$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: jFrg4Z/EmnQ3I9JHd0iByo5ODc61DKxQEmVE/2Cxsx0= Subject key identifier: 87:57:3D:16:AC:DE:18:68:0D:C7:77:6A:12:1C:D9:37:38:65:4F:E1 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019FAAF58A1D5943D92FBDDCE8886B1A87D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 19E1 Signing time: Tue 28 Jul 2026 23:00:46 +0000 Manifest this update: Tue 28 Jul 2026 23:00:46 +0000 Manifest next update: Wed 29 Jul 2026 23:00:46 +0000 Files and hashes: 1: McQ1AOjlDwgZAqlNis7OMo30suU.roa (hash: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE=) 2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: qaM9Rzga3ev7j34hQNdTDh/je4WJvjN9QrR9X0jHm0I=) 4: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 5: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 6: go5zmIjMFUbuaVU7TDIK6GCVKzE.roa (hash: SFdYPGfWYCvWnl4ngcgtIbNB25CwfARixTuIkg+0AKI=) 7: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 8: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (hash: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY=) 9: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (hash: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0=) 10: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 11: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 12: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 13: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:f5:8a:1d:59:43:d9:2f:bd:dc:e8:88:6b:1a:87:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jul 28 23:00:46 2026 GMT Not After : Jul 29 23:00:46 2026 GMT Subject: CN=87573d16acde18680dc7776a121cd93738654fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:d1:75:24:52:65:63:e3:5f:5c:02:f0:a5: ea:ae:51:95:e0:a1:42:3b:dd:bf:4b:28:7b:ff:25: 6b:18:47:94:e5:c5:07:9f:57:00:ff:7f:22:f6:0f: 8f:9a:7d:87:f3:10:4a:54:32:36:7b:93:4a:da:a4: 20:f8:f8:75:87:10:17:b4:d9:59:11:f0:e9:74:5b: 3f:91:b9:49:33:e3:7d:c6:a9:23:a8:38:c2:e3:6d: d8:38:f9:94:3d:e2:3e:6d:60:a2:c7:7a:85:5f:fe: af:0e:bb:92:9a:bf:f9:8c:ac:e3:e4:98:db:b4:be: 6a:8c:c6:d6:64:3b:b5:33:77:4e:5f:07:01:fa:2a: 15:bc:5d:e4:e3:5e:fd:b3:5d:85:c4:e5:85:f5:cd: 80:f6:c7:e3:5a:0b:3a:16:b4:2b:89:e0:50:58:43: 39:c7:67:a7:9a:05:07:eb:57:30:c2:1d:71:25:74: c2:d1:f1:80:72:c3:91:58:c6:14:6a:4d:e3:fe:02: 07:23:e1:a1:ee:d1:37:57:2a:2e:fe:0b:a6:6a:11: 20:76:05:b1:19:9a:2f:b5:a4:1e:4b:c7:29:df:df: 80:fb:ca:e0:95:73:56:26:98:40:d8:2b:fb:ae:1a: 7c:18:48:46:31:70:53:c3:88:fa:d1:93:dd:f9:8a: 68:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:57:3D:16:AC:DE:18:68:0D:C7:77:6A:12:1C:D9:37:38:65:4F:E1 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ce:51:28:48:fd:18:38:30:d0:51:0f:31:80:6b:e6:f1:e9: 9f:aa:f0:62:bf:57:88:b8:42:0c:09:77:4c:f6:ac:88:e9:45: e2:ba:74:f1:f9:dd:d0:cf:f3:ce:4b:32:2e:e6:b0:9c:87:98: 03:18:cf:d7:3e:b7:bd:a1:81:06:e8:64:66:a2:4c:83:60:ce: ae:7b:38:89:f9:01:b0:d5:b0:75:5c:a8:26:6e:b4:bb:6e:d5: 51:5c:52:e7:8e:74:ce:79:07:8e:f0:da:a9:6d:37:9f:36:aa: 98:76:94:e7:da:bc:c5:1b:e8:fc:e4:22:8f:f7:d6:8a:59:56: 49:94:78:58:1f:f7:9e:e1:8b:b6:fe:b7:ed:d9:6e:ee:a5:37: 0c:4b:19:63:47:40:61:a8:36:e0:7d:5c:f8:16:2a:2c:58:7a: 12:20:fe:09:bb:1c:97:91:a1:da:a9:39:5e:c6:34:12:89:fe: 0c:02:d1:ca:33:c1:e9:6f:95:85:7f:4a:09:b4:8a:77:ea:e4: f3:20:ec:d8:fd:83:a5:f3:ae:6c:59:b4:ea:b0:e9:17:55:73: 76:74:c4:62:fe:4d:dc:df:dd:1e:34:47:06:5c:7e:48:ca:d0: e6:1f:ed:a9:63:46:35:19:10:ea:d7:a9:a4:74:39:4f:ec:ce: bf:92:fe:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+q9YodWUPZL73c6IhrGofVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwNzI4MjMwMDQ2WhcNMjYwNzI5MjMwMDQ2WjAzMTEwLwYDVQQD Eyg4NzU3M2QxNmFjZGUxODY4MGRjNzc3NmExMjFjZDkzNzM4NjU0ZmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNvRdSRSZWPjX1wC8KXqrlGV4KFC O92/Syh7/yVrGEeU5cUHn1cA/38i9g+Pmn2H8xBKVDI2e5NK2qQg+Ph1hxAXtNlZ EfDpdFs/kblJM+N9xqkjqDjC423YOPmUPeI+bWCix3qFX/6vDruSmr/5jKzj5Jjb tL5qjMbWZDu1M3dOXwcB+ioVvF3k4179s12FxOWF9c2A9sfjWgs6FrQrieBQWEM5 x2enmgUH61cwwh1xJXTC0fGAcsORWMYUak3j/gIHI+Gh7tE3Vyou/gumahEgdgWx GZovtaQeS8cp39+A+8rglXNWJphA2Cv7rhp8GEhGMXBTw4j60ZPd+YpoNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdXPRas3hhoDcd3ahIc2Tc4ZU/hMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARs5RKEj9 GDgw0FEPMYBr5vHpn6rwYr9XiLhCDAl3TPasiOlF4rp08fnd0M/zzksyLuawnIeY AxjP1z63vaGBBuhkZqJMg2DOrns4ifkBsNWwdVyoJm60u27VUVxS5450znkHjvDa qW03nzaqmHaU59q8xRvo/OQij/fWillWSZR4WB/3nuGLtv637dlu7qU3DEsZY0dA Yag24H1c+BYqLFh6EiD+Cbscl5Gh2qk5XsY0Eon+DALRyjPB6W+VhX9KCbSKd+rk 8yDs2P2DpfOubFm06rDpF1VzdnTEYv5N3N/dHjRHBlx+SMrQ5h/tqWNGNRkQ6tep pHQ5T+zOv5L+TA== -----END CERTIFICATE-----Generated at Wed Jul 29 08:37:49 2026 by rpki-client