$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: Qw6vsrjnkmKNZsH8ByjStJ5y/Z39BBa3pjBJaGELU2U= Subject key identifier: 1F:2A:66:45:94:06:13:EE:41:C6:3C:F8:25:34:08:6C:76:A8:D8:E0 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019D27E092A400FA82C592DB53C1BB0D019D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0F32 Signing time: Thu 26 Mar 2026 02:02:02 +0000 Manifest this update: Thu 26 Mar 2026 02:02:02 +0000 Manifest next update: Fri 27 Mar 2026 02:02:02 +0000 Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=) 2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=) 3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=) 4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: +oWagIjE/cJV8EysqiDikAJThK5NCesT0kN4ZSxiv6w=) 6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=) 7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=) 8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=) 9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=) 10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=) 11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=) 12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:e0:92:a4:00:fa:82:c5:92:db:53:c1:bb:0d:01:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Mar 26 02:02:02 2026 GMT Not After : Mar 27 02:02:02 2026 GMT Subject: CN=1f2a6645940613ee41c63cf82534086c76a8d8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:7b:db:59:f4:ab:e2:56:c1:80:e1:11:70: f0:be:d6:f7:6f:2e:7f:9c:f3:19:cb:e8:6b:cd:1b: e0:f0:d3:df:09:21:a5:07:d9:2b:53:02:a2:1a:98: 13:b1:64:87:b8:f6:c2:d6:01:84:bc:a6:81:ef:85: 31:58:bb:54:e8:41:f8:53:60:b6:ef:37:6f:19:9c: ca:c6:22:dd:9c:a4:57:e4:d3:9f:c8:96:4f:c6:4d: 5c:03:03:ab:b8:e6:12:18:cf:62:f1:ae:5c:fc:bf: 9b:2f:a6:75:99:4c:df:90:b9:a5:e7:d6:37:8a:cf: e9:75:2e:45:80:7f:92:1d:4c:06:6b:47:3b:50:12: ae:05:fa:c8:f1:56:12:f9:be:c7:c2:70:e4:d1:00: 7b:9c:d0:0a:16:4c:30:42:c2:61:96:d0:75:37:9b: bc:1a:31:d4:33:cc:78:dd:34:58:1a:82:7d:7b:ab: 48:d8:8f:28:25:30:9a:36:5b:10:77:87:0e:c4:76: c3:60:30:e3:58:e3:cd:8f:81:9f:77:43:8e:28:7f: 38:d3:15:f1:d0:3c:f6:00:c0:11:f7:67:e2:70:a7: ed:4b:4a:73:2c:ca:84:72:45:84:4b:00:13:5b:65: 0a:f0:0f:60:6a:d6:61:5f:86:d4:ff:5c:c3:35:e3: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2A:66:45:94:06:13:EE:41:C6:3C:F8:25:34:08:6C:76:A8:D8:E0 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:20:76:d7:b8:37:93:d0:59:48:73:06:ae:d2:e1:89:60:12: cc:b3:4d:b0:bb:30:9f:fa:a4:89:6a:a7:4d:29:2b:8f:73:93: 78:32:37:e8:dc:a6:59:b8:4e:43:c7:35:18:ef:50:3e:2c:b7: 2e:28:73:69:1e:de:cb:b1:d5:f8:84:78:a3:05:77:03:fc:1a: 92:22:93:cb:fa:5c:dc:b6:16:ef:6e:86:5e:16:66:2b:e2:e0: f8:a0:af:a3:43:b0:66:a7:13:bc:8e:3e:ab:91:fc:82:12:14: a4:cb:11:3b:f3:2b:f3:f4:18:f1:fa:f7:86:84:ca:3a:35:81: 15:c6:10:03:45:16:65:d8:2d:c8:21:c9:dd:d6:41:03:a5:98: 1d:25:bd:f8:c0:c4:d7:de:e6:b8:84:c9:60:c1:b7:c6:68:a6: 4f:e9:72:96:0b:9a:f7:02:c0:e9:ef:64:f5:de:cd:bc:fe:f8: 20:c4:b2:7f:36:75:e3:b1:9c:da:ad:91:46:ef:78:62:09:a3: 2d:f0:7d:70:b0:fe:38:13:47:b0:5a:74:57:96:59:44:42:61: cc:2e:1f:51:af:47:d0:c3:9c:a3:50:10:2d:cd:93:67:4f:26: 37:98:32:3b:9b:ef:c7:8b:cf:64:57:01:19:ad:19:46:75:f9: 05:73:7a:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0n4JKkAPqCxZLbU8G7DQGdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwMzI2MDIwMjAyWhcNMjYwMzI3MDIwMjAyWjAzMTEwLwYDVQQD EygxZjJhNjY0NTk0MDYxM2VlNDFjNjNjZjgyNTM0MDg2Yzc2YThkOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTJ721n0q+JWwYDhEXDwvtb3by5/ nPMZy+hrzRvg8NPfCSGlB9krUwKiGpgTsWSHuPbC1gGEvKaB74UxWLtU6EH4U2C2 7zdvGZzKxiLdnKRX5NOfyJZPxk1cAwOruOYSGM9i8a5c/L+bL6Z1mUzfkLml59Y3 is/pdS5FgH+SHUwGa0c7UBKuBfrI8VYS+b7HwnDk0QB7nNAKFkwwQsJhltB1N5u8 GjHUM8x43TRYGoJ9e6tI2I8oJTCaNlsQd4cOxHbDYDDjWOPNj4Gfd0OOKH840xXx 0Dz2AMAR92ficKftS0pzLMqEckWESwATW2UK8A9gatZhX4bU/1zDNeOy/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8qZkWUBhPuQcY8+CU0CGx2qNjgMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCB217g3 k9BZSHMGrtLhiWASzLNNsLswn/qkiWqnTSkrj3OTeDI36NymWbhOQ8c1GO9QPiy3 LihzaR7ey7HV+IR4owV3A/wakiKTy/pc3LYW726GXhZmK+Lg+KCvo0OwZqcTvI4+ q5H8ghIUpMsRO/Mr8/QY8fr3hoTKOjWBFcYQA0UWZdgtyCHJ3dZBA6WYHSW9+MDE 197muITJYMG3xmimT+lylgua9wLA6e9k9d7NvP74IMSyfzZ147Gc2q2RRu94Ygmj LfB9cLD+OBNHsFp0V5ZZREJhzC4fUa9H0MOco1AQLc2TZ08mN5gyO5vvx4vPZFcB Ga0ZRnX5BXN6xQ== -----END CERTIFICATE-----Generated at Thu Mar 26 05:15:49 2026 by rpki-client