$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: zWeRacJw0+pYbKP9FVMKDASXymsabQjDhC1l3v/x8NQ= Subject key identifier: 79:1B:DE:2A:77:AA:96:55:E7:59:28:5A:F7:6A:5E:D2:7C:77:CC:31 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 01A17927F63456552B0FAC82D089F8470A13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0BC8 Signing time: Mon 26 Oct 2026 17:00:24 +0000 Manifest this update: Mon 26 Oct 2026 17:00:24 +0000 Manifest next update: Tue 27 Oct 2026 17:00:24 +0000 Files and hashes: 1: 0_vDnDRF9RJXjQRo2pH5Tit2G6k.roa (hash: IvBfnkpqBkHgNd2fPdtTwy3ZEe1XX9CROdeaKsRCiZg=) 2: 0rYh00huvnBQKkQwlK1vCqkvoBk.roa (hash: nYPeZfJ/Ihf6kd7dZ2qej/vMGmICd+Z5Zk5jSeYL7ps=) 3: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 4: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 5: CKoKV9SSWeY0CC35RGZW3-Sowvk.roa (hash: CNoybL/dDEh4vogvIRKGBoOMFZRqcXzTkYgL2z5M9bM=) 6: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 7: M6SBaBtXhaEZ0pYu0GWGKS98iIY.roa (hash: naJloYzUXq9mBSCULUzObzftzAjg0+nih9VX9G8NwAw=) 8: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 9: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: Z6OKFUxgkrPlpRkt8+Jp48V7oVxUCL2hyFBLShXZqZc=) 10: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 11: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 12: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 13: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 14: kveMMocsfLZh918Y0_FGgyBzNLM.roa (hash: vKnrq5ifdIB9dF0mtCayO5eOs+Yvg54hMTnFEcoDZaU=) 15: rDgB1WWhxRGF3eFkqX4VjqEkOcY.roa (hash: ifAnSGVO73NRoAKq59gXyGui7/GMr2OJw5wHm+/+JP8=) 16: rtgNwpKWEQ9VzPEoGc9ICsTEDGY.roa (hash: kSyIl9GbSnFUvQKXxkb/qMKrsJ6GBbvNU0EjtITFE2w=) 17: wya558PIHgik2HyMit4xj4j_L1k.roa (hash: SJ62zMEvO9Yo1+2NTfsUVkoZy7DSc5bDTEAMMmEExNg=) 18: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:79:27:f6:34:56:55:2b:0f:ac:82:d0:89:f8:47:0a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Oct 26 17:00:24 2026 GMT Not After : Oct 27 17:00:24 2026 GMT Subject: CN=791bde2a77aa9655e759285af76a5ed27c77cc31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e4:e7:ba:05:89:7a:13:73:47:7f:89:5b:1b: 9c:b6:e6:ad:6e:5a:4b:de:9b:e7:b0:5c:52:f0:df: 79:d1:5a:b7:4c:5a:8f:43:84:73:df:5a:36:5f:e5: 22:cc:99:eb:bb:fe:4d:35:25:3a:f8:c8:6e:a0:8e: bf:6e:4b:e8:c4:bb:bd:a6:5f:1c:06:00:38:21:22: 8e:34:4a:70:58:2f:9a:0b:b5:c3:44:fa:20:e1:af: 1f:1a:29:e7:c1:d4:f3:f6:89:7c:4b:7b:16:b5:70: 1d:f9:b4:70:8c:ed:17:96:72:44:9c:85:10:9a:0e: d6:f2:3c:33:2b:3a:6a:64:f1:b3:a9:3a:f6:5d:f6: 07:ae:51:7b:9b:f4:98:93:96:87:49:3a:47:d8:d6: dd:38:d2:57:1c:35:64:a3:c0:63:0a:6f:1f:35:32: 43:31:33:1b:17:3a:de:18:f0:80:fc:9f:37:a7:e5: 19:2d:b5:eb:19:87:64:d7:02:59:9a:99:69:e5:df: 24:74:d1:bc:7f:a5:11:85:64:f6:d0:1a:27:b7:9b: 37:7d:aa:ef:39:36:4e:fe:24:f5:43:04:71:dd:c1: 2f:cb:81:3b:87:de:32:d0:60:cd:9b:5a:1d:34:79: c7:b5:8d:21:07:4d:a6:24:36:e7:17:45:bd:34:68: a3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1B:DE:2A:77:AA:96:55:E7:59:28:5A:F7:6A:5E:D2:7C:77:CC:31 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ed:a1:31:70:a3:f0:d5:dc:61:64:31:66:c4:0e:cc:14:e7: fe:06:b7:55:e0:43:e5:1b:8b:fb:53:9a:45:4f:f6:b2:96:4c: a7:d9:a6:ef:58:ba:1d:ad:0e:6d:4c:15:d6:28:b1:e5:76:6d: 91:0e:1f:50:be:a8:ab:1a:1f:07:4a:73:a8:3a:41:38:ba:8e: 0b:e5:82:62:d6:e3:63:7d:b5:13:15:d2:a2:fc:04:bb:82:4e: 3c:a4:4e:54:00:02:dd:04:17:7e:1c:c8:89:4b:9c:fc:e0:15: 5c:86:93:7f:45:6f:88:7b:64:9e:e7:c7:e1:22:20:07:8f:bc: b5:00:c8:c2:d0:6b:38:66:0a:05:7d:5b:54:3c:73:b1:78:57: 0d:8a:49:18:65:68:15:ce:c4:38:33:89:b6:df:73:88:d4:64: 5f:46:3c:76:93:90:47:c8:78:27:f4:99:3e:41:15:93:a9:b5: 4f:65:9c:9a:43:e4:02:92:03:c9:f2:11:2c:29:36:ba:c9:16: 7c:9f:64:2b:aa:93:a5:70:bd:3b:ec:4e:cc:ad:49:46:78:55: f0:bc:36:c8:6f:5b:c5:0e:4a:28:e1:59:b2:9a:23:e5:c8:46: de:0f:8d:fc:ad:16:6c:c3:0f:5c:80:d2:98:72:d9:bb:b1:dc: c5:34:29:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF5J/Y0VlUrD6yC0In4RwoTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYxMDI2MTcwMDI0WhcNMjYxMDI3MTcwMDI0WjAzMTEwLwYDVQQD Eyg3OTFiZGUyYTc3YWE5NjU1ZTc1OTI4NWFmNzZhNWVkMjdjNzdjYzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OTnugWJehNzR3+JWxuctuatblpL 3pvnsFxS8N950Vq3TFqPQ4Rz31o2X+UizJnru/5NNSU6+MhuoI6/bkvoxLu9pl8c BgA4ISKONEpwWC+aC7XDRPog4a8fGinnwdTz9ol8S3sWtXAd+bRwjO0XlnJEnIUQ mg7W8jwzKzpqZPGzqTr2XfYHrlF7m/SYk5aHSTpH2NbdONJXHDVko8BjCm8fNTJD MTMbFzreGPCA/J83p+UZLbXrGYdk1wJZmplp5d8kdNG8f6URhWT20Bont5s3farv OTZO/iT1QwRx3cEvy4E7h94y0GDNm1odNHnHtY0hB02mJDbnF0W9NGijcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkb3ip3qpZV51koWvdqXtJ8d8wxMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhu2hMXCj 8NXcYWQxZsQOzBTn/ga3VeBD5RuL+1OaRU/2spZMp9mm71i6Ha0ObUwV1iix5XZt kQ4fUL6oqxofB0pzqDpBOLqOC+WCYtbjY321ExXSovwEu4JOPKROVAAC3QQXfhzI iUuc/OAVXIaTf0VviHtknufH4SIgB4+8tQDIwtBrOGYKBX1bVDxzsXhXDYpJGGVo Fc7EODOJtt9ziNRkX0Y8dpOQR8h4J/SZPkEVk6m1T2WcmkPkApIDyfIRLCk2uskW fJ9kK6qTpXC9O+xOzK1JRnhV8Lw2yG9bxQ5KKOFZspoj5chG3g+N/K0WbMMPXIDS mHLZu7HcxTQpxQ== -----END CERTIFICATE-----Generated at Tue Oct 27 02:58:36 2026 by rpki-client