$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: SrM21rrEpa06tW7prnsRD2WXUUA/Imqfrqy5jRz8gcg= Subject key identifier: B6:A2:C4:F2:08:04:04:05:61:AA:0C:D5:09:2C:D6:25:19:7D:76:4C Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019CD4D4BD6FF5BA27F36654BC6DAA46A305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0958 Signing time: Mon 09 Mar 2026 23:00:37 +0000 Manifest this update: Mon 09 Mar 2026 23:00:37 +0000 Manifest next update: Tue 10 Mar 2026 23:00:37 +0000 Files and hashes: 1: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 2: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 3: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 4: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 5: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: eSr8QZNULlA8lIgqCRzRdt09uYd046SYhBYwKyXd+Uk=) 6: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 7: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 8: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 9: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 10: e-wh2r9wdch9AbYzWAb-amfpi3k.roa (hash: 7RxrmeOp+FYtmV6C/Huryp37MguNnmSBg7rxFRERF7A=) 11: k84WPUGfQIVIA_tiWGdJRtGMimg.roa (hash: hA5+KWMD6TuAOakxzUqUiHv7L3lZ8BGhQfo9wvlqG0s=) 12: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Mar 2026 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:d4:d4:bd:6f:f5:ba:27:f3:66:54:bc:6d:aa:46:a3:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Mar 9 23:00:37 2026 GMT Not After : Mar 10 23:00:37 2026 GMT Subject: CN=b6a2c4f20804040561aa0cd5092cd625197d764c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:41:d5:c4:1d:a7:2b:eb:9a:61:fc:d2:c6:cc: b8:bc:f8:67:09:f1:74:e9:08:24:b4:06:de:57:98: ad:bf:ce:8b:ea:3b:f1:bc:e5:56:b7:d1:49:8d:32: bf:77:8f:30:93:5f:6b:1e:c6:99:d5:25:8a:4d:ed: 17:53:06:e7:96:29:1f:b2:be:1d:87:c9:fb:30:35: 63:d8:17:9d:02:4f:70:60:1f:c1:d6:ba:21:7e:29: 7f:49:dc:a4:5b:cd:b2:47:e5:fb:fc:18:9f:53:22: 7b:da:30:b0:fd:2c:8a:70:01:b7:fe:24:27:a4:8e: ce:11:4b:c2:04:fb:4e:45:58:ab:ec:33:1a:4b:9f: e0:19:fa:0f:f5:b2:20:8c:e8:94:f7:14:92:37:7f: 8c:61:9e:01:a1:2d:f8:f5:e0:9a:c9:75:05:61:86: ec:ac:b9:47:d4:03:cc:f3:08:6c:dc:7f:dc:af:59: 5c:ef:b0:39:83:d5:7b:0e:da:75:ad:9d:15:fa:50: b8:d5:8b:8e:7c:a1:1b:c1:c4:64:02:84:5d:1b:cd: a2:4e:3c:fd:b1:3e:85:5f:24:10:c4:3a:6b:3a:f5: 6c:de:6b:4b:93:6e:b7:1e:c7:09:27:5a:9a:45:7c: 03:68:bc:b6:f4:d9:b8:e8:4e:df:be:22:d8:98:ae: 45:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A2:C4:F2:08:04:04:05:61:AA:0C:D5:09:2C:D6:25:19:7D:76:4C X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:bb:13:fb:f1:a0:8e:c7:1f:91:6c:e6:37:dc:52:6a:a9:54: 8c:f6:59:9e:97:ec:7d:38:04:6d:2c:5f:4f:f1:96:b4:7c:73: da:88:d8:f4:33:3f:6a:fd:e5:d1:36:a8:2a:d0:d8:ec:37:8e: 82:ae:b3:1a:79:56:4e:28:40:ef:23:55:6e:91:10:ce:44:45: 2a:a8:7a:58:16:f2:6e:bb:b1:95:2d:74:35:9f:72:67:38:5a: 82:57:26:41:6e:ab:e0:ff:29:94:00:d3:92:ff:bf:f8:97:c0: 8a:8e:5a:bf:07:79:cd:da:7d:52:8f:d3:be:d2:8f:b6:cc:af: 59:53:23:a5:e4:4d:bb:60:51:2b:eb:ed:16:26:dc:4a:b4:94: 2a:4e:28:76:9c:5e:fd:8b:51:29:e5:89:ca:12:d6:a8:a2:35: f9:43:d6:fe:59:0a:35:fa:d3:00:9b:d0:1b:b8:a8:3f:b6:0e: 5f:fa:8f:f0:2a:b2:e4:1e:33:d6:a4:43:5a:6e:d5:64:da:b6: 21:24:e2:7f:9a:70:3a:d1:9b:19:9f:fc:6a:54:ee:d7:18:6e: eb:03:2f:dd:ef:fa:8f:e9:8a:d8:3e:10:22:1f:f6:70:ea:fa: e3:68:4e:d2:83:db:60:05:ce:e0:b2:0f:b8:54:a6:5f:35:d2: aa:92:42:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzU1L1v9bon82ZUvG2qRqMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwMzA5MjMwMDM3WhcNMjYwMzEwMjMwMDM3WjAzMTEwLwYDVQQD EyhiNmEyYzRmMjA4MDQwNDA1NjFhYTBjZDUwOTJjZDYyNTE5N2Q3NjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UHVxB2nK+uaYfzSxsy4vPhnCfF0 6QgktAbeV5itv86L6jvxvOVWt9FJjTK/d48wk19rHsaZ1SWKTe0XUwbnlikfsr4d h8n7MDVj2BedAk9wYB/B1rohfil/SdykW82yR+X7/BifUyJ72jCw/SyKcAG3/iQn pI7OEUvCBPtORVir7DMaS5/gGfoP9bIgjOiU9xSSN3+MYZ4BoS349eCayXUFYYbs rLlH1APM8whs3H/cr1lc77A5g9V7Dtp1rZ0V+lC41YuOfKEbwcRkAoRdG82iTjz9 sT6FXyQQxDprOvVs3mtLk263HscJJ1qaRXwDaLy29Nm46E7fviLYmK5FKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaixPIIBAQFYaoM1Qks1iUZfXZMMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbsT+/Gg jscfkWzmN9xSaqlUjPZZnpfsfTgEbSxfT/GWtHxz2ojY9DM/av3l0TaoKtDY7DeO gq6zGnlWTihA7yNVbpEQzkRFKqh6WBbybruxlS10NZ9yZzhaglcmQW6r4P8plADT kv+/+JfAio5avwd5zdp9Uo/TvtKPtsyvWVMjpeRNu2BRK+vtFibcSrSUKk4odpxe /YtRKeWJyhLWqKI1+UPW/lkKNfrTAJvQG7ioP7YOX/qP8Cqy5B4z1qRDWm7VZNq2 ISTif5pwOtGbGZ/8alTu1xhu6wMv3e/6j+mK2D4QIh/2cOr642hO0oPbYAXO4LIP uFSmXzXSqpJCXw== -----END CERTIFICATE-----Generated at Tue Mar 10 04:17:06 2026 by rpki-client