$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: aM/XhvO/+KX0cb1RTJaz3AXmJesc5My0NuUNeYLcwdg= Subject key identifier: 33:34:14:7E:D8:2D:EA:E0:5B:90:B0:17:5A:7D:92:FB:6F:75:65:5F Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019E1C7E098B453AE1ADBB5F1022D5ACB66B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 191B Signing time: Tue 12 May 2026 14:01:22 +0000 Manifest this update: Tue 12 May 2026 14:01:22 +0000 Manifest next update: Wed 13 May 2026 14:01:22 +0000 Files and hashes: 1: 5bw3FxzpBWgCUPFGor6BeS_x13E.roa (hash: vbv6Fyo711z5Y6WllYiF1+hQCuBRfjBj2SnqOdmQ/Ko=) 2: KClfXxgk0wRzsCWY2cBjE-9OUBw.roa (hash: mZTkzVHUlv75y3/sF2jX1yQ3NF8yk3kbKCgMEXnClVc=) 3: OPUmPq2MCSSLajil_N8xjasEED0.roa (hash: 3ErCgLhuftk7qbnRHyFbXfh2aIHoI6pTjwOjuX9ybbI=) 4: PVZJLc9tODZFqXK-cJmdd7K-baM.roa (hash: nv2FNyj3NvI+l9/bwumlpSj6KXBZJHOiEr8IoIDWWBs=) 5: RD2bQy42cJtcLUpPd6bwEgSdC5g.roa (hash: EXR+FPHGsONaMy04ozJgDUBq2GB63B3p6cERU165gBY=) 6: RTtrcIMD_1Pooh2hybtppswd0Cs.roa (hash: gHzBppcBQRTrZFKZdzTeaIz8G3KIuJKhpm0DEQdKM5o=) 7: ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa (hash: 3HGI+6qeROUPLoU4ORnifqLKfR+6cyux8LhHwuDQCzI=) 8: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: X+s/N7nWLhX+iViLuFD9eQvSNv9EpD9IQsUL/mWP+SA=) 9: iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa (hash: Xmy3joGzE7DOFCUoxtKq+8sQb3nS9R29UjEKhSZ9+oA=) 10: jwL6ZedQy9jrx6zRLmC34t2VuNI.roa (hash: JjbOSGoIoxnMnWQdAupasyiznFb2Rz/tCe7dz0MfJkM=) 11: taRmnaIWL0Lvnk8-ztV91eCLqRU.roa (hash: Duq2TEYTpeDcixHF5tGgiY61uowG5KKhAb2ieJRR8c4=) 12: vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa (hash: HHDiRi1+BOUzXevtTy1X6aaBtWS9/5nRjSa9y3Tpifg=) 13: wUgkHiQ86rCh1plfV-1fhX-AaMg.roa (hash: 86ia7TUjUS+IoQf3wQbTT6jWw8UWMBIHEfrKwtfOipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:7e:09:8b:45:3a:e1:ad:bb:5f:10:22:d5:ac:b6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: May 12 14:01:22 2026 GMT Not After : May 13 14:01:22 2026 GMT Subject: CN=3334147ed82deae05b90b0175a7d92fb6f75655f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0c:b5:07:b7:a7:3f:ca:83:9b:95:c6:ed:91: d3:16:ba:2b:57:06:82:71:31:14:10:6e:23:ae:de: 55:27:cd:52:2a:9d:2f:a9:bd:00:59:eb:eb:4d:78: 9b:1d:12:d5:e9:1a:68:24:6c:65:c6:04:b6:fa:b6: 78:e4:5c:e3:a5:58:0f:d5:61:39:30:b7:14:28:96: c8:f7:81:75:fc:43:8e:50:34:a9:d6:a7:a2:04:76: 24:3e:14:ca:15:87:bf:9b:bb:3d:cf:62:be:59:dd: 8a:12:c5:d5:c6:40:20:47:c3:8e:40:7e:7a:41:e4: ed:7b:32:30:73:26:0f:84:60:7e:3b:a5:8b:41:b9: e5:70:94:c1:af:dd:22:89:67:63:c1:6b:82:11:5d: 63:00:ec:09:b6:17:fa:2b:c8:d1:83:e4:49:0c:32: a9:c8:8d:37:1f:1c:ce:ff:5b:b2:f2:94:71:65:31: 11:b4:96:77:d9:45:6a:f2:36:c6:5f:8f:e2:22:16: cb:bd:99:29:e7:17:82:16:23:d2:a2:84:6d:fa:54: c4:1b:39:84:1b:ab:bd:6e:f3:48:ab:0b:b3:10:dd: 33:f7:73:f6:bf:23:8f:82:10:1c:a0:97:a1:c6:56: 62:7c:c6:e6:d4:65:cc:80:6c:b8:90:2c:fa:7a:f4: bf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:34:14:7E:D8:2D:EA:E0:5B:90:B0:17:5A:7D:92:FB:6F:75:65:5F X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:94:b2:9f:9d:c6:7b:58:d9:c8:de:76:f4:d5:05:c3:32:36: 09:db:3c:c8:cf:b1:48:20:3f:9f:21:d0:37:15:ea:df:62:df: 2e:dc:be:47:69:36:b7:6f:64:b6:45:99:b5:9c:48:35:94:d8: a7:7e:61:88:c7:ea:c7:e4:5c:8e:8c:d0:fc:f2:cd:63:c2:76: 89:d6:6e:e0:c2:d7:12:88:6e:43:91:aa:fa:de:cf:7d:38:63: 18:5c:22:d5:e1:af:eb:68:49:7b:c6:51:30:7f:41:5c:7e:58: 79:5b:79:12:15:a7:65:21:38:5c:d8:71:3a:8f:8b:72:7c:1c: e0:c5:68:b4:42:b7:54:8d:b6:0b:f0:a1:53:28:ef:b3:b2:1a: e2:41:ee:f1:67:c4:75:c4:23:7d:16:14:b0:ff:1d:65:23:84: 15:10:19:03:30:b0:c4:85:07:79:51:32:7c:3d:0e:ee:fb:28: 09:8e:9b:7f:6e:c0:4c:70:f0:c5:45:e2:f8:a9:b3:10:e2:84: 05:2f:15:16:79:bd:23:1a:fb:e6:89:f6:a5:5c:47:be:87:b7: 86:d4:35:af:1a:a9:94:3f:a7:39:58:ae:a3:7d:e0:a1:12:a8: f8:0c:98:8b:19:53:35:3a:9a:af:b0:3b:a7:e9:89:47:3d:08: 0c:a6:d5:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4cfgmLRTrhrbtfECLVrLZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwNTEyMTQwMTIyWhcNMjYwNTEzMTQwMTIyWjAzMTEwLwYDVQQD EygzMzM0MTQ3ZWQ4MmRlYWUwNWI5MGIwMTc1YTdkOTJmYjZmNzU2NTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwy1B7enP8qDm5XG7ZHTFrorVwaC cTEUEG4jrt5VJ81SKp0vqb0AWevrTXibHRLV6RpoJGxlxgS2+rZ45FzjpVgP1WE5 MLcUKJbI94F1/EOOUDSp1qeiBHYkPhTKFYe/m7s9z2K+Wd2KEsXVxkAgR8OOQH56 QeTtezIwcyYPhGB+O6WLQbnlcJTBr90iiWdjwWuCEV1jAOwJthf6K8jRg+RJDDKp yI03HxzO/1uy8pRxZTERtJZ32UVq8jbGX4/iIhbLvZkp5xeCFiPSooRt+lTEGzmE G6u9bvNIqwuzEN0z93P2vyOPghAcoJehxlZifMbm1GXMgGy4kCz6evS/uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDM0FH7YLergW5CwF1p9kvtvdWVfMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJSyn53G e1jZyN529NUFwzI2Cds8yM+xSCA/nyHQNxXq32LfLty+R2k2t29ktkWZtZxINZTY p35hiMfqx+RcjozQ/PLNY8J2idZu4MLXEohuQ5Gq+t7PfThjGFwi1eGv62hJe8ZR MH9BXH5YeVt5EhWnZSE4XNhxOo+Lcnwc4MVotEK3VI22C/ChUyjvs7Ia4kHu8WfE dcQjfRYUsP8dZSOEFRAZAzCwxIUHeVEyfD0O7vsoCY6bf27ATHDwxUXi+KmzEOKE BS8VFnm9Ixr75on2pVxHvoe3htQ1rxqplD+nOViuo33goRKo+AyYixlTNTqar7A7 p+mJRz0IDKbV9Q== -----END CERTIFICATE-----Generated at Wed May 13 01:27:39 2026 by rpki-client