$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json) Hash identifier: aLRiFOK+JNaUBsKHfet+pYtKsX2bLqgd3S+Oex9HGKc= Subject key identifier: 18:DA:1C:BC:3F:19:5F:27:05:E8:11:94:D4:78:50:62:70:F5:49:F6 Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 01A089B0DAADC9A156F896D1A8B2EE13DB52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft Manifest number: 1A55 Signing time: Thu 10 Sep 2026 05:01:03 +0000 Manifest this update: Thu 10 Sep 2026 05:01:03 +0000 Manifest next update: Fri 11 Sep 2026 05:01:03 +0000 Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=) 2: EKWjQGsxTdGvNeyrv25RW0gIu5c.asa (hash: YC8zzw/fjJ0HVykD+J7LUGmnQfgoDVj+KXw7tcLJDTo=) 3: NL0Mp2ak4kIOVa-mI-T_3-kFvlE.roa (hash: 8D7MsuGjI7HsrBxlKjaEVJ+I36rJeX9th0UxwcPUwQs=) 4: RWCxKzMoRgWDToOVJIjXxUmCrZ8.asa (hash: gleP71b91vUaLqtTDIk1TgzOth5ivl/5vI1ZJtFTRBI=) 5: UII5oPagDAy9HZxXmqfjHdfeTQ4.asa (hash: qnhOqF8IHvEYtAkSuCtgU3CO9PyBhYK4n3SAcIy+GiQ=) 6: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=) 7: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=) 8: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=) 9: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=) 10: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: Vk8xllWyxYiekcF5S78A9qu6cRJvbWSg16iRWzEJaeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 05:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:b0:da:ad:c9:a1:56:f8:96:d1:a8:b2:ee:13:db:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Sep 10 05:01:03 2026 GMT Not After : Sep 11 05:01:03 2026 GMT Subject: CN=18da1cbc3f195f2705e81194d478506270f549f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:d8:1d:5b:86:36:c9:a6:a9:36:a8:fa:e2: 74:f5:85:71:eb:0d:14:95:95:12:6c:0a:1f:07:49: 22:35:1f:b8:d2:d1:73:36:c7:b2:25:ad:9f:2e:7b: 2a:b1:13:49:2f:fa:61:d3:e9:77:92:74:4a:e3:d2: 79:aa:b4:f2:6f:f4:92:a4:50:53:72:e7:d7:3f:d1: f7:dc:db:b3:31:dc:78:f6:0b:22:bf:33:74:c1:33: cd:71:d8:c3:79:c3:bd:3b:49:ff:bf:a8:e7:ab:85: a7:1f:56:0a:0e:8b:ad:0c:b0:4e:44:e4:34:f4:90: 6f:78:78:3a:23:29:db:b3:0e:33:9d:62:df:ea:0b: a8:48:c3:1e:46:38:18:02:2b:94:bc:a4:b6:bc:b0: be:55:df:53:71:88:57:7d:71:a9:c6:22:c6:5f:f6: f3:63:6b:76:29:0a:db:b8:4b:08:e2:64:57:22:80: 55:16:6e:9d:65:30:c2:66:fc:22:42:7d:03:70:92: 83:88:40:ea:20:39:7b:8c:e9:4d:b2:d1:53:22:47: fe:0a:39:c0:2b:ef:73:a8:c1:13:21:93:c1:27:ed: 48:11:3a:9e:2b:f1:28:ee:71:77:35:b0:82:2a:99: 83:fd:31:e7:d2:8d:b5:65:ad:bf:24:bd:64:7b:89: 1c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DA:1C:BC:3F:19:5F:27:05:E8:11:94:D4:78:50:62:70:F5:49:F6 X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e3:39:84:bf:6c:12:2e:7d:84:a4:58:de:95:8a:1c:bc:18: fb:34:bc:36:28:c5:81:69:e2:44:b7:73:e8:f1:b0:2c:c1:01: 2e:de:ea:a5:a7:f5:66:30:b6:c0:0b:08:7c:b2:d9:b7:76:4d: d6:aa:fc:07:c0:b0:d5:08:5a:1a:47:48:57:9a:ac:8d:d8:54: 6a:f9:81:91:8d:3e:3b:59:2d:df:a3:64:ed:07:de:97:a2:df: 04:75:45:ea:a1:0a:69:cd:bd:af:cf:37:98:d7:6e:57:a4:98: 54:2d:7a:05:70:17:b7:46:5e:0f:14:56:b2:e0:32:6f:71:05: 37:07:21:d4:9f:1e:5e:c5:f6:e3:05:0e:50:29:93:ea:c8:4d: c2:c3:35:be:cb:c0:8f:79:06:33:b0:e2:91:35:fd:71:e0:1f: bc:81:13:a8:12:d1:d0:27:30:86:00:55:41:04:03:63:f6:8a: a2:b4:fd:b1:17:d8:9d:fc:d1:fa:46:a6:ea:3c:d0:68:23:31: 30:f8:aa:75:b0:b3:9d:ae:ba:a8:fd:d3:3e:ce:eb:56:4a:52: 14:99:dd:8f:59:48:79:86:1a:b1:d4:b0:76:45:9b:4c:08:dd: e7:5c:38:6a:32:18:b8:d8:7b:42:28:d7:46:84:8f:ed:53:5a: 29:69:ed:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJsNqtyaFW+JbRqLLuE9tSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYwOTEwMDUwMTAzWhcNMjYwOTExMDUwMTAzWjAzMTEwLwYDVQQD EygxOGRhMWNiYzNmMTk1ZjI3MDVlODExOTRkNDc4NTA2MjcwZjU0OWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHrYHVuGNsmmqTao+uJ09YVx6w0U lZUSbAofB0kiNR+40tFzNseyJa2fLnsqsRNJL/ph0+l3knRK49J5qrTyb/SSpFBT cufXP9H33NuzMdx49gsivzN0wTPNcdjDecO9O0n/v6jnq4WnH1YKDoutDLBOROQ0 9JBveHg6Iynbsw4znWLf6guoSMMeRjgYAiuUvKS2vLC+Vd9TcYhXfXGpxiLGX/bz Y2t2KQrbuEsI4mRXIoBVFm6dZTDCZvwiQn0DcJKDiEDqIDl7jOlNstFTIkf+CjnA K+9zqMETIZPBJ+1IETqeK/Eo7nF3NbCCKpmD/THn0o21Za2/JL1ke4kcvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjaHLw/GV8nBegRlNR4UGJw9Un2MB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeM5hL9s Ei59hKRY3pWKHLwY+zS8NijFgWniRLdz6PGwLMEBLt7qpaf1ZjC2wAsIfLLZt3ZN 1qr8B8Cw1QhaGkdIV5qsjdhUavmBkY0+O1kt36Nk7Qfel6LfBHVF6qEKac29r883 mNduV6SYVC16BXAXt0ZeDxRWsuAyb3EFNwch1J8eXsX24wUOUCmT6shNwsM1vsvA j3kGM7DikTX9ceAfvIETqBLR0CcwhgBVQQQDY/aKorT9sRfYnfzR+kam6jzQaCMx MPiqdbCzna66qP3TPs7rVkpSFJndj1lIeYYasdSwdkWbTAjd51w4ajIYuNh7QijX RoSP7VNaKWntsQ== -----END CERTIFICATE-----Generated at Thu Sep 10 14:49:49 2026 by rpki-client