$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json) Hash identifier: twu4ZqxgDn7zjmPvWGAQCiwEvjajDad11vuovwqu1M0= Subject key identifier: 58:CE:13:BA:18:63:A1:B0:3E:DA:1E:9A:F0:4F:56:6C:2A:29:7B:94 Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 01A08A55919872E615A3ECF49920C34E715D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft Manifest number: 1743 Signing time: Thu 10 Sep 2026 08:00:58 +0000 Manifest this update: Thu 10 Sep 2026 08:00:58 +0000 Manifest next update: Fri 11 Sep 2026 08:00:58 +0000 Files and hashes: 1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=) 2: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=) 3: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=) 4: GXWJE-8eL7U4sVeXlOtFxZ7vcr8.roa (hash: HYQsYXLOcua0ABFdCgere8a70Mi6wAtAionAH1YPaTE=) 5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: QdIhz/EUDoL8DTwuf0oJvamYFsC8Z6WFN3H1RT4jtBM=) 6: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=) 7: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=) 8: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=) 9: sQplr-AwbR_8RYI_FgYOZ178ZrI.roa (hash: qt7B9tBIkTrdehiRfoggQYOaAs6JsLoSpAJd9A7A7Xg=) 10: tVRKIzEi3C5oivV0NSF6cpvQXxw.roa (hash: DCE8qPP2+ixczk2thpFiZupianuMg94BL32mNt6WYVg=) 11: woAOb4AN3cSy4oY_QAjYETncO0E.roa (hash: nKozfVGE5cnQbfzUetkE8F54sr9HFGBho4qeVuXBxKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:55:91:98:72:e6:15:a3:ec:f4:99:20:c3:4e:71:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Sep 10 08:00:58 2026 GMT Not After : Sep 11 08:00:58 2026 GMT Subject: CN=58ce13ba1863a1b03eda1e9af04f566c2a297b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:a5:db:3d:35:72:4e:b3:07:e4:b1:a1:99: 46:1e:e5:78:a2:74:97:83:87:94:dc:68:88:0d:d6: 14:be:0e:e9:90:de:dd:8b:b2:f1:e3:cb:e4:e3:92: df:6d:50:3b:62:79:92:94:39:cb:b5:58:43:b5:ca: df:16:d1:3c:c5:d9:f8:e9:86:d6:37:43:1a:ea:f8: 15:5d:84:9f:a1:f8:04:a7:a3:59:73:25:ea:bd:20: 0a:00:66:24:8a:a5:83:99:82:69:26:b5:67:9d:ba: 45:92:00:0c:60:11:e8:17:4a:61:d3:45:00:70:70: 7a:34:77:51:a1:7c:fc:ca:df:ee:50:86:a5:0f:66: 99:0a:16:0f:88:37:80:2e:76:7d:4a:db:bb:6e:ae: 16:0e:0d:63:d9:4c:42:61:f2:b5:21:0c:74:44:49: aa:00:06:d7:77:d0:5e:08:17:2e:72:be:62:f1:2e: 6b:dd:bb:06:23:6a:bc:1b:05:77:ae:4a:39:ce:6a: a4:10:76:45:8f:61:7d:f9:24:57:58:98:d7:8f:92: 94:f8:11:c0:73:45:42:76:b8:9f:3a:c9:3b:05:c4: 53:21:54:63:82:9f:45:2c:36:c9:b9:32:aa:19:5a: 6d:cf:66:1c:ed:eb:ca:3c:1e:c2:6c:4b:d7:ec:20: f4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CE:13:BA:18:63:A1:B0:3E:DA:1E:9A:F0:4F:56:6C:2A:29:7B:94 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:46:b9:23:cd:4d:04:91:1e:3c:a9:e5:1a:df:40:71:92:23: af:22:dc:df:4d:07:fe:66:c3:86:59:02:1f:e6:c1:06:d4:fc: 60:b1:e8:81:ed:6f:3b:c0:0a:ed:86:cd:39:ae:b1:50:4d:c1: 4b:29:eb:43:7d:09:78:9c:6f:d4:0b:22:65:02:36:b3:a3:96: ab:c3:ca:1b:3f:2b:90:a1:77:46:a4:6d:c7:2b:c4:2e:40:f3: 09:a4:1b:de:1a:93:3a:21:5d:7e:f9:dc:26:df:cd:0a:98:e2: 93:54:cc:2a:7e:7a:58:2b:d0:2a:5c:af:4e:a8:97:6a:2e:ff: 83:1f:8c:1c:7e:c2:8c:eb:aa:94:40:96:88:62:f1:9a:8e:8a: 34:8c:fa:16:01:10:12:53:c3:c7:5e:03:c2:82:5a:f1:4c:c1: a7:2a:68:71:2c:9a:2e:6d:1d:eb:16:f4:80:dc:1d:4b:6a:26: 60:d6:5e:c6:11:d6:db:4c:88:73:cb:1d:f1:1e:0d:67:62:d7: 1b:15:cd:7b:14:e3:bc:69:1f:f2:67:1e:21:96:64:a4:df:ba: d0:6b:f5:33:32:ef:ab:0e:05:07:0d:d2:75:b4:65:d0:71:00: 0d:68:04:80:b0:44:11:28:39:b7:ab:c3:87:26:e8:d2:d8:bb: 53:02:a1:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKVZGYcuYVo+z0mSDDTnFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjYwOTEwMDgwMDU4WhcNMjYwOTExMDgwMDU4WjAzMTEwLwYDVQQD Eyg1OGNlMTNiYTE4NjNhMWIwM2VkYTFlOWFmMDRmNTY2YzJhMjk3Yjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDOl2z01ck6zB+SxoZlGHuV4onSX g4eU3GiIDdYUvg7pkN7di7Lx48vk45LfbVA7YnmSlDnLtVhDtcrfFtE8xdn46YbW N0Ma6vgVXYSfofgEp6NZcyXqvSAKAGYkiqWDmYJpJrVnnbpFkgAMYBHoF0ph00UA cHB6NHdRoXz8yt/uUIalD2aZChYPiDeALnZ9Stu7bq4WDg1j2UxCYfK1IQx0REmq AAbXd9BeCBcucr5i8S5r3bsGI2q8GwV3rko5zmqkEHZFj2F9+SRXWJjXj5KU+BHA c0VCdrifOsk7BcRTIVRjgp9FLDbJuTKqGVptz2Yc7evKPB7CbEvX7CD0uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjOE7oYY6GwPtoemvBPVmwqKXuUMB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0a5I81N BJEePKnlGt9AcZIjryLc300H/mbDhlkCH+bBBtT8YLHoge1vO8AK7YbNOa6xUE3B SynrQ30JeJxv1AsiZQI2s6OWq8PKGz8rkKF3RqRtxyvELkDzCaQb3hqTOiFdfvnc Jt/NCpjik1TMKn56WCvQKlyvTqiXai7/gx+MHH7CjOuqlECWiGLxmo6KNIz6FgEQ ElPDx14DwoJa8UzBpypocSyaLm0d6xb0gNwdS2omYNZexhHW20yIc8sd8R4NZ2LX GxXNexTjvGkf8mceIZZkpN+60Gv1MzLvqw4FBw3SdbRl0HEADWgEgLBEESg5t6vD hybo0ti7UwKheQ== -----END CERTIFICATE-----Generated at Thu Sep 10 17:04:20 2026 by rpki-client