$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: EhiR7omlv102XYQjCzUgQTJ7h0EFJpMtThcKQGdsHcs= Subject key identifier: 47:A7:05:60:79:52:33:69:09:F7:F6:17:23:D6:6F:6A:8C:F2:E2:29 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019D265F17BD216834C1D7398C26492617E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0983 Signing time: Wed 25 Mar 2026 19:00:59 +0000 Manifest this update: Wed 25 Mar 2026 19:00:59 +0000 Manifest next update: Thu 26 Mar 2026 19:00:59 +0000 Files and hashes: 1: 0_vDnDRF9RJXjQRo2pH5Tit2G6k.roa (hash: IvBfnkpqBkHgNd2fPdtTwy3ZEe1XX9CROdeaKsRCiZg=) 2: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 3: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 4: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 5: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 6: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: 6RlXYb3DzyL6crTZYfGEmHwHZRyKG3np192D5rZVh5E=) 7: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 8: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 9: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 10: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 11: kveMMocsfLZh918Y0_FGgyBzNLM.roa (hash: vKnrq5ifdIB9dF0mtCayO5eOs+Yvg54hMTnFEcoDZaU=) 12: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:5f:17:bd:21:68:34:c1:d7:39:8c:26:49:26:17:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Mar 25 19:00:59 2026 GMT Not After : Mar 26 19:00:59 2026 GMT Subject: CN=47a705607952336909f7f61723d66f6a8cf2e229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ee:72:62:c2:4c:19:84:75:88:6b:9a:1b:82: 80:d1:e7:ab:88:46:07:9c:82:37:5a:49:75:92:12: 87:6b:16:cf:0f:97:78:d4:7a:c3:57:60:6f:79:d1: b8:da:2b:bb:91:06:bb:a9:a3:13:52:ae:e5:73:41: 51:fe:7c:a8:1a:db:8a:47:d9:66:79:7e:76:6a:84: 49:ca:d0:62:a7:fa:fd:ee:11:34:31:14:35:4d:ed: c2:e5:6d:a2:a3:9a:8d:9b:cb:b7:62:c5:0a:04:21: 1e:7a:29:51:7f:e2:5d:cb:ac:c3:c7:40:1c:7b:82: 31:0f:51:fa:a3:cf:5e:d6:ac:29:eb:b8:b3:8e:47: 1a:ca:2a:d6:b9:20:69:d4:36:da:c9:2e:28:3e:9d: 79:e5:bb:4f:5c:5e:9c:1f:68:4d:9a:49:29:81:95: c8:91:32:9c:68:10:1f:69:c5:9c:77:d9:d5:77:90: d9:88:c3:ff:19:f2:c2:a8:63:f4:24:d9:d5:86:35: bb:a5:24:72:32:c2:05:64:43:95:92:eb:08:9e:cb: d3:e9:25:23:86:59:ea:f8:29:1b:6a:26:67:f3:d3: db:e5:51:0e:a2:a1:92:c5:85:04:f3:46:6e:e7:39: 9d:b3:35:d1:c7:9d:ab:c9:40:1b:1c:fb:8a:df:e2: 82:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A7:05:60:79:52:33:69:09:F7:F6:17:23:D6:6F:6A:8C:F2:E2:29 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:97:39:ec:6b:b7:b7:6e:23:74:67:7c:a6:40:fd:56:e2:1b: f7:e4:e2:42:f1:ba:4b:04:0e:50:ef:6e:0a:63:b4:55:d6:d3: dc:86:c8:f0:5f:9e:00:c2:d6:a8:e1:a6:f7:8d:be:37:b9:e9: 27:e0:08:04:88:e4:3a:e6:0e:9a:b6:7f:01:ed:4d:33:a2:fb: 5a:20:7a:91:ef:87:a0:b4:74:2c:1c:a2:66:b6:ed:82:bb:d1: 49:75:ab:8e:2e:21:b4:5c:d5:5d:21:c8:7d:27:c3:f1:77:36: 9d:54:37:98:82:50:34:14:67:d1:53:57:3b:a5:89:af:81:c9: 1b:07:91:1a:70:d0:71:4e:6c:17:84:8d:60:7c:c5:e0:6a:58: 2e:c3:a8:6d:17:a8:af:77:88:97:7c:16:4b:c6:a0:d5:0f:51: ea:9e:07:01:91:40:8b:33:c1:54:fb:e4:1b:0f:4a:de:e0:18: 90:84:90:ad:f9:c6:67:eb:82:82:28:c1:33:8a:fe:ca:83:26: a8:41:45:47:fa:4b:53:65:88:56:ce:6f:25:d3:ff:1e:30:37: 63:ea:19:f0:68:4d:5f:98:3c:d7:a2:e9:69:5a:53:e0:37:a8: 56:19:c0:5b:4c:2e:ce:af:b0:ec:9e:c2:82:1d:f0:c1:84:69: 0d:70:e7:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mXxe9IWg0wdc5jCZJJhfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwMzI1MTkwMDU5WhcNMjYwMzI2MTkwMDU5WjAzMTEwLwYDVQQD Eyg0N2E3MDU2MDc5NTIzMzY5MDlmN2Y2MTcyM2Q2NmY2YThjZjJlMjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e5yYsJMGYR1iGuaG4KA0eeriEYH nII3Wkl1khKHaxbPD5d41HrDV2BvedG42iu7kQa7qaMTUq7lc0FR/nyoGtuKR9lm eX52aoRJytBip/r97hE0MRQ1Te3C5W2io5qNm8u3YsUKBCEeeilRf+Jdy6zDx0Ac e4IxD1H6o89e1qwp67izjkcayirWuSBp1DbayS4oPp155btPXF6cH2hNmkkpgZXI kTKcaBAfacWcd9nVd5DZiMP/GfLCqGP0JNnVhjW7pSRyMsIFZEOVkusInsvT6SUj hlnq+CkbaiZn89Pb5VEOoqGSxYUE80Zu5zmdszXRx52ryUAbHPuK3+KCXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEenBWB5UjNpCff2FyPWb2qM8uIpMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJc57Gu3 t24jdGd8pkD9VuIb9+TiQvG6SwQOUO9uCmO0VdbT3IbI8F+eAMLWqOGm942+N7np J+AIBIjkOuYOmrZ/Ae1NM6L7WiB6ke+HoLR0LByiZrbtgrvRSXWrji4htFzVXSHI fSfD8Xc2nVQ3mIJQNBRn0VNXO6WJr4HJGweRGnDQcU5sF4SNYHzF4GpYLsOobReo r3eIl3wWS8ag1Q9R6p4HAZFAizPBVPvkGw9K3uAYkISQrfnGZ+uCgijBM4r+yoMm qEFFR/pLU2WIVs5vJdP/HjA3Y+oZ8GhNX5g816LpaVpT4DeoVhnAW0wuzq+w7J7C gh3wwYRpDXDnEw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:36:41 2026 by rpki-client