$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: yAOuNf7MOQW/OQGlaw1cGW0HN8iTv6WsWmSErjaZVVo= Subject key identifier: 2A:63:1E:64:46:20:85:45:CB:10:23:3A:C2:8D:ED:C6:5B:1D:9C:55 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019F92ED6AA6C964BFF8AAA4107D1D802613 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 11C3 Signing time: Fri 24 Jul 2026 07:01:00 +0000 Manifest this update: Fri 24 Jul 2026 07:01:00 +0000 Manifest next update: Sat 25 Jul 2026 07:01:00 +0000 Files and hashes: 1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=) 2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=) 3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=) 4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=) 5: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (hash: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc=) 6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=) 7: L5qyY9jZaitIZWVHzJF8EMKtnJw.roa (hash: RHPOnQl7M+92fyRwAlYoQqCItx05c0P7/Yx6ROjX9QU=) 8: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=) 9: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=) 10: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: 2plt88SQ0AXjDrBnCEZ2WNvuE2tTGJ9B1rzJxuuGfiQ=) 11: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=) 12: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (hash: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 07:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:ed:6a:a6:c9:64:bf:f8:aa:a4:10:7d:1d:80:26:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jul 24 07:01:00 2026 GMT Not After : Jul 25 07:01:00 2026 GMT Subject: CN=2a631e6446208545cb10233ac28dedc65b1d9c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:96:76:d8:1e:12:c7:2c:1b:d0:9f:fd:43: 49:40:45:aa:2e:b1:2b:89:01:5d:85:51:76:86:d1: 71:61:1b:cc:e2:ac:a7:61:37:cf:7b:9e:fc:3e:7a: b7:fc:64:6b:2f:b8:f9:69:f6:e9:16:22:45:a4:71: 43:07:44:8d:8c:18:12:bf:36:14:43:40:23:ff:9f: 27:f6:d0:c1:76:79:9a:2e:18:8b:ff:2f:1b:1c:81: 4f:44:2e:d1:94:19:06:49:21:12:8e:26:f8:ca:0c: 07:81:39:8a:ab:8a:4b:a6:1f:27:0b:8f:4f:2b:5c: 53:b3:3e:25:16:59:18:27:fc:e1:ca:46:57:a9:13: 81:ef:6c:47:0b:83:d8:5a:59:62:70:8d:fa:8e:a0: ba:46:93:2b:c2:0a:61:5c:18:95:33:2e:68:1e:d4: 88:64:a6:79:5a:f3:bc:a2:4d:4a:1c:11:c6:48:93: 83:30:1d:a8:f9:d7:1d:92:2e:cb:2b:3c:a2:86:0b: 58:92:95:60:3e:1a:34:d5:26:7d:2a:d4:66:bb:20: 3e:2c:6c:2f:f4:b5:ac:db:e9:f9:38:43:28:dd:e6: a4:21:03:77:4b:5b:d0:60:dd:c3:49:fe:29:1f:a2: 59:eb:aa:f4:ca:e8:ab:d0:c3:5d:e8:3e:51:f8:58: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:63:1E:64:46:20:85:45:CB:10:23:3A:C2:8D:ED:C6:5B:1D:9C:55 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9b:30:68:0b:e6:55:8d:64:13:d9:88:88:99:b1:75:ce:46: 81:f0:ab:88:ce:eb:59:31:43:90:0c:03:8c:0c:83:d7:e5:0d: 9c:38:c5:ce:ba:c0:92:b1:cd:1e:12:fd:c7:4d:92:bb:0b:a7: 27:fe:f9:5e:e2:34:36:d9:90:da:6a:44:be:46:17:f2:bf:de: 4b:81:5e:0d:33:0c:ca:e1:20:62:00:9e:59:91:2f:d9:7b:2b: 35:a4:8d:4a:5d:3d:11:9d:7e:51:1e:d4:1d:74:7e:e2:c7:d1: 6b:6f:1d:cc:3f:71:b7:13:ce:11:49:7a:13:9f:21:a2:64:ad: 83:fe:d1:3b:72:08:8d:39:48:f2:3e:3a:57:ec:ff:2f:7b:03: 3f:8a:30:ca:4e:d0:82:e5:0a:6a:d7:9b:66:1a:ee:10:f7:41: c7:3b:56:5f:37:e8:12:4e:c7:97:d7:5b:94:37:09:50:5a:5d: d6:3e:6c:0d:56:e5:5c:36:82:e1:a5:72:39:82:4f:ff:8e:53: c0:76:63:6c:ac:57:bc:17:76:a8:22:46:bc:eb:98:31:6e:7b: a9:00:2a:7b:05:1f:d1:fc:c4:18:92:82:05:df:bb:8a:d1:79: ba:bf:48:95:96:88:eb:f3:d5:31:44:8f:20:cc:29:a6:82:8c: bf:09:b5:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+S7WqmyWS/+KqkEH0dgCYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwNzI0MDcwMTAwWhcNMjYwNzI1MDcwMTAwWjAzMTEwLwYDVQQD EygyYTYzMWU2NDQ2MjA4NTQ1Y2IxMDIzM2FjMjhkZWRjNjViMWQ5YzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oGWdtgeEscsG9Cf/UNJQEWqLrEr iQFdhVF2htFxYRvM4qynYTfPe578Pnq3/GRrL7j5afbpFiJFpHFDB0SNjBgSvzYU Q0Aj/58n9tDBdnmaLhiL/y8bHIFPRC7RlBkGSSESjib4ygwHgTmKq4pLph8nC49P K1xTsz4lFlkYJ/zhykZXqROB72xHC4PYWllicI36jqC6RpMrwgphXBiVMy5oHtSI ZKZ5WvO8ok1KHBHGSJODMB2o+dcdki7LKzyihgtYkpVgPho01SZ9KtRmuyA+LGwv 9LWs2+n5OEMo3eakIQN3S1vQYN3DSf4pH6JZ66r0yuir0MNd6D5R+FgPxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpjHmRGIIVFyxAjOsKN7cZbHZxVMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpswaAvm VY1kE9mIiJmxdc5GgfCriM7rWTFDkAwDjAyD1+UNnDjFzrrAkrHNHhL9x02Suwun J/75XuI0NtmQ2mpEvkYX8r/eS4FeDTMMyuEgYgCeWZEv2XsrNaSNSl09EZ1+UR7U HXR+4sfRa28dzD9xtxPOEUl6E58homStg/7RO3IIjTlI8j46V+z/L3sDP4owyk7Q guUKatebZhruEPdBxztWXzfoEk7Hl9dblDcJUFpd1j5sDVblXDaC4aVyOYJP/45T wHZjbKxXvBd2qCJGvOuYMW57qQAqewUf0fzEGJKCBd+7itF5ur9IlZaI6/PVMUSP IMwppoKMvwm1yA== -----END CERTIFICATE-----Generated at Fri Jul 24 10:47:44 2026 by rpki-client