$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft File: qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json) Hash identifier: Oym4xyIpQ/6P+1eKevtX6s8at8VcpvTEM5AKy0pDl+U= Subject key identifier: 78:C3:52:C0:CB:BE:9D:0F:00:D9:FA:37:3C:7D:E0:1E:7D:80:F1:AA Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00 Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00 Certificate serial: 019E1C471C486BECB12FE09220D96F429345 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft Manifest number: 138E Signing time: Tue 12 May 2026 13:01:22 +0000 Manifest this update: Tue 12 May 2026 13:01:22 +0000 Manifest next update: Wed 13 May 2026 13:01:22 +0000 Files and hashes: 1: Ak6u31He6A4CRCNJ-mPt0nCtwZU.roa (hash: 7MkMOyLE5GlfXjuXXJbB4yn5qJnSvZNuEM4M9yp+Ggg=) 2: J4F6hmO4Edi1GJ1rYixOAYPJtKw.asa (hash: duHFJJFX3I0YlZcUnlx39bgebUrlvDxKVBOAIrt4NF8=) 3: c7fgla_dSX-z5KFPVPyl6usE9oA.asa (hash: m9vQeSG4KsIradAMsd9ae2Gv66PLCXXvhHDN7ENT3BQ=) 4: dx3-AQN3WL647_MWerdOTTLQl5c.asa (hash: /71UZPa2NLWcdNywVSl2z1VdiqE2Rm6tSY8lOSE+s/E=) 5: gg1rsNo7V5zof6nPOy2P8woJ0Io.roa (hash: ggRo1SvW34/PLbqz4mYFAX1SvQ/7Sh6bs05rEKb+rC8=) 6: iKaObausadYfw9kPgxecbJ9r-pc.roa (hash: Oqhnf7OZmJjBnoTR4PKybtGL6ocdLnBasrpV7eemX80=) 7: mm9YPqzrw5zY5U3H2B6nLzTqSrA.roa (hash: g53CFeW1Ry00+6lkqgMlD1le2EyIkmKgf8pBvIsao8s=) 8: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: 8dq4YnaT8KmbtdXQodYDlkXkjrcfg7B+W1T30597zig=) 9: u_hh95Vwkks4UP2ORaA383yO97Y.asa (hash: +9FNPQckA3MOMNlYIUC/m8OKXVehox9XWsT4hl75IHk=) 10: yRURA_ME4G4HnmjS22RzxWlBmrg.roa (hash: Bbk1x9eZaB94lGJyLOYQomUSMw9B6/AIocIUkwMP9Pc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:47:1c:48:6b:ec:b1:2f:e0:92:20:d9:6f:42:93:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00 Validity Not Before: May 12 13:01:22 2026 GMT Not After : May 13 13:01:22 2026 GMT Subject: CN=78c352c0cbbe9d0f00d9fa373c7de01e7d80f1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:16:13:d7:df:46:93:45:63:63:5f:a4:09:42: bf:3f:d3:76:50:08:ec:5b:f3:a8:d3:cc:22:ca:ec: 8a:1a:6c:48:9b:88:5e:6d:d8:ad:83:57:29:6b:06: 08:51:5a:9e:20:fe:20:3d:0f:e3:56:af:43:34:e2: af:01:94:71:3b:e2:55:23:3e:b0:8d:64:3c:38:53: 0e:b9:64:25:f6:48:af:ad:32:6a:ee:8a:dd:e8:1f: dd:ca:91:07:24:b7:4f:a9:89:b7:a2:13:e5:81:f1: e2:29:31:12:e6:80:8a:d6:4c:ce:1d:77:c9:ca:b8: 51:25:94:37:ec:0d:84:3a:0b:4d:1f:03:8b:36:07: 82:9c:25:4f:70:8a:c3:bb:fc:57:2e:1b:e2:0f:aa: 3f:f7:40:dc:ad:3d:a8:1a:b5:86:7e:bd:57:16:6f: 78:6c:f1:f5:59:48:6e:2d:f5:b2:c6:d8:ad:dc:f0: 86:1b:d8:0b:22:a3:2d:df:ae:f6:fa:a2:1c:71:e8: ef:c1:f3:81:25:2d:83:b0:91:aa:94:0d:e2:ce:38: a9:0a:35:98:71:f1:ed:4f:7c:fd:61:ad:f2:89:fd: 39:a0:67:64:2f:c5:38:a0:7f:9f:a6:20:25:7f:84: 7b:c3:60:10:cd:6b:6e:7d:06:32:2a:ec:13:24:d6: 8e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C3:52:C0:CB:BE:9D:0F:00:D9:FA:37:3C:7D:E0:1E:7D:80:F1:AA X509v3 Authority Key Identifier: keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:00:a2:d4:88:d0:d3:08:d5:2f:0d:59:de:2d:84:8d:ca:7c: 2d:f9:df:14:dc:88:87:a0:9c:62:8c:d2:ac:ce:80:73:cf:d2: dd:6c:0d:4a:28:18:46:52:e1:53:a8:63:0e:68:13:f9:8b:19: f9:40:2c:49:28:b8:ba:d9:7d:4f:76:18:5d:f7:9d:ed:d2:fc: 26:cf:e6:ac:98:86:3a:4a:c1:7c:f2:20:4c:95:3b:b6:80:d6: e5:53:06:9c:11:2c:3f:a4:8e:5f:cf:24:ed:71:c9:a9:e5:5e: 78:bb:22:a8:69:be:fe:a3:3f:f8:3b:0d:e9:62:75:35:78:7b: f0:ca:c5:41:f5:f8:71:f9:a8:0d:23:19:8b:f3:d5:65:1b:b9: 54:05:91:7f:47:d7:e7:87:37:00:66:88:b6:c8:67:84:f6:d3: 2b:05:fb:78:61:3c:7a:ca:7f:2f:ba:18:c8:36:f0:5b:b2:4b: 92:36:19:d7:e4:a3:20:4a:af:2b:8f:25:df:54:19:3c:5b:60: 4b:aa:85:8b:fd:9f:9a:5e:2f:ed:f6:d3:ea:a1:10:c5:17:e0: dc:30:f6:30:b4:51:81:9c:79:8b:45:a9:97:95:5c:01:8a:dd: c3:20:21:85:80:b3:a9:d3:31:0d:c1:dd:ec:ff:ff:a5:bd:e0: e4:66:cb:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4cRxxIa+yxL+CSINlvQpNFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNDRlYjA5MWIzYTMzYTg3YmViOGUwMDRhYjE1ZWYxNzhm YmFhMDAwHhcNMjYwNTEyMTMwMTIyWhcNMjYwNTEzMTMwMTIyWjAzMTEwLwYDVQQD Eyg3OGMzNTJjMGNiYmU5ZDBmMDBkOWZhMzczYzdkZTAxZTdkODBmMWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshYT199Gk0VjY1+kCUK/P9N2UAjs W/Oo08wiyuyKGmxIm4hebditg1cpawYIUVqeIP4gPQ/jVq9DNOKvAZRxO+JVIz6w jWQ8OFMOuWQl9kivrTJq7ord6B/dypEHJLdPqYm3ohPlgfHiKTES5oCK1kzOHXfJ yrhRJZQ37A2EOgtNHwOLNgeCnCVPcIrDu/xXLhviD6o/90DcrT2oGrWGfr1XFm94 bPH1WUhuLfWyxtit3PCGG9gLIqMt3672+qIccejvwfOBJS2DsJGqlA3izjipCjWY cfHtT3z9Ya3yif05oGdkL8U4oH+fpiAlf4R7w2AQzWtufQYyKuwTJNaObwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjDUsDLvp0PANn6Nzx94B59gPGqMB8GA1UdIwQY MBaAFKpE6wkbOjOoe+uOAEqxXvF4+6oAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjkt NzcwMGUyNWZmNzY5LzEvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjktNzcwMGUyNWZmNzY5 LzEvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEACi1IjQ 0wjVLw1Z3i2Ejcp8LfnfFNyIh6CcYozSrM6Ac8/S3WwNSigYRlLhU6hjDmgT+YsZ +UAsSSi4utl9T3YYXfed7dL8Js/mrJiGOkrBfPIgTJU7toDW5VMGnBEsP6SOX88k 7XHJqeVeeLsiqGm+/qM/+DsN6WJ1NXh78MrFQfX4cfmoDSMZi/PVZRu5VAWRf0fX 54c3AGaItshnhPbTKwX7eGE8esp/L7oYyDbwW7JLkjYZ1+SjIEqvK48l31QZPFtg S6qFi/2fml4v7fbT6qEQxRfg3DD2MLRRgZx5i0Wpl5VcAYrdwyAhhYCzqdMxDcHd 7P//pb3g5GbLXQ== -----END CERTIFICATE-----Generated at Tue May 12 21:23:22 2026 by rpki-client