$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json) Hash identifier: HjdRp813uvIbPWqeoWzTJtDz6oh/eEGkLP8ogWjUOds= Subject key identifier: 19:4C:6A:45:30:88:DB:14:1B:0A:0B:59:E1:04:54:CB:80:89:E6:9B Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 01A1D9B7FCFE493F9B8ACFE858D2B8D02894 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft Manifest number: 1B03 Signing time: Sat 14 Nov 2026 11:01:16 +0000 Manifest this update: Sat 14 Nov 2026 11:01:16 +0000 Manifest next update: Sun 15 Nov 2026 11:01:16 +0000 Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=) 2: EKWjQGsxTdGvNeyrv25RW0gIu5c.asa (hash: YC8zzw/fjJ0HVykD+J7LUGmnQfgoDVj+KXw7tcLJDTo=) 3: NL0Mp2ak4kIOVa-mI-T_3-kFvlE.roa (hash: 8D7MsuGjI7HsrBxlKjaEVJ+I36rJeX9th0UxwcPUwQs=) 4: RWCxKzMoRgWDToOVJIjXxUmCrZ8.asa (hash: gleP71b91vUaLqtTDIk1TgzOth5ivl/5vI1ZJtFTRBI=) 5: UII5oPagDAy9HZxXmqfjHdfeTQ4.asa (hash: qnhOqF8IHvEYtAkSuCtgU3CO9PyBhYK4n3SAcIy+GiQ=) 6: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=) 7: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=) 8: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=) 9: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=) 10: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: bjchHxVEhKa5m0qkXAGOATU1i7b4MUiggRyvQUW1IOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 10:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:d9:b7:fc:fe:49:3f:9b:8a:cf:e8:58:d2:b8:d0:28:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Nov 14 11:01:16 2026 GMT Not After : Nov 15 11:01:16 2026 GMT Subject: CN=194c6a453088db141b0a0b59e10454cb8089e69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:03:c2:84:23:a7:e0:bb:65:42:11:7c:fd:df: 2e:49:06:37:f2:61:c9:42:03:4d:4f:60:8d:be:c6: 5c:4b:58:6e:c3:35:8c:6d:18:e0:37:57:64:41:0b: e2:f3:64:12:32:41:fc:d8:6a:86:59:45:04:7f:55: f3:09:32:00:fd:87:23:44:1c:6a:2b:8f:a4:ad:fd: 75:25:e4:1c:b1:03:20:81:6a:4d:95:2d:ab:cf:31: 9c:a2:ef:fd:c1:65:a7:10:60:dc:ec:91:ea:25:9b: 6c:68:38:5c:56:cd:60:65:9a:ca:9b:2e:bd:a6:98: 1c:4b:73:1a:a2:1f:db:c3:c1:ef:a2:fb:90:32:cb: 59:3b:14:16:d1:1d:f3:5c:aa:19:26:25:26:ef:4f: 7c:90:9f:f7:f6:8a:29:28:26:16:6c:ef:9b:be:b2: 63:a3:70:43:a7:ed:48:ae:fe:cf:1b:63:35:55:db: 5f:eb:00:8c:34:e6:d6:9e:3c:6a:ca:0c:8b:67:ae: 73:ca:6e:58:22:29:60:37:f9:4d:c4:94:44:11:0a: 15:2a:b1:78:94:be:df:09:47:1b:6a:0a:f1:6e:fa: 2c:c3:8e:59:07:d1:24:f8:c2:6f:52:3e:b0:85:6c: 24:56:fc:72:6b:bb:db:d4:bb:f0:ed:72:52:67:f1: db:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4C:6A:45:30:88:DB:14:1B:0A:0B:59:E1:04:54:CB:80:89:E6:9B X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:cb:b4:3f:5a:30:cd:58:40:fd:1b:c3:71:c4:51:18:23:42: b9:f0:2f:d6:2e:97:70:c3:43:a4:35:1b:a3:86:b9:43:45:c4: ac:4b:9a:58:8c:ce:69:e6:2f:c5:ff:8b:09:09:6e:c6:9d:27: 67:36:fa:d8:b1:1b:d5:65:cd:ef:4d:bb:c5:24:92:d4:3a:da: 85:ee:f0:8a:60:fa:2d:66:72:a9:b7:e8:49:d9:d7:05:26:cb: e1:65:b4:51:96:ff:96:61:0d:67:2c:f9:a0:22:cb:70:2a:56: 86:c3:d2:23:74:17:87:a0:55:b6:e7:7f:ea:0f:d4:bd:10:af: 07:46:72:6a:71:d2:de:c4:dd:a6:36:69:c4:ef:f8:4f:84:ce: 2f:38:81:13:e9:0f:db:c9:b9:17:54:8f:0e:e3:3b:c1:04:1b: 8b:fb:f7:b8:de:79:d1:10:b8:a0:9f:bb:39:c1:f2:40:d0:47: 01:3b:4f:9e:92:15:0f:63:3f:bc:48:19:48:13:4f:66:1c:aa: 78:e9:54:00:80:bf:fb:64:89:7d:87:3e:32:8b:26:bd:c8:f2: 23:52:ed:4f:f9:f4:d0:ca:1e:8b:1b:e7:0d:58:5a:5d:8e:b3: a4:4b:dd:2d:f6:84:0f:5e:c0:64:0c:b7:64:46:b7:5b:d8:16: a8:26:ec:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHZt/z+ST+bis/oWNK40CiUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYxMTE0MTEwMTE2WhcNMjYxMTE1MTEwMTE2WjAzMTEwLwYDVQQD EygxOTRjNmE0NTMwODhkYjE0MWIwYTBiNTllMTA0NTRjYjgwODllNjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogPChCOn4LtlQhF8/d8uSQY38mHJ QgNNT2CNvsZcS1huwzWMbRjgN1dkQQvi82QSMkH82GqGWUUEf1XzCTIA/YcjRBxq K4+krf11JeQcsQMggWpNlS2rzzGcou/9wWWnEGDc7JHqJZtsaDhcVs1gZZrKmy69 ppgcS3Maoh/bw8HvovuQMstZOxQW0R3zXKoZJiUm7098kJ/39oopKCYWbO+bvrJj o3BDp+1Irv7PG2M1Vdtf6wCMNObWnjxqygyLZ65zym5YIilgN/lNxJREEQoVKrF4 lL7fCUcbagrxbvosw45ZB9Ek+MJvUj6whWwkVvxya7vb1Lvw7XJSZ/HbZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlMakUwiNsUGwoLWeEEVMuAieabMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsu0P1ow zVhA/RvDccRRGCNCufAv1i6XcMNDpDUbo4a5Q0XErEuaWIzOaeYvxf+LCQluxp0n Zzb62LEb1WXN7027xSSS1Drahe7wimD6LWZyqbfoSdnXBSbL4WW0UZb/lmENZyz5 oCLLcCpWhsPSI3QXh6BVtud/6g/UvRCvB0ZyanHS3sTdpjZpxO/4T4TOLziBE+kP 28m5F1SPDuM7wQQbi/v3uN550RC4oJ+7OcHyQNBHATtPnpIVD2M/vEgZSBNPZhyq eOlUAIC/+2SJfYc+MosmvcjyI1LtT/n00MoeixvnDVhaXY6zpEvdLfaED17AZAy3 ZEa3W9gWqCbsqA== -----END CERTIFICATE-----Generated at Sat Nov 14 20:52:22 2026 by rpki-client