$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: AAJ6vGzvzbIP4rJK1MaZwIzYXzykWDySXqDCxQz/C0o= Subject key identifier: 68:14:A7:4A:21:A8:88:32:A3:E2:B4:15:BE:9B:09:BB:31:AD:26:54 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019EB80E95D27E9B6EBFDCB0B50DC1BCB44D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1962 Signing time: Thu 11 Jun 2026 19:00:24 +0000 Manifest this update: Thu 11 Jun 2026 19:00:24 +0000 Manifest next update: Fri 12 Jun 2026 19:00:24 +0000 Files and hashes: 1: McQ1AOjlDwgZAqlNis7OMo30suU.roa (hash: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE=) 2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: WO7HkGbh5LAlvIAPg3ZoWa4bjHIlu/MMzm8LjSej4OM=) 4: SPId_SWHbv84MaBpzxcBFitrFiA.roa (hash: fkjaLtVx/IVOE485FOawltfAwHKBTGzzIXUgCRCBDeg=) 5: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 6: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 7: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 8: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (hash: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY=) 9: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (hash: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0=) 10: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 11: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 12: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 13: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 19:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b8:0e:95:d2:7e:9b:6e:bf:dc:b0:b5:0d:c1:bc:b4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jun 11 19:00:24 2026 GMT Not After : Jun 12 19:00:24 2026 GMT Subject: CN=6814a74a21a88832a3e2b415be9b09bb31ad2654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:bd:62:13:35:05:8c:d6:73:71:6b:5a:5e: 85:ef:63:9d:8b:17:17:e1:87:66:6d:cf:15:48:25: ea:ce:7e:94:c7:25:df:1b:91:c5:c4:89:88:b9:9f: 8a:7f:91:f6:8b:54:a4:53:f6:e8:48:c8:e4:ac:c6: 20:a3:8c:12:29:91:b3:d5:a6:ff:52:b3:b2:8a:13: 51:ee:89:b7:51:0b:cd:d3:5d:65:b4:d8:0a:6b:0e: 70:58:2e:1b:0f:db:6d:ea:2f:58:7d:2d:a5:f9:ac: 81:43:42:d5:e2:b7:b7:d0:ed:2a:d4:ba:42:84:e8: 2d:ec:89:a4:9c:d8:14:38:f6:f9:64:cb:17:78:fd: cb:a7:90:dd:6b:68:09:12:4c:90:bf:e3:d0:04:6c: c0:43:a8:3b:aa:ed:07:8c:91:d9:2e:6c:85:82:fb: 9e:62:c2:59:9f:cb:df:73:ba:11:de:1a:ff:d3:b8: 3a:61:da:a0:a5:55:5b:91:86:e3:d6:df:a7:b0:84: b6:4c:48:af:a0:fc:49:27:82:87:dd:e2:1c:b7:d2: 42:d9:3b:11:07:d1:1f:37:6b:9a:47:3d:75:46:00: e5:c6:31:63:0f:79:fc:6e:34:b1:bd:5e:66:04:d7: 2b:60:9d:b5:c3:ec:48:7b:46:d0:3c:5c:d9:54:25: 54:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:14:A7:4A:21:A8:88:32:A3:E2:B4:15:BE:9B:09:BB:31:AD:26:54 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:58:8c:64:64:b1:a3:9c:95:ff:5a:b7:ec:ee:2b:da:84:9b: d8:92:77:4e:b4:a6:62:39:a8:0c:62:63:d7:6d:17:3a:08:63: 31:06:15:3c:85:7c:91:6e:b1:bf:f6:4e:21:44:dc:7b:38:b8: 55:63:5f:6d:da:20:75:2a:20:75:a5:9b:7c:8d:4f:76:fb:3e: 4a:aa:0a:75:0b:54:bb:f9:24:b8:89:eb:64:68:05:f8:03:c5: 6e:9e:91:7e:1c:d3:07:a0:d8:6e:6b:71:95:6b:54:0c:7f:ad: 6d:14:03:34:31:2b:70:b6:8a:8e:95:2b:77:e4:83:65:72:ba: 1e:76:44:49:ce:e1:ea:b2:6e:96:f7:c2:2b:a7:b9:ca:67:8c: ed:22:9e:71:63:ad:0d:6d:44:5a:8c:18:0b:3d:23:71:7d:70: 47:da:f5:c4:d7:5d:cd:b5:93:78:a3:5b:2f:7b:4a:be:6d:ea: 28:50:14:54:3b:85:9c:2a:ae:8b:78:1d:9d:b6:13:27:dd:2a: 41:c8:3f:ff:46:12:db:d3:a7:b6:19:49:11:29:a7:48:b4:9c: db:8d:38:8e:c4:18:19:e3:c8:21:b4:05:66:12:33:45:9c:e2: 84:4a:6e:07:69:5c:91:ec:c0:63:7a:de:75:14:b8:3a:e7:e7: 24:72:6f:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ64DpXSfptuv9ywtQ3BvLRNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwNjExMTkwMDI0WhcNMjYwNjEyMTkwMDI0WjAzMTEwLwYDVQQD Eyg2ODE0YTc0YTIxYTg4ODMyYTNlMmI0MTViZTliMDliYjMxYWQyNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo69YhM1BYzWc3FrWl6F72OdixcX 4Ydmbc8VSCXqzn6UxyXfG5HFxImIuZ+Kf5H2i1SkU/boSMjkrMYgo4wSKZGz1ab/ UrOyihNR7om3UQvN011ltNgKaw5wWC4bD9tt6i9YfS2l+ayBQ0LV4re30O0q1LpC hOgt7ImknNgUOPb5ZMsXeP3Lp5Dda2gJEkyQv+PQBGzAQ6g7qu0HjJHZLmyFgvue YsJZn8vfc7oR3hr/07g6YdqgpVVbkYbj1t+nsIS2TEivoPxJJ4KH3eIct9JC2TsR B9EfN2uaRz11RgDlxjFjD3n8bjSxvV5mBNcrYJ21w+xIe0bQPFzZVCVU9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgUp0ohqIgyo+K0Fb6bCbsxrSZUMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFiMZGSx o5yV/1q37O4r2oSb2JJ3TrSmYjmoDGJj120XOghjMQYVPIV8kW6xv/ZOIUTcezi4 VWNfbdogdSogdaWbfI1Pdvs+SqoKdQtUu/kkuInrZGgF+APFbp6RfhzTB6DYbmtx lWtUDH+tbRQDNDErcLaKjpUrd+SDZXK6HnZESc7h6rJulvfCK6e5ymeM7SKecWOt DW1EWowYCz0jcX1wR9r1xNddzbWTeKNbL3tKvm3qKFAUVDuFnCqui3gdnbYTJ90q Qcg//0YS29OnthlJESmnSLSc2404jsQYGePIIbQFZhIzRZzihEpuB2lckezAY3re dRS4OufnJHJvQw== -----END CERTIFICATE-----Generated at Fri Jun 12 05:05:10 2026 by rpki-client