$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: cVLGoTMnA0jFfjB6nhGuRgiGqJEo6ms2F1BLjgemqTo= Subject key identifier: CD:A1:FE:85:74:BF:A6:AD:17:92:89:00:C0:8C:9E:79:D0:AD:03:0F Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 019E1CEB4CEA0A006FDEB460767314B43573 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: F3 Signing time: Tue 12 May 2026 16:00:43 +0000 Manifest this update: Tue 12 May 2026 16:00:43 +0000 Manifest next update: Wed 13 May 2026 16:00:43 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: 9mX4hQbN8JoorW9ZtqBk10Jw/TKTanz8CxVCr1K6IWI=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 16:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:eb:4c:ea:0a:00:6f:de:b4:60:76:73:14:b4:35:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: May 12 16:00:43 2026 GMT Not After : May 13 16:00:43 2026 GMT Subject: CN=cda1fe8574bfa6ad17928900c08c9e79d0ad030f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f2:57:e0:df:35:b5:0b:df:f1:ed:39:94:cb: 55:4f:b9:eb:c2:68:0b:40:41:dc:b3:0c:3a:33:6f: af:7d:76:1b:10:94:36:f8:ba:27:eb:59:f0:5c:94: 56:c3:47:17:aa:80:e0:b7:21:30:8a:04:07:a1:69: 55:e8:b0:2d:ef:81:a3:4c:b3:ca:44:5d:62:30:db: ae:9e:d4:77:a8:1d:06:c9:3c:32:fb:82:37:27:03: 65:f4:de:86:58:e8:15:45:1c:bd:be:79:b9:80:87: fe:4b:d1:c3:0c:46:e2:0b:6d:eb:ca:a0:94:14:6c: 15:a9:23:b3:6d:17:b9:67:f9:fb:77:2f:71:34:ce: 12:50:b7:6d:45:60:27:23:39:ac:94:0c:31:bb:82: a2:e0:b0:87:f6:ca:1b:19:29:a6:06:22:96:90:ef: 53:aa:29:1d:05:1c:44:3c:a3:06:ac:73:ca:38:8e: 91:46:96:21:b4:1d:a4:e7:5a:8b:33:d2:3a:65:53: 3e:cf:c8:c7:b8:a5:db:8c:84:32:5c:c0:1a:7f:f3: c7:e7:5a:41:84:a0:b0:df:2a:de:a4:9e:d7:9f:50: 99:05:41:7d:1a:7b:8e:15:48:6b:ed:07:31:ae:eb: 5a:7a:9d:2e:0f:fc:d4:9c:25:98:13:2e:22:48:6a: 05:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A1:FE:85:74:BF:A6:AD:17:92:89:00:C0:8C:9E:79:D0:AD:03:0F X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a2:ca:1d:dd:96:0e:14:84:fe:67:75:90:f8:3d:c5:2d:61: df:05:b0:cf:82:76:fb:d2:3b:59:94:58:3b:c3:9c:27:f0:1a: f1:13:ec:7a:f3:73:8d:95:cd:9c:65:6d:2a:94:27:05:90:5a: 88:29:a6:e9:e7:46:ba:ca:d0:03:f2:41:f4:78:cc:11:24:07: db:2b:88:f4:42:ce:b4:6d:27:9a:31:b3:e0:27:97:25:0e:32: be:62:cf:00:51:8a:ad:52:01:10:f8:34:44:cb:0a:8f:d7:69: c9:3d:0b:c2:45:ef:7a:45:93:99:f1:7d:67:95:cb:3d:d6:d9: 37:eb:49:e0:65:a8:a6:c1:38:cd:6d:57:c9:1b:48:2e:a9:b4: 4d:63:32:8c:20:96:01:8b:b3:2b:16:a8:07:90:7b:54:77:82: 17:de:61:b4:68:48:41:cd:8a:b6:ff:ad:86:34:5f:27:50:91: e6:5b:6e:2e:a5:a8:fd:0d:58:16:58:fa:05:81:99:49:29:18: 53:f3:eb:3b:b7:54:75:67:cc:a2:f9:8d:85:ad:a4:f1:1e:2d: eb:d4:f1:f3:3e:e9:b6:26:4e:e7:12:44:27:d7:90:04:45:d6: e6:54:a0:f7:17:9e:bc:0d:b0:12:fe:a0:3d:c5:13:fc:f5:43: a6:03:2d:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4c60zqCgBv3rRgdnMUtDVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYwNTEyMTYwMDQzWhcNMjYwNTEzMTYwMDQzWjAzMTEwLwYDVQQD EyhjZGExZmU4NTc0YmZhNmFkMTc5Mjg5MDBjMDhjOWU3OWQwYWQwMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vJX4N81tQvf8e05lMtVT7nrwmgL QEHcsww6M2+vfXYbEJQ2+Lon61nwXJRWw0cXqoDgtyEwigQHoWlV6LAt74GjTLPK RF1iMNuuntR3qB0GyTwy+4I3JwNl9N6GWOgVRRy9vnm5gIf+S9HDDEbiC23ryqCU FGwVqSOzbRe5Z/n7dy9xNM4SULdtRWAnIzmslAwxu4Ki4LCH9sobGSmmBiKWkO9T qikdBRxEPKMGrHPKOI6RRpYhtB2k51qLM9I6ZVM+z8jHuKXbjIQyXMAaf/PH51pB hKCw3yrepJ7Xn1CZBUF9GnuOFUhr7Qcxrutaep0uD/zUnCWYEy4iSGoF1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2h/oV0v6atF5KJAMCMnnnQrQMPMB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6LKHd2W DhSE/md1kPg9xS1h3wWwz4J2+9I7WZRYO8OcJ/Aa8RPsevNzjZXNnGVtKpQnBZBa iCmm6edGusrQA/JB9HjMESQH2yuI9ELOtG0nmjGz4CeXJQ4yvmLPAFGKrVIBEPg0 RMsKj9dpyT0LwkXvekWTmfF9Z5XLPdbZN+tJ4GWopsE4zW1XyRtILqm0TWMyjCCW AYuzKxaoB5B7VHeCF95htGhIQc2Ktv+thjRfJ1CR5ltuLqWo/Q1YFlj6BYGZSSkY U/PrO7dUdWfMovmNha2k8R4t69Tx8z7ptiZO5xJEJ9eQBEXW5lSg9xeevA2wEv6g PcUT/PVDpgMtPw== -----END CERTIFICATE-----Generated at Wed May 13 03:05:00 2026 by rpki-client