$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: 6BHGl9dE8bId2+Bn0s9ik3Jviq8ezbJ52m/s3PECg4c= Subject key identifier: 11:AD:13:71:02:E4:3F:EF:96:74:CE:F6:AC:19:40:EF:7C:60:B4:D7 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 01A08AFA1FB33E3DDBE5C32885D02EBA20FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 10F3 Signing time: Thu 10 Sep 2026 11:00:42 +0000 Manifest this update: Thu 10 Sep 2026 11:00:42 +0000 Manifest next update: Fri 11 Sep 2026 11:00:42 +0000 Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=) 2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=) 3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=) 4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: oqn+a7PYr/kwOSHuEx0rC6egCMcyv7Cv6QheQVzKEok=) 6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=) 7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=) 8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=) 9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=) 10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=) 11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=) 12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:fa:1f:b3:3e:3d:db:e5:c3:28:85:d0:2e:ba:20:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Sep 10 11:00:42 2026 GMT Not After : Sep 11 11:00:42 2026 GMT Subject: CN=11ad137102e43fef9674cef6ac1940ef7c60b4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:71:a4:cb:0c:5c:4d:e2:9f:71:18:59:9a: 87:3f:92:12:cf:b5:01:11:9b:c6:5f:89:bb:79:5f: 92:8a:28:cd:e4:f8:bb:90:51:a9:fd:38:39:be:6f: ac:a0:1f:69:5d:c6:48:3c:12:cd:5e:5d:89:8f:d9: 27:80:39:b5:16:89:a2:75:13:37:36:ef:7b:8d:a9: cf:98:52:06:24:f2:9e:dc:f1:95:93:62:82:a2:a4: 9c:ef:2c:ac:be:71:94:02:5e:0d:08:9b:9c:d2:e6: dc:45:79:ad:75:7f:92:8e:d6:ff:95:7d:62:2f:e6: aa:de:48:a0:a9:93:6b:55:66:fd:17:af:5c:7b:c5: 99:31:db:b3:07:91:34:33:48:a1:28:24:d7:34:96: 54:11:06:b9:ce:b3:5f:b2:c0:f3:f7:bb:b1:72:50: 15:7f:ef:4a:b4:da:f5:40:46:9f:4d:86:43:d6:95: 4c:7a:ad:18:9a:85:33:5b:bd:6b:df:cb:43:6f:47: 76:50:dd:7b:92:e5:cd:1f:00:05:ea:f2:df:0a:7d: d0:72:56:f2:b7:d5:db:3f:59:50:b5:85:9d:98:6d: fe:2b:c6:de:50:eb:cb:12:38:20:a3:50:f2:38:ed: f4:6a:98:0c:fd:d3:ff:c0:39:ab:d0:a2:49:80:fa: f4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AD:13:71:02:E4:3F:EF:96:74:CE:F6:AC:19:40:EF:7C:60:B4:D7 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:cd:da:0c:bb:6e:a8:ba:31:b3:c3:35:72:23:3b:65:6b:37: 72:82:98:a3:7a:5a:44:71:11:44:e2:d5:d0:ab:30:b5:79:16: e0:b0:02:3f:97:39:43:04:69:ae:b4:08:80:51:16:0b:4d:7f: 83:48:b3:d8:26:d5:83:1e:9b:37:03:fb:9c:ac:0a:b0:9e:68: f9:e8:28:ba:d8:db:43:14:29:98:d6:8d:2f:c5:96:bd:94:d2: 58:2a:16:3b:5b:77:bc:8a:85:ab:dc:e4:a7:e0:1b:d3:6b:2a: 39:20:ee:b9:8c:4d:1d:17:b1:88:45:2c:4f:9b:29:89:80:25: a6:3b:01:15:02:09:5b:fb:37:73:7c:18:db:1a:d6:3e:56:3f: 1d:b5:c1:58:fd:14:08:49:d2:31:10:44:0b:fb:5e:f5:99:65: 8c:96:de:ca:e2:23:49:46:ae:3d:08:78:b5:81:82:a7:cb:26: 2f:65:6c:47:68:9a:73:87:03:19:32:41:b5:92:9e:ab:57:b0: 4e:93:80:57:82:ff:d9:f0:57:a9:08:0e:c4:f5:3b:fd:59:a3: c7:0d:f6:95:5b:e7:59:3e:bd:ac:27:06:e5:03:72:ef:3f:32: 90:68:d2:1e:d4:87:85:27:99:c7:72:73:b3:ec:0d:75:b2:fc: b6:4d:04:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCK+h+zPj3b5cMohdAuuiD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwOTEwMTEwMDQyWhcNMjYwOTExMTEwMDQyWjAzMTEwLwYDVQQD EygxMWFkMTM3MTAyZTQzZmVmOTY3NGNlZjZhYzE5NDBlZjdjNjBiNGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw5xpMsMXE3in3EYWZqHP5ISz7UB EZvGX4m7eV+SiijN5Pi7kFGp/Tg5vm+soB9pXcZIPBLNXl2Jj9kngDm1FomidRM3 Nu97janPmFIGJPKe3PGVk2KCoqSc7yysvnGUAl4NCJuc0ubcRXmtdX+Sjtb/lX1i L+aq3kigqZNrVWb9F69ce8WZMduzB5E0M0ihKCTXNJZUEQa5zrNfssDz97uxclAV f+9KtNr1QEafTYZD1pVMeq0YmoUzW71r38tDb0d2UN17kuXNHwAF6vLfCn3Qclby t9XbP1lQtYWdmG3+K8beUOvLEjggo1DyOO30apgM/dP/wDmr0KJJgPr0eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGtE3EC5D/vlnTO9qwZQO98YLTXMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ83aDLtu qLoxs8M1ciM7ZWs3coKYo3paRHERROLV0KswtXkW4LACP5c5QwRprrQIgFEWC01/ g0iz2CbVgx6bNwP7nKwKsJ5o+egoutjbQxQpmNaNL8WWvZTSWCoWO1t3vIqFq9zk p+Ab02sqOSDuuYxNHRexiEUsT5spiYAlpjsBFQIJW/s3c3wY2xrWPlY/HbXBWP0U CEnSMRBEC/te9ZlljJbeyuIjSUauPQh4tYGCp8smL2VsR2iac4cDGTJBtZKeq1ew TpOAV4L/2fBXqQgOxPU7/Vmjxw32lVvnWT69rCcG5QNy7z8ykGjSHtSHhSeZx3Jz s+wNdbL8tk0ESA== -----END CERTIFICATE-----Generated at Thu Sep 10 14:49:51 2026 by rpki-client