$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json) Hash identifier: QxxXu93elkb7iAn2Vc3wyDjiqPAIf2Yn5PkhLIsnc58= Subject key identifier: CF:25:85:EF:8E:5E:01:AF:A5:B0:28:AE:61:43:A8:AB:1F:BC:F1:AD Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4 Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4 Certificate serial: 019ED34FA2DD0FBCF1FCB4DBF2B9461DF999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft Manifest number: 1980 Signing time: Wed 17 Jun 2026 02:01:12 +0000 Manifest this update: Wed 17 Jun 2026 02:01:12 +0000 Manifest next update: Thu 18 Jun 2026 02:01:12 +0000 Files and hashes: 1: 4lIp8ea3WQFBN3Pqrh3ubx-xLGE.roa (hash: MzcrykLHz17bn51pu2cLDUXzNCETQeDxNQFftxunStY=) 2: 5Aim9vGIPcLoJ8J-N__EKTAZhGU.roa (hash: DEyXdgrj8KNTGdHcyFHO3L9TrDiI80UpnOO4Jv7Q0X0=) 3: EXM8zv4hDMV5vpuDDhitBb0YsJk.roa (hash: dWnBV6uZ6yoWCEmneHJfdW94pJqTaIBLN9AwRXQDpQY=) 4: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: KugoPxYBTV/rqZoOwFxHPTgRqwfsJlz9572E8eRb3Gk=) 5: RgoVuEZzrB6iPeoDkS2VZ5UJEjM.roa (hash: 7eIfiRclCfgNOCGCCRoqijzNwFTi6X6q7V5T2mrxMRU=) 6: bOwoeGXB2wja2W0aIO7cJEqFn0c.roa (hash: TjrVmHhe6qTnTA+IeFLgJO+nqktu8K34RwVXqHJjTPE=) 7: gNAyrBVoFaWeREXzr33gHPdjLuc.roa (hash: 9t3cAZDPUcX15JFGLDAbTwFu6aPFTfX5yposYhTNwLc=) 8: kuKa_RbKBF-8apG5eNAA7ZGrk64.roa (hash: 8GXXom7MNoYYjacR6QL5aPwdId669M5Mrd0b2uKdYxk=) 9: r4gojXpCfVfMsKXfq3IcqeiE878.roa (hash: T3XdnQciJ8C4NOqpLw2BOhgbQDlMQMjf7FhYEgWICW0=) 10: w4XR7nwro5wjJE5JtKRUqOgZf5k.roa (hash: KiumyrEOqBPi+erguwa4/UEHEHESuukLcClHJxfKhnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:d3:4f:a2:dd:0f:bc:f1:fc:b4:db:f2:b9:46:1d:f9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4 Validity Not Before: Jun 17 02:01:12 2026 GMT Not After : Jun 18 02:01:12 2026 GMT Subject: CN=cf2585ef8e5e01afa5b028ae6143a8ab1fbcf1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8f:19:05:5e:6e:b3:58:34:1b:88:11:1f:aa: 0a:c6:c9:86:a6:58:ee:48:61:1e:de:af:fd:34:e6: 2a:a7:24:fa:72:b9:4a:29:b7:1b:44:af:ee:66:31: 26:13:85:74:cb:29:f3:cb:3a:a7:a2:d1:20:f8:f0: ae:ab:42:e9:00:01:bf:8e:0d:3c:dc:90:41:f3:58: b9:b7:5c:98:6a:01:83:9e:4b:21:32:ea:32:e7:7a: b0:3a:85:87:b3:a6:5e:98:b8:ab:cc:e8:de:8a:d3: 9c:95:67:09:a0:28:89:43:72:e6:51:a9:3e:b1:76: 4e:c7:3a:26:e6:99:df:5b:41:9a:71:d6:68:d8:0d: b8:13:85:6f:3e:fa:8b:90:6a:7d:ea:6c:7b:e4:e5: ca:79:93:bd:e9:62:94:fc:7a:01:92:0a:30:f3:5b: 0c:c7:0a:db:3d:b5:80:59:b6:6f:62:f4:0e:74:1a: 60:86:92:2a:a6:75:67:a0:1b:49:b6:e0:d4:e4:a6: 1a:a0:c5:b0:f5:e0:22:5f:b7:d5:fe:fe:3d:5d:fe: b8:9d:55:b5:bb:6f:94:28:9f:4d:e4:43:5c:b7:d2: 1d:45:cb:b5:18:05:b6:f5:9f:45:79:a3:eb:0d:60: dc:fa:31:cf:83:a8:41:d3:96:75:ff:36:bf:16:5a: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:25:85:EF:8E:5E:01:AF:A5:B0:28:AE:61:43:A8:AB:1F:BC:F1:AD X509v3 Authority Key Identifier: keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c3:bc:b7:54:21:59:9a:41:4d:1d:f3:5d:e1:92:63:54:f5: 0f:40:fd:df:8b:32:51:b7:95:54:e5:a8:cf:06:9b:a7:fb:83: a3:7f:ec:2e:39:f4:5c:d9:e1:7b:e9:c4:fd:42:6b:f6:d6:29: 9a:a1:d4:0e:89:b6:4a:a6:57:39:d7:6e:86:13:ff:c4:9d:a3: 1b:bd:a2:c0:a4:31:ac:16:b7:65:85:d8:c8:50:0b:de:ed:26: 3d:d4:69:45:6a:b8:3d:26:78:6c:9c:0e:dd:8e:60:9f:71:56: 67:b8:63:00:43:55:cd:da:b8:f6:89:dd:b4:b5:c1:f7:44:6b: 66:39:2b:a5:a2:81:80:aa:ee:e8:28:dc:c5:59:f8:3d:dc:36: 9d:80:68:6d:03:fe:44:72:6d:2c:96:c3:21:b7:0f:b2:34:87: 78:df:a0:85:ba:7b:2d:74:da:0c:cf:74:cd:ee:db:6e:f2:7f: 92:82:bc:d5:0c:cf:0a:c1:c4:f2:be:7e:f7:68:1a:91:5d:74: 3e:30:46:88:bb:83:2c:aa:77:0a:6a:ce:9d:08:c0:42:a0:8f: 83:89:07:a5:aa:2f:57:bd:99:0e:32:d8:34:9d:2a:b0:c4:0a: 9b:3f:aa:1b:3e:10:87:bf:cf:5c:bf:b0:eb:4b:76:81:4d:05: 2a:90:9c:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7TT6LdD7zx/LTb8rlGHfmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1 NjJmYTQwHhcNMjYwNjE3MDIwMTEyWhcNMjYwNjE4MDIwMTEyWjAzMTEwLwYDVQQD EyhjZjI1ODVlZjhlNWUwMWFmYTViMDI4YWU2MTQzYThhYjFmYmNmMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI8ZBV5us1g0G4gRH6oKxsmGplju SGEe3q/9NOYqpyT6crlKKbcbRK/uZjEmE4V0yynzyzqnotEg+PCuq0LpAAG/jg08 3JBB81i5t1yYagGDnkshMuoy53qwOoWHs6ZemLirzOjeitOclWcJoCiJQ3LmUak+ sXZOxzom5pnfW0GacdZo2A24E4VvPvqLkGp96mx75OXKeZO96WKU/HoBkgow81sM xwrbPbWAWbZvYvQOdBpghpIqpnVnoBtJtuDU5KYaoMWw9eAiX7fV/v49Xf64nVW1 u2+UKJ9N5ENct9IdRcu1GAW29Z9FeaPrDWDc+jHPg6hB05Z1/za/FlqE6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8lhe+OXgGvpbAormFDqKsfvPGtMB8GA1UdIwQY MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt MTAzMGNkYmU2YmQ0LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0 LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8O8t1Qh WZpBTR3zXeGSY1T1D0D934syUbeVVOWozwabp/uDo3/sLjn0XNnhe+nE/UJr9tYp mqHUDom2SqZXOdduhhP/xJ2jG72iwKQxrBa3ZYXYyFAL3u0mPdRpRWq4PSZ4bJwO 3Y5gn3FWZ7hjAENVzdq49ondtLXB90RrZjkrpaKBgKru6CjcxVn4Pdw2nYBobQP+ RHJtLJbDIbcPsjSHeN+ghbp7LXTaDM90ze7bbvJ/koK81QzPCsHE8r5+92gakV10 PjBGiLuDLKp3CmrOnQjAQqCPg4kHpaovV72ZDjLYNJ0qsMQKmz+qGz4Qh7/PXL+w 60t2gU0FKpCc0g== -----END CERTIFICATE-----Generated at Wed Jun 17 09:03:54 2026 by rpki-client