$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json) Hash identifier: EiRXG9IE+vgaiU+NaJDPbGMTx81Y47L79oVXgS/0TvM= Subject key identifier: 35:5C:F9:2A:1F:BF:55:AB:18:84:D1:95:6B:2B:7B:F5:A7:3A:DF:94 Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4 Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4 Certificate serial: 019EB921C6FC9EB9A5DD04E45AF38768A499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft Manifest number: 196F Signing time: Fri 12 Jun 2026 00:00:58 +0000 Manifest this update: Fri 12 Jun 2026 00:00:58 +0000 Manifest next update: Sat 13 Jun 2026 00:00:58 +0000 Files and hashes: 1: 4lIp8ea3WQFBN3Pqrh3ubx-xLGE.roa (hash: MzcrykLHz17bn51pu2cLDUXzNCETQeDxNQFftxunStY=) 2: EXM8zv4hDMV5vpuDDhitBb0YsJk.roa (hash: dWnBV6uZ6yoWCEmneHJfdW94pJqTaIBLN9AwRXQDpQY=) 3: IBNLwjGhOGElhFamPSCMLTlr5tI.roa (hash: oNzjprVPt2/BmbiYZeDtNNSvn4x6T1bNCGmR/DW5l7s=) 4: KjPW_UmYIXSdNHqdseZl-NM7DDA.roa (hash: m7WeXlGnoRBcKg0EX7B3sn9WI45zdfZvUjQohB/JWSo=) 5: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: uGhI1V8VwOq5hualr1biQm16yQzNwSeDtSIklJ5fz3E=) 6: RgoVuEZzrB6iPeoDkS2VZ5UJEjM.roa (hash: 7eIfiRclCfgNOCGCCRoqijzNwFTi6X6q7V5T2mrxMRU=) 7: bOwoeGXB2wja2W0aIO7cJEqFn0c.roa (hash: TjrVmHhe6qTnTA+IeFLgJO+nqktu8K34RwVXqHJjTPE=) 8: gNAyrBVoFaWeREXzr33gHPdjLuc.roa (hash: 9t3cAZDPUcX15JFGLDAbTwFu6aPFTfX5yposYhTNwLc=) 9: kuKa_RbKBF-8apG5eNAA7ZGrk64.roa (hash: 8GXXom7MNoYYjacR6QL5aPwdId669M5Mrd0b2uKdYxk=) 10: r4gojXpCfVfMsKXfq3IcqeiE878.roa (hash: T3XdnQciJ8C4NOqpLw2BOhgbQDlMQMjf7FhYEgWICW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 20:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b9:21:c6:fc:9e:b9:a5:dd:04:e4:5a:f3:87:68:a4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4 Validity Not Before: Jun 12 00:00:58 2026 GMT Not After : Jun 13 00:00:58 2026 GMT Subject: CN=355cf92a1fbf55ab1884d1956b2b7bf5a73adf94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:6c:17:13:07:57:18:5f:c0:a7:f9:cc:12: 47:57:e8:57:aa:d9:b0:4c:56:ad:f1:b1:39:5d:cf: e0:e7:c1:2b:6b:cf:29:10:c5:0f:ff:6f:3e:0c:68: 1b:39:30:42:3d:cc:40:9c:1d:53:c1:14:e8:56:94: 4a:3a:99:d5:cc:91:92:78:99:02:b8:7f:36:04:ce: cd:f7:aa:e6:d1:68:e3:68:4a:b1:da:33:38:5e:b1: c0:5e:03:1c:34:39:c2:5f:c1:1d:ac:d0:8d:1f:95: 69:40:b3:15:86:10:34:cd:e9:f6:1e:8d:4d:d9:8f: ac:38:b6:3b:bd:34:03:54:c2:c0:56:54:eb:08:6e: 06:28:20:a8:d1:40:31:b7:4d:9b:ec:b0:50:20:79: 8d:1b:4c:aa:43:cf:50:de:47:d3:42:f1:dc:68:b6: b3:ae:ac:90:1a:77:a0:6e:1e:5a:71:4e:27:0a:cd: c1:d7:ba:93:99:6c:6c:22:6e:94:33:a2:16:0e:21: 13:90:e0:1c:da:a5:60:0c:9a:00:e3:e9:d2:d0:a8: af:d5:39:d5:85:1f:cd:ea:68:e1:42:55:7f:b2:20: 10:60:52:4c:98:b0:95:dc:8c:6a:19:65:64:51:44: ac:d9:36:99:00:70:f5:81:72:59:e8:18:28:ad:53: 0c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5C:F9:2A:1F:BF:55:AB:18:84:D1:95:6B:2B:7B:F5:A7:3A:DF:94 X509v3 Authority Key Identifier: keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:75:40:71:b3:a2:da:9a:1a:91:1c:69:5b:cc:74:59:f7:24: dc:b6:d6:25:17:37:ba:f7:19:bd:52:df:36:e8:b1:f3:71:3c: 0d:f3:56:4b:bf:93:09:7b:72:09:c3:07:58:ec:51:5d:d0:dd: 64:2d:07:3b:4e:ec:dd:c7:ef:66:6e:3f:ad:ea:19:b4:c4:b1: 9a:1c:4e:a6:b4:cd:00:51:ff:7e:ca:3e:d8:8f:b6:f6:6d:1a: 15:b8:7c:c5:51:6c:76:02:69:30:a1:9a:b7:7c:f7:17:15:a6: 01:ef:7f:d7:1e:13:b6:5d:e6:ec:ca:99:38:49:c8:8f:0c:d6: ef:d5:22:cb:07:10:29:d0:36:60:b7:29:4f:67:f9:20:82:42: c6:de:54:eb:14:1f:2f:3c:0c:46:c1:79:0c:b8:cf:d8:f3:1b: 7c:cc:be:c4:d3:a2:84:f4:e4:b1:ab:d5:33:3d:62:d6:3e:29: 27:f6:8d:ba:10:fd:d6:0f:c2:aa:8c:20:b1:ed:d1:cc:a1:bd: 4f:21:c2:94:89:15:29:a4:d0:0a:e4:4c:31:e5:ff:7d:8f:b9: ee:5e:fd:1a:ba:e1:d0:ea:62:e1:62:61:15:6f:c2:4c:d9:3f: ab:7d:77:33:9f:0e:ce:1a:c6:d5:39:30:93:f5:87:ed:1c:68: be:80:d1:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ65Icb8nrml3QTkWvOHaKSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1 NjJmYTQwHhcNMjYwNjEyMDAwMDU4WhcNMjYwNjEzMDAwMDU4WjAzMTEwLwYDVQQD EygzNTVjZjkyYTFmYmY1NWFiMTg4NGQxOTU2YjJiN2JmNWE3M2FkZjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC1sFxMHVxhfwKf5zBJHV+hXqtmw TFat8bE5Xc/g58Era88pEMUP/28+DGgbOTBCPcxAnB1TwRToVpRKOpnVzJGSeJkC uH82BM7N96rm0WjjaEqx2jM4XrHAXgMcNDnCX8EdrNCNH5VpQLMVhhA0zen2Ho1N 2Y+sOLY7vTQDVMLAVlTrCG4GKCCo0UAxt02b7LBQIHmNG0yqQ89Q3kfTQvHcaLaz rqyQGnegbh5acU4nCs3B17qTmWxsIm6UM6IWDiETkOAc2qVgDJoA4+nS0Kiv1TnV hR/N6mjhQlV/siAQYFJMmLCV3IxqGWVkUUSs2TaZAHD1gXJZ6BgorVMMgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVc+Sofv1WrGITRlWsre/WnOt+UMB8GA1UdIwQY MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt MTAzMGNkYmU2YmQ0LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0 LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXVAcbOi 2poakRxpW8x0Wfck3LbWJRc3uvcZvVLfNuix83E8DfNWS7+TCXtyCcMHWOxRXdDd ZC0HO07s3cfvZm4/reoZtMSxmhxOprTNAFH/fso+2I+29m0aFbh8xVFsdgJpMKGa t3z3FxWmAe9/1x4Ttl3m7MqZOEnIjwzW79UiywcQKdA2YLcpT2f5IIJCxt5U6xQf LzwMRsF5DLjP2PMbfMy+xNOihPTksavVMz1i1j4pJ/aNuhD91g/Cqowgse3RzKG9 TyHClIkVKaTQCuRMMeX/fY+57l79Grrh0Opi4WJhFW/CTNk/q313M58OzhrG1Tkw k/WH7RxovoDR6g== -----END CERTIFICATE-----Generated at Fri Jun 12 02:56:18 2026 by rpki-client