$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft File: QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json) Hash identifier: B76nXMzZU5lOhCQ2uN+2OjziZWLYwm1W9Lqwh7r9G5k= Subject key identifier: 45:3A:D3:F8:D7:5A:FA:A1:14:D4:1D:38:CE:55:11:FF:70:89:A9:B5 Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019E1DFEC4C10B1A34FBAC3117B840AD0A2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft Manifest number: 1920 Signing time: Tue 12 May 2026 21:01:36 +0000 Manifest this update: Tue 12 May 2026 21:01:36 +0000 Manifest next update: Wed 13 May 2026 21:01:36 +0000 Files and hashes: 1: 1-fuWQ0J7N3Mc1-LpV47OkEYJ6Pg.roa (hash: d64kZTOMQS3ywmOiCwM9goS+Zs55OgLIp48OWiE2tqI=) 2: 3qCviuOG-ueF_1VEjm9A7m4dsIk.roa (hash: sAL6XW3hWoRAGWp0+zVbTSYYIBh9Tr5DdziSNbosFMc=) 3: 4iREikE0FlzD4Lki3jJx6aaj7Ek.roa (hash: R85Lc2X5cjTiidE1qCVwRr469wMVOizgeXCdlpP24Do=) 4: 7F404ndf6WlAawVxH8uEqbUfNqg.roa (hash: 0vRuwJ86hGL2rgS3c27BsrNGgAqpwI3nuvZOYvEC2o8=) 5: 891fnCNTe0IKQYnO-ZqvxNgk-7k.roa (hash: VPRQl1y1jooeZjbup+JMP7DkoiYT1QAj+vISvPCzQ5U=) 6: Amhr13WKOrupDvbNhR-H8uA8vnQ.roa (hash: DunPwzqrWTpngKU5F7a27cbOD9P4pJ+IEPvx/MUiLIg=) 7: CRbc03vb_t7S-8OrjziURXlLPLs.roa (hash: AwT4/FD/dxBwMmMETo+hpYLUml8m4wGXejb2vnR3jvE=) 8: DmNgBVzwALAZpD0xt4gW0SabWP4.roa (hash: +HcyssYq+nPIZImlmBkQlaLU/HQWdmQa3/3LFcnfluc=) 9: Dq47WCi1_R3R9nKkOKnsCn37r54.roa (hash: 5JD7iNqs4qn/sy+bgp/hKnEbHR2EBc8c01xHZGOpYMA=) 10: EiEKEI95auMCB7NfQVwo9byU814.roa (hash: qJa+m44cB1n22XnwN3TBLrmdvt3RH9NDFwUuAESZSTE=) 11: JKDe6ScGUf5knBKSEZ3INxcpX_k.roa (hash: cP1FQRZP0bYy6TqBtYSmhv38p8stWSoSv7D1CesDGKo=) 12: N-ugS43QXCOLtMQg4hBDzZHSfs4.roa (hash: H5adi4ikfxvo36OYV+mOyefgvVd4tLYXrjrnT87kOLI=) 13: O3ilaHX6VJtoUZBeu1-BglPYb-I.roa (hash: PoRHXYKRSqCrsj4FltoRS6V1gs+nJ0Qsq87ffUhtPkI=) 14: PAfqhrbdkl_yRiUylPK1xIqq4lg.roa (hash: MoYNDn1wuFUbbeUFbkvj5yCW8TfAg9g5sltO0zCqY1Y=) 15: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: 5cQfdfgwlcfUee/T8CBEF84BGXe/KH6hlisOmz/YEM0=) 16: U7Tc0OMn99OVh4UaH8Gir63iiJs.roa (hash: VeiRvPbD+gYEQvLB86zuV+IwSFIqcHPYDQqYvNeKjps=) 17: Vr8UKQBR2K4aBwszRxtTMGpM3RU.roa (hash: pBwjHOXlk8Xh2v3/m1xk7uIqqtM9MysBJJTXP9nTkqk=) 18: aw7187ZOI0MpqazuRWsrcYgwwpQ.roa (hash: NIDCNaG3ouNUdnwxeJaCcGty477WEOLvnr2djhhc/90=) 19: bek0EGCQei4vOYeo1cw3OqhyNWo.roa (hash: m6rdcoyVs1N3a8H7buHnpBQjMeyGoW4VObVUZcGs+7M=) 20: cWtnPd8ZvgFa7GRaqMfs10BE4qc.roa (hash: jN/lGIzUOKHwZH6DyNIy+6o9b1TpGieuOJIXydb73lg=) 21: c_XVhcUysLwXAHApwazs-UkQkmQ.roa (hash: yDd1bLRr1tOEIQ6ft+0WAm2AEOFTsdq7bRYUYaVYKNA=) 22: hkSLq2UREFy1118xumuIZnvQ67Y.roa (hash: SOh35WJM4tvkJo/U2D6+8WiI7UsWl69I9bV1omMOiek=) 23: kqgMt21-DFLMw82FOeig-EaUgf0.roa (hash: IMAdg24Zv5aLWg8Ll0N/xPxQR4lu+BjbaXj/E4I85pM=) 24: n3D-Zk4G38G2tBgyUy3hXStCuWg.roa (hash: xWuIVNN480cZZue76BwJppWLzoJjQqcpD9fuq0+OWZ0=) 25: q1B4D6fhb1hsDMHl4DgqMg1LBS0.roa (hash: QyvrcsEDHcRC23C4LJneKzaSVc+UGnP9rW3V3L3o3QM=) 26: qtg18Q1n5Jfx1gK-KfQtl08To-k.roa (hash: oG53ITscWjNRdxBTzyirX6KiMhTU+HEToywwA4a+H6Q=) 27: rPUe_mYrLSmTmFv2LQZ8OTHJG9k.roa (hash: 5iRsBFsd3e5QtYFbDWJgyq4JRArcPXehU90Piw8H6Eo=) 28: sJ1sC2Tf4OlwBqYXFNFoZRduFG8.roa (hash: Lhps7HR/EcrDbFr4rG5Dh/G7U6wPLWZb+NnuBmiPIWs=) 29: sJZVmKX-G_XNNEcca8MTXPH-dbc.roa (hash: DQKLyMn35LbEuueIciMk2w6CESjK2ZNYZ5n5ZL//wOw=) 30: tWMyn7tpor7zLv8S77uSSoVBOzY.roa (hash: 9VLMYOGfLfqrY2pS0fnmG2KOSYmzAO47mTzvU9rKrJk=) 31: vgFc0Uh_MgrlizJZvhlwuychk-E.roa (hash: GdhoQmVw/bO3KTSgyH6uYKhysKhPclMR0dWBbW/oMfg=) 32: yfk1E30luISg0XzXUtlJ2MNM9eM.roa (hash: WxN+8AXOM93AE57ePd+WfH578Dm9CftwqJPfTKxDhLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 21:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:c4:c1:0b:1a:34:fb:ac:31:17:b8:40:ad:0a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: May 12 21:01:36 2026 GMT Not After : May 13 21:01:36 2026 GMT Subject: CN=453ad3f8d75afaa114d41d38ce5511ff7089a9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fd:44:c7:8d:dc:c1:55:78:e5:e1:91:bd:38: b8:b9:c1:eb:15:94:3b:f0:b5:7f:8b:a6:87:54:3b: 45:ca:ad:d7:db:33:16:a7:95:43:21:72:76:d1:8d: b6:7a:ac:a6:b9:74:cd:9d:52:57:aa:8f:be:a9:f6: 11:86:8f:e6:3a:58:84:d5:f5:73:ac:01:e6:ea:b0: 7c:37:a6:e3:a3:94:4b:9d:22:82:39:eb:47:f6:35: b6:94:0f:98:0a:27:03:71:4a:e7:ca:86:b8:11:8c: dd:d0:9a:00:4b:e7:be:d4:32:81:5b:b2:47:cc:51: 65:e5:54:17:1f:3b:34:34:70:da:0f:ae:4e:40:74: ce:9a:3d:77:4f:fa:79:64:4a:23:92:69:c6:5e:11: bd:7e:58:4b:23:94:b0:51:c9:58:d8:e1:f9:75:c9: 2e:a5:02:1c:82:6a:8e:eb:95:11:fc:04:f4:ff:13: 45:75:59:00:e3:d8:5b:f8:fd:71:81:97:38:e6:29: 6f:88:f5:09:5f:bf:aa:26:24:c0:e3:b9:45:d0:96: 78:85:13:c0:27:bb:d1:a9:f6:02:2f:bc:42:0c:d4: 44:20:66:ff:f4:dc:6f:e2:fb:96:c3:cb:53:e3:53: 5b:88:60:d4:22:f9:be:c6:50:f5:e0:ce:00:28:a8: b0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3A:D3:F8:D7:5A:FA:A1:14:D4:1D:38:CE:55:11:FF:70:89:A9:B5 X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:67:b0:52:f5:a5:e0:e2:8c:43:b3:10:65:f0:12:28:2f:21: 71:03:c2:08:e2:92:98:0c:c9:42:a6:74:81:48:74:68:1b:02: e7:12:f2:60:cb:3e:f4:e6:91:51:0b:b2:f6:49:2c:03:46:30: 83:25:0d:09:12:10:54:7d:89:7b:8a:46:7e:b0:a0:91:44:bd: b3:54:4d:0c:bc:14:86:0a:24:37:85:fa:22:00:04:ca:d3:27: ae:bc:ee:eb:00:18:9d:4d:46:58:1b:97:4f:ee:d3:09:b2:e8: 80:53:02:53:2f:8a:d6:4e:f2:9d:e2:72:bf:24:84:74:83:2d: 72:9b:fc:b3:b2:c2:ac:3b:2b:84:8a:41:11:24:d7:5f:f8:54: eb:d1:2f:88:09:95:b5:4f:52:b0:22:07:b4:d5:c3:ac:f5:66: 1b:82:8f:d3:80:12:ec:e0:df:23:cb:1f:8e:8e:8f:dc:57:48: d3:be:e4:96:9a:d3:38:13:a7:53:68:7f:09:af:8a:18:48:c8: 65:80:3f:59:b6:6a:d8:b4:70:8c:5f:87:07:98:9d:10:c2:b7: 23:69:9f:7e:0f:7b:0d:96:e5:c8:d0:b1:d3:49:a1:3c:4d:cb: 77:2c:44:ea:4d:b2:a9:1c:80:e0:86:3f:b7:ec:98:6c:5f:8c: 59:81:6a:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/sTBCxo0+6wxF7hArQorMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwNTEyMjEwMTM2WhcNMjYwNTEzMjEwMTM2WjAzMTEwLwYDVQQD Eyg0NTNhZDNmOGQ3NWFmYWExMTRkNDFkMzhjZTU1MTFmZjcwODlhOWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP1Ex43cwVV45eGRvTi4ucHrFZQ7 8LV/i6aHVDtFyq3X2zMWp5VDIXJ20Y22eqymuXTNnVJXqo++qfYRho/mOliE1fVz rAHm6rB8N6bjo5RLnSKCOetH9jW2lA+YCicDcUrnyoa4EYzd0JoAS+e+1DKBW7JH zFFl5VQXHzs0NHDaD65OQHTOmj13T/p5ZEojkmnGXhG9flhLI5SwUclY2OH5dcku pQIcgmqO65UR/AT0/xNFdVkA49hb+P1xgZc45ilviPUJX7+qJiTA47lF0JZ4hRPA J7vRqfYCL7xCDNREIGb/9Nxv4vuWw8tT41NbiGDUIvm+xlD14M4AKKiwewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEU60/jXWvqhFNQdOM5VEf9wiam1MB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWewUvWl 4OKMQ7MQZfASKC8hcQPCCOKSmAzJQqZ0gUh0aBsC5xLyYMs+9OaRUQuy9kksA0Yw gyUNCRIQVH2Je4pGfrCgkUS9s1RNDLwUhgokN4X6IgAEytMnrrzu6wAYnU1GWBuX T+7TCbLogFMCUy+K1k7yneJyvySEdIMtcpv8s7LCrDsrhIpBESTXX/hU69EviAmV tU9SsCIHtNXDrPVmG4KP04AS7ODfI8sfjo6P3FdI077klprTOBOnU2h/Ca+KGEjI ZYA/WbZq2LRwjF+HB5idEMK3I2mffg97DZblyNCx00mhPE3LdyxE6k2yqRyA4IY/ t+yYbF+MWYFqkg== -----END CERTIFICATE-----Generated at Wed May 13 05:11:25 2026 by rpki-client