$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft File: QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft (raw, json) Hash identifier: 7mze90FcdYFncpIHfWG5RqqhjYxUwAyxQ6a0qG8LJxA= Subject key identifier: 11:D2:00:87:A7:BF:56:FC:CB:8D:2E:76:03:4A:17:47:35:E8:97:32 Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01 Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601 Certificate serial: 019F8FECDEE7EDB4C8A55242A551918387E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft Manifest number: 8E Signing time: Thu 23 Jul 2026 17:01:33 +0000 Manifest this update: Thu 23 Jul 2026 17:01:33 +0000 Manifest next update: Fri 24 Jul 2026 17:01:33 +0000 Files and hashes: 1: 6dRsLJ5J69_rsQXIRHXOC2z_5dE.roa (hash: 0D/9pUz1X/JKKYGr6Ne59g8RhrUlGqsuwmmjDLCy+xw=) 2: 6vCqSCljarDUm6oxxIQ3pb1kZFw.roa (hash: FMFFPXye46qkgvJliwSmSLxawUDf9GZDVDx3/Z/BmJg=) 3: 9yQGkkXLY2SjMk3ofHN9n9AOjAw.roa (hash: 6v5FooBFPlNcj3CIoSY6V5TUldi3HdcfQsKbbuK5ckw=) 4: PJ_jioxmLxcDnha-FB_7Vus0t90.roa (hash: usfBZ7XbPR3qgBCcWBidJH7g+h7DoTle8N8w4lI8oi8=) 5: PVCcQmI2SgCfbrBKYY0xG8ceVoM.roa (hash: pkuMcdQl6fAIHotWZ6+CDU0TIlFjqMVbIxB1y/FPDPk=) 6: QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl (hash: dIeLt4/Xx0w0trJolhvZG1Imjv/baxHJdlH3nrmdBxI=) 7: ZI1C6kpl1fygAOupoQLDpI2qIHk.roa (hash: 2rDkKTdgpnSAscOgBKZLbFYT0EC5MtpFd3ePaAsy4fA=) 8: dx088tz4yp8SQ2tSYQowVH2RQCE.roa (hash: 8IVXNftvm3WNRoR3lMTcXpcMyufwOCjbFzelGNZJm5I=) 9: huGtq-TwlrsWgMkwCnYXBiUSweg.roa (hash: 5p3EHDIXaD9vA9oM+gSTGnbNogqLtbPEKfIBy7VfLCg=) 10: mXzkFe9bauTYIaTDwOKdOJ0yfAU.roa (hash: l98XRtS1wgtlcBD6oEDM0WuwXV7XXU7PGiNFDVtdljc=) 11: pjUS_mOdAQkT8Mwp33PthGs91rk.roa (hash: 6c7v04wHaxp7RBDGOaNgM78OexORbvTnr1auoKcKJB8=) 12: rf6iE9bL_Jc3yUEk2yU5-ovRnRw.roa (hash: 91pPyyuYw+iWn/WwlKICOrKpos1He+0f6hjKAqBSgW8=) 13: sCEAxknZqHojuPgI-hamnESni0Q.roa (hash: +6bM4LTd2rktWJg2HPrxf5zyLZEKCJSlzH9OXq9Pipc=) 14: vj-CnS2eD-mKhxj15kU5Iw7O-m0.roa (hash: 9Zrvlk93HfFFexDP9WgjOb/FIItY1zvP6jk5M74kDcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:ec:de:e7:ed:b4:c8:a5:52:42:a5:51:91:83:87:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42239fb9af128428f84fed9f358686717ed97601 Validity Not Before: Jul 23 17:01:33 2026 GMT Not After : Jul 24 17:01:33 2026 GMT Subject: CN=11d20087a7bf56fccb8d2e76034a174735e89732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:01:13:8f:da:fd:e7:58:b6:7a:62:ae:22: 03:9f:11:aa:2f:d4:3b:06:6e:10:8f:db:86:00:9f: da:48:15:d2:55:94:b4:2b:e7:62:5b:3d:b3:d1:14: 85:a7:f7:91:04:8b:b8:68:b3:3a:1c:c9:21:3d:8b: b2:bc:f1:8d:54:77:d2:7e:41:0e:06:ba:25:db:6d: bd:b3:41:70:db:75:98:03:82:6f:c1:c5:2d:64:88: 68:e2:18:b1:24:08:e3:d6:fa:d2:a0:e5:7f:f5:38: 5a:25:05:6f:ff:c3:0d:91:00:32:f8:7f:8f:e4:1f: a0:d2:9a:11:b0:5b:7d:d4:d9:db:01:08:3e:b0:dd: 33:da:77:cc:80:5a:4a:3a:9a:87:a4:72:e6:99:1a: 90:00:e7:e9:26:30:ab:61:53:d9:68:16:9e:e6:0e: e3:ee:eb:f6:ae:92:ef:4a:0e:0d:76:72:db:59:3d: ac:86:26:2a:27:4d:45:9b:dd:2e:bd:92:a7:85:74: 6c:0b:f2:d7:e5:7f:bd:ae:00:e0:93:4c:06:04:87: 98:23:f0:3a:03:7f:4e:26:99:04:37:dd:95:46:70: 5f:8c:77:95:b5:ba:00:c5:17:99:11:c2:78:2e:a2: c7:6c:c4:21:9c:37:3c:e7:c5:b2:0e:e2:0e:91:4b: 03:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D2:00:87:A7:BF:56:FC:CB:8D:2E:76:03:4A:17:47:35:E8:97:32 X509v3 Authority Key Identifier: keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5b:6e:ad:6d:84:bd:16:48:d0:98:7d:ef:67:d3:12:db:a2: 43:e5:40:d1:1c:20:f2:8c:8b:e7:33:88:12:62:24:79:b8:00: 82:0c:bc:09:49:88:b4:22:a9:3c:13:a8:09:12:58:5b:a1:6f: b1:9e:01:3e:76:6e:fa:7f:fd:a8:c9:2d:3f:3e:d1:92:3e:f0: c0:8e:a3:34:c3:a6:98:4b:b9:e9:a4:b3:5c:1b:92:d4:94:67: b8:d3:1b:13:45:6d:4c:93:e8:5b:93:db:9f:9b:73:2c:92:52: 55:0e:5b:cf:cf:2d:6e:98:b3:b1:ae:55:cc:6e:33:26:88:7f: 11:7e:f4:2d:4b:85:ad:77:6e:d7:43:9c:9a:cd:3e:cc:68:3d: 19:bb:37:a2:0a:5f:e5:1d:e0:41:a9:dc:36:d0:d2:85:3d:8d: 64:3d:74:dd:af:de:cb:4e:98:6c:69:21:6f:da:b8:6f:b1:75: b9:98:96:bf:16:ce:30:39:ae:6a:83:48:05:55:6d:b1:cc:b8: 05:ec:c7:f3:f0:e6:78:cd:3a:9a:44:6f:46:c6:f2:82:7e:60: b4:09:d6:46:7a:6a:c9:f4:1a:99:58:f1:46:41:c2:13:95:1d: 97:63:91:d0:d1:bc:59:8a:db:e2:ec:73:66:b1:ee:e1:61:29: 93:f9:d2:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+P7N7n7bTIpVJCpVGRg4fmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk OTc2MDEwHhcNMjYwNzIzMTcwMTMzWhcNMjYwNzI0MTcwMTMzWjAzMTEwLwYDVQQD EygxMWQyMDA4N2E3YmY1NmZjY2I4ZDJlNzYwMzRhMTc0NzM1ZTg5NzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9kBE4/a/edYtnpiriIDnxGqL9Q7 Bm4Qj9uGAJ/aSBXSVZS0K+diWz2z0RSFp/eRBIu4aLM6HMkhPYuyvPGNVHfSfkEO Brol2229s0Fw23WYA4JvwcUtZIho4hixJAjj1vrSoOV/9ThaJQVv/8MNkQAy+H+P 5B+g0poRsFt91NnbAQg+sN0z2nfMgFpKOpqHpHLmmRqQAOfpJjCrYVPZaBae5g7j 7uv2rpLvSg4NdnLbWT2shiYqJ01Fm90uvZKnhXRsC/LX5X+9rgDgk0wGBIeYI/A6 A39OJpkEN92VRnBfjHeVtboAxReZEcJ4LqLHbMQhnDc858WyDuIOkUsDQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHSAIenv1b8y40udgNKF0c16JcyMB8GA1UdIwQY MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt YmM1NDAzYWMyYTk1LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1 LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlturW2E vRZI0Jh972fTEtuiQ+VA0Rwg8oyL5zOIEmIkebgAggy8CUmItCKpPBOoCRJYW6Fv sZ4BPnZu+n/9qMktPz7Rkj7wwI6jNMOmmEu56aSzXBuS1JRnuNMbE0VtTJPoW5Pb n5tzLJJSVQ5bz88tbpizsa5VzG4zJoh/EX70LUuFrXdu10Ocms0+zGg9Gbs3ogpf 5R3gQancNtDShT2NZD103a/ey06YbGkhb9q4b7F1uZiWvxbOMDmuaoNIBVVtscy4 BezH8/DmeM06mkRvRsbygn5gtAnWRnpqyfQamVjxRkHCE5Udl2OR0NG8WYrb4uxz ZrHu4WEpk/nSfA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:58:32 2026 by rpki-client