$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: Gnu/OHeQJFrUjZbpEoR088OGLDqvVTAnLd0HjDoo3a0= Subject key identifier: 18:D4:38:2E:36:A9:2E:17:03:11:F8:02:C5:69:20:43:9C:D4:37:14 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019F9E152FC691E731AF68BFD193F4A30A78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0ACB Signing time: Sun 26 Jul 2026 11:00:16 +0000 Manifest this update: Sun 26 Jul 2026 11:00:16 +0000 Manifest next update: Mon 27 Jul 2026 11:00:16 +0000 Files and hashes: 1: 0_vDnDRF9RJXjQRo2pH5Tit2G6k.roa (hash: IvBfnkpqBkHgNd2fPdtTwy3ZEe1XX9CROdeaKsRCiZg=) 2: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 3: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 4: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 5: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 6: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: vLadlhaQZnueR/t+WPZmY+t3KfpaUL+42e+Y3PnLPyQ=) 7: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 8: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 9: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 10: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 11: kveMMocsfLZh918Y0_FGgyBzNLM.roa (hash: vKnrq5ifdIB9dF0mtCayO5eOs+Yvg54hMTnFEcoDZaU=) 12: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 11:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9e:15:2f:c6:91:e7:31:af:68:bf:d1:93:f4:a3:0a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jul 26 11:00:16 2026 GMT Not After : Jul 27 11:00:16 2026 GMT Subject: CN=18d4382e36a92e170311f802c56920439cd43714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:8d:53:3e:d9:a7:9b:60:c9:8f:67:c7:64: 8f:48:05:5c:17:ff:da:8f:d2:af:a5:e8:12:f1:5d: f2:be:d5:0e:f6:d6:b4:e0:95:1a:93:86:e6:59:29: d5:8c:49:8c:7a:cb:07:a0:c7:dc:fb:fe:20:ab:d2: a7:c3:4a:32:3c:3b:07:dc:97:90:3d:31:08:f7:0e: c6:93:f5:a9:4d:d5:4e:8d:b4:f3:ad:9f:e8:15:ad: 5c:26:94:65:87:51:8f:51:31:1f:29:4b:64:dc:85: 5e:84:8e:f3:11:32:fc:c1:9f:0d:a2:a2:11:39:20: 33:d7:bd:77:0f:bb:47:be:34:16:bf:0c:b2:a9:e8: 22:20:67:ab:7d:b0:ee:d4:2c:e8:5b:2f:44:ee:5c: 59:ef:ad:88:22:53:66:12:01:83:7a:88:20:2f:ca: 56:56:03:80:a8:96:da:83:0c:08:37:8f:29:62:0a: 3e:41:02:f3:4b:91:e9:ae:19:b0:1e:d9:ab:20:52: c4:27:f7:67:71:56:e3:31:f7:42:e9:72:91:d6:eb: 23:f2:e3:51:11:a4:83:25:f3:00:d5:81:3b:e2:66: 53:9a:59:5e:7b:77:35:7e:b6:74:65:b1:7e:51:44: 29:6e:ed:08:51:5f:b0:59:70:94:44:07:50:3c:25: 7b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D4:38:2E:36:A9:2E:17:03:11:F8:02:C5:69:20:43:9C:D4:37:14 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:41:4f:cf:33:f3:0f:10:62:84:22:40:e9:b1:bd:68:e0:04: 47:a7:50:22:64:c1:98:50:b2:1f:b0:cd:be:35:b5:1b:73:f6: 3e:a7:18:f9:e3:3b:15:15:74:5e:87:95:3b:7b:85:c8:6c:14: f1:bb:bd:99:94:98:5a:bb:a3:a6:25:71:3d:26:c0:2c:f6:54: 60:a5:3e:34:5d:0b:70:54:93:76:22:4f:fa:79:e2:fc:04:7a: 26:90:71:65:25:21:fb:a8:45:25:ca:5a:ff:75:9b:14:8a:ea: 68:bd:5e:d5:08:82:cf:00:84:45:cb:54:00:48:ef:8b:86:af: 70:b2:74:4e:e0:50:e9:f7:8b:08:06:35:2d:f3:89:b4:5d:be: 4e:ed:b7:f0:f4:4b:9b:ff:9a:73:c5:91:76:68:5b:f9:25:7b: d9:d1:c5:11:f7:91:c3:53:64:7b:97:55:89:b9:1b:0b:4c:db: f5:de:cd:fe:b3:63:47:13:65:4b:26:21:5b:20:2e:d1:a3:87: 01:56:6a:5a:2f:9d:59:c2:c0:c6:19:1f:aa:57:ed:8c:70:cc: f2:9a:63:35:e2:21:50:0f:e1:5e:96:25:a6:08:fb:3b:68:a4: ed:3a:22:56:78:3c:76:34:6a:2b:c2:f0:b2:fb:d1:ca:a4:a9: 69:46:49:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+eFS/Gkecxr2i/0ZP0owp4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwNzI2MTEwMDE2WhcNMjYwNzI3MTEwMDE2WjAzMTEwLwYDVQQD EygxOGQ0MzgyZTM2YTkyZTE3MDMxMWY4MDJjNTY5MjA0MzljZDQzNzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyWNUz7Zp5tgyY9nx2SPSAVcF//a j9KvpegS8V3yvtUO9ta04JUak4bmWSnVjEmMessHoMfc+/4gq9Knw0oyPDsH3JeQ PTEI9w7Gk/WpTdVOjbTzrZ/oFa1cJpRlh1GPUTEfKUtk3IVehI7zETL8wZ8NoqIR OSAz1713D7tHvjQWvwyyqegiIGerfbDu1CzoWy9E7lxZ762IIlNmEgGDeoggL8pW VgOAqJbagwwIN48pYgo+QQLzS5HprhmwHtmrIFLEJ/dncVbjMfdC6XKR1usj8uNR EaSDJfMA1YE74mZTmllee3c1frZ0ZbF+UUQpbu0IUV+wWXCURAdQPCV79QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjUOC42qS4XAxH4AsVpIEOc1DcUMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUFPzzPz DxBihCJA6bG9aOAER6dQImTBmFCyH7DNvjW1G3P2PqcY+eM7FRV0XoeVO3uFyGwU 8bu9mZSYWrujpiVxPSbALPZUYKU+NF0LcFSTdiJP+nni/AR6JpBxZSUh+6hFJcpa /3WbFIrqaL1e1QiCzwCERctUAEjvi4avcLJ0TuBQ6feLCAY1LfOJtF2+Tu238PRL m/+ac8WRdmhb+SV72dHFEfeRw1Nke5dVibkbC0zb9d7N/rNjRxNlSyYhWyAu0aOH AVZqWi+dWcLAxhkfqlftjHDM8ppjNeIhUA/hXpYlpgj7O2ik7ToiVng8djRqK8Lw svvRyqSpaUZJGg== -----END CERTIFICATE-----Generated at Sun Jul 26 19:00:24 2026 by rpki-client