$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: YXI830EXZ0gL7g4edhHizqdoShqBQR/F4LrBQxLZuaI= Subject key identifier: DD:38:07:54:B6:48:14:E4:78:E5:76:C6:D9:2D:59:F7:06:1F:8D:B0 Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 01A12B0D7D1E382E5DF6EC531DF1241636E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: 0288 Signing time: Sun 11 Oct 2026 13:01:06 +0000 Manifest this update: Sun 11 Oct 2026 13:01:06 +0000 Manifest next update: Mon 12 Oct 2026 13:01:06 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: hz5qZvOuYZjGWvkuTa3GDgtXZul4DU9M4BwsfIhpQ8c=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:2b:0d:7d:1e:38:2e:5d:f6:ec:53:1d:f1:24:16:36:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: Oct 11 13:01:06 2026 GMT Not After : Oct 12 13:01:06 2026 GMT Subject: CN=dd380754b64814e478e576c6d92d59f7061f8db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:87:1c:08:0d:c5:0b:56:26:86:94:ac:4d: ad:49:34:88:f9:78:b3:41:08:25:62:c4:91:cc:16: ad:a3:13:bf:bf:d4:a1:9e:45:03:4d:98:f7:70:c1: bf:a9:2c:d5:b0:db:a7:9d:7e:23:14:c8:18:a0:89: c8:20:29:d2:28:13:ae:f6:00:31:e6:96:c2:99:5c: 0b:a1:50:2c:21:42:38:d2:fb:a8:5d:0e:85:28:9d: cb:3d:f7:e0:17:b4:0e:92:39:13:8b:85:1d:fe:a9: 4e:3f:67:7d:bf:b7:98:0d:2a:37:ef:18:cf:08:76: 01:24:b6:0b:36:6c:6a:81:82:d5:3e:07:c3:82:b7: f8:5d:fa:8c:6d:fb:4c:64:0a:29:d6:48:a9:7f:3c: b8:6a:22:84:ba:89:e9:4f:c6:c9:ce:75:c8:eb:66: 6b:69:8f:01:ad:c3:86:9d:19:2c:da:ee:b8:6e:83: 06:18:ff:43:02:89:4b:84:18:6f:a3:6c:67:e0:24: de:96:8f:49:36:35:14:aa:14:86:db:f3:36:e1:a8: f5:1d:ae:21:39:bc:91:99:92:58:26:1d:72:29:1a: 2a:fc:42:bf:8a:6c:fd:e1:a9:fd:68:e9:7f:7f:ec: 6e:3a:8b:39:ed:51:5a:14:d1:fa:86:6a:98:0d:e6: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:38:07:54:B6:48:14:E4:78:E5:76:C6:D9:2D:59:F7:06:1F:8D:B0 X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:29:9d:8e:9a:68:af:77:86:cc:4b:da:d6:70:b6:3c:f4:fb: 6b:70:95:50:04:df:e0:f0:e5:fe:57:6d:4e:83:7c:f1:93:86: a8:04:b2:97:25:91:75:55:c3:6d:87:cf:d3:47:90:1c:76:01: 46:17:c0:89:48:c4:5f:89:89:c1:d3:74:f6:de:06:d6:f7:ec: 8d:98:94:ab:69:d9:76:4f:f1:d3:5f:a8:39:7c:0f:77:f3:9a: 2b:31:d3:ae:e5:9c:5f:44:cc:2d:80:77:bd:c7:a7:8e:86:5d: b3:66:c5:8a:b7:85:d1:3b:73:66:e9:89:6c:e4:3b:d4:76:96: e9:8b:87:19:ef:80:a3:91:55:52:61:5c:67:0a:4f:f5:42:d6: 20:e0:02:3c:a2:13:22:d1:97:0f:55:80:1a:e6:c5:a0:97:e1: 13:31:02:26:f5:18:02:a7:94:57:6d:9b:49:02:85:ef:f9:20: 0e:e2:08:b0:f7:36:34:fe:eb:b2:d9:89:ab:1f:e1:13:bc:74: 7a:48:e2:c4:85:05:10:e6:1c:de:9c:c7:5c:81:cc:6f:c6:a8: 99:4d:c3:54:45:79:39:37:91:d7:61:63:e6:5f:57:1a:07:59: fc:f7:00:fe:8a:2a:08:bc:31:82:71:cf:2a:ee:d2:e1:bc:1d: 58:e1:c6:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaErDX0eOC5d9uxTHfEkFjbiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYxMDExMTMwMTA2WhcNMjYxMDEyMTMwMTA2WjAzMTEwLwYDVQQD EyhkZDM4MDc1NGI2NDgxNGU0NzhlNTc2YzZkOTJkNTlmNzA2MWY4ZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyouHHAgNxQtWJoaUrE2tSTSI+Xiz QQglYsSRzBatoxO/v9ShnkUDTZj3cMG/qSzVsNunnX4jFMgYoInIICnSKBOu9gAx 5pbCmVwLoVAsIUI40vuoXQ6FKJ3LPffgF7QOkjkTi4Ud/qlOP2d9v7eYDSo37xjP CHYBJLYLNmxqgYLVPgfDgrf4XfqMbftMZAop1kipfzy4aiKEuonpT8bJznXI62Zr aY8BrcOGnRks2u64boMGGP9DAolLhBhvo2xn4CTelo9JNjUUqhSG2/M24aj1Ha4h ObyRmZJYJh1yKRoq/EK/imz94an9aOl/f+xuOos57VFaFNH6hmqYDeZdmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN04B1S2SBTkeOV2xtktWfcGH42wMB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZimdjppo r3eGzEva1nC2PPT7a3CVUATf4PDl/ldtToN88ZOGqASylyWRdVXDbYfP00eQHHYB RhfAiUjEX4mJwdN09t4G1vfsjZiUq2nZdk/x01+oOXwPd/OaKzHTruWcX0TMLYB3 vcenjoZds2bFireF0TtzZumJbOQ71HaW6YuHGe+Ao5FVUmFcZwpP9ULWIOACPKIT ItGXD1WAGubFoJfhEzECJvUYAqeUV22bSQKF7/kgDuIIsPc2NP7rstmJqx/hE7x0 ekjixIUFEOYc3pzHXIHMb8aomU3DVEV5OTeR12Fj5l9XGgdZ/PcA/ooqCLwxgnHP Ku7S4bwdWOHGpA== -----END CERTIFICATE-----Generated at Sun Oct 11 21:16:57 2026 by rpki-client