$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft File: QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json) Hash identifier: fVyqSTumk5wE8R0UCiIKqUuOJO94V8YuHFzsf0glDxU= Subject key identifier: 56:78:4C:73:C6:93:F7:AA:4F:9D:4C:56:3F:A4:2C:04:FE:D4:00:B5 Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019D26CD0E155EB370BE8CC37375390EB5AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft Manifest number: 18A0 Signing time: Wed 25 Mar 2026 21:01:05 +0000 Manifest this update: Wed 25 Mar 2026 21:01:05 +0000 Manifest next update: Thu 26 Mar 2026 21:01:05 +0000 Files and hashes: 1: 1-fuWQ0J7N3Mc1-LpV47OkEYJ6Pg.roa (hash: d64kZTOMQS3ywmOiCwM9goS+Zs55OgLIp48OWiE2tqI=) 2: 3qCviuOG-ueF_1VEjm9A7m4dsIk.roa (hash: sAL6XW3hWoRAGWp0+zVbTSYYIBh9Tr5DdziSNbosFMc=) 3: 4iREikE0FlzD4Lki3jJx6aaj7Ek.roa (hash: R85Lc2X5cjTiidE1qCVwRr469wMVOizgeXCdlpP24Do=) 4: 7F404ndf6WlAawVxH8uEqbUfNqg.roa (hash: 0vRuwJ86hGL2rgS3c27BsrNGgAqpwI3nuvZOYvEC2o8=) 5: 891fnCNTe0IKQYnO-ZqvxNgk-7k.roa (hash: VPRQl1y1jooeZjbup+JMP7DkoiYT1QAj+vISvPCzQ5U=) 6: Amhr13WKOrupDvbNhR-H8uA8vnQ.roa (hash: DunPwzqrWTpngKU5F7a27cbOD9P4pJ+IEPvx/MUiLIg=) 7: CRbc03vb_t7S-8OrjziURXlLPLs.roa (hash: AwT4/FD/dxBwMmMETo+hpYLUml8m4wGXejb2vnR3jvE=) 8: DmNgBVzwALAZpD0xt4gW0SabWP4.roa (hash: +HcyssYq+nPIZImlmBkQlaLU/HQWdmQa3/3LFcnfluc=) 9: Dq47WCi1_R3R9nKkOKnsCn37r54.roa (hash: 5JD7iNqs4qn/sy+bgp/hKnEbHR2EBc8c01xHZGOpYMA=) 10: EiEKEI95auMCB7NfQVwo9byU814.roa (hash: qJa+m44cB1n22XnwN3TBLrmdvt3RH9NDFwUuAESZSTE=) 11: JKDe6ScGUf5knBKSEZ3INxcpX_k.roa (hash: cP1FQRZP0bYy6TqBtYSmhv38p8stWSoSv7D1CesDGKo=) 12: N-ugS43QXCOLtMQg4hBDzZHSfs4.roa (hash: H5adi4ikfxvo36OYV+mOyefgvVd4tLYXrjrnT87kOLI=) 13: O3ilaHX6VJtoUZBeu1-BglPYb-I.roa (hash: PoRHXYKRSqCrsj4FltoRS6V1gs+nJ0Qsq87ffUhtPkI=) 14: PAfqhrbdkl_yRiUylPK1xIqq4lg.roa (hash: MoYNDn1wuFUbbeUFbkvj5yCW8TfAg9g5sltO0zCqY1Y=) 15: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: /EFf+Rs2/nYmtIDC+uySMZ+zCYONUh6Xle1AjbMdw0Q=) 16: U7Tc0OMn99OVh4UaH8Gir63iiJs.roa (hash: VeiRvPbD+gYEQvLB86zuV+IwSFIqcHPYDQqYvNeKjps=) 17: Vr8UKQBR2K4aBwszRxtTMGpM3RU.roa (hash: pBwjHOXlk8Xh2v3/m1xk7uIqqtM9MysBJJTXP9nTkqk=) 18: aw7187ZOI0MpqazuRWsrcYgwwpQ.roa (hash: NIDCNaG3ouNUdnwxeJaCcGty477WEOLvnr2djhhc/90=) 19: bek0EGCQei4vOYeo1cw3OqhyNWo.roa (hash: m6rdcoyVs1N3a8H7buHnpBQjMeyGoW4VObVUZcGs+7M=) 20: cWtnPd8ZvgFa7GRaqMfs10BE4qc.roa (hash: jN/lGIzUOKHwZH6DyNIy+6o9b1TpGieuOJIXydb73lg=) 21: c_XVhcUysLwXAHApwazs-UkQkmQ.roa (hash: yDd1bLRr1tOEIQ6ft+0WAm2AEOFTsdq7bRYUYaVYKNA=) 22: hkSLq2UREFy1118xumuIZnvQ67Y.roa (hash: SOh35WJM4tvkJo/U2D6+8WiI7UsWl69I9bV1omMOiek=) 23: kqgMt21-DFLMw82FOeig-EaUgf0.roa (hash: IMAdg24Zv5aLWg8Ll0N/xPxQR4lu+BjbaXj/E4I85pM=) 24: n3D-Zk4G38G2tBgyUy3hXStCuWg.roa (hash: xWuIVNN480cZZue76BwJppWLzoJjQqcpD9fuq0+OWZ0=) 25: q1B4D6fhb1hsDMHl4DgqMg1LBS0.roa (hash: QyvrcsEDHcRC23C4LJneKzaSVc+UGnP9rW3V3L3o3QM=) 26: qtg18Q1n5Jfx1gK-KfQtl08To-k.roa (hash: oG53ITscWjNRdxBTzyirX6KiMhTU+HEToywwA4a+H6Q=) 27: rPUe_mYrLSmTmFv2LQZ8OTHJG9k.roa (hash: 5iRsBFsd3e5QtYFbDWJgyq4JRArcPXehU90Piw8H6Eo=) 28: sJ1sC2Tf4OlwBqYXFNFoZRduFG8.roa (hash: Lhps7HR/EcrDbFr4rG5Dh/G7U6wPLWZb+NnuBmiPIWs=) 29: sJZVmKX-G_XNNEcca8MTXPH-dbc.roa (hash: DQKLyMn35LbEuueIciMk2w6CESjK2ZNYZ5n5ZL//wOw=) 30: tWMyn7tpor7zLv8S77uSSoVBOzY.roa (hash: 9VLMYOGfLfqrY2pS0fnmG2KOSYmzAO47mTzvU9rKrJk=) 31: vgFc0Uh_MgrlizJZvhlwuychk-E.roa (hash: GdhoQmVw/bO3KTSgyH6uYKhysKhPclMR0dWBbW/oMfg=) 32: yfk1E30luISg0XzXUtlJ2MNM9eM.roa (hash: WxN+8AXOM93AE57ePd+WfH578Dm9CftwqJPfTKxDhLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:cd:0e:15:5e:b3:70:be:8c:c3:73:75:39:0e:b5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Mar 25 21:01:05 2026 GMT Not After : Mar 26 21:01:05 2026 GMT Subject: CN=56784c73c693f7aa4f9d4c563fa42c04fed400b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:38:e1:82:8a:57:1d:8c:a2:0a:9f:ae:75:e7: 74:54:4c:06:2c:1f:86:02:53:42:82:b6:49:37:35: 97:65:ca:8e:6d:3a:3f:13:41:31:5e:2b:53:52:fb: 22:12:a5:19:8c:b3:48:62:c7:36:8e:21:e6:bc:77: 95:0a:f8:55:77:e9:01:fa:ae:08:10:a6:e3:c4:e3: ce:20:e8:1a:d1:2e:3a:67:5d:03:d8:29:94:9e:01: 9a:93:2a:55:67:98:23:45:fa:82:aa:f3:c6:90:4e: e1:51:2b:3b:16:3e:28:68:9b:09:46:95:3b:57:01: 5c:11:fc:97:14:03:9d:4d:f9:55:5a:39:c9:45:2e: 3e:df:32:6e:af:dd:b2:d0:e8:00:3d:f2:a5:7e:03: a5:8c:d4:42:95:ac:e8:59:aa:e2:a2:aa:b5:14:4a: 47:9b:89:64:0c:27:5f:2b:6c:c5:7f:41:c2:00:7a: 24:f7:6c:6f:99:4f:75:fc:ee:8c:57:43:2b:14:e3: 32:3a:da:a1:a0:84:58:82:97:ec:24:a3:6d:c6:86: e3:1b:e2:3a:38:42:61:58:ed:ff:f5:d8:cb:37:55: 7f:80:77:2a:21:47:b6:c5:16:c8:15:09:bd:95:78: a1:f6:97:f1:32:c1:31:93:2a:c2:33:6f:75:dc:85: e3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:78:4C:73:C6:93:F7:AA:4F:9D:4C:56:3F:A4:2C:04:FE:D4:00:B5 X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b9:90:88:a5:aa:77:fc:cc:a3:78:64:da:9e:6a:00:f3:43: de:ff:2f:e7:cd:75:d0:32:89:8c:19:53:a3:88:a8:e1:6c:aa: 33:cc:5f:b5:de:47:31:f1:3b:9c:31:c1:dc:e6:64:d4:95:95: 32:15:52:a3:6c:b9:42:4d:f5:04:19:03:96:49:86:3f:a1:81: c4:07:9e:08:2b:17:29:68:14:76:80:b3:a6:7d:5f:b1:f3:f1: 74:28:93:ea:2d:08:6f:30:e1:72:f1:f5:b4:58:ae:15:00:68: 27:bf:5b:76:ef:56:e1:76:ed:7e:65:c5:9a:11:09:ce:bd:5e: 39:f3:2c:eb:db:b2:f3:ba:91:d4:50:cd:25:35:32:c3:db:be: 3d:18:96:b4:f9:0e:4c:fb:30:bf:d2:d6:42:5e:04:8f:53:15: 3c:14:1a:d8:0c:b9:ce:a3:cb:37:27:03:77:05:7d:e2:f0:b0: b2:d6:71:2e:29:48:ae:c1:15:ff:88:71:49:89:e0:b2:36:32: d8:33:ca:90:1f:1e:cd:3a:38:b2:46:91:43:08:a1:9f:8f:59: ed:2b:00:39:65:0e:db:91:b0:4f:86:ce:91:1b:ef:0c:a9:10: 18:f3:87:68:f2:08:d2:0c:03:7d:52:a4:be:89:64:27:67:d2: c9:5e:41:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mzQ4VXrNwvozDc3U5DrWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwMzI1MjEwMTA1WhcNMjYwMzI2MjEwMTA1WjAzMTEwLwYDVQQD Eyg1Njc4NGM3M2M2OTNmN2FhNGY5ZDRjNTYzZmE0MmMwNGZlZDQwMGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jjhgopXHYyiCp+uded0VEwGLB+G AlNCgrZJNzWXZcqObTo/E0ExXitTUvsiEqUZjLNIYsc2jiHmvHeVCvhVd+kB+q4I EKbjxOPOIOga0S46Z10D2CmUngGakypVZ5gjRfqCqvPGkE7hUSs7Fj4oaJsJRpU7 VwFcEfyXFAOdTflVWjnJRS4+3zJur92y0OgAPfKlfgOljNRClazoWarioqq1FEpH m4lkDCdfK2zFf0HCAHok92xvmU91/O6MV0MrFOMyOtqhoIRYgpfsJKNtxobjG+I6 OEJhWO3/9djLN1V/gHcqIUe2xRbIFQm9lXih9pfxMsExkyrCM2913IXjxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZ4THPGk/eqT51MVj+kLAT+1AC1MB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrmQiKWq d/zMo3hk2p5qAPND3v8v58110DKJjBlTo4io4WyqM8xftd5HMfE7nDHB3OZk1JWV MhVSo2y5Qk31BBkDlkmGP6GBxAeeCCsXKWgUdoCzpn1fsfPxdCiT6i0IbzDhcvH1 tFiuFQBoJ79bdu9W4XbtfmXFmhEJzr1eOfMs69uy87qR1FDNJTUyw9u+PRiWtPkO TPswv9LWQl4Ej1MVPBQa2Ay5zqPLNycDdwV94vCwstZxLilIrsEV/4hxSYngsjYy 2DPKkB8ezTo4skaRQwihn49Z7SsAOWUO25GwT4bOkRvvDKkQGPOHaPII0gwDfVKk volkJ2fSyV5BPQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:37:52 2026 by rpki-client