$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft File: QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft (raw, json) Hash identifier: y//qdn2XnLMAwJ0Dr2IK19Zrq/f5ZdTUcx9RG13wyN8= Subject key identifier: 21:61:1D:FD:05:EC:97:1A:2E:FA:AC:0E:BA:E0:CC:5E:31:3B:E4:A8 Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01 Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601 Certificate serial: 01A0D3CB5B440222A48A35DB5C132D8E8662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft Manifest number: 0147 Signing time: Thu 24 Sep 2026 14:21:54 +0000 Manifest this update: Thu 24 Sep 2026 14:21:54 +0000 Manifest next update: Fri 25 Sep 2026 14:21:54 +0000 Files and hashes: 1: 3qoIBwz-xedO9jRzTzy4DGdkWwo.roa (hash: GQhcn7OvGWdbQup4t80647PnHSSSSzzaKi6fwjkWZdQ=) 2: 4EEj2r6-0zg77-9LmRLFaGfhLMY.roa (hash: 5E2E41KFCJgyXV96c5tUCWpJksDB+SLI1u4sOWUbURU=) 3: 4auopH8HYhskCZ6Wma5Rxt0YU-c.roa (hash: PJOlExW0qpZ4oBm20Y7+5eFA9pSEzceKHwaf65CO2fk=) 4: 6dRsLJ5J69_rsQXIRHXOC2z_5dE.roa (hash: 0D/9pUz1X/JKKYGr6Ne59g8RhrUlGqsuwmmjDLCy+xw=) 5: 6vCqSCljarDUm6oxxIQ3pb1kZFw.roa (hash: FMFFPXye46qkgvJliwSmSLxawUDf9GZDVDx3/Z/BmJg=) 6: 7E0iGhIJMLjKuCq4VkcbWhyrX2s.roa (hash: 5/xJFFQGFDjBCc0nOCpqDKkNYtuhRuqciToBtBX9kPk=) 7: Ae9NgFUrZ24-MFo9mbb0PNVhf0o.roa (hash: nzXxYj43d9I7O16caiUA6up/fb49HJG+wWUtle/NK7s=) 8: C8GLItBTc7LeEh4YEv8MJPqqn-A.roa (hash: l23szhZCC7lohODost6cu88YHLhEqP3V82zlkvFSQlM=) 9: C9K1zDOrWivu0i4RJNU_JzXkJ4c.roa (hash: bu28QNRasHCLUh3QPNYSsubXRbLfQuCNJVxwI8RV21A=) 10: PJ_jioxmLxcDnha-FB_7Vus0t90.roa (hash: usfBZ7XbPR3qgBCcWBidJH7g+h7DoTle8N8w4lI8oi8=) 11: PimXOa23JEXWIAp_qIZHDoaVePw.roa (hash: SmAfl/7LGpnryLs06E4qciizdQdOw5QFfSrY4VJRxWo=) 12: PyEiKXW-MFeUsxgJvPSxSypMYzA.roa (hash: fYqA6TVnMyOPbIxiZxa+pJruj5C7sxyk5Sn3OnstCZc=) 13: QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl (hash: RGigTjSDVghSp/Q1KNc68aGCssjlPuEeTIVO3pIVL7w=) 14: TsvYXD64dnH0sE6kMCm6u7cclx8.roa (hash: k/aKyVRivoatxUr6MSWr9sKRY6Rc9FVbIl/mMzO6j58=) 15: ZI1C6kpl1fygAOupoQLDpI2qIHk.roa (hash: 2rDkKTdgpnSAscOgBKZLbFYT0EC5MtpFd3ePaAsy4fA=) 16: hLjzhC6zlW-8JNijhQDWdHUx0bs.roa (hash: 2UJC5xVp6d8lEhQO2ClkfoFryaKXGhRJ5WI4vM07GO8=) 17: kcePCKzvaynPMcOcncgWdRTciAw.roa (hash: VoyMtWcSClIGZJ+3GqazzBfLJsmwXioFS3B12uTWD1k=) 18: mXzkFe9bauTYIaTDwOKdOJ0yfAU.roa (hash: l98XRtS1wgtlcBD6oEDM0WuwXV7XXU7PGiNFDVtdljc=) 19: pjUS_mOdAQkT8Mwp33PthGs91rk.roa (hash: 6c7v04wHaxp7RBDGOaNgM78OexORbvTnr1auoKcKJB8=) 20: rf6iE9bL_Jc3yUEk2yU5-ovRnRw.roa (hash: 91pPyyuYw+iWn/WwlKICOrKpos1He+0f6hjKAqBSgW8=) 21: sCEAxknZqHojuPgI-hamnESni0Q.roa (hash: +6bM4LTd2rktWJg2HPrxf5zyLZEKCJSlzH9OXq9Pipc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d3:cb:5b:44:02:22:a4:8a:35:db:5c:13:2d:8e:86:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42239fb9af128428f84fed9f358686717ed97601 Validity Not Before: Sep 24 14:21:54 2026 GMT Not After : Sep 25 14:21:54 2026 GMT Subject: CN=21611dfd05ec971a2efaac0ebae0cc5e313be4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:29:53:00:6b:da:1b:28:9c:8b:8d:5f:f4: 72:07:8b:8b:a8:10:9f:79:e8:b1:6c:14:be:ce:57: 05:72:95:26:77:42:d2:5a:1c:5f:ed:2e:65:79:eb: 80:1c:e1:6f:f3:11:cf:e3:56:cd:36:61:9b:4c:45: 7a:22:dc:ae:38:2f:af:7a:97:68:53:df:04:c6:7a: d9:9f:d1:ca:f4:2e:d9:5f:91:67:fa:dd:47:4d:78: c6:53:d4:39:3b:1f:7f:c9:03:b2:d2:81:31:b5:1c: cd:16:cd:e6:a1:06:1e:2d:ea:d9:8a:01:3f:e7:9a: 5a:5e:eb:4e:38:e5:fa:80:2e:d4:c4:6d:3e:2a:f0: 88:9f:bf:88:7a:eb:dc:10:e0:30:cf:a7:f2:34:78: 55:b9:68:4c:4c:30:0d:6a:e5:98:26:a1:10:be:f2: 81:2c:27:a3:1a:56:05:47:b8:4c:72:a8:54:ff:1e: 0a:d5:71:03:2b:19:e2:fd:30:2c:ce:c4:29:f5:42: 88:39:57:0a:be:ea:91:f8:e1:20:f5:b8:a2:55:1a: 35:a6:1c:8f:57:df:62:e1:bf:13:0a:2e:ef:0b:e1: 0f:dd:56:dc:c8:c2:c6:9b:e2:64:32:a3:28:a9:25: 52:e2:3d:cf:c8:d5:97:1a:02:7f:11:6b:f1:17:a2: 14:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:61:1D:FD:05:EC:97:1A:2E:FA:AC:0E:BA:E0:CC:5E:31:3B:E4:A8 X509v3 Authority Key Identifier: keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:eb:e2:d3:20:62:0f:b1:e1:63:12:f9:78:cf:94:bb:67:99: 1c:af:3f:90:78:2d:ce:87:c1:df:2e:94:37:d0:50:64:ae:c7: 30:be:12:31:7e:ae:c2:52:40:67:54:31:8a:e7:76:33:e4:63: 47:d9:3a:01:c3:cf:f0:22:b7:e7:1c:c5:91:6f:74:89:2b:db: 24:2d:50:fd:ee:cc:6b:54:0e:94:93:c6:93:92:cf:12:ae:1b: e1:32:1d:b7:23:63:a9:40:32:11:bf:3d:d2:3f:fc:df:bd:f8: e2:c3:52:ef:28:b5:78:6d:81:56:52:f4:a3:3c:aa:65:97:82: 40:15:3c:4b:29:0a:13:48:2d:cf:58:ea:cb:45:ce:c3:49:b1: 3d:fd:b7:ff:68:0f:fe:26:97:f8:3b:ed:52:66:2f:5d:27:cc: bf:2b:24:f8:2f:f0:52:85:8f:8e:82:97:82:2d:be:f9:6a:58: 5e:f2:bb:ce:d2:ec:89:22:8d:b3:05:71:fb:56:12:7d:cf:d8: 4a:2b:29:55:38:03:c1:cd:b5:95:ee:72:fe:16:85:ed:e8:be: 15:46:c9:83:06:8d:1c:56:c5:03:4d:6d:a3:15:af:4a:ea:15: 9d:e7:ad:3a:dd:bc:d9:29:7c:54:01:54:3d:49:d9:b3:6f:f5: cb:bd:38:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDTy1tEAiKkijXbXBMtjoZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk OTc2MDEwHhcNMjYwOTI0MTQyMTU0WhcNMjYwOTI1MTQyMTU0WjAzMTEwLwYDVQQD EygyMTYxMWRmZDA1ZWM5NzFhMmVmYWFjMGViYWUwY2M1ZTMxM2JlNGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCwpUwBr2hsonIuNX/RyB4uLqBCf eeixbBS+zlcFcpUmd0LSWhxf7S5leeuAHOFv8xHP41bNNmGbTEV6ItyuOC+vepdo U98ExnrZn9HK9C7ZX5Fn+t1HTXjGU9Q5Ox9/yQOy0oExtRzNFs3moQYeLerZigE/ 55paXutOOOX6gC7UxG0+KvCIn7+IeuvcEOAwz6fyNHhVuWhMTDANauWYJqEQvvKB LCejGlYFR7hMcqhU/x4K1XEDKxni/TAszsQp9UKIOVcKvuqR+OEg9biiVRo1phyP V99i4b8TCi7vC+EP3VbcyMLGm+JkMqMoqSVS4j3PyNWXGgJ/EWvxF6IU5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFhHf0F7JcaLvqsDrrgzF4xO+SoMB8GA1UdIwQY MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt YmM1NDAzYWMyYTk1LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1 LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuvi0yBi D7HhYxL5eM+Uu2eZHK8/kHgtzofB3y6UN9BQZK7HML4SMX6uwlJAZ1Qxiud2M+Rj R9k6AcPP8CK35xzFkW90iSvbJC1Q/e7Ma1QOlJPGk5LPEq4b4TIdtyNjqUAyEb89 0j/837344sNS7yi1eG2BVlL0ozyqZZeCQBU8SykKE0gtz1jqy0XOw0mxPf23/2gP /iaX+DvtUmYvXSfMvysk+C/wUoWPjoKXgi2++WpYXvK7ztLsiSKNswVx+1YSfc/Y SispVTgDwc21le5y/haF7ei+FUbJgwaNHFbFA01toxWvSuoVneetOt282Sl8VAFU PUnZs2/1y704rQ== -----END CERTIFICATE-----Generated at Thu Sep 24 23:34:33 2026 by rpki-client