$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft File: QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft (raw, json) Hash identifier: SKB4bU7lKKNAx+1S+nPbCWgodUnrK27IuhoCSwRuRWE= Subject key identifier: 26:4C:37:8B:83:40:E9:10:69:2D:A3:1E:9B:19:7D:B4:B5:F8:5C:54 Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01 Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601 Certificate serial: 019FA1BB5D9D02062935F815F2D28E6C9956 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft Manifest number: 99 Signing time: Mon 27 Jul 2026 04:00:38 +0000 Manifest this update: Mon 27 Jul 2026 04:00:38 +0000 Manifest next update: Tue 28 Jul 2026 04:00:38 +0000 Files and hashes: 1: 6dRsLJ5J69_rsQXIRHXOC2z_5dE.roa (hash: 0D/9pUz1X/JKKYGr6Ne59g8RhrUlGqsuwmmjDLCy+xw=) 2: 6vCqSCljarDUm6oxxIQ3pb1kZFw.roa (hash: FMFFPXye46qkgvJliwSmSLxawUDf9GZDVDx3/Z/BmJg=) 3: 9yQGkkXLY2SjMk3ofHN9n9AOjAw.roa (hash: 6v5FooBFPlNcj3CIoSY6V5TUldi3HdcfQsKbbuK5ckw=) 4: PJ_jioxmLxcDnha-FB_7Vus0t90.roa (hash: usfBZ7XbPR3qgBCcWBidJH7g+h7DoTle8N8w4lI8oi8=) 5: PVCcQmI2SgCfbrBKYY0xG8ceVoM.roa (hash: pkuMcdQl6fAIHotWZ6+CDU0TIlFjqMVbIxB1y/FPDPk=) 6: PVPkXW-s-jRmPlVGBaUVIsKOF5M.roa (hash: YMSqCki8PAsGL8v2zaQBdhS5uv2kQngLOsZbCHSosMQ=) 7: QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl (hash: hPKogruaNnKGx9RiNMvvg/ZP9YU01/tc4sasOPPWKak=) 8: ZI1C6kpl1fygAOupoQLDpI2qIHk.roa (hash: 2rDkKTdgpnSAscOgBKZLbFYT0EC5MtpFd3ePaAsy4fA=) 9: dx088tz4yp8SQ2tSYQowVH2RQCE.roa (hash: 8IVXNftvm3WNRoR3lMTcXpcMyufwOCjbFzelGNZJm5I=) 10: huGtq-TwlrsWgMkwCnYXBiUSweg.roa (hash: 5p3EHDIXaD9vA9oM+gSTGnbNogqLtbPEKfIBy7VfLCg=) 11: mXzkFe9bauTYIaTDwOKdOJ0yfAU.roa (hash: l98XRtS1wgtlcBD6oEDM0WuwXV7XXU7PGiNFDVtdljc=) 12: pjUS_mOdAQkT8Mwp33PthGs91rk.roa (hash: 6c7v04wHaxp7RBDGOaNgM78OexORbvTnr1auoKcKJB8=) 13: rf6iE9bL_Jc3yUEk2yU5-ovRnRw.roa (hash: 91pPyyuYw+iWn/WwlKICOrKpos1He+0f6hjKAqBSgW8=) 14: sCEAxknZqHojuPgI-hamnESni0Q.roa (hash: +6bM4LTd2rktWJg2HPrxf5zyLZEKCJSlzH9OXq9Pipc=) 15: vj-CnS2eD-mKhxj15kU5Iw7O-m0.roa (hash: 9Zrvlk93HfFFexDP9WgjOb/FIItY1zvP6jk5M74kDcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:bb:5d:9d:02:06:29:35:f8:15:f2:d2:8e:6c:99:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42239fb9af128428f84fed9f358686717ed97601 Validity Not Before: Jul 27 04:00:38 2026 GMT Not After : Jul 28 04:00:38 2026 GMT Subject: CN=264c378b8340e910692da31e9b197db4b5f85c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:06:64:a8:61:c9:54:39:9d:fe:af:90:49:b7: 5d:d9:b8:d6:33:77:b2:00:b0:aa:98:74:bb:c8:a5: a6:fb:87:89:09:84:e6:09:a0:f8:bd:eb:a1:6d:e5: 96:d4:d4:b3:2d:28:8b:31:e1:e2:12:00:d6:72:0a: 27:d5:dc:2b:14:d2:ad:52:06:e9:c9:22:1c:21:30: bf:fc:35:94:98:ee:1b:41:1e:92:a7:cb:6b:d2:3b: 37:a9:88:ef:8c:7d:96:1a:80:ca:07:30:55:bf:e8: 53:6c:11:5c:48:2f:92:ff:9f:ad:9b:12:21:30:1d: c6:ef:a8:41:f4:22:dc:93:c1:e0:e5:75:69:de:6a: 8e:83:7d:23:74:22:c7:1a:8f:5e:22:23:10:12:a8: e2:97:00:fd:cd:bb:f3:d9:17:db:19:e4:53:84:89: 76:84:16:2a:a1:64:b3:8f:bb:4b:36:06:5b:bd:ed: 2c:21:80:73:c5:c0:17:61:f8:a0:cf:38:1c:39:24: 87:cf:ec:70:94:63:50:36:b2:2c:27:4c:83:f4:3c: c1:b6:50:99:52:22:59:fe:22:de:44:c3:18:e2:86: 0a:06:8b:bf:68:02:d6:aa:14:0d:0b:af:e6:aa:6e: 30:7f:39:d9:b2:e8:0a:b6:83:2e:7e:e9:71:78:df: 6b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4C:37:8B:83:40:E9:10:69:2D:A3:1E:9B:19:7D:B4:B5:F8:5C:54 X509v3 Authority Key Identifier: keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:1d:90:e8:ef:68:d8:90:e1:63:28:71:25:0d:f1:c3:3b:0d: 75:59:21:94:46:49:40:25:e4:62:ea:2a:ff:ed:e1:67:57:b7: a1:aa:69:6a:7c:f6:57:1a:9a:29:2d:7a:2e:4e:a7:17:83:2f: 06:f5:3b:b4:6c:5b:e4:ea:78:e5:12:b0:24:c1:c5:fd:d4:35: d0:c7:d1:b1:6a:88:06:0b:1a:f4:fb:30:48:57:8a:c8:db:c5: bf:4b:de:06:cd:ab:a6:1a:c1:ee:b0:dd:b0:cf:f4:1d:e2:ed: ba:28:41:74:80:d6:ba:c3:65:bd:cc:81:0c:d1:66:e9:46:60: 49:ef:9d:4b:d1:1f:ba:0c:87:0d:13:c4:fd:ff:75:15:3f:54: df:04:51:f3:2c:14:f6:6b:5c:b9:e4:e5:76:7d:b0:43:1a:01: 18:dc:84:4d:7e:bd:0a:dd:90:a1:bd:76:15:6a:50:0b:de:4a: ae:11:19:90:dc:6e:23:d6:9e:6b:2e:75:8f:b6:5f:81:50:3b: f9:fc:0f:be:57:bc:71:42:dd:c0:0a:83:13:83:53:a7:40:21: fb:06:2c:3f:28:c8:b3:65:76:54:9e:50:8a:28:4b:a4:e2:6b: 4c:55:9f:1b:00:96:d2:cb:ab:d2:29:87:a7:82:b2:4b:df:18: 7a:43:e8:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hu12dAgYpNfgV8tKObJlWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk OTc2MDEwHhcNMjYwNzI3MDQwMDM4WhcNMjYwNzI4MDQwMDM4WjAzMTEwLwYDVQQD EygyNjRjMzc4YjgzNDBlOTEwNjkyZGEzMWU5YjE5N2RiNGI1Zjg1YzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wZkqGHJVDmd/q+QSbdd2bjWM3ey ALCqmHS7yKWm+4eJCYTmCaD4veuhbeWW1NSzLSiLMeHiEgDWcgon1dwrFNKtUgbp ySIcITC//DWUmO4bQR6Sp8tr0js3qYjvjH2WGoDKBzBVv+hTbBFcSC+S/5+tmxIh MB3G76hB9CLck8Hg5XVp3mqOg30jdCLHGo9eIiMQEqjilwD9zbvz2RfbGeRThIl2 hBYqoWSzj7tLNgZbve0sIYBzxcAXYfigzzgcOSSHz+xwlGNQNrIsJ0yD9DzBtlCZ UiJZ/iLeRMMY4oYKBou/aALWqhQNC6/mqm4wfznZsugKtoMufulxeN9rowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZMN4uDQOkQaS2jHpsZfbS1+FxUMB8GA1UdIwQY MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt YmM1NDAzYWMyYTk1LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1 LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIB2Q6O9o 2JDhYyhxJQ3xwzsNdVkhlEZJQCXkYuoq/+3hZ1e3oappanz2VxqaKS16Lk6nF4Mv BvU7tGxb5Op45RKwJMHF/dQ10MfRsWqIBgsa9PswSFeKyNvFv0veBs2rphrB7rDd sM/0HeLtuihBdIDWusNlvcyBDNFm6UZgSe+dS9EfugyHDRPE/f91FT9U3wRR8ywU 9mtcueTldn2wQxoBGNyETX69Ct2Qob12FWpQC95KrhEZkNxuI9aeay51j7ZfgVA7 +fwPvle8cULdwAqDE4NTp0Ah+wYsPyjIs2V2VJ5QiihLpOJrTFWfGwCW0sur0imH p4KyS98YekPomw== -----END CERTIFICATE-----Generated at Mon Jul 27 11:34:28 2026 by rpki-client