$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: n69MTb+rRQDvq8SwSjMWlO/V1NAhIdjhqr7hMe0VaqQ= Subject key identifier: AC:69:54:7E:7F:1E:CE:83:F6:C8:3A:05:6B:C4:B1:78:9B:B2:FC:71 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019DCDF5690F6600A58B4F5E0E75AF8DAC33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0F88 Signing time: Mon 27 Apr 2026 08:01:45 +0000 Manifest this update: Mon 27 Apr 2026 08:01:45 +0000 Manifest next update: Tue 28 Apr 2026 08:01:45 +0000 Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=) 2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=) 3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=) 4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: GTMmCh0/Feaieh3C17xab8bkY2IXhj1BwELFaxjViBc=) 6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=) 7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=) 8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=) 9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=) 10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=) 11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=) 12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 07:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cd:f5:69:0f:66:00:a5:8b:4f:5e:0e:75:af:8d:ac:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Apr 27 08:01:45 2026 GMT Not After : Apr 28 08:01:45 2026 GMT Subject: CN=ac69547e7f1ece83f6c83a056bc4b1789bb2fc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:41:a8:97:5a:d3:f5:12:cf:af:1d:c1:98:5a: c5:88:62:85:c9:5a:68:9c:37:1a:15:05:a0:4a:93: 29:d1:0b:0d:85:0b:9d:7e:52:31:e6:7a:c6:4c:73: 7c:7a:f6:0f:e8:52:f1:52:c3:fd:46:3d:c4:fc:b0: a1:f2:51:da:26:d7:a3:26:d0:4e:bb:47:76:44:94: a2:80:b7:33:66:f5:27:5b:86:11:f1:57:74:b0:f8: b2:24:a2:94:3d:4f:62:12:98:0c:37:8c:4e:42:3e: 5a:34:37:bf:fd:53:02:46:a6:77:bd:24:fb:9d:09: 65:c2:24:da:3c:d2:cd:7a:81:f9:d5:11:02:6a:ed: 75:f6:26:11:c7:6d:e3:99:84:cd:e6:da:2c:3a:c4: c4:6d:69:c9:bb:40:7c:83:83:7b:89:0d:44:12:37: 09:d2:1a:03:1f:65:9a:a8:98:5d:f5:b0:38:d5:af: cb:8b:47:a0:4f:09:d6:c0:34:11:af:56:e2:c2:1a: 40:27:99:d5:e1:4a:20:d8:23:ad:65:22:c0:1d:6c: 08:d1:92:48:e0:c6:40:5d:bb:e1:2f:3a:26:60:70: da:16:58:1f:90:e3:42:5a:49:d1:26:a0:66:26:b8: 46:50:88:8c:e0:f6:a1:67:7a:dc:fc:59:aa:da:49: 5d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:69:54:7E:7F:1E:CE:83:F6:C8:3A:05:6B:C4:B1:78:9B:B2:FC:71 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e3:37:07:eb:ef:9f:f1:fc:0d:54:46:33:1b:23:b1:d5:32: 20:c8:a6:44:25:5d:64:99:89:49:fe:9f:ad:b2:d2:08:27:df: f4:53:40:87:2b:91:da:fa:9f:3d:92:db:7b:bc:e3:7b:69:04: 16:29:50:f2:ad:3f:ed:0c:34:ec:f4:ee:c0:ec:3c:56:b9:52: 4f:02:fb:1b:b9:6d:66:9b:91:04:81:88:db:81:ff:c8:b7:79: 5b:4f:2a:09:d1:94:1b:5d:5a:fd:b6:30:10:26:45:74:e3:1c: cf:d9:af:b8:6b:f4:fb:b6:3e:43:bf:c0:7b:06:06:74:e6:ce: 93:05:85:bb:51:e4:12:3f:95:33:e5:4e:63:9a:c5:05:f9:59: c7:d8:03:4e:d6:3c:c2:6e:d9:56:cd:da:4c:42:75:6f:e3:0f: 45:37:24:2b:de:53:7c:df:ab:01:dd:1f:8c:09:6f:80:bc:92: 76:fc:b4:05:cd:14:ad:21:4c:bf:4e:33:15:85:c0:89:d1:6d: 1a:99:70:65:73:ef:8d:46:46:ec:c8:02:57:eb:b5:97:6e:0c: 67:60:b5:3f:14:45:d9:96:42:26:93:c0:55:06:e6:c6:44:c2: 39:53:c9:34:20:5c:bf:14:c5:6c:d9:48:89:fd:74:d2:75:a8: d4:30:5f:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3N9WkPZgCli09eDnWvjawzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwNDI3MDgwMTQ1WhcNMjYwNDI4MDgwMTQ1WjAzMTEwLwYDVQQD EyhhYzY5NTQ3ZTdmMWVjZTgzZjZjODNhMDU2YmM0YjE3ODliYjJmYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EGol1rT9RLPrx3BmFrFiGKFyVpo nDcaFQWgSpMp0QsNhQudflIx5nrGTHN8evYP6FLxUsP9Rj3E/LCh8lHaJtejJtBO u0d2RJSigLczZvUnW4YR8Vd0sPiyJKKUPU9iEpgMN4xOQj5aNDe//VMCRqZ3vST7 nQllwiTaPNLNeoH51RECau119iYRx23jmYTN5tosOsTEbWnJu0B8g4N7iQ1EEjcJ 0hoDH2WaqJhd9bA41a/Li0egTwnWwDQRr1biwhpAJ5nV4Uog2COtZSLAHWwI0ZJI 4MZAXbvhLzomYHDaFlgfkONCWknRJqBmJrhGUIiM4PahZ3rc/Fmq2kldEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxpVH5/Hs6D9sg6BWvEsXibsvxxMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+M3B+vv n/H8DVRGMxsjsdUyIMimRCVdZJmJSf6frbLSCCff9FNAhyuR2vqfPZLbe7zje2kE FilQ8q0/7Qw07PTuwOw8VrlSTwL7G7ltZpuRBIGI24H/yLd5W08qCdGUG11a/bYw ECZFdOMcz9mvuGv0+7Y+Q7/AewYGdObOkwWFu1HkEj+VM+VOY5rFBflZx9gDTtY8 wm7ZVs3aTEJ1b+MPRTckK95TfN+rAd0fjAlvgLySdvy0Bc0UrSFMv04zFYXAidFt GplwZXPvjUZG7MgCV+u1l24MZ2C1PxRF2ZZCJpPAVQbmxkTCOVPJNCBcvxTFbNlI if100nWo1DBfbg== -----END CERTIFICATE-----Generated at Mon Apr 27 10:43:47 2026 by rpki-client