$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: kgfjN5LrGAnInTEVsW4rJkpbg8WzWVoFrE3kz0aM6bw= Subject key identifier: 76:CA:6B:20:08:06:10:E4:27:E2:FF:4C:35:8E:DC:7A:D7:5F:65:91 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 01A08CE91A5ACD4EAEB5F70BAF103FE8C292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1A5F Signing time: Thu 10 Sep 2026 20:01:21 +0000 Manifest this update: Thu 10 Sep 2026 20:01:21 +0000 Manifest next update: Fri 11 Sep 2026 20:01:21 +0000 Files and hashes: 1: 9cNKQWK3wk1irmE7oa8T4PR8mc0.roa (hash: u5fJLnWvAGQzCGewqpUpjr9+ttOL7JnpgPLBPCMOWKk=) 2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: IlJ7miCnE5IiZ7n/JmqcwN1Hdo0R5TOJjF2nHF175FQ=) 4: a1bVO0ckGyR5RAdUKb14doqmY1Y.roa (hash: DiKvMb/S5/tIEx2dVRhu5wKcRs0L0R0Ljnjm6cmc2r0=) 5: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 6: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 7: ijbiJD7TGtArmmQdogwgJNz_Iss.roa (hash: pWVbgHKQTvi3IHOIcmkXTEU92wiUS9n0t7V8IM2/M4U=) 8: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 9: nlzsv5_4ztHk87YIpIDNp8kA-LY.roa (hash: I+evjHY278SDlMs7AgnRI/W35THgRR/EtPMQ/T244gg=) 10: pmu6IShr7_YrivuqoXhJzWtPfmk.roa (hash: yV82l9zK15lR3dETfifFVcVb30VtaWPyH/b8g4E+luo=) 11: sZCbmYQyfGpH4iaOrLx2v2yCTAg.roa (hash: ZUhSIpiNJj1ft9rDQsYCHKV1UDkkyNZJvSyHieA9rEU=) 12: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 13: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 14: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 15: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8c:e9:1a:5a:cd:4e:ae:b5:f7:0b:af:10:3f:e8:c2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Sep 10 20:01:21 2026 GMT Not After : Sep 11 20:01:21 2026 GMT Subject: CN=76ca6b20080610e427e2ff4c358edc7ad75f6591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:01:74:9a:63:a1:45:3f:36:e7:73:2b:e5:51: f8:ed:d6:19:0f:9a:89:d4:1f:3e:5d:d3:01:a6:66: fe:40:4d:6a:8e:aa:6f:86:e6:52:da:4b:e5:a8:ac: 9c:c9:b6:a2:bb:ae:2c:2f:f7:9c:0d:cd:43:e5:1a: e7:84:97:4f:da:e7:bd:ed:bb:2b:9a:9e:3e:e5:75: a0:87:d8:75:f6:ba:15:ed:c5:64:e9:32:33:98:22: f3:5a:30:25:ea:61:50:5d:6a:b4:22:0c:af:ac:46: 4d:fe:b0:8a:b0:4d:88:23:26:db:a7:d4:49:65:16: d1:54:ee:36:25:a2:ac:ee:2b:c3:03:af:26:54:cf: 72:43:c2:f3:7c:a3:9d:dc:3f:3c:86:78:82:dd:63: f1:9c:08:05:71:cd:fe:4c:29:11:a1:fe:7b:b9:5e: a9:16:01:ba:48:c6:1f:a3:1a:7d:df:55:69:18:c4: b0:39:4e:1d:0b:15:cf:59:a8:a1:0c:5c:42:93:ba: 14:f6:13:0c:93:46:1c:b5:b0:f1:41:85:2e:06:30: 72:98:f1:de:43:54:c7:b1:13:dd:4d:ef:91:7e:17: 22:0d:c6:51:c3:89:e1:1d:d2:ab:56:96:5e:01:71: b5:20:1d:0c:ef:45:3f:05:83:fb:20:fd:8c:ca:46: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CA:6B:20:08:06:10:E4:27:E2:FF:4C:35:8E:DC:7A:D7:5F:65:91 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e0:d8:4e:f3:5b:ae:e4:66:22:4f:a2:24:4c:ad:12:42:d8: e8:30:3a:a0:cf:b4:c6:52:ab:b3:32:ac:3a:6d:92:e9:1d:a8: 9c:25:57:e2:6c:dc:75:c1:c2:ec:01:65:0d:fd:a7:04:4d:07: f4:e0:60:3b:8c:bc:1d:65:ae:ea:1f:fb:d1:a4:e3:cf:47:bb: 7d:eb:db:3d:c9:04:1a:d1:e4:75:31:83:38:87:63:26:46:a3: 9b:61:0a:67:30:23:1f:1a:91:bc:e9:f2:aa:df:33:e0:eb:ca: 7d:c6:3d:98:2f:ac:87:9f:1d:3d:f9:21:84:d1:07:35:cf:31: 2e:b5:e9:3b:8b:90:87:9c:11:41:de:fb:93:24:4b:75:41:43: 88:d6:7e:74:a7:88:71:0d:f3:48:10:e3:97:42:da:d8:56:b4: cf:94:3f:3c:95:1a:9b:98:6d:2e:ff:74:a0:2d:29:db:72:56: ee:10:e5:10:18:04:20:6e:a7:1a:69:a5:50:9a:df:a7:6b:a1: 35:cd:02:24:b2:8c:96:52:03:33:51:9b:6e:d2:b1:43:e1:92: e1:30:c2:d9:85:89:94:33:10:fc:b4:e2:e8:9a:34:94:34:25: 4d:54:1e:94:dd:c0:b2:be:c8:2f:2e:3c:df:8d:9c:6c:7a:69: 90:e7:aa:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCM6RpazU6utfcLrxA/6MKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwOTEwMjAwMTIxWhcNMjYwOTExMjAwMTIxWjAzMTEwLwYDVQQD Eyg3NmNhNmIyMDA4MDYxMGU0MjdlMmZmNGMzNThlZGM3YWQ3NWY2NTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwF0mmOhRT8253Mr5VH47dYZD5qJ 1B8+XdMBpmb+QE1qjqpvhuZS2kvlqKycybaiu64sL/ecDc1D5RrnhJdP2ue97bsr mp4+5XWgh9h19roV7cVk6TIzmCLzWjAl6mFQXWq0IgyvrEZN/rCKsE2IIybbp9RJ ZRbRVO42JaKs7ivDA68mVM9yQ8LzfKOd3D88hniC3WPxnAgFcc3+TCkRof57uV6p FgG6SMYfoxp931VpGMSwOU4dCxXPWaihDFxCk7oU9hMMk0YctbDxQYUuBjBymPHe Q1THsRPdTe+RfhciDcZRw4nhHdKrVpZeAXG1IB0M70U/BYP7IP2MykYLLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbKayAIBhDkJ+L/TDWO3HrXX2WRMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuDYTvNb ruRmIk+iJEytEkLY6DA6oM+0xlKrszKsOm2S6R2onCVX4mzcdcHC7AFlDf2nBE0H 9OBgO4y8HWWu6h/70aTjz0e7fevbPckEGtHkdTGDOIdjJkajm2EKZzAjHxqRvOny qt8z4OvKfcY9mC+sh58dPfkhhNEHNc8xLrXpO4uQh5wRQd77kyRLdUFDiNZ+dKeI cQ3zSBDjl0La2Fa0z5Q/PJUam5htLv90oC0p23JW7hDlEBgEIG6nGmmlUJrfp2uh Nc0CJLKMllIDM1GbbtKxQ+GS4TDC2YWJlDMQ/LTi6Jo0lDQlTVQelN3Asr7ILy48 342cbHppkOeq2w== -----END CERTIFICATE-----Generated at Fri Sep 11 01:18:56 2026 by rpki-client