$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: 9YzDLIBnm1u52dK+lZG2sUoKeVnzviaAi2r4uBlYLqk= Subject key identifier: 92:0A:6C:72:9D:A1:0F:26:1E:FC:51:F2:B5:6B:E6:DD:4E:DE:C3:16 Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 01A1DCB966CA419AD4A0B57DCE47EA1E94FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: 02E4 Signing time: Sun 15 Nov 2026 01:01:40 +0000 Manifest this update: Sun 15 Nov 2026 01:01:40 +0000 Manifest next update: Mon 16 Nov 2026 01:01:40 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: 0WKWQVtcouUkjGi/BqxebQio1e71ieC1/ej1pWOaAj8=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:b9:66:ca:41:9a:d4:a0:b5:7d:ce:47:ea:1e:94:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: Nov 15 01:01:40 2026 GMT Not After : Nov 16 01:01:40 2026 GMT Subject: CN=920a6c729da10f261efc51f2b56be6dd4edec316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:05:49:b9:1f:df:0b:53:61:6a:09:63:de:4e: 05:d9:19:5a:66:69:6d:9f:54:14:ec:05:0d:39:8e: 5a:1f:c5:0b:9c:dd:8e:b9:4a:bc:03:33:bb:41:94: e4:99:c8:b8:35:34:23:13:31:aa:25:34:d2:5d:0b: e8:2d:61:cf:0f:4f:d4:3c:86:9c:f5:87:73:f4:83: d3:ce:bd:59:25:f2:3b:a6:50:0f:dd:c2:78:a5:93: b2:67:44:eb:d7:49:59:1c:b4:e1:df:7e:cf:f4:e4: 4a:96:84:0a:66:1a:41:82:b4:72:d8:8c:8e:59:24: 92:88:a1:f8:3f:aa:9c:22:b5:65:22:64:a4:1d:20: 5c:5e:4f:cb:30:78:e6:54:30:41:8a:b1:ca:a4:d4: 8d:a1:66:c9:e0:fd:53:e5:18:6e:5e:02:d5:e6:c7: 7e:30:3c:a6:4a:b1:dd:ce:cc:03:89:b6:76:a9:0b: a8:15:41:9d:a4:49:8f:99:cc:59:37:6d:ed:4a:34: 18:46:50:84:fb:82:d9:9d:39:d8:58:2a:22:12:db: a9:63:8b:09:87:1b:8a:6d:9d:51:ac:57:49:23:af: b4:68:23:d0:84:7a:fc:c9:c9:e1:9c:7f:9a:eb:28: 9e:be:27:88:4f:e7:ed:ab:90:7d:3e:d0:e5:94:a1: 4e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0A:6C:72:9D:A1:0F:26:1E:FC:51:F2:B5:6B:E6:DD:4E:DE:C3:16 X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bb:fe:b9:30:f5:f0:4c:ae:e7:c9:97:88:f6:98:cc:87:60: 05:9b:77:d5:76:bc:7e:9e:c0:5c:ea:79:6f:97:16:8e:db:08: 35:8f:bd:04:cb:0a:e8:fa:81:ff:45:10:0a:0d:db:c1:c8:17: 24:70:34:26:70:a7:55:0e:97:50:cf:44:da:ff:e7:81:5f:64: 96:8a:97:60:09:c7:8d:60:fe:a2:50:2a:f9:23:df:53:68:58: d6:d7:6f:ae:84:71:b1:f8:16:62:ce:4f:29:b1:f3:56:ec:f1: 2e:11:ae:de:63:f9:06:b3:55:af:b9:17:af:88:7d:cf:e7:3e: 5f:da:ca:0c:e2:e3:b0:26:29:8e:ee:ef:e2:db:de:28:01:7b: 43:b3:a1:bb:69:d1:ea:4d:36:a7:41:c4:15:58:23:2a:5f:23: 8a:7e:7b:0c:36:92:42:eb:80:8d:29:08:4d:21:84:42:6a:3e: ff:0d:fc:69:dd:25:7d:62:59:76:af:43:6b:ed:ab:51:ce:bd: f2:db:9b:09:cb:42:fc:35:e4:45:cd:bb:68:80:f5:6f:e7:fd: 45:47:fc:54:09:38:b2:b5:bf:7b:b4:3c:ab:97:53:0c:52:2f: 4f:d0:a5:09:12:c6:7b:0e:5c:69:65:ef:64:bc:b6:d4:53:42: e2:77:31:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcuWbKQZrUoLV9zkfqHpT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYxMTE1MDEwMTQwWhcNMjYxMTE2MDEwMTQwWjAzMTEwLwYDVQQD Eyg5MjBhNmM3MjlkYTEwZjI2MWVmYzUxZjJiNTZiZTZkZDRlZGVjMzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQVJuR/fC1Nhaglj3k4F2RlaZmlt n1QU7AUNOY5aH8ULnN2OuUq8AzO7QZTkmci4NTQjEzGqJTTSXQvoLWHPD0/UPIac 9Ydz9IPTzr1ZJfI7plAP3cJ4pZOyZ0Tr10lZHLTh337P9ORKloQKZhpBgrRy2IyO WSSSiKH4P6qcIrVlImSkHSBcXk/LMHjmVDBBirHKpNSNoWbJ4P1T5RhuXgLV5sd+ MDymSrHdzswDibZ2qQuoFUGdpEmPmcxZN23tSjQYRlCE+4LZnTnYWCoiEtupY4sJ hxuKbZ1RrFdJI6+0aCPQhHr8ycnhnH+a6yievieIT+ftq5B9PtDllKFOPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIKbHKdoQ8mHvxR8rVr5t1O3sMWMB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7v+uTD1 8Eyu58mXiPaYzIdgBZt31Xa8fp7AXOp5b5cWjtsINY+9BMsK6PqB/0UQCg3bwcgX JHA0JnCnVQ6XUM9E2v/ngV9kloqXYAnHjWD+olAq+SPfU2hY1tdvroRxsfgWYs5P KbHzVuzxLhGu3mP5BrNVr7kXr4h9z+c+X9rKDOLjsCYpju7v4tveKAF7Q7Ohu2nR 6k02p0HEFVgjKl8jin57DDaSQuuAjSkITSGEQmo+/w38ad0lfWJZdq9Da+2rUc69 8tubCctC/DXkRc27aID1b+f9RUf8VAk4srW/e7Q8q5dTDFIvT9ClCRLGew5caWXv ZLy21FNC4ncxCA== -----END CERTIFICATE-----Generated at Sun Nov 15 13:10:15 2026 by rpki-client