$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json) Hash identifier: wR6j+SZdfvulqaAPP+GnFMOrlrfzDoNFfYuVCSmbSUY= Subject key identifier: 51:71:47:F7:2D:66:04:20:4C:EA:62:90:A4:62:BA:1B:27:4F:0C:57 Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 01A0CD48017E39DD29F3F61F76558B10ABC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft Manifest number: 1A78 Signing time: Wed 23 Sep 2026 08:00:43 +0000 Manifest this update: Wed 23 Sep 2026 08:00:43 +0000 Manifest next update: Thu 24 Sep 2026 08:00:43 +0000 Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=) 2: EKWjQGsxTdGvNeyrv25RW0gIu5c.asa (hash: YC8zzw/fjJ0HVykD+J7LUGmnQfgoDVj+KXw7tcLJDTo=) 3: NL0Mp2ak4kIOVa-mI-T_3-kFvlE.roa (hash: 8D7MsuGjI7HsrBxlKjaEVJ+I36rJeX9th0UxwcPUwQs=) 4: RWCxKzMoRgWDToOVJIjXxUmCrZ8.asa (hash: gleP71b91vUaLqtTDIk1TgzOth5ivl/5vI1ZJtFTRBI=) 5: UII5oPagDAy9HZxXmqfjHdfeTQ4.asa (hash: qnhOqF8IHvEYtAkSuCtgU3CO9PyBhYK4n3SAcIy+GiQ=) 6: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=) 7: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=) 8: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=) 9: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=) 10: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: jBg0nJA9vlVOm9Tvo88DeWQLYfaI6hT4Q/gjINmpYNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:48:01:7e:39:dd:29:f3:f6:1f:76:55:8b:10:ab:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Sep 23 08:00:43 2026 GMT Not After : Sep 24 08:00:43 2026 GMT Subject: CN=517147f72d6604204cea6290a462ba1b274f0c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e0:a7:cd:e8:97:cb:1f:80:d6:a4:72:ae:80: 65:36:7f:87:cc:26:31:7a:02:9d:4b:e7:3f:66:dd: e1:f2:01:6e:61:67:42:aa:79:3e:45:90:02:74:a2: 14:5b:aa:33:36:25:93:6b:b1:57:3d:5b:dd:72:ff: 10:ee:4b:9c:87:4b:6f:7b:19:aa:1b:25:26:c9:a3: db:99:2f:be:11:60:8d:a5:4f:f1:5a:ec:23:31:23: f5:0f:94:51:11:42:ba:3d:d6:de:85:e9:08:26:42: cd:6e:62:e9:e5:c8:70:38:1d:73:ca:7f:c1:3d:88: 95:78:f7:3c:13:e5:45:5c:9c:c4:77:62:3e:b7:bf: f6:e2:90:91:d9:91:ce:c0:ea:d1:13:26:5b:5f:1e: 95:2c:65:fd:d9:c0:47:79:77:b7:d6:2b:f6:8e:2f: 01:46:e6:be:b9:06:ff:2b:b7:36:6e:7a:d9:37:a3: 00:6f:2b:a5:f0:44:e2:e2:17:b9:12:3e:0e:f5:1f: bc:4c:9f:d9:8e:b9:51:66:d4:f4:6a:29:ca:68:8e: ea:b6:e4:04:16:65:d7:2c:b9:4f:1d:13:4f:62:04: ba:5d:11:46:b0:3a:ba:33:c0:54:f1:b7:9f:91:8f: 8f:42:a7:25:06:4e:4f:16:54:7d:19:6c:34:9d:87: a1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:71:47:F7:2D:66:04:20:4C:EA:62:90:A4:62:BA:1B:27:4F:0C:57 X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6d:f1:d7:ec:99:9b:a2:f5:d1:e7:ad:05:51:3b:97:52:5a: c1:26:17:d1:9d:26:57:c7:29:ff:30:d1:6f:96:95:1a:d8:75: 2c:a6:da:cf:b4:83:dc:84:92:9f:ca:4b:46:4c:47:bc:b5:31: 3f:7f:28:53:20:97:b4:b6:c3:99:7b:c8:ef:f6:40:0b:f7:53: 72:03:55:73:a3:74:ca:b5:0f:46:df:85:b4:74:f6:1a:40:e5: fb:20:b7:c9:14:a6:7e:e0:e9:81:0f:13:18:5c:0b:ac:a9:74: b4:10:a4:27:b1:67:3a:da:d4:9b:78:77:02:19:c6:b5:6c:bc: ec:30:da:84:82:87:df:02:b9:ab:24:e9:38:78:1c:2b:7b:ad: c1:32:21:33:a6:35:4b:ca:d7:46:84:96:c8:54:c2:f9:c8:6d: fb:34:71:86:2f:2b:fa:aa:b1:92:c7:fc:61:59:a7:28:ed:27: 87:a9:bf:7b:9f:05:d7:1b:f4:4d:6c:8a:15:08:50:53:ca:a2: 62:2c:c3:81:fd:7a:72:9f:ed:28:63:1d:75:ae:e6:c3:85:92: 8f:65:c9:fe:5c:28:96:07:0f:70:24:39:52:56:a7:a7:6c:86: ca:c7:b8:55:a9:67:e9:88:85:64:79:61:0f:ba:22:b3:36:a2: b8:37:f9:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNSAF+Od0p8/YfdlWLEKvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYwOTIzMDgwMDQzWhcNMjYwOTI0MDgwMDQzWjAzMTEwLwYDVQQD Eyg1MTcxNDdmNzJkNjYwNDIwNGNlYTYyOTBhNDYyYmExYjI3NGYwYzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+CnzeiXyx+A1qRyroBlNn+HzCYx egKdS+c/Zt3h8gFuYWdCqnk+RZACdKIUW6ozNiWTa7FXPVvdcv8Q7kuch0tvexmq GyUmyaPbmS++EWCNpU/xWuwjMSP1D5RREUK6PdbehekIJkLNbmLp5chwOB1zyn/B PYiVePc8E+VFXJzEd2I+t7/24pCR2ZHOwOrREyZbXx6VLGX92cBHeXe31iv2ji8B Rua+uQb/K7c2bnrZN6MAbyul8ETi4he5Ej4O9R+8TJ/ZjrlRZtT0ainKaI7qtuQE FmXXLLlPHRNPYgS6XRFGsDq6M8BU8befkY+PQqclBk5PFlR9GWw0nYehQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFxR/ctZgQgTOpikKRiuhsnTwxXMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEG3x1+yZ m6L10eetBVE7l1JawSYX0Z0mV8cp/zDRb5aVGth1LKbaz7SD3ISSn8pLRkxHvLUx P38oUyCXtLbDmXvI7/ZAC/dTcgNVc6N0yrUPRt+FtHT2GkDl+yC3yRSmfuDpgQ8T GFwLrKl0tBCkJ7FnOtrUm3h3AhnGtWy87DDahIKH3wK5qyTpOHgcK3utwTIhM6Y1 S8rXRoSWyFTC+cht+zRxhi8r+qqxksf8YVmnKO0nh6m/e58F1xv0TWyKFQhQU8qi YizDgf16cp/tKGMdda7mw4WSj2XJ/lwolgcPcCQ5Ulanp2yGyse4Valn6YiFZHlh D7oiszaiuDf5bg== -----END CERTIFICATE-----Generated at Wed Sep 23 12:29:07 2026 by rpki-client