$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json) Hash identifier: Q6WSi06GazV+daBy7NYiMbXt343MSTi7XQmI2AHKU2Q= Subject key identifier: C4:85:55:96:2C:7F:06:33:F6:7A:B6:7E:F5:18:97:A7:E7:D7:29:59 Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 01A179CCD40544F1B2E3D8ED133EEBD38B34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft Manifest number: 17BF Signing time: Mon 26 Oct 2026 20:00:29 +0000 Manifest this update: Mon 26 Oct 2026 20:00:29 +0000 Manifest next update: Tue 27 Oct 2026 20:00:29 +0000 Files and hashes: 1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=) 2: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=) 3: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=) 4: GXWJE-8eL7U4sVeXlOtFxZ7vcr8.roa (hash: HYQsYXLOcua0ABFdCgere8a70Mi6wAtAionAH1YPaTE=) 5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: qNB/J1fb1LCk10QO2YmkeHNLzqg/abZMiRD+00DQB98=) 6: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=) 7: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=) 8: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=) 9: sQplr-AwbR_8RYI_FgYOZ178ZrI.roa (hash: qt7B9tBIkTrdehiRfoggQYOaAs6JsLoSpAJd9A7A7Xg=) 10: tVRKIzEi3C5oivV0NSF6cpvQXxw.roa (hash: DCE8qPP2+ixczk2thpFiZupianuMg94BL32mNt6WYVg=) 11: woAOb4AN3cSy4oY_QAjYETncO0E.roa (hash: nKozfVGE5cnQbfzUetkE8F54sr9HFGBho4qeVuXBxKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:79:cc:d4:05:44:f1:b2:e3:d8:ed:13:3e:eb:d3:8b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Oct 26 20:00:29 2026 GMT Not After : Oct 27 20:00:29 2026 GMT Subject: CN=c48555962c7f0633f67ab67ef51897a7e7d72959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3f:51:01:9c:87:80:0d:7b:20:60:e0:d5:25: d4:4f:79:87:01:06:7e:5f:4a:3b:65:ba:d6:93:a5: 4a:cf:21:5b:9e:0e:2d:3a:83:f0:58:80:7f:15:30: 43:e4:10:3f:15:5d:a1:7e:e2:ec:db:f5:bc:88:e9: d7:08:e1:c7:b9:d7:6d:dc:4c:56:8e:05:75:46:d2: 9e:86:3f:b4:a1:70:2a:a0:12:65:d1:e9:7e:e6:43: 3a:c4:fa:06:90:58:b3:69:a0:bc:23:24:c6:45:ee: 09:3b:d9:36:90:69:7c:02:30:70:b9:e4:ba:5c:a5: 89:3b:b4:33:2b:3c:55:1b:de:b0:8e:e6:96:b1:8c: 6a:5d:a9:cd:59:11:57:5f:a9:a8:50:41:54:82:6d: 4e:35:a5:0c:cd:14:b8:1a:44:b1:0c:38:90:a6:99: 53:a9:88:6a:c3:ff:d5:dc:e8:c3:b4:18:cf:ee:ea: 82:29:6a:b1:1f:ba:96:7a:4b:52:77:ff:01:78:cb: dd:43:8f:21:6f:8e:4e:0f:30:77:21:98:9d:f0:2d: 12:00:df:23:5c:c2:15:00:83:66:b6:8b:5b:28:f6: de:6b:80:1b:23:b7:b3:1d:d6:ef:64:d4:09:1a:bc: 3c:55:47:99:87:45:92:a0:42:39:a4:7c:9d:36:2b: 93:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:85:55:96:2C:7F:06:33:F6:7A:B6:7E:F5:18:97:A7:E7:D7:29:59 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ca:59:f7:2d:69:7c:f7:1a:fc:1b:c8:48:86:25:a3:b3:e2: 87:2d:02:7c:82:c9:6d:e0:05:f9:f7:05:cc:ed:1e:52:33:c9: 72:19:71:81:29:85:01:c6:bb:6e:41:23:05:a3:a9:e2:6a:cc: 11:d4:64:04:fa:2a:7b:6d:59:9b:56:54:ce:48:b0:9e:15:8f: af:26:7e:eb:bc:ab:53:02:7e:77:e0:65:5e:72:b3:3d:49:eb: a5:bb:d8:d9:98:eb:0c:bd:26:f5:6c:08:5e:d1:9a:b1:2d:8c: 7d:72:d1:35:02:75:f4:98:ad:d0:a0:57:6b:74:b3:dd:87:c6: 30:8f:7d:2b:ea:ba:f4:d9:5f:8d:1d:4f:2b:f1:43:0a:72:9e: 7e:a8:af:0f:26:a4:89:8b:d3:9c:3e:ef:14:f7:6a:27:7d:70: 47:1b:8d:a4:0c:9d:50:2c:bd:d2:9c:78:2e:21:d6:bc:c2:be: 21:9c:be:7d:af:a2:e3:7c:62:3e:17:08:e5:25:2e:75:c1:ab: 80:9f:e1:34:0a:47:97:9e:bb:13:c9:52:47:b5:3e:be:08:9b: 2d:9e:f3:91:2a:2e:23:fa:f6:fd:1b:04:d0:9c:b3:46:de:80: f4:82:7b:19:e8:6b:93:bd:fd:26:62:0f:d9:6b:a9:dd:fc:a4: 4e:dc:d1:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF5zNQFRPGy49jtEz7r04s0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjYxMDI2MjAwMDI5WhcNMjYxMDI3MjAwMDI5WjAzMTEwLwYDVQQD EyhjNDg1NTU5NjJjN2YwNjMzZjY3YWI2N2VmNTE4OTdhN2U3ZDcyOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz9RAZyHgA17IGDg1SXUT3mHAQZ+ X0o7ZbrWk6VKzyFbng4tOoPwWIB/FTBD5BA/FV2hfuLs2/W8iOnXCOHHuddt3ExW jgV1RtKehj+0oXAqoBJl0el+5kM6xPoGkFizaaC8IyTGRe4JO9k2kGl8AjBwueS6 XKWJO7QzKzxVG96wjuaWsYxqXanNWRFXX6moUEFUgm1ONaUMzRS4GkSxDDiQpplT qYhqw//V3OjDtBjP7uqCKWqxH7qWektSd/8BeMvdQ48hb45ODzB3IZid8C0SAN8j XMIVAINmtotbKPbea4AbI7ezHdbvZNQJGrw8VUeZh0WSoEI5pHydNiuTIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSFVZYsfwYz9nq2fvUYl6fn1ylZMB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8pZ9y1p fPca/BvISIYlo7Pihy0CfILJbeAF+fcFzO0eUjPJchlxgSmFAca7bkEjBaOp4mrM EdRkBPoqe21Zm1ZUzkiwnhWPryZ+67yrUwJ+d+BlXnKzPUnrpbvY2ZjrDL0m9WwI XtGasS2MfXLRNQJ19Jit0KBXa3Sz3YfGMI99K+q69NlfjR1PK/FDCnKefqivDyak iYvTnD7vFPdqJ31wRxuNpAydUCy90px4LiHWvMK+IZy+fa+i43xiPhcI5SUudcGr gJ/hNApHl567E8lSR7U+vgibLZ7zkSouI/r2/RsE0JyzRt6A9IJ7Gehrk739JmIP 2Wup3fykTtzRcw== -----END CERTIFICATE-----Generated at Tue Oct 27 04:46:30 2026 by rpki-client