$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft File: QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft (raw, json) Hash identifier: VRaQlDmzrNt8S3gbWExW55pPDmf6G0oQ9hmzHOwVSIc= Subject key identifier: B0:BD:A7:10:6D:B1:30:A6:56:CE:B0:C9:DB:4D:C0:07:8E:CD:D9:6C Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01 Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601 Certificate serial: 01A08D1FE363D0F1237E2B9CC96A88150F5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft Manifest number: 0118 Signing time: Thu 10 Sep 2026 21:01:12 +0000 Manifest this update: Thu 10 Sep 2026 21:01:12 +0000 Manifest next update: Fri 11 Sep 2026 21:01:12 +0000 Files and hashes: 1: 6dRsLJ5J69_rsQXIRHXOC2z_5dE.roa (hash: 0D/9pUz1X/JKKYGr6Ne59g8RhrUlGqsuwmmjDLCy+xw=) 2: 6vCqSCljarDUm6oxxIQ3pb1kZFw.roa (hash: FMFFPXye46qkgvJliwSmSLxawUDf9GZDVDx3/Z/BmJg=) 3: 9yQGkkXLY2SjMk3ofHN9n9AOjAw.roa (hash: 6v5FooBFPlNcj3CIoSY6V5TUldi3HdcfQsKbbuK5ckw=) 4: Ae9NgFUrZ24-MFo9mbb0PNVhf0o.roa (hash: nzXxYj43d9I7O16caiUA6up/fb49HJG+wWUtle/NK7s=) 5: C8GLItBTc7LeEh4YEv8MJPqqn-A.roa (hash: l23szhZCC7lohODost6cu88YHLhEqP3V82zlkvFSQlM=) 6: PJ_jioxmLxcDnha-FB_7Vus0t90.roa (hash: usfBZ7XbPR3qgBCcWBidJH7g+h7DoTle8N8w4lI8oi8=) 7: PVCcQmI2SgCfbrBKYY0xG8ceVoM.roa (hash: pkuMcdQl6fAIHotWZ6+CDU0TIlFjqMVbIxB1y/FPDPk=) 8: QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl (hash: KwCoGDlFFISP6X8XsM/XJ0tsJiT6srHuptLBMotEgBM=) 9: ZI1C6kpl1fygAOupoQLDpI2qIHk.roa (hash: 2rDkKTdgpnSAscOgBKZLbFYT0EC5MtpFd3ePaAsy4fA=) 10: dx088tz4yp8SQ2tSYQowVH2RQCE.roa (hash: 8IVXNftvm3WNRoR3lMTcXpcMyufwOCjbFzelGNZJm5I=) 11: hLjzhC6zlW-8JNijhQDWdHUx0bs.roa (hash: 2UJC5xVp6d8lEhQO2ClkfoFryaKXGhRJ5WI4vM07GO8=) 12: huGtq-TwlrsWgMkwCnYXBiUSweg.roa (hash: 5p3EHDIXaD9vA9oM+gSTGnbNogqLtbPEKfIBy7VfLCg=) 13: kcePCKzvaynPMcOcncgWdRTciAw.roa (hash: VoyMtWcSClIGZJ+3GqazzBfLJsmwXioFS3B12uTWD1k=) 14: mXzkFe9bauTYIaTDwOKdOJ0yfAU.roa (hash: l98XRtS1wgtlcBD6oEDM0WuwXV7XXU7PGiNFDVtdljc=) 15: pjUS_mOdAQkT8Mwp33PthGs91rk.roa (hash: 6c7v04wHaxp7RBDGOaNgM78OexORbvTnr1auoKcKJB8=) 16: rf6iE9bL_Jc3yUEk2yU5-ovRnRw.roa (hash: 91pPyyuYw+iWn/WwlKICOrKpos1He+0f6hjKAqBSgW8=) 17: sCEAxknZqHojuPgI-hamnESni0Q.roa (hash: +6bM4LTd2rktWJg2HPrxf5zyLZEKCJSlzH9OXq9Pipc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8d:1f:e3:63:d0:f1:23:7e:2b:9c:c9:6a:88:15:0f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42239fb9af128428f84fed9f358686717ed97601 Validity Not Before: Sep 10 21:01:12 2026 GMT Not After : Sep 11 21:01:12 2026 GMT Subject: CN=b0bda7106db130a656ceb0c9db4dc0078ecdd96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:4e:e8:ac:2f:34:7b:78:88:a6:ef:84:e2: d0:27:fb:49:98:3a:75:80:44:2d:1c:ae:88:8c:eb: dd:fb:c8:79:be:e0:1c:1a:8b:f1:3b:88:0f:83:95: 1e:a4:db:35:d5:91:f1:18:ed:fa:4c:69:2c:48:38: 40:58:a7:e9:b2:e1:62:6f:a9:3f:9c:b2:0d:af:37: 6c:91:01:33:e0:fc:4b:01:b0:65:65:57:eb:31:ed: c1:48:4f:71:d4:e8:82:18:c6:d6:7e:96:e6:16:06: 6b:28:36:c7:3c:ec:e6:81:29:3b:dd:d2:9d:a8:0d: c5:3c:69:59:47:0c:9d:05:bf:77:57:eb:8f:55:c4: 03:e3:64:04:6c:1e:9f:4d:00:ff:30:55:83:38:f9: 83:3c:8b:99:e5:33:a9:b6:ab:a9:88:d8:e2:a6:77: 03:4c:58:cd:b9:d4:97:29:4c:15:28:d8:f9:6c:9a: f6:a8:51:34:be:1f:33:ad:2e:c4:2a:82:23:07:65: d7:20:25:7b:9d:35:27:99:ab:63:c6:fa:53:1d:a6: 2b:7f:6e:fa:ff:8a:c4:b4:f9:af:b9:2e:d8:f3:7d: d9:82:eb:39:6b:33:95:56:80:d8:0e:88:d7:de:dd: da:de:a8:67:4e:10:6a:af:93:f3:43:0c:d0:b2:d8: 4d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BD:A7:10:6D:B1:30:A6:56:CE:B0:C9:DB:4D:C0:07:8E:CD:D9:6C X509v3 Authority Key Identifier: keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:69:eb:6f:84:e2:f6:65:96:96:39:4e:76:aa:d4:82:4a:88: be:34:85:e7:70:fa:19:ac:a8:47:6c:83:81:bc:07:a4:c6:8a: 88:80:c5:25:c2:63:7b:cb:dc:36:67:f6:85:dd:33:7d:72:89: bf:c0:47:c7:1c:71:36:6f:41:56:c2:ab:3d:41:e1:01:fb:da: be:04:f2:b4:25:76:62:99:63:8f:da:62:ab:f2:16:cc:b0:74: a9:51:4a:64:08:85:7a:6e:02:e2:75:66:c0:38:39:76:ff:bd: ed:d4:ed:fc:6e:a2:79:69:b3:c6:4b:67:7c:8b:9f:25:da:91: b0:32:e4:3c:c6:cb:2d:0a:7b:7f:09:ba:4f:3e:2a:0d:43:6c: 69:1a:85:61:fc:fd:70:fa:bc:35:92:d4:14:3f:26:84:4d:3c: 01:e1:29:1d:51:f3:d4:91:de:49:52:f5:50:62:28:57:5b:b4: 30:28:6e:38:e5:94:2a:81:f5:ed:8d:a8:c1:3a:58:55:e7:4f: bb:6f:b2:05:23:ee:7b:46:12:5d:f1:13:cc:78:aa:d2:9c:12: f4:3f:19:c3:42:c4:5e:cd:d9:d4:d3:e7:ec:e3:cf:40:4e:16: ed:6b:67:ad:1f:02:62:f5:86:bc:e3:b9:8d:d7:26:d9:02:1e: cb:8f:98:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCNH+Nj0PEjfiucyWqIFQ9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk OTc2MDEwHhcNMjYwOTEwMjEwMTEyWhcNMjYwOTExMjEwMTEyWjAzMTEwLwYDVQQD EyhiMGJkYTcxMDZkYjEzMGE2NTZjZWIwYzlkYjRkYzAwNzhlY2RkOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob1O6KwvNHt4iKbvhOLQJ/tJmDp1 gEQtHK6IjOvd+8h5vuAcGovxO4gPg5UepNs11ZHxGO36TGksSDhAWKfpsuFib6k/ nLINrzdskQEz4PxLAbBlZVfrMe3BSE9x1OiCGMbWfpbmFgZrKDbHPOzmgSk73dKd qA3FPGlZRwydBb93V+uPVcQD42QEbB6fTQD/MFWDOPmDPIuZ5TOptqupiNjipncD TFjNudSXKUwVKNj5bJr2qFE0vh8zrS7EKoIjB2XXICV7nTUnmatjxvpTHaYrf276 /4rEtPmvuS7Y833Zgus5azOVVoDYDojX3t3a3qhnThBqr5PzQwzQsthNgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLC9pxBtsTCmVs6wydtNwAeOzdlsMB8GA1UdIwQY MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt YmM1NDAzYWMyYTk1LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1 LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWnrb4Ti 9mWWljlOdqrUgkqIvjSF53D6GayoR2yDgbwHpMaKiIDFJcJje8vcNmf2hd0zfXKJ v8BHxxxxNm9BVsKrPUHhAfvavgTytCV2Ypljj9piq/IWzLB0qVFKZAiFem4C4nVm wDg5dv+97dTt/G6ieWmzxktnfIufJdqRsDLkPMbLLQp7fwm6Tz4qDUNsaRqFYfz9 cPq8NZLUFD8mhE08AeEpHVHz1JHeSVL1UGIoV1u0MChuOOWUKoH17Y2owTpYVedP u2+yBSPue0YSXfETzHiq0pwS9D8Zw0LEXs3Z1NPn7OPPQE4W7WtnrR8CYvWGvOO5 jdcm2QIey4+YFg== -----END CERTIFICATE-----Generated at Thu Sep 10 23:12:18 2026 by rpki-client