$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: PSO9ah/vTrMXqYxGKU/7UAo+Ib+KVyXmdjKalBjR06s= Subject key identifier: 26:08:36:F2:E2:54:E8:06:01:93:50:18:F0:97:C8:47:35:2A:69:7B Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019FA14D5EDD22689A446FCCFD39631C7F44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 19DC Signing time: Mon 27 Jul 2026 02:00:30 +0000 Manifest this update: Mon 27 Jul 2026 02:00:30 +0000 Manifest next update: Tue 28 Jul 2026 02:00:30 +0000 Files and hashes: 1: McQ1AOjlDwgZAqlNis7OMo30suU.roa (hash: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE=) 2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: XqYUK2BUTQR4ss2Xmb/+i5qo4AUuRuIQxNbFivYxFLg=) 4: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 5: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 6: go5zmIjMFUbuaVU7TDIK6GCVKzE.roa (hash: SFdYPGfWYCvWnl4ngcgtIbNB25CwfARixTuIkg+0AKI=) 7: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 8: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (hash: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY=) 9: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (hash: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0=) 10: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 11: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 12: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 13: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 02:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:4d:5e:dd:22:68:9a:44:6f:cc:fd:39:63:1c:7f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jul 27 02:00:30 2026 GMT Not After : Jul 28 02:00:30 2026 GMT Subject: CN=260836f2e254e80601935018f097c847352a697b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:05:36:c8:68:e4:cd:0d:ae:c7:18:d4:14:5f: 51:cf:04:22:a6:09:dd:5d:14:d9:3b:4f:56:1c:19: 8f:3e:88:26:b1:cf:91:af:e8:8f:74:9d:5c:fd:62: e3:4c:e5:0f:73:71:99:9d:a2:f1:a5:ab:8c:93:b4: 72:54:35:b4:8e:4e:8d:86:86:46:4e:6d:a6:ba:50: d8:30:88:05:29:60:87:11:97:f6:f4:38:74:9c:43: d8:bf:47:1f:4e:6f:7c:7b:d6:74:f9:61:a5:e8:7c: c3:c5:eb:aa:43:93:b0:df:25:f5:f4:f0:26:d8:13: 43:93:a6:37:18:99:ca:dd:0f:c4:fb:ae:f6:8f:31: 7a:02:e6:0b:42:c9:00:49:22:b7:fe:53:7f:5e:aa: 0c:b5:27:cd:36:79:b4:ea:e4:b6:5d:66:c9:24:b3: 2a:c8:8a:e1:07:36:9a:43:01:cc:c8:87:2d:31:56: 87:a4:41:a8:de:6e:a0:cf:d6:e1:ca:18:52:ce:73: 00:50:41:8b:ca:36:95:cd:31:65:83:4d:22:69:34: eb:00:12:62:38:5f:17:c3:15:50:10:0d:04:8a:c3: b1:e9:65:07:99:fb:c6:59:16:54:a2:65:fc:5e:14: 23:e5:29:1a:a6:c4:13:a2:c6:88:4b:d6:df:6f:5b: 8e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:08:36:F2:E2:54:E8:06:01:93:50:18:F0:97:C8:47:35:2A:69:7B X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:c9:87:a4:e1:81:a3:0c:dc:88:43:94:a5:5a:28:8f:25:11: 77:b9:96:4e:5e:8b:74:d0:a7:f3:22:3b:1c:00:e0:99:a6:d3: fb:a6:96:27:d9:1f:cc:dd:d9:b6:fc:f0:61:35:2b:69:4f:06: 52:42:2c:99:b1:a3:03:e7:a2:98:a3:a7:78:a9:d4:27:0c:d5: b1:53:2b:42:12:46:8b:81:23:39:96:ad:e7:05:16:85:1c:82: ba:dc:50:69:9b:63:8d:b7:65:32:f2:7d:dd:6a:b7:2e:e2:e3: 9d:2a:db:0e:be:ba:d8:1f:ac:4f:b0:b3:36:ff:71:66:40:d4: 02:e6:bf:fa:04:17:27:91:35:24:61:5f:26:80:ad:d4:e7:7e: c3:49:12:15:bb:29:e0:64:db:2a:47:85:15:27:18:60:f4:d2: a6:53:43:66:d8:7c:85:fa:8b:83:66:46:a5:40:3d:dd:8b:51: e8:ae:13:db:63:ee:be:4d:6f:f5:d4:c2:a4:5f:96:b3:1b:38: 77:35:b3:3c:e0:56:8d:fd:8a:58:dc:b1:56:8e:c9:ac:59:36: c4:64:ce:c4:82:7e:bd:14:02:9d:fb:a3:56:5b:31:db:be:10: db:6c:a4:8b:47:d9:72:c5:3e:e7:1b:97:4f:59:ef:9c:a8:03: df:0c:13:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hTV7dImiaRG/M/TljHH9EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwNzI3MDIwMDMwWhcNMjYwNzI4MDIwMDMwWjAzMTEwLwYDVQQD EygyNjA4MzZmMmUyNTRlODA2MDE5MzUwMThmMDk3Yzg0NzM1MmE2OTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgU2yGjkzQ2uxxjUFF9RzwQipgnd XRTZO09WHBmPPogmsc+Rr+iPdJ1c/WLjTOUPc3GZnaLxpauMk7RyVDW0jk6NhoZG Tm2mulDYMIgFKWCHEZf29Dh0nEPYv0cfTm98e9Z0+WGl6HzDxeuqQ5Ow3yX19PAm 2BNDk6Y3GJnK3Q/E+672jzF6AuYLQskASSK3/lN/XqoMtSfNNnm06uS2XWbJJLMq yIrhBzaaQwHMyIctMVaHpEGo3m6gz9bhyhhSznMAUEGLyjaVzTFlg00iaTTrABJi OF8XwxVQEA0EisOx6WUHmfvGWRZUomX8XhQj5SkapsQTosaIS9bfb1uO6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYINvLiVOgGAZNQGPCXyEc1Kml7MB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMmHpOGB owzciEOUpVoojyURd7mWTl6LdNCn8yI7HADgmabT+6aWJ9kfzN3ZtvzwYTUraU8G UkIsmbGjA+eimKOneKnUJwzVsVMrQhJGi4EjOZat5wUWhRyCutxQaZtjjbdlMvJ9 3Wq3LuLjnSrbDr662B+sT7CzNv9xZkDUAua/+gQXJ5E1JGFfJoCt1Od+w0kSFbsp 4GTbKkeFFScYYPTSplNDZth8hfqLg2ZGpUA93YtR6K4T22Puvk1v9dTCpF+Wsxs4 dzWzPOBWjf2KWNyxVo7JrFk2xGTOxIJ+vRQCnfujVlsx274Q22yki0fZcsU+5xuX T1nvnKgD3wwTDw== -----END CERTIFICATE-----Generated at Mon Jul 27 09:43:00 2026 by rpki-client