$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: qLGy3RPrOpEQnDIQ5oTveU4kqvP1FTdu58dFirwxh/s= Subject key identifier: 02:D3:B9:73:68:7D:98:A9:03:79:E3:1A:F1:2A:CF:B4:1F:99:F6:20 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019DD050F8B4C3D672D4347EA49CAA2F3B40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 18EA Signing time: Mon 27 Apr 2026 19:01:00 +0000 Manifest this update: Mon 27 Apr 2026 19:01:00 +0000 Manifest next update: Tue 28 Apr 2026 19:01:00 +0000 Files and hashes: 1: McQ1AOjlDwgZAqlNis7OMo30suU.roa (hash: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE=) 2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: O6LHqhRjNhXkLCn8j0gLvxLoTV0/cO+FUXeVrw2JSDU=) 4: SPId_SWHbv84MaBpzxcBFitrFiA.roa (hash: fkjaLtVx/IVOE485FOawltfAwHKBTGzzIXUgCRCBDeg=) 5: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 6: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 7: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 8: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (hash: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY=) 9: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (hash: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0=) 10: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 11: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 12: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 13: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:d0:50:f8:b4:c3:d6:72:d4:34:7e:a4:9c:aa:2f:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Apr 27 19:01:00 2026 GMT Not After : Apr 28 19:01:00 2026 GMT Subject: CN=02d3b973687d98a90379e31af12acfb41f99f620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d6:45:a9:f6:07:ab:ae:2a:99:23:50:bd:35: c9:38:3a:5c:a6:e2:ef:c7:45:3d:f2:2f:96:73:67: 75:f6:41:73:78:61:6a:6b:ff:10:dd:39:26:93:ef: 55:09:de:d2:c1:ee:ec:06:bb:08:3b:6b:36:80:9c: 36:db:c7:30:c9:81:6a:81:8a:2a:14:e2:17:68:8b: be:9f:8c:d1:23:93:b4:e4:8e:2c:9c:37:84:ce:53: 77:89:fd:9c:07:7a:59:31:91:a8:43:88:5b:3c:ed: e6:9e:b9:ab:be:24:04:fe:82:c3:89:f4:48:2c:10: 83:a2:ab:64:87:1b:73:ee:90:fd:f3:11:0d:30:19: ef:a6:b3:56:1a:66:76:61:03:d4:9c:ec:cf:9d:6d: 5e:c0:d6:c2:85:0f:2a:cd:df:f5:33:3c:20:f1:33: c4:33:c9:a5:65:1f:14:7d:ae:f6:93:43:db:6b:f5: 7d:6b:d3:b0:1a:54:f4:6a:5b:e6:4b:d5:f5:a5:b4: 83:f1:d7:de:89:38:72:6b:6d:16:e8:3d:93:fa:25: 84:36:dc:af:39:50:b8:0d:a7:53:23:69:11:11:a9: b4:2b:75:9b:5b:68:e1:da:be:93:b6:b5:4b:bb:db: 85:28:5d:63:d0:e0:ea:d6:53:bb:3b:e8:2d:42:49: fb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D3:B9:73:68:7D:98:A9:03:79:E3:1A:F1:2A:CF:B4:1F:99:F6:20 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ea:8f:ae:56:3e:32:ac:d3:09:34:dd:a7:f9:9f:15:12:ac: 90:b7:36:41:4b:15:13:63:b2:fc:37:af:11:82:68:e0:03:0b: ce:60:31:b8:d7:e6:29:e8:66:3e:ea:48:06:ad:56:98:f4:3c: 98:3e:7d:7a:6b:0f:f2:25:ef:b1:1b:e6:8d:4e:df:99:47:01: 2d:3f:be:94:20:2a:c0:a4:e3:12:84:6a:e7:bf:a2:a0:dc:27: a2:0a:2c:3d:81:66:05:77:8c:d7:ea:8f:2e:68:74:f7:d7:e3: 26:6c:43:e7:26:4c:e7:4c:dc:47:e8:74:78:a3:d9:28:88:ae: e2:13:35:fb:0b:55:52:3c:41:2e:e3:0c:57:b1:6c:be:a6:c2: 23:26:2e:26:82:19:d7:e1:15:cf:c9:66:51:47:f5:f5:01:52: 1a:f6:2d:3b:a5:56:7e:85:de:85:dc:e2:c8:e9:e8:7a:1d:e3: af:50:dd:1b:2d:61:d7:2e:fd:e5:92:51:6e:43:a7:31:f2:28: 26:36:f0:f3:58:3a:da:ab:d2:8e:bd:18:98:07:9a:96:3d:95: 6f:4a:b7:cc:6e:1d:2a:fa:f9:ef:37:c8:91:84:88:ae:6a:99: 48:ee:0f:e0:1b:23:9e:0a:d9:07:f7:6a:18:57:9e:9d:ea:93: da:87:d5:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3QUPi0w9Zy1DR+pJyqLztAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwNDI3MTkwMTAwWhcNMjYwNDI4MTkwMTAwWjAzMTEwLwYDVQQD EygwMmQzYjk3MzY4N2Q5OGE5MDM3OWUzMWFmMTJhY2ZiNDFmOTlmNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptZFqfYHq64qmSNQvTXJODpcpuLv x0U98i+Wc2d19kFzeGFqa/8Q3Tkmk+9VCd7Swe7sBrsIO2s2gJw228cwyYFqgYoq FOIXaIu+n4zRI5O05I4snDeEzlN3if2cB3pZMZGoQ4hbPO3mnrmrviQE/oLDifRI LBCDoqtkhxtz7pD98xENMBnvprNWGmZ2YQPUnOzPnW1ewNbChQ8qzd/1Mzwg8TPE M8mlZR8Ufa72k0Pba/V9a9OwGlT0alvmS9X1pbSD8dfeiThya20W6D2T+iWENtyv OVC4DadTI2kREam0K3WbW2jh2r6TtrVLu9uFKF1j0ODq1lO7O+gtQkn7KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALTuXNofZipA3njGvEqz7QfmfYgMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuqPrlY+ MqzTCTTdp/mfFRKskLc2QUsVE2Oy/DevEYJo4AMLzmAxuNfmKehmPupIBq1WmPQ8 mD59emsP8iXvsRvmjU7fmUcBLT++lCAqwKTjEoRq57+ioNwnogosPYFmBXeM1+qP Lmh099fjJmxD5yZM50zcR+h0eKPZKIiu4hM1+wtVUjxBLuMMV7FsvqbCIyYuJoIZ 1+EVz8lmUUf19QFSGvYtO6VWfoXehdziyOnoeh3jr1DdGy1h1y795ZJRbkOnMfIo Jjbw81g62qvSjr0YmAealj2Vb0q3zG4dKvr57zfIkYSIrmqZSO4P4BsjngrZB/dq GFeeneqT2ofVIw== -----END CERTIFICATE-----Generated at Mon Apr 27 23:08:51 2026 by rpki-client