$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json) Hash identifier: AmcF7JmOykBxLXkbqZPVfWvE/qZmkLHryUW1jKLyg1A= Subject key identifier: 6A:43:D7:58:D0:C7:95:54:FC:F8:EB:AA:85:B9:48:60:C7:83:C7:C6 Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 019DCC3D58DF793D09D4998EB9F9F317CE7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft Manifest number: 18E9 Signing time: Mon 27 Apr 2026 00:01:05 +0000 Manifest this update: Mon 27 Apr 2026 00:01:05 +0000 Manifest next update: Tue 28 Apr 2026 00:01:05 +0000 Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=) 2: 24lvsSxh7MUVQcE3eg7_Djq-Tso.asa (hash: Hjss/TGOcmwG6GtuhM5X9Ph0gtLBzHScnu3DTiqPa9c=) 3: 36K8uvuxLLbczf1YXC_ASJxPbng.asa (hash: 870+pBNRKYWmY6ePML/QQK6e/MrQo9VBr7qVr3BXzBw=) 4: FWYopd6TlSta9pASbYNvraqyvNM.asa (hash: I8ABTTre9KM0IJfOp7PT39kOwRj4TE5ZVbXeJW/G+gk=) 5: NL0Mp2ak4kIOVa-mI-T_3-kFvlE.roa (hash: 8D7MsuGjI7HsrBxlKjaEVJ+I36rJeX9th0UxwcPUwQs=) 6: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=) 7: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=) 8: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=) 9: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=) 10: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: 93ShrmfDINQeH8Vh2PtMz1l8U6SxiGMR9cChaxZhg2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cc:3d:58:df:79:3d:09:d4:99:8e:b9:f9:f3:17:ce:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Apr 27 00:01:05 2026 GMT Not After : Apr 28 00:01:05 2026 GMT Subject: CN=6a43d758d0c79554fcf8ebaa85b94860c783c7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:63:39:77:f6:98:b8:5d:27:b0:72:60:2f: f6:e7:1e:e5:31:bf:86:41:36:9a:0f:7d:af:18:61: 12:eb:00:77:40:26:2a:b2:c6:c9:71:5e:a5:95:00: 83:07:1a:89:b3:7b:50:9b:b5:27:7e:db:80:91:37: e5:41:05:4b:d3:dc:bb:e0:95:67:3b:72:b2:fb:61: 6d:c8:5b:5a:1c:7b:e5:01:a8:2f:4f:a8:09:b9:fb: ee:78:a9:0a:22:0c:3c:78:e9:b7:e3:ea:1a:de:fc: 7b:ad:d3:59:c2:5f:c4:8d:d7:b0:82:75:cd:f7:2c: a9:50:70:63:e9:16:ee:cd:70:b6:92:78:08:02:09: ad:9c:63:4b:77:9d:c4:2b:30:5a:37:c8:76:10:a6: eb:ad:da:8f:eb:33:e1:7b:1b:a1:3b:bc:6d:c7:04: be:04:16:e4:ea:72:d1:1a:eb:1e:12:8c:60:59:af: 68:c5:bf:b8:77:56:97:f5:12:3d:65:d7:3d:1c:77: 09:3e:a8:bf:63:2a:ef:6d:54:d4:a9:ba:73:62:53: c2:79:b1:bb:8f:26:31:f9:1b:09:a2:c0:11:e2:d6: 90:c5:5b:81:e1:fb:4c:a2:03:65:cf:b0:e7:d0:2b: 2a:8e:1a:a1:7e:e1:01:6c:48:5f:be:a5:2c:31:fa: 36:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:43:D7:58:D0:C7:95:54:FC:F8:EB:AA:85:B9:48:60:C7:83:C7:C6 X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e6:23:b0:ac:d9:52:be:56:42:fb:29:63:ef:8c:6e:27:d0: 58:cc:62:a8:d0:29:12:de:b5:a2:d9:56:92:cf:c0:c6:8a:59: c7:a1:4c:06:8a:57:e5:d1:dc:dd:c6:cb:d9:96:c6:84:47:42: 5a:e4:42:cc:68:ee:a5:cd:56:c4:4e:33:26:e5:68:d0:fd:29: c3:1d:89:f2:dd:ce:50:4a:15:f6:9b:c6:bd:33:28:64:8a:71: 10:56:47:8c:d9:71:69:cd:7a:0f:cb:98:6a:64:b0:6d:19:70: 61:44:43:d3:65:33:f0:26:cc:36:26:46:08:46:b2:19:10:b8: b1:a0:ae:83:9f:59:84:f0:cf:77:b2:1d:e3:2b:71:bf:4f:0d: 66:79:0a:7f:77:b3:fa:e0:00:a4:72:14:3c:77:ea:9c:85:39: fc:1b:67:ce:c0:ec:a3:db:7d:9b:ba:49:0a:ec:84:28:50:81: aa:5d:72:70:ec:90:f6:d4:01:87:87:f4:57:a7:27:a7:cb:65: f8:4c:4b:a5:79:fa:33:46:21:e1:40:74:84:85:11:fd:79:f8: d2:8c:af:f1:da:cf:cc:45:18:e6:91:25:b6:be:c2:14:41:ee: e4:75:34:29:1c:59:17:ba:7a:6a:a2:fe:3c:28:70:f0:45:40: 7e:c0:40:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3MPVjfeT0J1JmOufnzF856MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYwNDI3MDAwMTA1WhcNMjYwNDI4MDAwMTA1WjAzMTEwLwYDVQQD Eyg2YTQzZDc1OGQwYzc5NTU0ZmNmOGViYWE4NWI5NDg2MGM3ODNjN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC9jOXf2mLhdJ7ByYC/25x7lMb+G QTaaD32vGGES6wB3QCYqssbJcV6llQCDBxqJs3tQm7UnftuAkTflQQVL09y74JVn O3Ky+2FtyFtaHHvlAagvT6gJufvueKkKIgw8eOm34+oa3vx7rdNZwl/EjdewgnXN 9yypUHBj6RbuzXC2kngIAgmtnGNLd53EKzBaN8h2EKbrrdqP6zPhexuhO7xtxwS+ BBbk6nLRGuseEoxgWa9oxb+4d1aX9RI9Zdc9HHcJPqi/YyrvbVTUqbpzYlPCebG7 jyYx+RsJosAR4taQxVuB4ftMogNlz7Dn0CsqjhqhfuEBbEhfvqUsMfo24wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpD11jQx5VU/PjrqoW5SGDHg8fGMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuYjsKzZ Ur5WQvspY++MbifQWMxiqNApEt61otlWks/AxopZx6FMBopX5dHc3cbL2ZbGhEdC WuRCzGjupc1WxE4zJuVo0P0pwx2J8t3OUEoV9pvGvTMoZIpxEFZHjNlxac16D8uY amSwbRlwYURD02Uz8CbMNiZGCEayGRC4saCug59ZhPDPd7Id4ytxv08NZnkKf3ez +uAApHIUPHfqnIU5/BtnzsDso9t9m7pJCuyEKFCBql1ycOyQ9tQBh4f0V6cnp8tl +ExLpXn6M0Yh4UB0hIUR/Xn40oyv8drPzEUY5pEltr7CFEHu5HU0KRxZF7p6aqL+ PChw8EVAfsBAqQ== -----END CERTIFICATE-----Generated at Mon Apr 27 09:15:20 2026 by rpki-client