$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: ceRY3WXvy0JuOAout12okDHIUjGio0ilyuqAhWc9Xe8= Subject key identifier: CB:77:D4:38:97:BB:23:98:84:43:99:E3:6C:6D:87:B5:97:01:EB:52 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019D386639C94219467D47A625E9A0F99F70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 108B Signing time: Sun 29 Mar 2026 07:01:56 +0000 Manifest this update: Sun 29 Mar 2026 07:01:56 +0000 Manifest next update: Mon 30 Mar 2026 07:01:56 +0000 Files and hashes: 1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=) 2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=) 3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=) 4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=) 5: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (hash: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc=) 6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=) 7: L5qyY9jZaitIZWVHzJF8EMKtnJw.roa (hash: RHPOnQl7M+92fyRwAlYoQqCItx05c0P7/Yx6ROjX9QU=) 8: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=) 9: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=) 10: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: 37HvtquwqcWcsANAKZABwXdw4g8jg5YbucP38n5zGgE=) 11: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=) 12: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (hash: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:66:39:c9:42:19:46:7d:47:a6:25:e9:a0:f9:9f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Mar 29 07:01:56 2026 GMT Not After : Mar 30 07:01:56 2026 GMT Subject: CN=cb77d43897bb2398844399e36c6d87b59701eb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:dd:09:a8:b4:5e:8b:b4:6f:3c:2a:90:dc: e4:75:af:f0:25:74:45:59:e7:3b:00:6a:50:ca:34: f9:26:4e:f2:00:71:5b:da:e5:8e:ae:e6:e1:57:6f: 87:04:bc:c2:d7:da:5c:ee:78:f7:0f:a9:3c:ea:16: df:16:1c:ff:d2:0a:7d:08:2d:06:e3:85:5f:91:c4: d8:60:1f:ca:da:a4:b1:3d:ae:1c:41:8a:2e:0e:68: 67:fa:f7:8d:92:5f:6d:44:8d:eb:5b:a4:c9:50:50: 80:07:b5:d9:ec:c9:3b:1e:23:99:14:b8:cc:9e:d9: 36:7d:14:4d:72:38:c6:14:a7:d1:84:b2:59:a7:98: 87:1a:e9:85:ad:57:97:4e:63:fb:08:00:81:26:5b: 84:30:c2:e8:6b:77:2b:82:05:06:bd:0c:6e:e0:16: 97:2b:cf:2c:ac:6c:16:a5:93:0d:2a:b3:ba:62:a5: c8:f8:9c:ac:10:4a:14:ac:99:75:84:2e:d5:ab:d7: e4:ae:24:5e:ac:da:c2:d5:6e:81:b8:2f:16:5e:d1: 77:17:cb:04:41:8c:ec:9b:d9:98:88:6e:6d:31:a1: 84:37:7f:43:68:e6:1d:47:bf:49:06:1b:b5:2c:89: 4f:a0:96:2f:31:3a:90:53:98:70:8c:44:9f:05:80: d2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:77:D4:38:97:BB:23:98:84:43:99:E3:6C:6D:87:B5:97:01:EB:52 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b8:9b:56:13:31:cd:79:88:89:22:04:f4:88:cf:35:f0:df: fa:6c:56:c9:1f:aa:85:87:df:1f:58:b9:2b:54:ca:41:8a:5d: 2a:2f:96:49:79:9b:e9:83:2a:b2:9a:5f:ab:bc:c7:5b:9e:cd: 8b:d4:5f:a3:1f:fd:93:f5:ec:76:fe:50:79:b4:47:fd:91:a2: 26:77:bb:01:20:ec:6e:55:9f:7a:92:08:96:60:56:4a:57:17: 7e:bf:dd:ab:92:58:e1:a1:5b:32:60:72:9b:0c:9f:b4:66:3e: c3:02:d3:a1:f0:50:93:a4:2b:2b:71:c4:65:8a:22:bf:8e:2b: 8e:3b:87:57:3c:d4:d9:d3:59:1e:d0:7a:43:a5:3b:70:31:40: 54:1c:f8:e9:fc:5a:88:27:b3:e1:ae:f6:cc:71:ef:f6:b2:1f: 52:b8:af:3a:6f:8e:9c:14:5c:a1:42:0a:8a:6b:ad:b0:6f:1d: 95:24:03:85:5c:73:12:3c:d2:f5:88:e9:74:69:fa:ef:0c:56: 72:e2:3a:25:87:29:48:5b:c8:fb:24:e6:17:3d:ec:f9:30:af: 60:11:88:80:70:74:bc:ee:9a:45:e9:09:e3:b4:5c:fe:32:79: 11:b1:ba:61:41:33:7a:6f:f9:74:a0:a3:b0:fc:e0:84:ff:f9: df:57:65:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ04ZjnJQhlGfUemJemg+Z9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwMzI5MDcwMTU2WhcNMjYwMzMwMDcwMTU2WjAzMTEwLwYDVQQD EyhjYjc3ZDQzODk3YmIyMzk4ODQ0Mzk5ZTM2YzZkODdiNTk3MDFlYjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6rdCai0Xou0bzwqkNzkda/wJXRF Wec7AGpQyjT5Jk7yAHFb2uWOrubhV2+HBLzC19pc7nj3D6k86hbfFhz/0gp9CC0G 44VfkcTYYB/K2qSxPa4cQYouDmhn+veNkl9tRI3rW6TJUFCAB7XZ7Mk7HiOZFLjM ntk2fRRNcjjGFKfRhLJZp5iHGumFrVeXTmP7CACBJluEMMLoa3crggUGvQxu4BaX K88srGwWpZMNKrO6YqXI+JysEEoUrJl1hC7Vq9fkriRerNrC1W6BuC8WXtF3F8sE QYzsm9mYiG5tMaGEN39DaOYdR79JBhu1LIlPoJYvMTqQU5hwjESfBYDSgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMt31DiXuyOYhEOZ42xth7WXAetSMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLibVhMx zXmIiSIE9IjPNfDf+mxWyR+qhYffH1i5K1TKQYpdKi+WSXmb6YMqsppfq7zHW57N i9Rfox/9k/Xsdv5QebRH/ZGiJne7ASDsblWfepIIlmBWSlcXfr/dq5JY4aFbMmBy mwyftGY+wwLTofBQk6QrK3HEZYoiv44rjjuHVzzU2dNZHtB6Q6U7cDFAVBz46fxa iCez4a72zHHv9rIfUrivOm+OnBRcoUIKimutsG8dlSQDhVxzEjzS9YjpdGn67wxW cuI6JYcpSFvI+yTmFz3s+TCvYBGIgHB0vO6aRekJ47Rc/jJ5EbG6YUEzem/5dKCj sPzghP/531dlBw== -----END CERTIFICATE-----Generated at Sun Mar 29 12:44:57 2026 by rpki-client