$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: WiCuNi3Zuz7rxzeLood3VUic79YUyeNktthSixTAAYI= Subject key identifier: 1E:C6:3E:7A:F4:88:FA:4B:22:5C:90:58:D0:9D:8F:23:1C:20:5E:25 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 01A1DA5CEDE6DCC0DF429861BF453E4BFBD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 11A1 Signing time: Sat 14 Nov 2026 14:01:25 +0000 Manifest this update: Sat 14 Nov 2026 14:01:25 +0000 Manifest next update: Sun 15 Nov 2026 14:01:25 +0000 Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=) 2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=) 3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=) 4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=) 5: FXoEQXQ1y_sgLaeu2GI514jSQq4.roa (hash: cMLduCCScD6l8ZmN8/0hmU4GsPGIiE1HYswdwXlFY38=) 6: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: XHtEKylkKiIHfxhz9KGZSYuNINdl066/TLf6BZwkUQo=) 7: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=) 8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=) 9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=) 10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=) 11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=) 12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:5c:ed:e6:dc:c0:df:42:98:61:bf:45:3e:4b:fb:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Nov 14 14:01:25 2026 GMT Not After : Nov 15 14:01:25 2026 GMT Subject: CN=1ec63e7af488fa4b225c9058d09d8f231c205e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:15:8d:cd:fa:ba:07:6d:4a:c3:b5:b7:38:3e: e3:85:3d:38:55:09:a5:3c:cb:2a:97:3a:32:d7:5c: 89:bb:02:35:68:21:4d:8c:50:7c:6c:dc:1d:13:b5: 4f:ba:a7:67:fb:51:b2:3c:7e:ba:ff:0f:1f:cd:bb: f7:f4:b6:a6:87:bb:5d:19:cc:8b:a3:6d:58:d9:0b: 9d:95:b6:5a:1e:c3:fb:b0:88:b9:cf:5b:d0:6f:b7: 07:aa:f4:50:bd:54:b8:3e:d8:6c:90:78:50:7c:89: d8:d8:ac:2a:5d:08:d5:ba:60:45:f1:81:2d:de:c3: 7a:43:c0:06:dc:61:e8:14:2c:f3:9b:27:e0:31:40: 76:2c:ba:ff:da:98:51:09:3c:86:4b:cc:b0:26:ad: b2:82:41:71:03:80:ca:be:49:5f:5a:34:8c:44:6a: a0:a2:a1:27:d5:49:18:08:6f:97:58:49:53:0e:d6: 5f:13:49:a4:39:2e:db:9e:26:87:64:7f:29:03:d1: 5a:2c:23:0b:a3:15:9a:b3:54:4d:2b:d8:f7:d6:f5: 94:fe:5d:eb:7f:17:ce:67:9d:99:2b:99:9f:a5:1c: 31:a1:92:1a:b7:a5:7b:c3:f7:64:ff:61:3b:da:5a: df:57:f3:fe:bf:d8:9d:93:65:3c:b8:5c:13:92:3b: f0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C6:3E:7A:F4:88:FA:4B:22:5C:90:58:D0:9D:8F:23:1C:20:5E:25 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:de:44:24:dd:69:f5:ef:86:66:48:82:ea:aa:61:05:91:a4: d9:d5:bf:8a:8d:58:16:da:04:72:5c:cb:82:a4:aa:5c:10:ae: 1c:00:46:aa:0e:52:ff:7a:32:08:9f:a1:24:d3:97:79:f4:7b: eb:48:4f:03:cf:2f:04:cc:56:a6:21:07:cd:16:17:c9:da:cb: d7:05:1c:32:b2:b8:5e:26:f9:4f:12:b5:9a:ea:d9:20:62:c5: 80:67:2b:d5:9f:c3:ec:f0:a7:e1:99:00:a9:f0:e0:63:3a:0f: b6:d7:ad:2f:2f:1c:bd:7f:1d:a9:6b:7f:b5:6a:ae:36:29:5a: 86:f4:a8:2b:e1:0d:0a:96:2c:22:c9:09:61:58:de:14:be:d6: ac:87:a3:5c:24:4c:c9:da:ac:2a:3e:f6:8f:13:d8:d8:4c:56: 05:55:be:72:9f:80:59:0d:4d:4f:3a:05:4e:2b:53:c6:e8:eb: fc:f6:45:8b:7c:e8:f9:16:a3:39:f6:16:ce:d8:0f:47:97:0e: e5:fd:d3:f2:57:b2:5e:97:24:c4:7f:27:b6:51:fa:b1:70:dd: b5:cf:2a:61:4a:a8:55:12:83:d8:a9:e1:dc:14:bd:df:4c:0f: 18:08:73:ac:7b:3b:cd:86:3a:57:79:59:e6:8c:f0:d7:1e:24: 47:d1:e4:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHaXO3m3MDfQphhv0U+S/vVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYxMTE0MTQwMTI1WhcNMjYxMTE1MTQwMTI1WjAzMTEwLwYDVQQD EygxZWM2M2U3YWY0ODhmYTRiMjI1YzkwNThkMDlkOGYyMzFjMjA1ZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBWNzfq6B21Kw7W3OD7jhT04VQml PMsqlzoy11yJuwI1aCFNjFB8bNwdE7VPuqdn+1GyPH66/w8fzbv39Lamh7tdGcyL o21Y2QudlbZaHsP7sIi5z1vQb7cHqvRQvVS4PthskHhQfInY2KwqXQjVumBF8YEt 3sN6Q8AG3GHoFCzzmyfgMUB2LLr/2phRCTyGS8ywJq2ygkFxA4DKvklfWjSMRGqg oqEn1UkYCG+XWElTDtZfE0mkOS7bniaHZH8pA9FaLCMLoxWas1RNK9j31vWU/l3r fxfOZ52ZK5mfpRwxoZIat6V7w/dk/2E72lrfV/P+v9idk2U8uFwTkjvwXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7GPnr0iPpLIlyQWNCdjyMcIF4lMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHd5EJN1p 9e+GZkiC6qphBZGk2dW/io1YFtoEclzLgqSqXBCuHABGqg5S/3oyCJ+hJNOXefR7 60hPA88vBMxWpiEHzRYXydrL1wUcMrK4Xib5TxK1murZIGLFgGcr1Z/D7PCn4ZkA qfDgYzoPttetLy8cvX8dqWt/tWquNilahvSoK+ENCpYsIskJYVjeFL7WrIejXCRM ydqsKj72jxPY2ExWBVW+cp+AWQ1NTzoFTitTxujr/PZFi3zo+RajOfYWztgPR5cO 5f3T8leyXpckxH8ntlH6sXDdtc8qYUqoVRKD2Knh3BS930wPGAhzrHs7zYY6V3lZ 5ozw1x4kR9Hk4g== -----END CERTIFICATE-----Generated at Sat Nov 14 21:05:13 2026 by rpki-client