$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: rMxM1vl13iplsxKjj9DIxyHnBxZQEYJocWAGSc/SPQo= Subject key identifier: B9:10:DC:17:CD:CC:B0:1D:39:B7:4A:7A:A7:F9:23:1F:3E:4D:EA:47 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 01A17E180177BAC8F0FF500EE7F975FA6688 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1AE0 Signing time: Tue 27 Oct 2026 16:01:04 +0000 Manifest this update: Tue 27 Oct 2026 16:01:04 +0000 Manifest next update: Wed 28 Oct 2026 16:01:04 +0000 Files and hashes: 1: 9cNKQWK3wk1irmE7oa8T4PR8mc0.roa (hash: u5fJLnWvAGQzCGewqpUpjr9+ttOL7JnpgPLBPCMOWKk=) 2: GAkPYv8UHYs_EoZPb4jWXtDDAC0.roa (hash: lnLCFUL9tM4n3iWBg5iwZCi3PtIQMScXWDpeh/kO248=) 3: QWA_uofXGCzsKuc_5MjZ-9Iqapo.roa (hash: Myntq/jB052ssuyNq1wrshjSxF8NHJKposHtJoioXmQ=) 4: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 5: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: w6rU2amzOt2HrtVgTlzCb8zBRmP5aFcmQsGcEZnySZI=) 6: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 7: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 8: ijbiJD7TGtArmmQdogwgJNz_Iss.roa (hash: pWVbgHKQTvi3IHOIcmkXTEU92wiUS9n0t7V8IM2/M4U=) 9: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 10: nlzsv5_4ztHk87YIpIDNp8kA-LY.roa (hash: I+evjHY278SDlMs7AgnRI/W35THgRR/EtPMQ/T244gg=) 11: s9mRiVbGsTF6wkMK69DtA5FXNaY.roa (hash: zDvAj5uvmLenqTBwKC8I/l27zfQzwbUsThxQH7ZGp1M=) 12: sZCbmYQyfGpH4iaOrLx2v2yCTAg.roa (hash: ZUhSIpiNJj1ft9rDQsYCHKV1UDkkyNZJvSyHieA9rEU=) 13: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 14: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 15: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 16: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 16:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7e:18:01:77:ba:c8:f0:ff:50:0e:e7:f9:75:fa:66:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Oct 27 16:01:04 2026 GMT Not After : Oct 28 16:01:04 2026 GMT Subject: CN=b910dc17cdccb01d39b74a7aa7f9231f3e4dea47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:7a:21:e4:8a:0b:1f:47:eb:d5:29:a3:18: 87:a7:c5:e4:30:b8:4d:39:67:33:9c:86:d2:f0:28: 09:f7:21:cc:67:aa:53:4c:ea:26:62:12:96:b6:46: 4a:ce:f7:e0:4b:55:12:c6:f1:a5:74:d6:ab:3a:03: b9:72:3a:8e:ab:10:1e:81:67:c0:09:5a:14:10:f9: 43:f8:71:c7:85:45:e7:4f:e8:30:0d:a6:47:b7:6d: 59:42:09:f5:20:c1:3b:57:ad:7e:ae:cb:7d:79:db: 5e:4b:d5:87:ba:17:0b:0c:76:43:69:19:62:0b:f3: 2a:ed:2e:40:e2:7f:f3:20:b4:20:e1:84:47:28:5c: 1c:8e:41:01:b2:ae:a0:03:61:03:15:53:8c:c9:92: 5e:f5:96:b0:e1:38:ee:eb:77:e7:2f:a6:48:07:c4: e1:30:6d:6d:82:64:c7:98:ca:50:cc:18:cd:64:01: 56:a8:c5:be:57:90:94:d6:d6:05:a6:06:28:3c:5b: ba:98:a3:fd:b1:9f:2f:af:c7:72:c9:ca:74:8f:24: aa:b7:ef:af:81:a0:63:18:98:58:e1:c9:93:6b:7c: 9c:5e:3c:ad:36:d6:3b:cf:52:9c:90:6e:2b:03:23: 91:b4:09:f7:67:bb:46:1a:46:c5:5a:8a:01:51:78: 12:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:10:DC:17:CD:CC:B0:1D:39:B7:4A:7A:A7:F9:23:1F:3E:4D:EA:47 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:82:39:3e:c9:f5:8e:fe:f7:67:3f:70:41:1d:0f:4f:85:6a: ef:50:47:d7:e9:68:98:61:4f:32:b4:c1:04:96:c2:97:73:2f: f6:94:fd:12:46:a3:ca:bf:00:c1:e2:a7:34:35:3b:8f:50:8e: e6:e9:b4:58:0a:0d:e1:a0:4d:50:28:15:76:9b:bf:8e:90:b4: 08:50:b9:d6:05:b3:95:0f:f5:85:a9:51:7b:12:b6:6e:7d:32: ea:78:bd:65:33:e3:04:2b:83:ed:ea:8b:8d:77:d0:a5:35:5d: 5d:9a:52:2b:18:5e:84:29:ac:f2:fa:88:74:d0:30:eb:bd:d7: 1c:5e:64:c6:1a:80:c6:f1:58:cb:be:c4:44:47:c9:b6:89:2a: 37:18:53:f3:56:ee:43:ac:af:47:af:2f:49:b1:ea:3b:5a:80: 73:a8:d9:d5:63:1e:b5:92:7a:c5:1b:3c:ec:d9:ff:b0:40:12: 42:fa:08:11:7d:74:64:b5:51:51:a6:1f:50:2e:d1:ba:6e:87: 29:8f:0d:6d:f4:ab:68:f5:4e:d9:84:c4:9c:c7:7b:4b:53:41: f7:e9:30:3c:3e:54:a1:19:0d:d7:45:f0:67:9a:8a:54:b9:d3: 4f:47:24:13:1c:7b:ce:0c:96:f1:4c:18:1c:28:4f:b6:ac:1c: c3:41:3c:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF+GAF3usjw/1AO5/l1+maIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYxMDI3MTYwMTA0WhcNMjYxMDI4MTYwMTA0WjAzMTEwLwYDVQQD EyhiOTEwZGMxN2NkY2NiMDFkMzliNzRhN2FhN2Y5MjMxZjNlNGRlYTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7B6IeSKCx9H69UpoxiHp8XkMLhN OWcznIbS8CgJ9yHMZ6pTTOomYhKWtkZKzvfgS1USxvGldNarOgO5cjqOqxAegWfA CVoUEPlD+HHHhUXnT+gwDaZHt21ZQgn1IME7V61+rst9edteS9WHuhcLDHZDaRli C/Mq7S5A4n/zILQg4YRHKFwcjkEBsq6gA2EDFVOMyZJe9Zaw4Tju63fnL6ZIB8Th MG1tgmTHmMpQzBjNZAFWqMW+V5CU1tYFpgYoPFu6mKP9sZ8vr8dyycp0jySqt++v gaBjGJhY4cmTa3ycXjytNtY7z1KckG4rAyORtAn3Z7tGGkbFWooBUXgSswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkQ3BfNzLAdObdKeqf5Ix8+TepHMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYI5Psn1 jv73Zz9wQR0PT4Vq71BH1+lomGFPMrTBBJbCl3Mv9pT9Ekajyr8AweKnNDU7j1CO 5um0WAoN4aBNUCgVdpu/jpC0CFC51gWzlQ/1halRexK2bn0y6ni9ZTPjBCuD7eqL jXfQpTVdXZpSKxhehCms8vqIdNAw673XHF5kxhqAxvFYy77EREfJtokqNxhT81bu Q6yvR68vSbHqO1qAc6jZ1WMetZJ6xRs87Nn/sEASQvoIEX10ZLVRUaYfUC7Rum6H KY8NbfSraPVO2YTEnMd7S1NB9+kwPD5UoRkN10XwZ5qKVLnTT0ckExx7zgyW8UwY HChPtqwcw0E81w== -----END CERTIFICATE-----Generated at Wed Oct 28 00:52:55 2026 by rpki-client