$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: ev1/SZ/TqYhcFtwY2W/ruClXWsOZ9jWbIXm4wFeGYKA= Subject key identifier: 88:2B:16:68:C0:CB:5B:74:80:82:84:8B:6D:8A:87:F9:36:FB:0F:78 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019EB7A1365DEFCA520E1B160862ABE403E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 1001 Signing time: Thu 11 Jun 2026 17:00:56 +0000 Manifest this update: Thu 11 Jun 2026 17:00:56 +0000 Manifest next update: Fri 12 Jun 2026 17:00:56 +0000 Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=) 2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=) 3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=) 4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: Fyno7Ygyf69N3OWlug2zpEAY/OxObecij1idxspR6zk=) 6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=) 7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=) 8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=) 9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=) 10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=) 11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=) 12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:a1:36:5d:ef:ca:52:0e:1b:16:08:62:ab:e4:03:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Jun 11 17:00:56 2026 GMT Not After : Jun 12 17:00:56 2026 GMT Subject: CN=882b1668c0cb5b748082848b6d8a87f936fb0f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ed:10:a2:ef:1f:55:6b:5d:d9:2c:97:00:54: 7a:34:4b:75:62:0d:56:a9:17:5a:8c:c3:14:9d:60: cb:87:2f:14:0a:1c:b3:63:7d:f0:72:7c:f8:af:c1: 48:29:c5:ae:23:41:ea:7b:cc:6e:c2:7f:76:fa:7f: 27:66:aa:68:4e:0e:19:6c:23:19:6a:5a:ae:cc:40: f4:ed:d3:57:15:fe:8a:8f:43:40:de:5e:67:e2:83: a1:70:2c:7f:74:a5:78:e8:74:3a:6e:62:f9:34:a0: f8:7b:a4:33:65:b5:59:8b:12:bf:e2:f8:27:8a:b3: f6:99:30:22:12:bf:aa:a8:b3:72:7f:68:ba:4f:3e: 2d:a9:52:e9:11:b9:0a:34:fb:ad:7d:07:66:f7:5d: 93:3e:7f:f8:e5:55:72:2c:17:db:89:6d:9e:54:c4: 33:f9:dc:c3:2e:bb:6a:d7:8b:de:1f:99:db:e9:b6: 30:10:1d:a6:e2:c5:39:43:97:3b:94:dd:12:46:2f: 1e:78:e7:d7:42:6c:7a:71:0d:cf:63:b2:3e:c7:04: 36:3f:f5:dc:88:84:d0:45:bc:73:62:d0:a4:45:a3: 70:f5:56:47:eb:4c:b7:38:b2:2f:16:65:1e:d4:ea: 05:64:89:3f:30:61:74:44:dc:aa:50:c5:b2:df:2b: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2B:16:68:C0:CB:5B:74:80:82:84:8B:6D:8A:87:F9:36:FB:0F:78 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:cb:b3:e3:27:c4:44:30:28:73:6a:f0:24:3b:ca:3b:01:0a: 9c:c7:0c:0e:32:17:5d:a3:50:db:19:5b:17:87:21:57:b0:2d: 56:7b:57:f1:3e:13:84:9b:20:5b:8f:6c:3b:10:0d:e0:20:10: 64:ce:cd:35:44:72:cd:de:aa:83:6c:67:e0:35:8d:dd:0f:00: 4e:a6:32:69:29:37:ed:16:30:7f:a5:34:27:7e:76:38:35:2e: 3b:f4:6e:32:40:96:54:ae:40:99:99:74:b9:57:e7:d0:2f:76: 3e:09:5f:52:c5:f7:29:e1:b9:1c:b6:26:4d:d1:be:ab:04:4c: 83:2f:5f:ed:fd:15:9b:0f:b6:b2:e7:7c:5f:c9:58:42:25:3f: e3:62:8a:b5:a8:12:02:b3:e8:90:af:a0:22:a7:aa:a3:36:b3: d4:e6:6b:1f:81:e0:3d:8e:22:d9:ac:57:ee:1a:64:ba:04:28: df:6c:30:df:e4:d5:a2:a2:60:d2:f0:eb:63:74:13:86:f9:a3: 69:75:74:28:4c:b1:17:04:2a:eb:28:16:f8:fb:cc:f7:35:c6: 53:bd:bd:48:ed:57:26:24:20:c4:c3:6a:e6:f9:28:03:28:ce: 0d:68:ef:ea:a8:49:ac:b7:ef:b1:7d:bc:fc:fa:f0:2b:72:dd: a6:5b:12:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ63oTZd78pSDhsWCGKr5APmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwNjExMTcwMDU2WhcNMjYwNjEyMTcwMDU2WjAzMTEwLwYDVQQD Eyg4ODJiMTY2OGMwY2I1Yjc0ODA4Mjg0OGI2ZDhhODdmOTM2ZmIwZjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+0Qou8fVWtd2SyXAFR6NEt1Yg1W qRdajMMUnWDLhy8UChyzY33wcnz4r8FIKcWuI0Hqe8xuwn92+n8nZqpoTg4ZbCMZ alquzED07dNXFf6Kj0NA3l5n4oOhcCx/dKV46HQ6bmL5NKD4e6QzZbVZixK/4vgn irP2mTAiEr+qqLNyf2i6Tz4tqVLpEbkKNPutfQdm912TPn/45VVyLBfbiW2eVMQz +dzDLrtq14veH5nb6bYwEB2m4sU5Q5c7lN0SRi8eeOfXQmx6cQ3PY7I+xwQ2P/Xc iITQRbxzYtCkRaNw9VZH60y3OLIvFmUe1OoFZIk/MGF0RNyqUMWy3ysJ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgrFmjAy1t0gIKEi22Kh/k2+w94MB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMuz4yfE RDAoc2rwJDvKOwEKnMcMDjIXXaNQ2xlbF4chV7AtVntX8T4ThJsgW49sOxAN4CAQ ZM7NNURyzd6qg2xn4DWN3Q8ATqYyaSk37RYwf6U0J352ODUuO/RuMkCWVK5AmZl0 uVfn0C92PglfUsX3KeG5HLYmTdG+qwRMgy9f7f0Vmw+2sud8X8lYQiU/42KKtagS ArPokK+gIqeqozaz1OZrH4HgPY4i2axX7hpkugQo32ww3+TVoqJg0vDrY3QThvmj aXV0KEyxFwQq6ygW+PvM9zXGU729SO1XJiQgxMNq5vkoAyjODWjv6qhJrLfvsX28 /PrwK3LdplsStQ== -----END CERTIFICATE-----Generated at Thu Jun 11 23:53:21 2026 by rpki-client