$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: t3PYpqTHb5Yh4Hz8MU8ULcwc6YxGWkzIgZ3Ec8LYKfs= Subject key identifier: 06:36:8E:33:70:B8:FB:B9:85:F2:0B:89:EC:E6:05:41:5F:33:50:DC Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019CE448878965DB2D3884296E60DF56CDC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0F0F Signing time: Thu 12 Mar 2026 23:01:24 +0000 Manifest this update: Thu 12 Mar 2026 23:01:24 +0000 Manifest next update: Fri 13 Mar 2026 23:01:24 +0000 Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=) 2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=) 3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=) 4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: gVvJdo4X2IW2JSyF1SwTG1KDUFXdvkdqi+jA3fdR2+c=) 6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=) 7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=) 8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=) 9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=) 10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=) 11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=) 12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 21:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e4:48:87:89:65:db:2d:38:84:29:6e:60:df:56:cd:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Mar 12 23:01:24 2026 GMT Not After : Mar 13 23:01:24 2026 GMT Subject: CN=06368e3370b8fbb985f20b89ece605415f3350dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0c:5e:ca:e5:1e:01:47:f3:c0:b0:bc:f2:6a: 6f:b1:4e:f6:7b:9b:e6:19:55:c8:28:3d:af:80:fa: 52:7f:59:01:3b:1e:7b:f9:ac:b7:f3:23:ed:5a:c2: 00:d2:78:b5:f3:90:a4:a1:54:19:04:98:fa:b5:19: 72:3e:3a:4a:d1:43:ec:0e:38:8d:77:c4:ed:f3:31: a6:a1:b8:33:1f:86:fb:f6:14:c2:cd:f9:25:7d:88: 1f:8b:71:d0:13:04:5b:5c:1b:46:29:7a:c2:4c:60: 69:24:1c:06:b3:f7:02:9c:5c:fe:5f:3a:71:32:6b: 84:73:28:14:fa:72:b4:cc:b8:87:97:b1:e3:ff:d3: 92:85:41:61:af:80:30:8d:6e:90:aa:76:26:b0:42: 8c:58:a0:72:60:7f:2b:5a:fa:52:7d:c3:39:08:8e: 5a:4e:66:fc:e1:01:eb:7a:0a:71:89:56:07:34:a5: a6:87:1d:9b:64:31:e4:06:75:e1:21:41:46:a0:a1: ee:04:56:0e:f8:6a:99:53:e5:43:c8:b7:5c:4c:86: b3:d0:ea:08:4d:f4:6c:8e:70:b3:65:89:0e:e7:b9: f1:78:99:18:ea:e4:91:cb:3f:54:98:ca:3a:cf:06: 9c:8d:3a:29:c1:c8:e5:96:5f:8c:f9:47:aa:fe:6a: 00:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:36:8E:33:70:B8:FB:B9:85:F2:0B:89:EC:E6:05:41:5F:33:50:DC X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c0:f3:0a:c4:5f:4d:cd:ae:f9:80:3c:d0:2d:f0:96:d2:55: d1:05:84:ac:39:6b:f6:4f:b8:ae:0f:e1:55:86:a6:f5:c4:b5: e9:ba:ab:22:07:8a:9e:c2:4d:ae:a8:67:fe:1a:f0:7e:e5:cb: 31:12:0f:ee:c5:b8:9b:2c:d8:e0:43:64:89:09:bc:a4:07:89: 1c:ab:fe:2f:49:18:86:cb:d0:9b:e4:ca:30:70:66:a1:16:8b: 40:17:fe:31:3c:d4:fe:ce:6d:32:b2:2b:87:d6:05:8e:d8:29: 95:b6:d8:62:27:c5:d4:a5:53:f5:35:4d:d5:20:e2:d2:aa:03: cd:f9:59:70:65:ac:87:4b:e3:77:a4:84:d7:ca:cb:fe:d9:0e: 5d:09:17:4e:15:5e:36:2c:58:57:4b:db:f0:48:7b:f5:7e:d7: 9d:23:10:b0:ce:99:2c:b7:47:b7:0a:99:c9:c2:e9:79:2f:19: 7b:a7:67:0f:d0:63:6d:48:ce:45:9e:d5:ed:05:66:61:8f:dc: 1a:e8:0f:7d:89:06:55:8e:09:7a:70:bf:bd:4c:63:8a:0f:0b: e3:2d:59:a4:19:95:c8:b8:af:3a:b0:2f:09:96:29:7e:4c:3f: 9b:b2:58:57:0c:4a:c2:ec:54:91:ae:5a:ad:1b:10:c6:27:7c: 42:50:b5:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzkSIeJZdstOIQpbmDfVs3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwMzEyMjMwMTI0WhcNMjYwMzEzMjMwMTI0WjAzMTEwLwYDVQQD EygwNjM2OGUzMzcwYjhmYmI5ODVmMjBiODllY2U2MDU0MTVmMzM1MGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQxeyuUeAUfzwLC88mpvsU72e5vm GVXIKD2vgPpSf1kBOx57+ay38yPtWsIA0ni185CkoVQZBJj6tRlyPjpK0UPsDjiN d8Tt8zGmobgzH4b79hTCzfklfYgfi3HQEwRbXBtGKXrCTGBpJBwGs/cCnFz+Xzpx MmuEcygU+nK0zLiHl7Hj/9OShUFhr4AwjW6QqnYmsEKMWKByYH8rWvpSfcM5CI5a Tmb84QHregpxiVYHNKWmhx2bZDHkBnXhIUFGoKHuBFYO+GqZU+VDyLdcTIaz0OoI TfRsjnCzZYkO57nxeJkY6uSRyz9UmMo6zwacjTopwcjlll+M+Ueq/moAWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAY2jjNwuPu5hfILiezmBUFfM1DcMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8DzCsRf Tc2u+YA80C3wltJV0QWErDlr9k+4rg/hVYam9cS16bqrIgeKnsJNrqhn/hrwfuXL MRIP7sW4myzY4ENkiQm8pAeJHKv+L0kYhsvQm+TKMHBmoRaLQBf+MTzU/s5tMrIr h9YFjtgplbbYYifF1KVT9TVN1SDi0qoDzflZcGWsh0vjd6SE18rL/tkOXQkXThVe NixYV0vb8Eh79X7XnSMQsM6ZLLdHtwqZycLpeS8Ze6dnD9BjbUjORZ7V7QVmYY/c GugPfYkGVY4JenC/vUxjig8L4y1ZpBmVyLivOrAvCZYpfkw/m7JYVwxKwuxUka5a rRsQxid8QlC1KA== -----END CERTIFICATE-----Generated at Fri Mar 13 06:04:45 2026 by rpki-client