$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json) Hash identifier: Qxtq6DNrD4Z4j5f8ozq+dPIVEFJEsUKj+mNRIntrwck= Subject key identifier: 3E:9F:39:DE:E1:8A:37:72:F0:7B:A3:66:9A:B4:BB:E4:BC:83:51:83 Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 019E1D59AB886A5B468B2F2CDF30547D9D95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft Manifest number: 1913 Signing time: Tue 12 May 2026 18:01:16 +0000 Manifest this update: Tue 12 May 2026 18:01:16 +0000 Manifest next update: Wed 13 May 2026 18:01:16 +0000 Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=) 2: 24lvsSxh7MUVQcE3eg7_Djq-Tso.asa (hash: Hjss/TGOcmwG6GtuhM5X9Ph0gtLBzHScnu3DTiqPa9c=) 3: 36K8uvuxLLbczf1YXC_ASJxPbng.asa (hash: 870+pBNRKYWmY6ePML/QQK6e/MrQo9VBr7qVr3BXzBw=) 4: FWYopd6TlSta9pASbYNvraqyvNM.asa (hash: I8ABTTre9KM0IJfOp7PT39kOwRj4TE5ZVbXeJW/G+gk=) 5: NL0Mp2ak4kIOVa-mI-T_3-kFvlE.roa (hash: 8D7MsuGjI7HsrBxlKjaEVJ+I36rJeX9th0UxwcPUwQs=) 6: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=) 7: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=) 8: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=) 9: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=) 10: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: aHC4arVGXys0t62WNnJd54ibbYuQhcyycpSOIcsj2P8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:59:ab:88:6a:5b:46:8b:2f:2c:df:30:54:7d:9d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: May 12 18:01:16 2026 GMT Not After : May 13 18:01:16 2026 GMT Subject: CN=3e9f39dee18a3772f07ba3669ab4bbe4bc835183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:c7:5e:86:b4:f8:8a:d9:f3:9d:f7:49:27: 7d:cb:f8:e8:ae:d8:65:af:c8:c3:fd:fd:97:11:c4: 0d:92:ee:7a:3e:03:ca:71:8e:cc:e5:02:0b:6f:1d: 4e:07:c1:51:13:54:c5:7c:fa:84:01:81:58:25:7d: 62:11:b8:93:09:1c:94:11:c5:b3:24:44:0a:bc:7d: d5:60:f8:00:c8:82:1f:29:b2:bb:47:4e:38:c1:3a: 6e:37:55:9d:0b:b2:ea:2a:6b:3e:9d:7f:d1:dd:ae: fb:14:d7:47:f4:0c:a3:25:45:dd:07:43:a7:24:71: bd:ad:2b:5b:4e:d1:f2:86:9a:c2:4e:13:60:8a:07: 58:eb:7a:c6:d9:f5:d6:e7:4a:85:64:9e:d0:fb:38: 58:43:26:79:3e:6d:f1:54:c4:82:dc:f6:d2:a6:d1: da:2c:f6:72:f0:95:57:0b:25:84:60:c3:80:29:2d: d0:0a:4a:f9:5e:9f:d1:d3:b5:18:f6:b6:b3:1e:3c: bb:46:34:c1:c8:de:c9:71:27:e9:cf:b3:9e:ba:e0: 76:63:ba:2d:5a:85:7e:a6:e0:7e:fb:c4:8a:d4:a3: d4:36:84:55:5c:30:98:8d:5d:86:c7:00:e8:2e:44: ee:7a:c9:01:77:5c:f7:b2:df:de:28:6f:18:31:6e: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9F:39:DE:E1:8A:37:72:F0:7B:A3:66:9A:B4:BB:E4:BC:83:51:83 X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:69:79:98:ff:18:9f:6a:35:d4:a3:a9:dd:27:d9:e4:f8:2f: ab:cc:94:04:21:2f:a1:86:57:26:82:69:e0:32:bb:47:31:47: e1:2f:50:a5:a4:c9:2a:08:c9:5c:d1:58:b1:2f:3a:8b:72:89: e5:b0:43:85:01:e9:f6:ec:f3:68:e5:21:e1:b9:9c:87:87:31: ad:47:29:4f:a4:74:84:a3:af:f7:03:5f:46:ef:ce:f6:ef:50: 4a:9f:a2:46:35:f7:3e:8d:6d:0e:3f:67:f5:14:68:ab:db:62: 94:86:a3:e5:94:34:5d:3f:ce:73:56:9f:b3:c5:94:b0:76:52: ea:63:09:d4:35:a5:2c:9b:97:6b:db:65:c3:0a:e5:ff:8e:90: 53:29:38:e2:fa:dd:d1:d0:7a:01:0b:f7:dc:7c:86:19:95:9b: 66:a6:ba:e4:22:83:e7:c2:60:a3:90:1e:af:13:a8:49:f6:d1: bd:86:07:49:66:e7:40:2e:cc:be:bf:ed:6e:4a:b2:b7:08:ea: ff:8a:a2:70:3a:1e:a5:e2:e2:4a:28:67:d4:11:2c:b6:b4:58: d0:8e:a8:a6:7f:8d:e0:4e:ee:49:32:f5:b8:94:17:3c:0c:0b: 9e:c6:74:d0:59:99:f7:33:83:07:97:c4:56:55:58:2d:f1:05: e7:bc:62:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4dWauIaltGiy8s3zBUfZ2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYwNTEyMTgwMTE2WhcNMjYwNTEzMTgwMTE2WjAzMTEwLwYDVQQD EygzZTlmMzlkZWUxOGEzNzcyZjA3YmEzNjY5YWI0YmJlNGJjODM1MTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNfHXoa0+IrZ8533SSd9y/jorthl r8jD/f2XEcQNku56PgPKcY7M5QILbx1OB8FRE1TFfPqEAYFYJX1iEbiTCRyUEcWz JEQKvH3VYPgAyIIfKbK7R044wTpuN1WdC7LqKms+nX/R3a77FNdH9AyjJUXdB0On JHG9rStbTtHyhprCThNgigdY63rG2fXW50qFZJ7Q+zhYQyZ5Pm3xVMSC3PbSptHa LPZy8JVXCyWEYMOAKS3QCkr5Xp/R07UY9razHjy7RjTByN7JcSfpz7OeuuB2Y7ot WoV+puB++8SK1KPUNoRVXDCYjV2GxwDoLkTueskBd1z3st/eKG8YMW4eOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6fOd7hijdy8HujZpq0u+S8g1GDMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXml5mP8Y n2o11KOp3SfZ5Pgvq8yUBCEvoYZXJoJp4DK7RzFH4S9QpaTJKgjJXNFYsS86i3KJ 5bBDhQHp9uzzaOUh4bmch4cxrUcpT6R0hKOv9wNfRu/O9u9QSp+iRjX3Po1tDj9n 9RRoq9tilIaj5ZQ0XT/Oc1afs8WUsHZS6mMJ1DWlLJuXa9tlwwrl/46QUyk44vrd 0dB6AQv33HyGGZWbZqa65CKD58Jgo5AerxOoSfbRvYYHSWbnQC7Mvr/tbkqytwjq /4qicDoepeLiSihn1BEstrRY0I6opn+N4E7uSTL1uJQXPAwLnsZ00FmZ9zODB5fE VlVYLfEF57xiiw== -----END CERTIFICATE-----Generated at Tue May 12 21:50:28 2026 by rpki-client