$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: wV1BZyPkylOVDeNN3WHbrwdpyz7GFknjUzWVTcL4qBs= Subject key identifier: 48:E2:0B:2B:89:27:4D:C0:0E:A3:1E:C4:9B:D1:13:D8:02:C0:93:39 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019D25F103F41A66B8E81647330257B0E817 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0F31 Signing time: Wed 25 Mar 2026 17:00:45 +0000 Manifest this update: Wed 25 Mar 2026 17:00:45 +0000 Manifest next update: Thu 26 Mar 2026 17:00:45 +0000 Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=) 2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=) 3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=) 4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: WziO2F+vFKFo6NxusQHjd3rwmMLojl2amVZSwAPrhxA=) 6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=) 7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=) 8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=) 9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=) 10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=) 11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=) 12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:f1:03:f4:1a:66:b8:e8:16:47:33:02:57:b0:e8:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Mar 25 17:00:45 2026 GMT Not After : Mar 26 17:00:45 2026 GMT Subject: CN=48e20b2b89274dc00ea31ec49bd113d802c09339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:60:ef:07:81:bd:dd:db:8b:dd:26:98:de:de: d4:4b:1b:05:af:f9:bc:72:12:67:19:63:30:8e:5b: 64:03:d3:43:c3:5f:39:3b:32:e8:a2:dc:39:e9:52: 2e:fa:af:2f:7a:77:3a:67:f1:d3:52:3d:15:9a:14: 03:62:67:64:47:1c:70:04:31:6d:9b:1c:94:60:cc: 38:de:18:6f:aa:b5:00:a6:05:db:72:ae:65:34:12: f7:a6:e3:fa:2f:d9:cb:3e:9b:46:f6:b3:2e:de:87: 4b:8f:96:ac:9e:b8:7d:ae:4d:a1:ac:16:be:db:b3: b1:65:e9:86:39:df:68:98:41:0e:d2:58:c4:8b:96: 17:a3:ef:1a:01:23:e3:15:f3:b4:1b:b2:91:f5:b0: 87:92:e1:8d:4b:cf:61:aa:65:26:99:6c:ce:02:62: f1:a8:1e:97:87:9d:8d:e4:ff:ad:0a:7d:dd:fe:a4: 49:c7:b6:37:c4:2b:23:e6:6f:7e:d7:62:1f:9a:13: c9:cc:57:4c:74:d5:c2:c5:ac:0c:c5:d2:f4:f8:6d: 5e:34:d0:e8:88:be:fb:05:c1:8c:81:3e:00:81:f6: 3b:e0:2e:77:19:fd:92:7d:e4:26:a6:ca:73:c6:11: 9d:8f:19:89:4a:09:86:4a:e1:e2:a7:91:f0:bc:5c: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E2:0B:2B:89:27:4D:C0:0E:A3:1E:C4:9B:D1:13:D8:02:C0:93:39 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:55:b9:1c:a4:72:72:fa:45:3d:49:fb:ca:09:85:85:08:ea: e4:1b:51:5a:6c:47:41:da:35:63:76:20:a9:8a:91:35:c0:77: dd:d8:9a:8d:69:05:df:f0:1b:6f:af:e9:dd:0c:40:12:56:59: 19:5d:be:cc:80:fc:12:6c:80:26:2d:35:1d:6f:6d:36:d5:f4: 7e:9c:ed:d1:fa:1c:26:81:89:12:0e:a9:bb:db:4d:62:24:1e: b7:05:05:ca:c5:6d:ed:93:e3:5e:24:ba:7a:d8:bb:0b:1a:75: 5b:ec:09:42:e5:e8:d4:76:e6:2b:13:9a:ad:19:0e:c3:b6:73: 4b:05:12:cc:e9:6d:15:db:f9:65:84:fd:d6:eb:4b:17:ad:42: 3f:ba:59:9a:ef:2c:4c:7d:bf:ce:eb:5c:fb:f5:f7:3e:82:ac: b0:d0:ed:7d:4c:f6:8b:ea:69:71:73:c3:99:eb:a3:a9:c0:fc: 39:68:00:36:ca:e7:d7:07:65:76:94:44:bf:8a:b8:d2:5b:6f: c5:15:85:47:8f:19:8f:28:39:17:67:69:2c:3b:85:e5:3c:3c: 2f:31:44:8a:19:41:93:8c:45:bc:9c:c3:60:2f:68:18:a8:94: f2:f9:3a:b1:f5:a9:e3:57:8a:c7:a6:bd:c3:de:d9:81:7a:24: f3:6a:ee:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0l8QP0Gma46BZHMwJXsOgXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwMzI1MTcwMDQ1WhcNMjYwMzI2MTcwMDQ1WjAzMTEwLwYDVQQD Eyg0OGUyMGIyYjg5Mjc0ZGMwMGVhMzFlYzQ5YmQxMTNkODAyYzA5MzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GDvB4G93duL3SaY3t7USxsFr/m8 chJnGWMwjltkA9NDw185OzLootw56VIu+q8venc6Z/HTUj0VmhQDYmdkRxxwBDFt mxyUYMw43hhvqrUApgXbcq5lNBL3puP6L9nLPptG9rMu3odLj5asnrh9rk2hrBa+ 27OxZemGOd9omEEO0ljEi5YXo+8aASPjFfO0G7KR9bCHkuGNS89hqmUmmWzOAmLx qB6Xh52N5P+tCn3d/qRJx7Y3xCsj5m9+12IfmhPJzFdMdNXCxawMxdL0+G1eNNDo iL77BcGMgT4AgfY74C53Gf2SfeQmpspzxhGdjxmJSgmGSuHip5HwvFxBcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjiCyuJJ03ADqMexJvRE9gCwJM5MB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVW5HKRy cvpFPUn7ygmFhQjq5BtRWmxHQdo1Y3YgqYqRNcB33diajWkF3/Abb6/p3QxAElZZ GV2+zID8EmyAJi01HW9tNtX0fpzt0focJoGJEg6pu9tNYiQetwUFysVt7ZPjXiS6 eti7Cxp1W+wJQuXo1HbmKxOarRkOw7ZzSwUSzOltFdv5ZYT91utLF61CP7pZmu8s TH2/zutc+/X3PoKssNDtfUz2i+ppcXPDmeujqcD8OWgANsrn1wdldpREv4q40ltv xRWFR48Zjyg5F2dpLDuF5Tw8LzFEihlBk4xFvJzDYC9oGKiU8vk6sfWp41eKx6a9 w97ZgXok82rutQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:59:12 2026 by rpki-client