$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: 8ntLJNUiArPMCVtKnbWQhiQt43PX70ndKParHYW0EI8= Subject key identifier: 91:E0:EA:20:68:F4:A0:98:18:CB:D8:54:38:21:A7:C5:47:63:A2:62 Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 019E6C19748B7AA3F1C9D7F97F8BD8553121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: 011C Signing time: Thu 28 May 2026 01:01:07 +0000 Manifest this update: Thu 28 May 2026 01:01:07 +0000 Manifest next update: Fri 29 May 2026 01:01:07 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: xciUJHUvnfXvpFJGwpUWZVUS0g9NsMIo2hDbrS7NQ+E=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 28 May 2026 23:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:6c:19:74:8b:7a:a3:f1:c9:d7:f9:7f:8b:d8:55:31:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: May 28 01:01:07 2026 GMT Not After : May 29 01:01:07 2026 GMT Subject: CN=91e0ea2068f4a09818cbd8543821a7c54763a262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e4:72:bf:98:06:97:30:ff:a7:31:b7:5d:df: f9:ff:9f:cd:17:b0:cc:3b:de:36:f7:72:4b:a1:89: 06:71:89:8f:95:01:b9:9e:f6:9b:01:d5:47:d2:3a: 2a:b5:e3:22:b4:11:16:1d:81:58:de:61:9e:0d:a4: 2d:c7:8f:41:51:c3:8c:6b:83:d5:28:ba:72:e7:68: 9c:42:0e:1a:be:c1:bd:61:35:56:02:07:02:09:fb: fd:07:b8:ff:07:7d:4d:93:e6:7d:6c:c9:f3:29:14: 35:3e:69:db:ed:15:cd:31:dc:2d:07:ba:72:9d:8b: 20:9f:1f:6d:23:a2:e0:90:56:3c:2e:6b:79:51:e9: c4:a5:d5:bb:22:74:af:83:c9:8d:6a:32:a3:5f:10: 55:9b:35:88:45:3c:f7:ca:de:89:5c:78:5b:65:c6: 7f:95:ac:bf:9f:0a:b3:f4:4f:90:52:0e:b4:51:27: e4:08:8a:14:54:68:a3:74:7d:1e:90:97:2b:50:f6: 03:b9:22:46:52:b5:2c:e8:b4:f4:da:d1:57:ac:28: 88:57:cb:1d:bc:c6:94:a8:99:d1:69:0d:4d:a0:5a: 5a:dd:b2:72:40:55:8d:ce:1d:81:a9:35:20:e0:88: ea:85:c8:27:7f:04:91:df:ca:40:e7:84:76:3b:a9: d3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E0:EA:20:68:F4:A0:98:18:CB:D8:54:38:21:A7:C5:47:63:A2:62 X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:5d:ef:77:8f:4f:f4:3c:9c:c2:42:ac:ad:72:a8:1a:37:9c: 43:48:a9:49:e7:49:e0:15:46:5c:39:27:52:0a:fc:5a:8b:e3: ae:bb:f0:ab:7b:46:ff:17:e7:57:3a:16:7f:a7:a5:be:c0:26: 87:96:f6:9f:a2:9d:5e:d2:ee:81:5d:c8:38:50:34:c8:03:b0: ef:13:16:2a:a7:d5:8c:be:c8:af:32:51:5b:0c:6b:6a:63:3a: d0:39:39:e3:3b:71:0b:71:cb:a1:57:cd:2f:d7:4d:3b:81:01: 46:3f:db:f7:5e:ac:0f:74:5d:9b:b2:1e:26:79:99:23:c4:4e: c0:cb:49:85:8f:b1:96:59:8b:01:9c:32:e1:bf:c6:b9:55:87: 6b:cd:23:a8:61:84:a3:3c:04:49:a8:6b:30:08:bc:b5:d5:71: c5:80:d9:9f:b2:05:65:cc:c2:9a:9c:74:33:43:80:45:cc:e9: ff:e8:07:38:f9:6a:49:dc:a8:7a:2d:3f:ee:0f:dd:e1:c8:f8: 9a:39:a2:57:f2:10:37:3d:51:c9:8f:43:4a:00:5a:4f:46:2a: b7:66:e8:d1:fd:b3:ca:e8:9b:1b:60:1c:dc:74:d6:26:32:68: 59:0f:f3:bf:eb:46:ea:95:8c:b0:ad:72:59:7b:ef:9d:1c:4d: 24:2c:4f:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5sGXSLeqPxydf5f4vYVTEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYwNTI4MDEwMTA3WhcNMjYwNTI5MDEwMTA3WjAzMTEwLwYDVQQD Eyg5MWUwZWEyMDY4ZjRhMDk4MThjYmQ4NTQzODIxYTdjNTQ3NjNhMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsORyv5gGlzD/pzG3Xd/5/5/NF7DM O94293JLoYkGcYmPlQG5nvabAdVH0joqteMitBEWHYFY3mGeDaQtx49BUcOMa4PV KLpy52icQg4avsG9YTVWAgcCCfv9B7j/B31Nk+Z9bMnzKRQ1Pmnb7RXNMdwtB7py nYsgnx9tI6LgkFY8Lmt5UenEpdW7InSvg8mNajKjXxBVmzWIRTz3yt6JXHhbZcZ/ lay/nwqz9E+QUg60USfkCIoUVGijdH0ekJcrUPYDuSJGUrUs6LT02tFXrCiIV8sd vMaUqJnRaQ1NoFpa3bJyQFWNzh2BqTUg4IjqhcgnfwSR38pA54R2O6nTGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHg6iBo9KCYGMvYVDghp8VHY6JiMB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ13vd49P 9DycwkKsrXKoGjecQ0ipSedJ4BVGXDknUgr8Wovjrrvwq3tG/xfnVzoWf6elvsAm h5b2n6KdXtLugV3IOFA0yAOw7xMWKqfVjL7IrzJRWwxramM60Dk54ztxC3HLoVfN L9dNO4EBRj/b916sD3Rdm7IeJnmZI8ROwMtJhY+xllmLAZwy4b/GuVWHa80jqGGE ozwESahrMAi8tdVxxYDZn7IFZczCmpx0M0OARczp/+gHOPlqSdyoei0/7g/d4cj4 mjmiV/IQNz1RyY9DSgBaT0Yqt2bo0f2zyuibG2Ac3HTWJjJoWQ/zv+tG6pWMsK1y WXvvnRxNJCxPuQ== -----END CERTIFICATE-----Generated at Thu May 28 05:51:26 2026 by rpki-client