$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: RxlXPfGS6LbqK0ogcPNoYHYZ4qXXbV9L9Z0jtCa8pZk= Subject key identifier: E3:5D:BB:64:42:B1:E7:19:42:6B:68:87:B1:8C:65:05:C7:38:FE:8F Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 019D826CE0DD08D022D6B6FB593E241F9B21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: A3 Signing time: Sun 12 Apr 2026 16:01:06 +0000 Manifest this update: Sun 12 Apr 2026 16:01:06 +0000 Manifest next update: Mon 13 Apr 2026 16:01:06 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: lWY6ROD2r7Gw8tL3thGVNnOk1xeLtfhZkXg6AGsSelE=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Apr 2026 16:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:82:6c:e0:dd:08:d0:22:d6:b6:fb:59:3e:24:1f:9b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: Apr 12 16:01:06 2026 GMT Not After : Apr 13 16:01:06 2026 GMT Subject: CN=e35dbb6442b1e719426b6887b18c6505c738fe8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:45:a0:fe:58:33:37:77:e6:48:9e:fd:ef:5a: 0b:78:e9:62:6d:cf:0f:24:4d:41:25:ca:7e:0e:38: d9:b5:c2:06:53:6d:a7:df:3c:c1:51:a7:e5:f2:ce: a5:42:62:22:0d:18:e9:6d:17:14:ad:36:e1:2d:fc: 83:e9:dd:4c:3f:b8:a4:8d:3c:8e:b6:4a:f7:41:35: 20:a4:75:24:78:2d:18:ac:66:fd:e9:04:53:a5:82: c1:99:9b:b8:d6:f5:32:92:45:66:a9:d6:f5:8e:84: 47:c6:d1:5b:c4:3a:83:1e:85:0e:f9:9b:6b:37:03: b3:45:61:09:f6:45:49:0f:3b:53:ff:ff:d6:09:89: 76:a2:30:fd:06:87:90:4d:16:26:d9:59:e0:41:fc: 0a:7c:1d:f2:3c:82:8e:3c:ba:a0:1c:21:97:50:ed: 78:57:8a:c7:34:5a:f4:4b:3f:a9:57:24:b2:ef:39: ba:7e:86:e6:27:5a:0f:13:fc:82:a1:f8:11:3e:89: ab:ab:9b:42:c3:9e:2e:3b:1a:f5:d5:77:49:52:9d: 9f:77:21:f9:3a:ea:8a:43:89:65:f0:46:ee:0c:3d: 8a:80:f9:b0:11:41:17:49:99:50:29:05:59:2d:97: 4c:e6:59:0a:20:79:69:de:10:7c:3c:7b:48:ff:16: ca:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5D:BB:64:42:B1:E7:19:42:6B:68:87:B1:8C:65:05:C7:38:FE:8F X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:11:7c:82:46:2a:86:f5:16:3b:1b:79:19:9b:d9:90:d0:d4: e4:0f:06:8c:de:4c:d4:38:0d:ae:40:d7:42:95:38:ae:94:f1: 95:b3:b8:ab:29:7a:43:46:0d:6e:78:06:fe:af:09:4c:29:e4: 51:83:9b:95:24:ac:ab:8b:e2:03:5e:2a:34:07:ae:19:5a:3a: 43:45:39:69:62:6d:7e:dc:f0:69:7b:20:ad:d8:71:3e:35:ab: 8c:9e:56:0f:53:0a:35:c2:ef:c1:fc:65:ec:09:45:ad:e0:d2: 5f:36:b0:72:6a:de:ab:80:b8:48:c6:30:94:b5:1a:c1:c7:b6: a6:8a:c6:40:a5:eb:ad:e6:a1:ec:96:21:70:23:ac:fb:66:57: 63:6d:62:14:02:1f:33:1b:8e:1b:6e:b5:44:2f:93:35:12:cb: f5:ce:59:01:ab:04:85:f2:b4:9b:64:e8:02:95:96:7f:d4:02: c1:6f:df:58:d4:3c:6e:43:8d:72:16:da:18:92:d9:50:c6:92: 32:ac:58:42:12:22:3e:5b:e2:73:c2:ee:1f:ad:c2:27:79:a8: 5b:8d:b3:52:54:3e:51:98:da:ea:15:61:ad:2c:19:c6:25:05: 50:9c:0c:7a:78:14:63:d5:ac:1a:1c:3c:70:1c:9f:c4:f7:e0: 88:d5:d3:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2CbODdCNAi1rb7WT4kH5shMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYwNDEyMTYwMTA2WhcNMjYwNDEzMTYwMTA2WjAzMTEwLwYDVQQD EyhlMzVkYmI2NDQyYjFlNzE5NDI2YjY4ODdiMThjNjUwNWM3MzhmZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUWg/lgzN3fmSJ7971oLeOlibc8P JE1BJcp+DjjZtcIGU22n3zzBUafl8s6lQmIiDRjpbRcUrTbhLfyD6d1MP7ikjTyO tkr3QTUgpHUkeC0YrGb96QRTpYLBmZu41vUykkVmqdb1joRHxtFbxDqDHoUO+Ztr NwOzRWEJ9kVJDztT///WCYl2ojD9BoeQTRYm2VngQfwKfB3yPIKOPLqgHCGXUO14 V4rHNFr0Sz+pVySy7zm6fobmJ1oPE/yCofgRPomrq5tCw54uOxr11XdJUp2fdyH5 OuqKQ4ll8EbuDD2KgPmwEUEXSZlQKQVZLZdM5lkKIHlp3hB8PHtI/xbKmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONdu2RCsecZQmtoh7GMZQXHOP6PMB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxF8gkYq hvUWOxt5GZvZkNDU5A8GjN5M1DgNrkDXQpU4rpTxlbO4qyl6Q0YNbngG/q8JTCnk UYOblSSsq4viA14qNAeuGVo6Q0U5aWJtftzwaXsgrdhxPjWrjJ5WD1MKNcLvwfxl 7AlFreDSXzawcmreq4C4SMYwlLUawce2porGQKXrreah7JYhcCOs+2ZXY21iFAIf MxuOG261RC+TNRLL9c5ZAasEhfK0m2ToApWWf9QCwW/fWNQ8bkONchbaGJLZUMaS MqxYQhIiPlvic8LuH63CJ3moW42zUlQ+UZja6hVhrSwZxiUFUJwMengUY9WsGhw8 cByfxPfgiNXT6w== -----END CERTIFICATE-----Generated at Mon Apr 13 02:34:25 2026 by rpki-client