$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft File: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json) Hash identifier: u0qaIEypQvQ2JjscINsiBb+14YfQgQT4sazg+INER6k= Subject key identifier: 1E:C7:45:CD:5D:F8:3B:04:72:01:A7:32:F9:2C:C6:6B:2C:8C:51:51 Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Certificate serial: 01A03F72A29902300205134443EF189C4B90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft Manifest number: 1A42 Signing time: Wed 26 Aug 2026 19:01:12 +0000 Manifest this update: Wed 26 Aug 2026 19:01:12 +0000 Manifest next update: Thu 27 Aug 2026 19:01:12 +0000 Files and hashes: 1: 1Xksz4pAytZHMrrT7gOuFdy8S2Y.roa (hash: HuNf5dwLg/DJcTEcYtbO8BEopfRLLX+209pk2+0+87w=) 2: 2fC7vMQsiVrreKahYpbYQeGBdlA.roa (hash: ryehnZ2Vw9hgtgH92x3ZW5v3KScwTU3lwsfzQRH2orI=) 3: 3aV4uR6YCpNCMqEmRj5_444Decg.roa (hash: xsNIDZCx48PVAmUl5doiKpgYGjB7eG/SLI/mAjLaIh8=) 4: 3uaiubVaYwEf-0pq3jOcgWmJ5CE.roa (hash: +/DqQfsYBGZvH5gjSmEEf+nK4crysz9SgEpPppJMqlo=) 5: I08p1jkDdJlEDsjwq053srkjN2k.roa (hash: La1YGwc3oCLT3rS+rl/RN0PZ9UFeOvqPsj5JGqvzCv8=) 6: KbtlTKcgt-X8HNV4rKo5uZlq6R8.roa (hash: 70QTuQkF5890Kc+PvR2XYv1coLUM/SKD0ZPfp0La8K4=) 7: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: bFgaCNlLvIPy7wGxeOid5gWtSsKT5qtwothEfyqUtJY=) 8: aFH3yZOCBvv0pwITn-ojOO9u5_Y.roa (hash: R+3z3be5a6cpJXKXgxNcsq7jkEToT3RKyUkCWxn8eBI=) 9: cbkmSv4A8E7qdpGnIA9EV1uMTfI.roa (hash: Etb18uo7Rn29ZvaJx07byCrsL8cUj5zuO8qDMwtLZ0E=) 10: g8lpKS3Uw8kC5lMG62drJ46w5hs.roa (hash: 83NMQZQtm0Gu60VzRcxhZibSAqmZFrS/fqUqV713Mcs=) 11: zQaBu8xvqsgQldV2qdnBjEZymN8.roa (hash: gNV6m/aR4O8Blczk03nyUg7ckGuOlJt+WZprd2w5EI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 19:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:3f:72:a2:99:02:30:02:05:13:44:43:ef:18:9c:4b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Validity Not Before: Aug 26 19:01:12 2026 GMT Not After : Aug 27 19:01:12 2026 GMT Subject: CN=1ec745cd5df83b047201a732f92cc66b2c8c5151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:05:47:c5:75:ea:96:aa:27:19:03:bf:60: 21:47:ad:13:30:87:99:69:e4:f1:81:a4:6b:bd:e2: 21:fa:52:ea:bc:7e:27:a7:74:f1:cf:a7:13:83:24: 4d:32:07:db:7e:33:55:1d:d8:a5:38:92:75:79:95: df:5b:2e:5e:92:26:a9:16:f3:d4:f0:37:d8:7c:93: b9:b9:68:c1:37:01:81:f0:8c:b4:55:d9:b3:71:e6: f2:01:d7:07:6b:d5:76:86:b6:03:35:ae:fe:a2:08: dc:08:31:8e:77:6e:dc:22:d0:74:1b:02:4e:bf:5b: 00:7f:3e:b9:7b:60:b7:f2:8b:b7:78:35:2f:c4:85: 4d:82:e1:e6:15:fe:3d:2b:3c:d3:cc:fd:c2:3c:12: 6a:a8:07:5f:e7:d8:eb:c8:a0:c1:44:b5:b5:bb:a1: 85:64:61:d2:5c:6a:30:8b:18:fb:61:3f:8d:e8:20: 99:1a:4e:65:34:85:53:55:d0:c3:bd:88:fd:2a:0d: 9f:2d:1a:6f:e8:da:e1:6a:a4:fe:f2:d2:e4:09:ac: 0e:62:05:d7:d0:0b:85:8e:b1:8b:0c:a0:1f:cf:11: a1:22:10:e4:83:a8:f4:22:5c:e5:08:09:d2:f9:3d: 03:95:70:7a:fd:f0:27:81:3b:a6:b9:d8:0a:c2:fd: 4b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C7:45:CD:5D:F8:3B:04:72:01:A7:32:F9:2C:C6:6B:2C:8C:51:51 X509v3 Authority Key Identifier: keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:60:e2:95:d4:1d:97:39:64:52:6b:42:b8:0e:5b:28:7f:a0: 8d:4d:32:35:09:c7:7a:a2:90:58:39:fc:7a:25:4b:d0:f1:12: 1b:0f:6f:12:e0:2f:eb:e3:f6:81:ef:28:73:90:11:77:78:9b: 8d:9a:9b:6f:88:fb:d9:b8:9e:98:94:8d:52:94:81:b8:a5:74: 13:41:fc:75:f5:6f:24:a5:8d:95:ed:76:90:90:4b:05:bc:f9: 26:e1:17:b9:b4:21:dd:c5:04:16:db:f4:2a:e2:ae:53:79:16: cd:d6:95:56:b1:5f:c3:16:fb:43:f0:20:46:5e:b6:dd:0b:e5: 75:72:ad:e9:4b:bc:91:7b:14:09:1e:11:76:7c:01:09:b0:fc: 87:61:cf:dd:09:cd:6a:0c:da:a4:fe:af:8a:71:24:bc:f5:8e: 3d:0b:3f:44:83:8e:45:ec:fb:b4:24:e6:4f:46:59:ac:fe:7a: ab:9d:df:fe:32:6a:a8:57:04:39:25:e2:8f:c1:9b:a5:fc:0b: f1:2c:3b:75:ef:b1:5d:c8:68:8c:74:95:58:fb:24:55:2f:57: 0c:49:84:d5:8b:67:c0:4e:ff:bb:be:af:a7:ed:5e:5a:f1:14: 47:c0:63:61:65:6e:54:b8:54:56:1f:de:6e:9f:ba:70:ef:bd: 15:cc:6a:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaA/cqKZAjACBRNEQ+8YnEuQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi YTg4NDkwHhcNMjYwODI2MTkwMTEyWhcNMjYwODI3MTkwMTEyWjAzMTEwLwYDVQQD EygxZWM3NDVjZDVkZjgzYjA0NzIwMWE3MzJmOTJjYzY2YjJjOGM1MTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFIFR8V16paqJxkDv2AhR60TMIeZ aeTxgaRrveIh+lLqvH4np3Txz6cTgyRNMgfbfjNVHdilOJJ1eZXfWy5ekiapFvPU 8DfYfJO5uWjBNwGB8Iy0VdmzcebyAdcHa9V2hrYDNa7+ogjcCDGOd27cItB0GwJO v1sAfz65e2C38ou3eDUvxIVNguHmFf49KzzTzP3CPBJqqAdf59jryKDBRLW1u6GF ZGHSXGowixj7YT+N6CCZGk5lNIVTVdDDvYj9Kg2fLRpv6NrhaqT+8tLkCawOYgXX 0AuFjrGLDKAfzxGhIhDkg6j0IlzlCAnS+T0DlXB6/fAngTumudgKwv1LFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7HRc1d+DsEcgGnMvksxmssjFFRMB8GA1UdIwQY MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt ZTEzZTU1NzljNWRjLzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmDildQd lzlkUmtCuA5bKH+gjU0yNQnHeqKQWDn8eiVL0PESGw9vEuAv6+P2ge8oc5ARd3ib jZqbb4j72biemJSNUpSBuKV0E0H8dfVvJKWNle12kJBLBbz5JuEXubQh3cUEFtv0 KuKuU3kWzdaVVrFfwxb7Q/AgRl623QvldXKt6Uu8kXsUCR4RdnwBCbD8h2HP3QnN agzapP6vinEkvPWOPQs/RIOORez7tCTmT0ZZrP56q53f/jJqqFcEOSXij8GbpfwL 8Sw7de+xXchojHSVWPskVS9XDEmE1YtnwE7/u76vp+1eWvEUR8BjYWVuVLhUVh/e bp+6cO+9FcxqCg== -----END CERTIFICATE-----Generated at Thu Aug 27 03:03:22 2026 by rpki-client