$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft File: q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json) Hash identifier: 5RPEgQcP682mJ/K9jZ09AwLAUjbjzEWmjGaDleY6qDQ= Subject key identifier: 42:D2:38:6C:11:48:49:70:79:23:15:B4:ED:74:23:50:9B:29:B2:C4 Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019CE44875D43FA71CF78D128E50A434F29B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft Manifest number: 1574 Signing time: Thu 12 Mar 2026 23:01:19 +0000 Manifest this update: Thu 12 Mar 2026 23:01:19 +0000 Manifest next update: Fri 13 Mar 2026 23:01:19 +0000 Files and hashes: 1: 0PWfBn0oGldVFHP5tIF47j3zzAs.roa (hash: 0sM6Ze3gvOmQYlCu1oomU3dkg7xN6YhbGGDnKDWKSSQ=) 2: 2_JDrlEf39vL8qmUM9CaRXwOr04.roa (hash: /7e65G97+6p4mluseOQELP9OxF86iI75OQ+5Z/TQzmA=) 3: 5d874HtQy3_g6Lh42ATS1BQL16o.roa (hash: FFJNypVbDwx5p1OtRayAO1/xI3zEji2XKy7Oj/jRza0=) 4: 6NzUbUPfmG_2OYaxE5u0iljd-HM.roa (hash: GEVpwDXH3AnmmmYcwcQLhZ1oJzowlyvgSDom4fjBpAM=) 5: BVx20OvNIr_bjMiJlAuvJK99SH4.roa (hash: DO6SxTL8ZIDZlJLjGOfKoMzyvMaVazIOTTdETJq4hxI=) 6: DyhSqV4302w_Jd8C_oWX0mObDDc.roa (hash: XVB5wgNU/o6hHZ2aTWsuDvd3gUhS28oEwkGfS/KVZ7w=) 7: H9Xbs19Dof8eiG5lJjAhQV9WdWI.roa (hash: iXBhXfrYk+sqUaa89rfM9pApaz51gWzZlcef+RPdmsg=) 8: MSewK7b92JObaKeUrbrsAb5fWQk.roa (hash: sWACoQHb5c7UneFSMmjv5A00HKxYwU6xUqQ/8qlbIPE=) 9: NqUE_7vgG-i019hpuas3mtpVIf4.roa (hash: X2ZRbDZD/jel7nDnPIG6pqjl2LVgOhthOTW0hTf7CyA=) 10: ZBRiJj4yKjp6xE7hgkNq4cQdPLQ.roa (hash: 6GJHppVcWVXgDv6JkXYDCys38/Oyzd7ZRUn3j/wIDXU=) 11: eKfYhAdXZm4QBxrRp-Jb19IhjKA.roa (hash: IW6hoy0lnAYpEm6NvMoOrfkrhinHm5CYNAqE2SF2Y3g=) 12: ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa (hash: 6KJzsBOmWkWNjIPw+pN6XcIjmWVNJnyQyPCTB+CKohg=) 13: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: 9UWiiXbOQ5Pi8sgrA1/xsnSVQAY3u2GZAfZLBhio5yw=) 14: qaltJRhtOumKjVHwnWVUetcuLl8.roa (hash: BGZRfPeZLiJVX41F+zt+HW9khnF21BsLuwIzvIKpNck=) 15: slCMC5MetlL-UdrbcYVL6ivEaR8.roa (hash: L9bTvLMwoTmbYW/wx8YfNg5L/r3pNdrG0c8bxsu4UcE=) 16: tFL9wVh4WkSXocKu5wD0zL_9_m8.roa (hash: 6EEVwO12s7jfNRlLHqcR0cD6u3HIV2GLT5UfsJtR9iA=) 17: wGOi-hc1qunRv3mfhlCNuwgWq88.roa (hash: VEFeNu27Mw/MaO7I2TqKbQuNe8tJIgFySJ8plRBHBzM=) 18: zLZn5fjIxGUIeLJs3xz-C3OdAK8.roa (hash: RzZEQ/gzmc0sHqoihLaxMsPQLNBKCTKE0KmCQNShYdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 21:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e4:48:75:d4:3f:a7:1c:f7:8d:12:8e:50:a4:34:f2:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Mar 12 23:01:19 2026 GMT Not After : Mar 13 23:01:19 2026 GMT Subject: CN=42d2386c11484970792315b4ed7423509b29b2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:92:4e:5b:0b:2f:9a:54:56:b8:b6:87:20: 8c:f2:dc:f4:75:a6:9d:a7:56:cd:39:9b:80:08:a9: c2:58:1e:fb:ba:38:d9:c8:09:ae:d1:31:83:85:4b: 75:9b:a8:7d:f5:62:f2:11:0f:fe:fb:09:20:25:52: 98:6d:8f:d8:51:85:eb:9e:a4:6c:c1:25:56:41:79: 07:34:b5:4a:cb:2c:53:52:d1:67:81:d6:70:6b:0d: 3c:cd:a2:bd:0a:3f:dd:bc:98:92:94:e3:43:97:7a: 43:4f:a9:be:50:d2:9e:d7:9c:e0:5f:a9:85:e6:4b: f7:3f:92:2b:b3:7e:96:b8:09:32:02:4a:1f:05:e3: b8:dc:b5:f3:20:f4:09:1f:68:3b:c3:c4:da:51:bf: 2f:c4:92:70:6c:98:65:95:c6:23:48:1a:bd:49:9b: 8e:7c:7f:84:08:de:7e:44:33:11:18:45:fb:9f:2e: 24:32:b7:d0:83:b9:43:7f:46:58:3d:36:95:c5:ec: 72:57:d2:89:d3:b3:be:21:b3:90:40:bc:f2:a3:f2: 54:74:75:8f:fe:dd:ed:28:4f:92:db:39:99:db:20: 71:8b:bb:0c:47:0a:f9:03:78:0e:a6:81:78:e8:4b: 9c:cd:74:3f:e7:ea:d2:bf:35:12:88:89:7b:6f:40: 49:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D2:38:6C:11:48:49:70:79:23:15:B4:ED:74:23:50:9B:29:B2:C4 X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:78:69:2b:f9:c7:0b:19:7d:87:6b:4e:7f:79:07:9a:3c:02: 46:b0:77:c7:34:6d:12:d5:3e:92:d7:a0:e1:63:24:67:4f:3d: a8:42:e5:08:3a:a7:d3:77:e7:3a:c3:dd:2e:f0:1e:9f:32:9a: b3:36:1c:97:aa:ab:84:1b:d2:2a:9a:c3:2a:84:f3:d3:6c:d8: dd:39:d0:3a:44:49:bc:66:5e:f3:80:a6:3c:d1:b2:68:29:13: 01:65:79:1c:5b:85:ea:7a:3a:47:06:82:8d:9e:38:f6:e1:81: 8c:46:04:ef:c1:1d:eb:98:58:b8:92:70:56:4d:22:2f:23:5b: 50:3c:0c:cf:58:18:2a:b7:89:6f:3f:87:89:31:86:8d:45:02: 7f:e8:15:fa:d6:1d:5d:00:cc:a1:16:20:06:86:a4:1f:cc:86: d9:43:1f:97:4b:ad:64:63:8d:1a:c1:08:ee:27:e2:40:f8:24: d9:e7:f5:07:13:e7:48:06:20:8e:e7:f1:9b:b1:96:0e:06:9b: 42:07:24:0b:4c:2d:1b:e3:59:a7:51:c3:a5:20:86:e0:9c:69: 99:ef:3d:5e:92:32:12:5a:97:1d:1c:40:6b:fb:b3:8c:ed:03: c0:10:bc:9f:f2:9e:c2:86:38:d3:a7:b7:f4:fa:3d:65:67:6d: 33:79:d4:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzkSHXUP6cc940SjlCkNPKbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjYwMzEyMjMwMTE5WhcNMjYwMzEzMjMwMTE5WjAzMTEwLwYDVQQD Eyg0MmQyMzg2YzExNDg0OTcwNzkyMzE1YjRlZDc0MjM1MDliMjliMmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZOSTlsLL5pUVri2hyCM8tz0daad p1bNOZuACKnCWB77ujjZyAmu0TGDhUt1m6h99WLyEQ/++wkgJVKYbY/YUYXrnqRs wSVWQXkHNLVKyyxTUtFngdZwaw08zaK9Cj/dvJiSlONDl3pDT6m+UNKe15zgX6mF 5kv3P5Irs36WuAkyAkofBeO43LXzIPQJH2g7w8TaUb8vxJJwbJhllcYjSBq9SZuO fH+ECN5+RDMRGEX7ny4kMrfQg7lDf0ZYPTaVxexyV9KJ07O+IbOQQLzyo/JUdHWP /t3tKE+S2zmZ2yBxi7sMRwr5A3gOpoF46EuczXQ/5+rSvzUSiIl7b0BJJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELSOGwRSElweSMVtO10I1CbKbLEMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHhpK/nH Cxl9h2tOf3kHmjwCRrB3xzRtEtU+kteg4WMkZ089qELlCDqn03fnOsPdLvAenzKa szYcl6qrhBvSKprDKoTz02zY3TnQOkRJvGZe84CmPNGyaCkTAWV5HFuF6no6RwaC jZ449uGBjEYE78Ed65hYuJJwVk0iLyNbUDwMz1gYKreJbz+HiTGGjUUCf+gV+tYd XQDMoRYgBoakH8yG2UMfl0utZGONGsEI7ifiQPgk2ef1BxPnSAYgjufxm7GWDgab QgckC0wtG+NZp1HDpSCG4Jxpme89XpIyElqXHRxAa/uzjO0DwBC8n/KewoY406e3 9Po9ZWdtM3nUHw== -----END CERTIFICATE-----Generated at Fri Mar 13 02:23:12 2026 by rpki-client