$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: qtuSVf7+pIem9K8FRGO632SEE65/60m0Y1/JZzIMQag= Subject key identifier: 11:49:2F:B7:54:CE:56:BC:C0:D6:41:95:26:FE:8A:62:AC:60:A9:D3 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 01A00101532C9C7F9CF82A45C02072CB1FCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 11FC Signing time: Fri 14 Aug 2026 16:00:58 +0000 Manifest this update: Fri 14 Aug 2026 16:00:58 +0000 Manifest next update: Sat 15 Aug 2026 16:00:58 +0000 Files and hashes: 1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=) 2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=) 3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=) 4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=) 5: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (hash: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc=) 6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=) 7: L5qyY9jZaitIZWVHzJF8EMKtnJw.roa (hash: RHPOnQl7M+92fyRwAlYoQqCItx05c0P7/Yx6ROjX9QU=) 8: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=) 9: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=) 10: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: KZV+uxGNQJ696+pdqQvUOTiPlsSpMpn80TySA1B7aBI=) 11: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=) 12: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (hash: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:01:01:53:2c:9c:7f:9c:f8:2a:45:c0:20:72:cb:1f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Aug 14 16:00:58 2026 GMT Not After : Aug 15 16:00:58 2026 GMT Subject: CN=11492fb754ce56bcc0d6419526fe8a62ac60a9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:20:30:8c:eb:3d:5c:2b:9f:0d:fc:83:46:72: d1:b9:52:27:bd:cd:44:25:83:12:28:2e:86:5f:15: ee:0c:f5:1a:d4:d1:73:72:de:35:54:cd:ec:8f:da: ba:45:20:6c:e9:14:ec:b2:ae:5b:f7:31:d4:99:e6: d9:b8:ca:a8:37:5d:51:4d:78:c5:05:be:05:91:9f: bd:c1:26:c8:f1:5b:0e:3b:8e:bc:51:ab:86:d9:2b: 69:58:70:73:8b:8b:c0:31:0c:3e:93:5b:dd:a5:4f: 00:da:78:01:a9:53:64:a2:14:0d:76:73:7d:a8:11: b7:56:be:c7:b1:2f:23:7f:14:f5:ed:ac:55:d3:e3: 83:e7:29:1b:d5:39:9f:8d:44:00:8a:84:fa:33:04: 07:8c:08:b3:ea:d6:52:4e:97:5b:4e:43:d4:00:91: df:34:57:c9:4d:a3:94:9b:7b:0d:bb:a1:c3:37:f0: 61:96:4c:4e:d9:61:6d:04:4b:2e:e2:67:5f:c0:b5: b9:fc:22:ac:2c:5e:0b:e2:1e:5f:8c:14:4b:c0:65: 72:fe:a1:63:15:4f:d8:78:35:49:ed:71:1d:2b:f4: 25:f5:20:39:d8:d6:c6:58:cf:27:80:03:f5:7a:a9: 76:f4:4c:49:76:0e:ae:56:55:45:d1:66:7b:ec:d3: 38:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:49:2F:B7:54:CE:56:BC:C0:D6:41:95:26:FE:8A:62:AC:60:A9:D3 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:1e:2a:a9:01:94:43:af:80:72:d0:c9:04:43:0c:01:9c:e1: 94:d4:06:76:62:7d:36:91:68:58:7a:33:e1:04:6a:f6:c3:f8: cd:56:51:c7:b8:0a:fc:fe:92:a4:31:59:d0:70:81:b9:0e:62: 01:3c:75:17:96:4b:9c:32:ea:80:58:2f:c7:40:ee:c8:45:6b: ec:aa:e0:55:dd:8c:45:dd:4b:52:d4:7b:6b:4e:fe:ff:d3:e1: 41:51:b9:31:8f:a1:16:e0:92:f0:a6:2f:6e:20:f6:8f:e3:ec: 2f:39:c4:c7:08:d8:80:bf:f9:6f:05:26:76:be:e7:4f:81:70: 11:62:ef:40:44:60:bc:15:21:d3:de:8b:90:8d:41:84:d9:56: b1:5c:6c:ef:a6:c6:8b:67:8f:32:59:e3:a0:6c:07:07:fe:78: cf:1d:b7:e0:60:be:b6:ef:89:d8:69:a4:3d:a2:08:cf:ba:dc: 17:42:46:d0:04:09:98:54:63:b3:d6:30:97:13:3d:bc:27:17: 3c:b1:bf:6c:a0:be:98:b8:12:21:1b:53:3c:f9:5e:49:1e:02: 92:4f:4b:40:ad:96:98:2a:d2:25:45:a6:5d:6c:42:15:1d:d7: 38:13:35:1a:27:78:ce:5d:22:df:65:7d:a6:bf:b5:a5:1b:40: 82:95:39:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaABAVMsnH+c+CpFwCByyx/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwODE0MTYwMDU4WhcNMjYwODE1MTYwMDU4WjAzMTEwLwYDVQQD EygxMTQ5MmZiNzU0Y2U1NmJjYzBkNjQxOTUyNmZlOGE2MmFjNjBhOWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSAwjOs9XCufDfyDRnLRuVInvc1E JYMSKC6GXxXuDPUa1NFzct41VM3sj9q6RSBs6RTssq5b9zHUmebZuMqoN11RTXjF Bb4FkZ+9wSbI8VsOO468UauG2StpWHBzi4vAMQw+k1vdpU8A2ngBqVNkohQNdnN9 qBG3Vr7HsS8jfxT17axV0+OD5ykb1TmfjUQAioT6MwQHjAiz6tZSTpdbTkPUAJHf NFfJTaOUm3sNu6HDN/BhlkxO2WFtBEsu4mdfwLW5/CKsLF4L4h5fjBRLwGVy/qFj FU/YeDVJ7XEdK/Ql9SA52NbGWM8ngAP1eql29ExJdg6uVlVF0WZ77NM4qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFJL7dUzla8wNZBlSb+imKsYKnTMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoh4qqQGU Q6+ActDJBEMMAZzhlNQGdmJ9NpFoWHoz4QRq9sP4zVZRx7gK/P6SpDFZ0HCBuQ5i ATx1F5ZLnDLqgFgvx0DuyEVr7KrgVd2MRd1LUtR7a07+/9PhQVG5MY+hFuCS8KYv biD2j+PsLznExwjYgL/5bwUmdr7nT4FwEWLvQERgvBUh096LkI1BhNlWsVxs76bG i2ePMlnjoGwHB/54zx234GC+tu+J2GmkPaIIz7rcF0JG0AQJmFRjs9YwlxM9vCcX PLG/bKC+mLgSIRtTPPleSR4Ckk9LQK2WmCrSJUWmXWxCFR3XOBM1Gid4zl0i32V9 pr+1pRtAgpU5uQ== -----END CERTIFICATE-----Generated at Sat Aug 15 02:28:15 2026 by rpki-client