$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: AAyIVI6Z5TtlOb0sU2V4a/HGag3M7uyURnCRZBe0oiM= Subject key identifier: 61:F6:4A:7A:3C:4A:0D:F6:F8:03:7B:18:91:4E:58:13:A9:61:14:F9 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019CE2C7AFBEF4AB401EB13D41EF789427CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 186F Signing time: Thu 12 Mar 2026 16:01:03 +0000 Manifest this update: Thu 12 Mar 2026 16:01:03 +0000 Manifest next update: Fri 13 Mar 2026 16:01:03 +0000 Files and hashes: 1: McQ1AOjlDwgZAqlNis7OMo30suU.roa (hash: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE=) 2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: TM/xEoSa+6ajAsI/2ZnFeMzAch8TF0AuVajVqDFQHHU=) 4: SPId_SWHbv84MaBpzxcBFitrFiA.roa (hash: fkjaLtVx/IVOE485FOawltfAwHKBTGzzIXUgCRCBDeg=) 5: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 6: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 7: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 8: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (hash: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY=) 9: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (hash: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0=) 10: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 11: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 12: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 13: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 15:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e2:c7:af:be:f4:ab:40:1e:b1:3d:41:ef:78:94:27:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Mar 12 16:01:03 2026 GMT Not After : Mar 13 16:01:03 2026 GMT Subject: CN=61f64a7a3c4a0df6f8037b18914e5813a96114f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:00:83:ad:36:80:0f:3b:e8:a1:33:50:e0: 71:db:c4:ba:5c:c4:c5:70:fc:e4:6a:c6:ba:b9:ef: f0:5a:e0:f8:db:3d:d0:3d:0a:6c:05:e8:97:14:a4: 93:0c:16:31:9c:7a:f0:98:e1:4b:9d:2f:7c:40:e0: e7:43:2a:4e:bf:0c:64:d7:d4:b5:5b:16:52:f2:e6: 19:8b:0d:32:5c:ce:6e:24:50:c5:f2:af:0f:1b:07: 50:90:8f:c0:43:be:80:bf:d6:a3:6b:36:ac:9f:bd: bc:72:0a:ab:71:f6:aa:70:d5:93:6e:03:d1:08:ac: 04:12:b9:71:b7:cc:26:ef:de:cf:5b:7f:12:4a:40: de:38:b8:1f:64:c1:71:17:46:31:83:f4:eb:d8:15: c9:50:b0:78:d9:6c:db:b0:4e:4b:78:64:5e:48:ef: dc:0a:53:85:a9:2d:2a:43:79:62:c5:d9:60:aa:a9: ee:af:84:61:a4:b3:50:2d:ae:f8:2e:3a:fc:4b:d2: c1:e2:37:2f:00:dc:9b:42:7b:50:f9:86:5d:35:10: 26:04:a0:df:b2:24:28:55:4f:0e:c9:02:45:f7:4e: a3:6f:61:34:34:a3:a7:06:59:3b:b4:c5:8f:7e:f6: a0:87:f8:4b:e0:78:67:35:f3:c4:04:38:f1:2a:74: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F6:4A:7A:3C:4A:0D:F6:F8:03:7B:18:91:4E:58:13:A9:61:14:F9 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cb:69:04:a1:6f:61:0b:0b:f7:fa:cf:e2:0a:53:9b:ca:46: 11:47:03:41:8b:f1:9c:bb:dc:5e:ad:e1:75:1f:62:c5:28:e5: e2:c8:22:8d:44:26:84:48:8f:27:c3:a7:85:a6:b5:71:6c:4b: 61:ee:56:c3:b6:50:55:be:01:0b:71:3a:d2:ed:4b:62:57:93: d8:47:06:39:c6:c6:e8:29:b3:44:18:5f:05:ce:65:68:d5:2b: ea:8d:71:e9:b7:8e:e1:49:e2:49:61:a3:14:7e:ae:14:ca:26: af:99:57:40:3a:57:5d:4b:67:c1:d8:40:71:8b:7f:5a:93:75: 97:16:be:ed:40:59:36:d4:bd:ef:94:92:6b:f6:7b:08:14:bb: bc:50:85:55:76:67:9a:b6:8c:3d:28:73:35:46:5e:dc:af:e5: c7:19:cb:65:09:de:10:a7:f8:ad:a8:2f:1a:d6:55:f3:f5:d8: f2:91:fb:3e:c4:c6:b4:a3:d1:42:08:91:64:77:5a:b0:e6:1e: 56:9a:97:9e:a3:a6:e3:99:84:b3:77:0f:3e:ea:54:99:4d:23: b1:7b:40:ae:8e:b5:fc:a5:2f:b2:82:80:5a:cb:7a:0d:c9:78: 28:48:14:06:41:80:6a:b6:b2:8d:a7:39:35:77:6b:9b:33:9d: 83:eb:71:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzix6++9KtAHrE9Qe94lCfMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwMzEyMTYwMTAzWhcNMjYwMzEzMTYwMTAzWjAzMTEwLwYDVQQD Eyg2MWY2NGE3YTNjNGEwZGY2ZjgwMzdiMTg5MTRlNTgxM2E5NjExNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw10Ag602gA876KEzUOBx28S6XMTF cPzkasa6ue/wWuD42z3QPQpsBeiXFKSTDBYxnHrwmOFLnS98QODnQypOvwxk19S1 WxZS8uYZiw0yXM5uJFDF8q8PGwdQkI/AQ76Av9ajazasn728cgqrcfaqcNWTbgPR CKwEErlxt8wm797PW38SSkDeOLgfZMFxF0Yxg/Tr2BXJULB42WzbsE5LeGReSO/c ClOFqS0qQ3lixdlgqqnur4RhpLNQLa74Ljr8S9LB4jcvANybQntQ+YZdNRAmBKDf siQoVU8OyQJF906jb2E0NKOnBlk7tMWPfvagh/hL4HhnNfPEBDjxKnSeMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGH2Sno8Sg32+AN7GJFOWBOpYRT5MB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8tpBKFv YQsL9/rP4gpTm8pGEUcDQYvxnLvcXq3hdR9ixSjl4sgijUQmhEiPJ8Onhaa1cWxL Ye5Ww7ZQVb4BC3E60u1LYleT2EcGOcbG6CmzRBhfBc5laNUr6o1x6beO4UniSWGj FH6uFMomr5lXQDpXXUtnwdhAcYt/WpN1lxa+7UBZNtS975SSa/Z7CBS7vFCFVXZn mraMPShzNUZe3K/lxxnLZQneEKf4ragvGtZV8/XY8pH7PsTGtKPRQgiRZHdasOYe VpqXnqOm45mEs3cPPupUmU0jsXtAro61/KUvsoKAWst6Dcl4KEgUBkGAarayjac5 NXdrmzOdg+txtA== -----END CERTIFICATE-----Generated at Thu Mar 12 22:42:10 2026 by rpki-client