$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: DyyNdla40U38fbUxPUTPVdwJQFOuznANQTqsCrlMHvo= Subject key identifier: 3F:68:9B:11:2C:7C:A6:33:76:C8:FA:D5:87:01:A8:9D:F8:6D:96:3E Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019E29CBF06D7D246A95F913F969C88F0F17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 1108 Signing time: Fri 15 May 2026 04:01:31 +0000 Manifest this update: Fri 15 May 2026 04:01:31 +0000 Manifest next update: Sat 16 May 2026 04:01:31 +0000 Files and hashes: 1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=) 2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=) 3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=) 4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=) 5: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (hash: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc=) 6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=) 7: L5qyY9jZaitIZWVHzJF8EMKtnJw.roa (hash: RHPOnQl7M+92fyRwAlYoQqCItx05c0P7/Yx6ROjX9QU=) 8: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=) 9: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=) 10: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: 2ZkHuyUOFmS9FtFpOXXa2NXraqIcu9UgAB0J2+DyeL8=) 11: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=) 12: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (hash: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:29:cb:f0:6d:7d:24:6a:95:f9:13:f9:69:c8:8f:0f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: May 15 04:01:31 2026 GMT Not After : May 16 04:01:31 2026 GMT Subject: CN=3f689b112c7ca63376c8fad58701a89df86d963e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6a:a5:cb:dd:b8:9b:03:96:00:b6:19:78:4f: b1:30:e2:f1:24:b3:c0:04:cd:09:d4:52:d5:97:0f: 58:55:d8:b4:23:a9:35:ad:bb:7d:21:81:c9:af:83: 26:73:8c:a8:a1:04:94:4b:6f:bb:96:49:81:dd:df: 02:9f:7a:e6:44:49:62:1d:78:1c:70:c6:fd:d6:a9: 76:b5:ab:61:77:c3:2c:8c:40:cb:e0:4f:f8:11:1d: 65:bf:44:66:1c:7b:ef:02:35:d0:85:7a:c7:06:bb: ca:80:d6:99:b2:4d:46:14:1a:d9:a3:34:d9:da:5f: 10:b7:c3:f4:10:b8:98:fe:99:b9:71:8e:d7:c4:d7: 18:5e:f7:05:fc:30:50:75:48:fc:e7:ad:bd:3a:9b: bb:cb:8d:48:d8:33:0c:b9:c0:c7:e6:6c:e7:92:17: b5:9a:e9:f8:47:c4:fb:bd:4a:c1:c4:47:2f:e0:55: f3:d7:c6:05:0d:87:11:43:8e:a4:66:7c:1f:da:88: b2:a5:20:ab:cd:27:cd:02:45:87:62:b4:13:bb:f6: 6e:eb:c4:61:f5:c5:b5:eb:9e:16:c0:90:92:b4:bd: 9e:cf:a1:bc:90:ee:fe:b9:8b:e0:28:80:79:00:b8: 4f:8a:12:ac:d2:36:fd:4f:b2:8a:4c:72:7d:d2:4a: c5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:68:9B:11:2C:7C:A6:33:76:C8:FA:D5:87:01:A8:9D:F8:6D:96:3E X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a8:fd:8f:65:98:2c:1e:e4:a8:07:d1:c0:a6:2b:a0:a7:08: 44:05:91:3c:07:4e:c7:84:78:41:b3:94:28:60:86:33:13:c2: 0c:e3:f7:06:6b:c4:9c:04:ad:62:35:19:6d:3a:a0:a0:e9:53: 0f:c2:b7:a8:46:d0:21:e4:a6:5f:2a:d0:34:d5:70:f9:cf:40: 40:c2:c3:04:fa:64:28:b6:4a:9f:b7:c9:2b:a8:08:4a:b0:5f: 09:61:d9:a3:07:5b:b4:b7:4f:49:20:4f:9c:35:61:b5:9d:7c: 30:d5:64:ee:99:b1:09:f9:9e:05:12:5a:d2:3e:34:eb:8d:79: d7:bd:ac:9b:81:0e:09:a6:85:6b:b7:36:cd:9a:6b:a5:d7:e5: ea:7a:83:8f:e5:ca:3e:07:00:df:88:2a:e3:f5:2e:82:91:bf: 37:d1:9a:0b:15:ea:15:ed:26:dd:9d:9a:7a:1e:02:80:f4:29: da:f7:9e:86:3a:91:dd:80:fa:2f:be:2a:0c:5d:96:a0:25:43: da:31:46:68:80:c9:bf:19:7c:ea:34:db:92:95:11:bb:d2:d2: 00:15:8b:e2:12:45:70:a1:3f:f8:23:71:d4:6c:19:8a:75:b9: ec:b7:da:02:bd:30:b3:df:5d:79:a6:e8:ee:20:2e:aa:76:69: 7f:ab:73:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4py/BtfSRqlfkT+WnIjw8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwNTE1MDQwMTMxWhcNMjYwNTE2MDQwMTMxWjAzMTEwLwYDVQQD EygzZjY4OWIxMTJjN2NhNjMzNzZjOGZhZDU4NzAxYTg5ZGY4NmQ5NjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2qly924mwOWALYZeE+xMOLxJLPA BM0J1FLVlw9YVdi0I6k1rbt9IYHJr4Mmc4yooQSUS2+7lkmB3d8Cn3rmREliHXgc cMb91ql2tathd8MsjEDL4E/4ER1lv0RmHHvvAjXQhXrHBrvKgNaZsk1GFBrZozTZ 2l8Qt8P0ELiY/pm5cY7XxNcYXvcF/DBQdUj85629Opu7y41I2DMMucDH5mznkhe1 mun4R8T7vUrBxEcv4FXz18YFDYcRQ46kZnwf2oiypSCrzSfNAkWHYrQTu/Zu68Rh 9cW1654WwJCStL2ez6G8kO7+uYvgKIB5ALhPihKs0jb9T7KKTHJ90krF+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9omxEsfKYzdsj61YcBqJ34bZY+MB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6j9j2WY LB7kqAfRwKYroKcIRAWRPAdOx4R4QbOUKGCGMxPCDOP3BmvEnAStYjUZbTqgoOlT D8K3qEbQIeSmXyrQNNVw+c9AQMLDBPpkKLZKn7fJK6gISrBfCWHZowdbtLdPSSBP nDVhtZ18MNVk7pmxCfmeBRJa0j406415172sm4EOCaaFa7c2zZprpdfl6nqDj+XK PgcA34gq4/UugpG/N9GaCxXqFe0m3Z2aeh4CgPQp2veehjqR3YD6L74qDF2WoCVD 2jFGaIDJvxl86jTbkpURu9LSABWL4hJFcKE/+CNx1GwZinW57LfaAr0ws99deabo 7iAuqnZpf6tzVw== -----END CERTIFICATE-----Generated at Fri May 15 06:59:39 2026 by rpki-client