$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft File: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json) Hash identifier: 1+P1SHsPfO4OtjcArle9/zOu3pu806C5lNvMCt1A5oc= Subject key identifier: 8F:4A:48:11:15:27:0C:6E:04:41:FD:35:EB:26:6C:4C:46:04:1A:F9 Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Certificate serial: 019D37C0EC75A205B8544655B21EED39577E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft Manifest number: 18AD Signing time: Sun 29 Mar 2026 04:01:23 +0000 Manifest this update: Sun 29 Mar 2026 04:01:23 +0000 Manifest next update: Mon 30 Mar 2026 04:01:23 +0000 Files and hashes: 1: 1Xksz4pAytZHMrrT7gOuFdy8S2Y.roa (hash: HuNf5dwLg/DJcTEcYtbO8BEopfRLLX+209pk2+0+87w=) 2: 2fC7vMQsiVrreKahYpbYQeGBdlA.roa (hash: ryehnZ2Vw9hgtgH92x3ZW5v3KScwTU3lwsfzQRH2orI=) 3: 3uaiubVaYwEf-0pq3jOcgWmJ5CE.roa (hash: +/DqQfsYBGZvH5gjSmEEf+nK4crysz9SgEpPppJMqlo=) 4: I08p1jkDdJlEDsjwq053srkjN2k.roa (hash: La1YGwc3oCLT3rS+rl/RN0PZ9UFeOvqPsj5JGqvzCv8=) 5: KbtlTKcgt-X8HNV4rKo5uZlq6R8.roa (hash: 70QTuQkF5890Kc+PvR2XYv1coLUM/SKD0ZPfp0La8K4=) 6: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: PzyY8tDjl3aG5AHQbOuLRuibheC0Zk271d0fdrjYs98=) 7: aFH3yZOCBvv0pwITn-ojOO9u5_Y.roa (hash: R+3z3be5a6cpJXKXgxNcsq7jkEToT3RKyUkCWxn8eBI=) 8: cbkmSv4A8E7qdpGnIA9EV1uMTfI.roa (hash: Etb18uo7Rn29ZvaJx07byCrsL8cUj5zuO8qDMwtLZ0E=) 9: g8lpKS3Uw8kC5lMG62drJ46w5hs.roa (hash: 83NMQZQtm0Gu60VzRcxhZibSAqmZFrS/fqUqV713Mcs=) 10: zQaBu8xvqsgQldV2qdnBjEZymN8.roa (hash: gNV6m/aR4O8Blczk03nyUg7ckGuOlJt+WZprd2w5EI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:37:c0:ec:75:a2:05:b8:54:46:55:b2:1e:ed:39:57:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Validity Not Before: Mar 29 04:01:23 2026 GMT Not After : Mar 30 04:01:23 2026 GMT Subject: CN=8f4a481115270c6e0441fd35eb266c4c46041af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:03:f4:e4:4a:a1:41:6e:e7:38:a3:64:34: e1:be:e1:23:43:c2:f1:34:fa:9c:5e:10:57:1b:34: 5e:de:47:66:0a:4e:7c:ec:b8:2e:ef:73:54:93:b7: 85:95:f2:86:2a:d0:85:b6:ff:c4:08:45:7c:62:dc: da:a2:73:d9:f3:fb:71:e0:0a:da:c5:2a:88:d2:d0: 71:6f:df:1d:f9:c5:25:ed:c7:62:e3:75:b0:14:5c: 01:6c:b3:fc:23:3f:77:bc:74:cd:11:f5:b7:9e:43: e9:2f:ea:b0:1c:16:d5:e4:fd:d6:a8:ea:57:3a:f2: 2a:51:a0:fb:12:fd:ea:c9:11:11:8b:a5:63:bd:4f: 16:f5:28:c1:3c:1d:fd:f9:92:20:11:48:e0:9a:79: 17:b4:94:03:fa:f3:39:d1:08:fe:45:4d:c6:7f:8a: 9d:8c:0d:9e:dc:ef:75:2a:cd:b1:11:14:f7:17:31: c1:84:4d:31:05:c2:65:ed:a7:00:c1:cf:c7:d5:30: 34:ab:76:18:fa:1d:c2:80:7e:1a:90:75:fd:f7:bd: 7a:ac:96:bb:6f:18:0e:54:96:f0:c0:16:80:38:86: 5d:7f:49:a2:a2:1a:7d:61:5d:00:e9:5a:8d:d5:86: 3b:de:bf:f5:be:0b:9e:1a:95:b9:9d:00:30:1c:85: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4A:48:11:15:27:0C:6E:04:41:FD:35:EB:26:6C:4C:46:04:1A:F9 X509v3 Authority Key Identifier: keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:53:44:eb:54:24:88:a7:28:5e:e1:c7:16:62:48:c4:1a:1b: 91:e0:99:cf:40:45:51:24:a7:bd:d5:90:ff:aa:3e:5c:a1:29: 94:a9:3e:be:45:58:b7:4d:da:78:70:6d:3c:a6:18:2f:8d:aa: db:75:04:56:29:c2:01:90:a8:17:ef:98:18:54:5e:41:95:9a: f6:69:79:70:0b:9e:51:96:57:50:40:b2:15:f9:4a:af:a3:26: 17:42:56:89:a8:b5:62:89:71:89:76:72:e6:5d:6a:2b:5e:e2: fb:2c:86:41:e5:b2:2d:5a:2d:f2:6c:a1:7c:4e:fc:5b:28:ea: 0b:e9:6e:80:da:33:fa:01:5e:12:96:50:17:1c:3f:72:b8:fa: 17:da:52:e6:d8:58:92:7b:e2:c9:b6:a4:16:ab:0a:95:d3:28: c9:dd:c9:9d:0a:b0:8b:1b:c1:11:df:ef:9f:d1:2f:6b:ed:16: ab:b1:27:6c:bb:d9:ea:e0:1d:2c:31:a7:8d:fc:4f:2a:0d:3a: cf:5d:94:85:b6:86:a0:f0:da:ff:a5:1a:a2:ee:1c:6a:2c:4a: 8b:10:c9:ff:85:98:a8:b9:64:3a:83:eb:7b:20:2d:5b:0e:11: 9d:4f:c4:3e:59:15:b5:a7:80:b2:90:1a:78:ad:00:68:9a:96: ff:25:54:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ03wOx1ogW4VEZVsh7tOVd+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi YTg4NDkwHhcNMjYwMzI5MDQwMTIzWhcNMjYwMzMwMDQwMTIzWjAzMTEwLwYDVQQD Eyg4ZjRhNDgxMTE1MjcwYzZlMDQ0MWZkMzVlYjI2NmM0YzQ2MDQxYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWAD9ORKoUFu5zijZDThvuEjQ8Lx NPqcXhBXGzRe3kdmCk587Lgu73NUk7eFlfKGKtCFtv/ECEV8YtzaonPZ8/tx4Ara xSqI0tBxb98d+cUl7cdi43WwFFwBbLP8Iz93vHTNEfW3nkPpL+qwHBbV5P3WqOpX OvIqUaD7Ev3qyRERi6VjvU8W9SjBPB39+ZIgEUjgmnkXtJQD+vM50Qj+RU3Gf4qd jA2e3O91Ks2xERT3FzHBhE0xBcJl7acAwc/H1TA0q3YY+h3CgH4akHX99716rJa7 bxgOVJbwwBaAOIZdf0miohp9YV0A6VqN1YY73r/1vgueGpW5nQAwHIW+UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9KSBEVJwxuBEH9NesmbExGBBr5MB8GA1UdIwQY MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt ZTEzZTU1NzljNWRjLzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx1NE61Qk iKcoXuHHFmJIxBobkeCZz0BFUSSnvdWQ/6o+XKEplKk+vkVYt03aeHBtPKYYL42q 23UEVinCAZCoF++YGFReQZWa9ml5cAueUZZXUECyFflKr6MmF0JWiai1YolxiXZy 5l1qK17i+yyGQeWyLVot8myhfE78WyjqC+lugNoz+gFeEpZQFxw/crj6F9pS5thY knviybakFqsKldMoyd3JnQqwixvBEd/vn9Eva+0Wq7EnbLvZ6uAdLDGnjfxPKg06 z12UhbaGoPDa/6Uaou4caixKixDJ/4WYqLlkOoPreyAtWw4RnU/EPlkVtaeAspAa eK0AaJqW/yVUkA== -----END CERTIFICATE-----Generated at Sun Mar 29 11:29:49 2026 by rpki-client