$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json) Hash identifier: T9RG/hjxwLF37L/iY79E7C6w4rnrFfmO0osgSEBSgVk= Subject key identifier: 45:0A:42:91:B9:BA:AA:42:89:5C:FD:7E:77:66:FD:8D:8F:A4:D1:E0 Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 01A179282D47EAE8411ED559FC2CA7FE1D04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft Manifest number: 1AD1 Signing time: Mon 26 Oct 2026 17:00:38 +0000 Manifest this update: Mon 26 Oct 2026 17:00:38 +0000 Manifest next update: Tue 27 Oct 2026 17:00:38 +0000 Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=) 2: EKWjQGsxTdGvNeyrv25RW0gIu5c.asa (hash: YC8zzw/fjJ0HVykD+J7LUGmnQfgoDVj+KXw7tcLJDTo=) 3: NL0Mp2ak4kIOVa-mI-T_3-kFvlE.roa (hash: 8D7MsuGjI7HsrBxlKjaEVJ+I36rJeX9th0UxwcPUwQs=) 4: RWCxKzMoRgWDToOVJIjXxUmCrZ8.asa (hash: gleP71b91vUaLqtTDIk1TgzOth5ivl/5vI1ZJtFTRBI=) 5: UII5oPagDAy9HZxXmqfjHdfeTQ4.asa (hash: qnhOqF8IHvEYtAkSuCtgU3CO9PyBhYK4n3SAcIy+GiQ=) 6: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=) 7: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=) 8: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=) 9: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=) 10: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: pvL/jKeFMIvmcmEVJtyJspOSNYlrjcW1OAYjb4yhrOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:79:28:2d:47:ea:e8:41:1e:d5:59:fc:2c:a7:fe:1d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Oct 26 17:00:38 2026 GMT Not After : Oct 27 17:00:38 2026 GMT Subject: CN=450a4291b9baaa42895cfd7e7766fd8d8fa4d1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:72:e2:9a:fc:b4:40:9c:c8:0a:e1:88:e4: a9:01:6e:83:68:5e:5b:9f:a6:64:98:52:2b:8c:7a: 1a:3d:2c:44:68:cf:60:8b:c2:e8:22:84:d9:be:7a: d5:15:82:bd:f3:de:f6:11:43:1d:b6:d0:b2:71:2d: bf:b0:ae:ba:27:58:5f:e3:29:3e:42:f9:46:b4:6f: ed:f5:24:a8:b0:9d:84:5d:a9:e7:d7:ed:13:84:c5: bd:c4:f2:40:8a:dd:30:13:fb:a4:66:43:84:20:d3: 33:28:ec:65:54:2b:cd:ba:5d:1d:70:6b:f7:b9:d2: 30:88:7e:5d:33:0b:f0:de:4d:ed:4d:9c:73:93:00: 5e:f3:9f:1d:24:b8:9b:b0:06:ef:85:93:0a:c9:05: 22:3e:96:cb:9f:c2:22:45:66:b5:cc:06:f2:b6:17: d4:91:bd:28:aa:ed:8e:55:94:e6:d4:a9:dc:c8:be: 21:f6:c4:74:1a:d2:af:2a:0c:70:db:b0:54:ff:65: a5:96:60:aa:9a:b5:2f:b6:ef:df:ce:fc:4c:d0:54: 80:4d:4d:de:f6:5a:90:0a:88:9d:d5:f8:d8:04:3a: ed:55:b7:e9:a3:78:2d:24:46:c8:e9:de:79:22:29: 61:63:ba:3b:09:64:d8:7d:24:10:a2:4e:9c:d4:77: 53:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0A:42:91:B9:BA:AA:42:89:5C:FD:7E:77:66:FD:8D:8F:A4:D1:E0 X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c1:c8:38:92:65:83:05:32:78:6e:20:ee:d4:85:8f:d7:92: 0f:48:99:57:80:25:54:67:4a:03:7d:2a:18:91:29:ac:c6:87: 58:46:e8:e5:3c:60:74:bc:a1:92:75:56:4d:19:f8:2c:57:65: 05:83:47:39:5d:d6:17:ae:e9:b1:80:9a:bc:bc:d9:c7:b6:f9: d4:af:b3:b3:8b:10:63:c7:0c:8b:66:bc:4c:fe:22:41:8e:d1: 60:8e:ad:dd:0b:e6:d0:d0:6b:48:f7:d3:d3:de:b1:a5:4a:61: 17:36:dd:7d:08:d7:e6:92:07:24:11:a6:de:74:c9:2c:70:77: cd:5f:c1:3b:92:19:88:1f:91:02:df:ed:3f:3f:22:e0:b7:c9: 3d:7a:9a:21:b3:56:25:39:88:db:80:83:c6:97:46:31:39:28: 1d:39:6e:f5:91:e1:69:3f:4b:28:83:f6:34:ad:d5:45:a1:28: ca:9c:8e:3e:67:0c:ee:2a:55:f5:7a:20:56:6b:a7:95:f6:2f: 0f:fe:33:1f:49:ee:bd:ba:9a:d6:48:86:ca:55:09:3e:b3:ad: 80:3b:72:98:98:57:7b:4a:5d:9c:19:78:fc:c6:3d:91:1a:ac: c8:72:20:9c:bc:dd:5c:a1:bd:b5:5e:75:ad:51:ed:3e:e6:96: 5e:14:a0:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF5KC1H6uhBHtVZ/Cyn/h0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYxMDI2MTcwMDM4WhcNMjYxMDI3MTcwMDM4WjAzMTEwLwYDVQQD Eyg0NTBhNDI5MWI5YmFhYTQyODk1Y2ZkN2U3NzY2ZmQ4ZDhmYTRkMWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh9y4pr8tECcyArhiOSpAW6DaF5b n6ZkmFIrjHoaPSxEaM9gi8LoIoTZvnrVFYK98972EUMdttCycS2/sK66J1hf4yk+ QvlGtG/t9SSosJ2EXann1+0ThMW9xPJAit0wE/ukZkOEINMzKOxlVCvNul0dcGv3 udIwiH5dMwvw3k3tTZxzkwBe858dJLibsAbvhZMKyQUiPpbLn8IiRWa1zAbythfU kb0oqu2OVZTm1KncyL4h9sR0GtKvKgxw27BU/2WllmCqmrUvtu/fzvxM0FSATU3e 9lqQCoid1fjYBDrtVbfpo3gtJEbI6d55IilhY7o7CWTYfSQQok6c1HdTzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUKQpG5uqpCiVz9fndm/Y2PpNHgMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcHIOJJl gwUyeG4g7tSFj9eSD0iZV4AlVGdKA30qGJEprMaHWEbo5TxgdLyhknVWTRn4LFdl BYNHOV3WF67psYCavLzZx7b51K+zs4sQY8cMi2a8TP4iQY7RYI6t3Qvm0NBrSPfT 096xpUphFzbdfQjX5pIHJBGm3nTJLHB3zV/BO5IZiB+RAt/tPz8i4LfJPXqaIbNW JTmI24CDxpdGMTkoHTlu9ZHhaT9LKIP2NK3VRaEoypyOPmcM7ipV9XogVmunlfYv D/4zH0nuvbqa1kiGylUJPrOtgDtymJhXe0pdnBl4/MY9kRqsyHIgnLzdXKG9tV51 rVHtPuaWXhSgUQ== -----END CERTIFICATE-----Generated at Tue Oct 27 04:36:19 2026 by rpki-client