$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft File: q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json) Hash identifier: XuesveSEsok+UfyGWnntJorINSLju/nK3wTy0iXNHjY= Subject key identifier: D0:1C:89:E7:95:06:AA:FC:17:42:AC:87:D0:FF:2F:3B:4C:B6:42:41 Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019D25F1CE23DDB737ECBC5467AD014C1BD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft Manifest number: 1596 Signing time: Wed 25 Mar 2026 17:01:37 +0000 Manifest this update: Wed 25 Mar 2026 17:01:37 +0000 Manifest next update: Thu 26 Mar 2026 17:01:37 +0000 Files and hashes: 1: 0PWfBn0oGldVFHP5tIF47j3zzAs.roa (hash: 0sM6Ze3gvOmQYlCu1oomU3dkg7xN6YhbGGDnKDWKSSQ=) 2: 2_JDrlEf39vL8qmUM9CaRXwOr04.roa (hash: /7e65G97+6p4mluseOQELP9OxF86iI75OQ+5Z/TQzmA=) 3: 5d874HtQy3_g6Lh42ATS1BQL16o.roa (hash: FFJNypVbDwx5p1OtRayAO1/xI3zEji2XKy7Oj/jRza0=) 4: 6NzUbUPfmG_2OYaxE5u0iljd-HM.roa (hash: GEVpwDXH3AnmmmYcwcQLhZ1oJzowlyvgSDom4fjBpAM=) 5: BVx20OvNIr_bjMiJlAuvJK99SH4.roa (hash: DO6SxTL8ZIDZlJLjGOfKoMzyvMaVazIOTTdETJq4hxI=) 6: DyhSqV4302w_Jd8C_oWX0mObDDc.roa (hash: XVB5wgNU/o6hHZ2aTWsuDvd3gUhS28oEwkGfS/KVZ7w=) 7: H9Xbs19Dof8eiG5lJjAhQV9WdWI.roa (hash: iXBhXfrYk+sqUaa89rfM9pApaz51gWzZlcef+RPdmsg=) 8: MSewK7b92JObaKeUrbrsAb5fWQk.roa (hash: sWACoQHb5c7UneFSMmjv5A00HKxYwU6xUqQ/8qlbIPE=) 9: NqUE_7vgG-i019hpuas3mtpVIf4.roa (hash: X2ZRbDZD/jel7nDnPIG6pqjl2LVgOhthOTW0hTf7CyA=) 10: ZBRiJj4yKjp6xE7hgkNq4cQdPLQ.roa (hash: 6GJHppVcWVXgDv6JkXYDCys38/Oyzd7ZRUn3j/wIDXU=) 11: eKfYhAdXZm4QBxrRp-Jb19IhjKA.roa (hash: IW6hoy0lnAYpEm6NvMoOrfkrhinHm5CYNAqE2SF2Y3g=) 12: ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa (hash: 6KJzsBOmWkWNjIPw+pN6XcIjmWVNJnyQyPCTB+CKohg=) 13: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: +Iqm9bIA2LXPpjUzMg+ZSdV2Vxv4p3yemfAEPrpJV58=) 14: qaltJRhtOumKjVHwnWVUetcuLl8.roa (hash: BGZRfPeZLiJVX41F+zt+HW9khnF21BsLuwIzvIKpNck=) 15: slCMC5MetlL-UdrbcYVL6ivEaR8.roa (hash: L9bTvLMwoTmbYW/wx8YfNg5L/r3pNdrG0c8bxsu4UcE=) 16: tFL9wVh4WkSXocKu5wD0zL_9_m8.roa (hash: 6EEVwO12s7jfNRlLHqcR0cD6u3HIV2GLT5UfsJtR9iA=) 17: wGOi-hc1qunRv3mfhlCNuwgWq88.roa (hash: VEFeNu27Mw/MaO7I2TqKbQuNe8tJIgFySJ8plRBHBzM=) 18: zLZn5fjIxGUIeLJs3xz-C3OdAK8.roa (hash: RzZEQ/gzmc0sHqoihLaxMsPQLNBKCTKE0KmCQNShYdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:ce:23:dd:b7:37:ec:bc:54:67:ad:01:4c:1b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Mar 25 17:01:37 2026 GMT Not After : Mar 26 17:01:37 2026 GMT Subject: CN=d01c89e79506aafc1742ac87d0ff2f3b4cb64241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:50:d5:f8:a6:a2:f5:28:39:39:60:2f:8e:5d: 92:b8:37:5e:7e:74:17:59:de:f1:db:52:d4:18:0b: 41:f6:04:60:91:d4:24:31:12:a7:f2:19:e0:25:d8: 5e:98:35:99:18:c7:9c:14:f1:38:89:db:23:91:1d: b2:ad:e5:49:05:5f:f1:50:37:61:9a:45:67:0d:b3: 63:4f:65:ac:fd:58:91:b4:76:cf:78:1a:23:ae:df: b2:60:a2:bd:dc:3a:41:90:d5:b8:6d:c5:b6:27:b3: 58:db:f3:0b:52:1b:98:be:48:e8:9f:4e:ae:68:43: c5:77:ca:99:6b:4a:41:04:60:32:47:9f:97:b0:75: 0b:4f:84:99:09:35:81:b1:50:41:21:34:be:85:2a: e8:08:65:d3:d4:d0:2d:4e:25:51:1c:ea:1d:9e:00: ff:df:78:57:7c:36:92:d9:c6:27:02:bb:e6:8d:d8: db:ac:99:2b:52:90:28:35:8e:9e:5c:4c:16:e8:e2: 24:52:4b:ea:a4:38:44:23:63:68:ec:49:00:d5:82: 5c:e2:12:64:64:66:51:0f:e0:17:8d:1f:90:85:14: 2f:1a:90:74:94:a2:cf:66:da:b2:ea:fe:c0:82:78: 20:35:f4:95:58:93:bc:e9:de:89:72:65:8b:3a:53: 7a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1C:89:E7:95:06:AA:FC:17:42:AC:87:D0:FF:2F:3B:4C:B6:42:41 X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e5:39:c7:e3:29:ea:32:fb:05:44:51:be:b5:fd:94:82:84: 6c:da:4d:08:68:0e:63:d2:32:7d:96:09:48:7c:1d:9f:74:15: 8f:09:a4:d8:01:68:8c:40:32:fc:b0:de:a2:c7:d2:87:83:cd: d9:3a:04:25:5e:c8:6d:78:0a:f2:71:c4:8a:a8:b5:31:82:d8: bc:92:02:6c:06:a6:79:6b:7b:7a:7c:e5:3d:1a:54:40:a3:0e: 70:56:0a:2c:a9:70:9b:ed:28:9b:dc:16:43:c0:9c:ef:ee:7f: 4b:5b:6c:3a:05:91:28:cc:8d:7c:a9:a1:04:f9:4b:63:03:63: 06:2d:7f:36:84:78:91:45:6c:d6:00:17:87:d4:2e:d7:df:ea: 0e:13:13:ba:fb:bd:05:7c:60:c0:72:ca:cc:8b:7b:e7:dc:8e: 03:c3:d3:77:96:83:fd:33:6a:d2:85:ae:74:63:c1:c3:8c:7e: 62:ce:88:ba:1d:ef:37:99:af:9c:1f:66:21:f7:5a:43:df:5d: 9f:6b:82:9f:eb:0c:40:94:f1:71:9a:21:4d:c6:c2:89:61:83: 06:3a:54:6d:85:27:72:bf:a4:79:f5:ec:dc:a4:82:89:60:1c: cf:32:41:26:f3:47:ae:a2:39:18:f7:11:35:e2:fd:4c:9e:d1: e3:ad:04:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8c4j3bc37LxUZ60BTBvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjYwMzI1MTcwMTM3WhcNMjYwMzI2MTcwMTM3WjAzMTEwLwYDVQQD EyhkMDFjODllNzk1MDZhYWZjMTc0MmFjODdkMGZmMmYzYjRjYjY0MjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1DV+Kai9Sg5OWAvjl2SuDdefnQX Wd7x21LUGAtB9gRgkdQkMRKn8hngJdhemDWZGMecFPE4idsjkR2yreVJBV/xUDdh mkVnDbNjT2Ws/ViRtHbPeBojrt+yYKK93DpBkNW4bcW2J7NY2/MLUhuYvkjon06u aEPFd8qZa0pBBGAyR5+XsHULT4SZCTWBsVBBITS+hSroCGXT1NAtTiVRHOodngD/ 33hXfDaS2cYnArvmjdjbrJkrUpAoNY6eXEwW6OIkUkvqpDhEI2No7EkA1YJc4hJk ZGZRD+AXjR+QhRQvGpB0lKLPZtqy6v7AgnggNfSVWJO86d6JcmWLOlN6MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAcieeVBqr8F0Ksh9D/LztMtkJBMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuU5x+Mp 6jL7BURRvrX9lIKEbNpNCGgOY9IyfZYJSHwdn3QVjwmk2AFojEAy/LDeosfSh4PN 2ToEJV7IbXgK8nHEiqi1MYLYvJICbAameWt7enzlPRpUQKMOcFYKLKlwm+0om9wW Q8Cc7+5/S1tsOgWRKMyNfKmhBPlLYwNjBi1/NoR4kUVs1gAXh9Qu19/qDhMTuvu9 BXxgwHLKzIt759yOA8PTd5aD/TNq0oWudGPBw4x+Ys6Iuh3vN5mvnB9mIfdaQ99d n2uCn+sMQJTxcZohTcbCiWGDBjpUbYUncr+kefXs3KSCiWAczzJBJvNHrqI5GPcR NeL9TJ7R460Epg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:14:57 2026 by rpki-client