFsf1azrxL9/WoaZO3aOz3Uz8ekPmBd+36tyGnhtTknJ82+qQ3rWN XVqbaZJjfFl68KxQE8hLUGDuOyXCJJ1GVfmDqkH6MQxBREMiTStVaNYjaMmlyskm fsA/J/DXRoaqeH240E4vq+ZikWNpQv4Gf+h85lhsMbodD3JWypv2Tpz5QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAW3i7homUkqcc/DKAreHwZwjr5TMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYfAbV2C VJ4UcBgq+SITOvF85EoDma5aaRaN+knXt+rStelmeSaVViz7H8p0He+r/ajx9FPO tln0J9b2ZUA3pUdFhbdkE9nGOFZfa2Zos/QoIYn6cA2ofuUrSGJDqc1KEesUHbLV db4u6IlJAKdkMNcUhsiQLiE2NJWxSvVq9OWUC4nK4qWDvZ+HCrwVmeRUfzQbDzxM aVJq2GbCxIQbgNhkPtFvutYCO3MH3aa/1HR1mAcHa4s6VNl8JipZTL+fYaoDzg5F OFGcTCzZJTa/mzf7eKqQkzguR0PrBTCSrMgJqrufB5UNevO8TNChBE2vs0foFBWo RnqDUh+jfcoN6w== -----END CERTIFICATE-----Generated at Fri Jul 24 02:12:25 2026 by rpki-client