$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: eg+vwUJ6frNYzFP71ekt6yvvzRCpHR0EmGLlQLG+5yY= Subject key identifier: B4:DF:01:9E:42:6A:CC:68:90:FA:BB:F1:7D:32:24:C2:1C:A0:8E:40 Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 019C98C0559ADF58CA141A98E7005BDD92FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: 2A Signing time: Thu 26 Feb 2026 07:01:07 +0000 Manifest this update: Thu 26 Feb 2026 07:01:07 +0000 Manifest next update: Fri 27 Feb 2026 07:01:07 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: o5Xnkss0X5vTIUCOr+0DIXIUtg2qgD7HtuXP7Y12BOI=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Feb 2026 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:98:c0:55:9a:df:58:ca:14:1a:98:e7:00:5b:dd:92:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: Feb 26 07:01:07 2026 GMT Not After : Feb 27 07:01:07 2026 GMT Subject: CN=b4df019e426acc6890fabbf17d3224c21ca08e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:84:b3:50:45:a2:16:26:f9:62:5e:3b:37:f4: d7:71:ac:81:89:57:9d:eb:2d:6f:9b:ea:db:b8:9b: bf:3f:3b:91:7c:10:d4:ae:46:83:e4:41:4a:ca:c0: 42:9a:6b:28:e8:ed:6e:c2:2a:2d:63:5d:4b:0f:a1: 37:5e:8a:4d:26:9a:03:15:24:eb:e5:13:fc:f8:73: 22:f3:d3:05:77:ee:8d:c6:5e:44:0f:92:13:c9:fa: 95:b4:d4:0e:80:6c:b2:63:2f:db:0f:05:5c:e1:2f: 9a:1e:03:4f:75:ac:52:d0:46:30:89:28:5b:22:33: 37:56:fd:54:b7:69:74:c9:21:8b:d3:df:6a:b7:2d: 71:0b:b3:2a:e4:c7:fe:62:e4:86:b1:d6:92:8b:3a: f3:56:d5:51:82:6d:6b:f8:94:30:11:cf:a3:23:b3: a1:67:5b:ca:7b:c1:d5:49:a3:a2:1d:69:61:a4:51: 05:66:f9:16:df:0a:17:cc:0c:dc:18:13:56:01:47: ab:a3:93:b7:41:e5:4e:f3:79:87:56:a1:7a:25:97: 77:5d:c4:cc:46:d1:59:4c:00:b1:0d:b0:88:9e:9f: f8:88:30:19:a0:68:5c:60:94:52:4b:be:9a:45:ed: 3e:70:23:16:6a:e0:3d:bd:33:5e:ad:8e:ed:99:c1: 7f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DF:01:9E:42:6A:CC:68:90:FA:BB:F1:7D:32:24:C2:1C:A0:8E:40 X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ec:33:42:a1:af:b1:ea:50:13:4a:82:e6:a9:00:04:8c:a7: f4:2d:f3:5d:2e:29:63:06:27:1e:11:dd:e6:08:7c:f4:01:c6: f9:29:21:df:dc:1f:90:55:53:c8:77:2d:01:d8:0c:f6:bf:d3: 39:da:7a:fc:4b:d7:5d:32:e5:a4:4b:76:f2:c0:94:f8:52:cd: 89:fc:eb:2b:7e:83:70:cd:3d:f4:2a:36:ec:e6:6d:57:82:ba: 57:39:dd:ae:d3:57:a7:ed:77:5e:0d:07:2d:d0:b9:0e:0a:8e: 4b:e4:e1:9c:fd:63:bc:8c:a1:aa:25:e9:1a:51:43:67:64:04: 2c:b5:e3:cd:c1:cb:bf:2f:81:f0:2d:45:c2:48:27:34:86:76: ec:6b:33:61:1d:77:70:9e:34:4a:2f:05:ed:e6:05:95:e8:92: 89:e1:e3:fa:58:91:39:eb:36:16:c2:5a:77:6f:d5:0a:f7:a9: b5:9e:55:1c:cc:46:03:d6:49:ca:b0:6b:af:e4:00:43:70:91: b4:5b:0a:75:a6:01:06:8d:50:39:69:bc:1f:33:5e:2e:01:ad: c8:fd:9a:86:2f:c2:54:e8:cd:41:ce:04:9d:58:87:07:87:9b: 2f:1c:d3:06:13:0a:47:a0:76:47:75:08:43:10:e4:09:bf:75: 8e:f9:0e:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyYwFWa31jKFBqY5wBb3ZL6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYwMjI2MDcwMTA3WhcNMjYwMjI3MDcwMTA3WjAzMTEwLwYDVQQD EyhiNGRmMDE5ZTQyNmFjYzY4OTBmYWJiZjE3ZDMyMjRjMjFjYTA4ZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4SzUEWiFib5Yl47N/TXcayBiVed 6y1vm+rbuJu/PzuRfBDUrkaD5EFKysBCmmso6O1uwiotY11LD6E3XopNJpoDFSTr 5RP8+HMi89MFd+6Nxl5ED5ITyfqVtNQOgGyyYy/bDwVc4S+aHgNPdaxS0EYwiShb IjM3Vv1Ut2l0ySGL099qty1xC7Mq5Mf+YuSGsdaSizrzVtVRgm1r+JQwEc+jI7Oh Z1vKe8HVSaOiHWlhpFEFZvkW3woXzAzcGBNWAUero5O3QeVO83mHVqF6JZd3XcTM RtFZTACxDbCInp/4iDAZoGhcYJRSS76aRe0+cCMWauA9vTNerY7tmcF/mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTfAZ5CasxokPq78X0yJMIcoI5AMB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApewzQqGv sepQE0qC5qkABIyn9C3zXS4pYwYnHhHd5gh89AHG+Skh39wfkFVTyHctAdgM9r/T Odp6/EvXXTLlpEt28sCU+FLNifzrK36DcM099Co27OZtV4K6VzndrtNXp+13Xg0H LdC5DgqOS+ThnP1jvIyhqiXpGlFDZ2QELLXjzcHLvy+B8C1FwkgnNIZ27GszYR13 cJ40Si8F7eYFleiSieHj+liROes2FsJad2/VCveptZ5VHMxGA9ZJyrBrr+QAQ3CR tFsKdaYBBo1QOWm8HzNeLgGtyP2ahi/CVOjNQc4EnViHB4ebLxzTBhMKR6B2R3UI QxDkCb91jvkOqQ== -----END CERTIFICATE-----Generated at Thu Feb 26 17:11:32 2026 by rpki-client