$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: LH2kG1iukRhWJyWMG4vSDiITHQC5wDojcXl1a2ZHWfc= Subject key identifier: AB:A3:62:FB:73:64:88:B6:12:A0:41:E1:B0:37:8E:62:BE:3B:B9:84 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019F9090C42BA05A1FFE72915B2321F71C80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0AC4 Signing time: Thu 23 Jul 2026 20:00:34 +0000 Manifest this update: Thu 23 Jul 2026 20:00:34 +0000 Manifest next update: Fri 24 Jul 2026 20:00:34 +0000 Files and hashes: 1: 0_vDnDRF9RJXjQRo2pH5Tit2G6k.roa (hash: IvBfnkpqBkHgNd2fPdtTwy3ZEe1XX9CROdeaKsRCiZg=) 2: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 3: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 4: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 5: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 6: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: dKwgbOeFNHIUU3xfKi6C6tkOFjYO4cGCOH5uJgf1I8M=) 7: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 8: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 9: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 10: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 11: kveMMocsfLZh918Y0_FGgyBzNLM.roa (hash: vKnrq5ifdIB9dF0mtCayO5eOs+Yvg54hMTnFEcoDZaU=) 12: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:90:c4:2b:a0:5a:1f:fe:72:91:5b:23:21:f7:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jul 23 20:00:34 2026 GMT Not After : Jul 24 20:00:34 2026 GMT Subject: CN=aba362fb736488b612a041e1b0378e62be3bb984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5d:e1:12:d7:cd:31:0f:1f:f5:4f:8d:41:01: 12:85:83:28:4b:c3:42:7c:1f:b0:95:0d:3d:65:81: 7f:21:26:5a:5f:b7:f0:50:79:e3:62:98:ed:4b:79: 77:7b:c2:7d:4f:35:1f:47:0f:a0:d2:f7:b5:96:a8: b4:8b:ed:99:fd:b7:b3:af:de:64:ac:bb:cb:06:14: 3c:15:43:0d:00:c5:87:05:9e:61:9d:31:b8:d8:29: 00:a5:b5:7d:4b:ae:65:0b:02:ab:ff:fb:6e:ee:94: f4:0e:bf:d5:c9:c3:cf:76:e0:fe:61:11:a6:06:c6: e8:6f:7f:a2:8c:cf:c0:0b:57:e9:e8:b2:3e:4b:ed: 45:33:05:9e:00:31:ac:e3:17:1a:e3:68:61:06:b6: c7:af:26:f6:ec:26:ff:66:f9:48:91:ca:12:c5:c2: b8:a7:bc:88:6b:ef:0b:44:89:19:1e:9e:c1:e3:0f: 55:7b:e0:f1:53:3c:18:43:5f:bb:45:b6:de:4e:4c: d2:80:fd:ae:6c:91:89:04:ab:d4:dd:c3:bc:6d:40: 3b:fb:76:9e:ae:77:f6:7d:e4:68:56:77:8a:09:83: 88:78:cb:8d:8d:ea:15:d1:95:e0:3e:2d:98:dc:c3: eb:b9:47:4e:d9:34:74:c5:45:d9:2d:47:e1:77:4b: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A3:62:FB:73:64:88:B6:12:A0:41:E1:B0:37:8E:62:BE:3B:B9:84 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d7:42:0e:3a:fd:1d:51:3c:fd:b7:e9:e4:b8:d6:5a:3c:2a: 31:c9:b3:d5:8e:8c:20:a4:f0:8c:e1:fb:b9:92:d6:fd:2b:ae: fa:26:bf:8d:40:c3:6c:78:c8:aa:93:20:40:50:35:36:85:f6: d3:2a:25:63:88:f3:e3:7c:f8:ca:f4:ea:c4:af:d8:b8:80:39: fe:9d:c7:62:26:f5:e5:19:c6:f8:34:65:89:a5:91:a4:cf:7f: 5e:9e:d3:a1:ba:3c:80:4f:c2:f7:c6:9b:42:73:03:74:3b:0a: 64:77:34:e9:14:a6:f3:70:e1:5e:f9:e6:a4:9e:dd:39:39:93: 6f:c2:a5:e8:5e:d7:30:b3:12:d1:fd:4a:d9:c1:7b:c1:25:ed: 58:46:0c:fa:09:df:d8:97:67:c2:81:4e:6b:43:29:38:a6:17: db:52:9c:44:8e:8c:67:8f:c4:1e:49:a7:33:de:36:c1:76:4a: 1b:9c:9d:ff:ee:f9:fd:68:f6:58:dd:c1:bc:bc:3d:b1:f0:1c: 5f:3d:2d:b8:41:77:d7:81:2a:07:7c:ac:76:b9:5a:06:1b:30: 21:a4:ec:81:6c:70:d8:fc:3c:dd:10:5b:b1:58:17:a5:b2:5f: d4:da:bd:80:09:d6:91:34:7f:bc:6e:ce:69:ba:87:15:2a:9e: 95:76:22:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QkMQroFof/nKRWyMh9xyAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwNzIzMjAwMDM0WhcNMjYwNzI0MjAwMDM0WjAzMTEwLwYDVQQD EyhhYmEzNjJmYjczNjQ4OGI2MTJhMDQxZTFiMDM3OGU2MmJlM2JiOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F3hEtfNMQ8f9U+NQQEShYMoS8NC fB+wlQ09ZYF/ISZaX7fwUHnjYpjtS3l3e8J9TzUfRw+g0ve1lqi0i+2Z/bezr95k rLvLBhQ8FUMNAMWHBZ5hnTG42CkApbV9S65lCwKr//tu7pT0Dr/VycPPduD+YRGm Bsbob3+ijM/AC1fp6LI+S+1FMwWeADGs4xca42hhBrbHryb27Cb/ZvlIkcoSxcK4 p7yIa+8LRIkZHp7B4w9Ve+DxUzwYQ1+7RbbeTkzSgP2ubJGJBKvU3cO8bUA7+3ae rnf2feRoVneKCYOIeMuNjeoV0ZXgPi2Y3MPruUdO2TR0xUXZLUfhd0vEZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKujYvtzZIi2EqBB4bA3jmK+O7mEMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhddCDjr9 HVE8/bfp5LjWWjwqMcmz1Y6MIKTwjOH7uZLW/Suu+ia/jUDDbHjIqpMgQFA1NoX2 0yolY4jz43z4yvTqxK/YuIA5/p3HYib15RnG+DRliaWRpM9/Xp7Tobo8gE/C98ab QnMDdDsKZHc06RSm83DhXvnmpJ7dOTmTb8Kl6F7XMLMS0f1K2cF7wSXtWEYM+gnf 2JdnwoFOa0MpOKYX21KcRI6MZ4/EHkmnM942wXZKG5yd/+75/Wj2WN3BvLw9sfAc Xz0tuEF314EqB3ysdrlaBhswIaTsgWxw2Pw83RBbsVgXpbJf1Nq9gAnWkTR/vG7O abqHFSqelXYi4g== -----END CERTIFICATE-----Generated at Fri Jul 24 00:35:36 2026 by rpki-client