$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: FtKvo/PMJ0nomE3gKuhzWb4z42G95zdcHFVGx5WFd7g= Subject key identifier: 93:91:74:1C:FB:6A:4B:73:95:32:CE:3B:47:9C:C2:BA:EB:09:6D:4E Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019CAEA3D8B206E0C953EB85554496A9CA07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1854 Signing time: Mon 02 Mar 2026 13:01:39 +0000 Manifest this update: Mon 02 Mar 2026 13:01:39 +0000 Manifest next update: Tue 03 Mar 2026 13:01:39 +0000 Files and hashes: 1: McQ1AOjlDwgZAqlNis7OMo30suU.roa (hash: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE=) 2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: DKk21Ry2NtnuuC1G7Wzln0UVRv1iRB58LzE8hJ+2+ss=) 4: SPId_SWHbv84MaBpzxcBFitrFiA.roa (hash: fkjaLtVx/IVOE485FOawltfAwHKBTGzzIXUgCRCBDeg=) 5: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 6: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 7: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 8: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (hash: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY=) 9: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (hash: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0=) 10: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 11: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 12: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 13: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ae:a3:d8:b2:06:e0:c9:53:eb:85:55:44:96:a9:ca:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Mar 2 13:01:39 2026 GMT Not After : Mar 3 13:01:39 2026 GMT Subject: CN=9391741cfb6a4b739532ce3b479cc2baeb096d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f5:87:82:16:a5:7d:99:e3:1d:65:cd:d3:11: 5f:56:e4:d1:d5:f2:17:ad:fa:de:2f:7d:84:2a:11: 44:39:db:e7:00:0e:ec:ba:db:3c:03:a0:36:40:48: c2:25:62:d3:c8:b8:eb:c3:21:4f:0e:cf:c4:5d:fe: 40:73:2b:d0:6b:58:a1:72:84:80:39:be:44:80:ab: d9:11:21:2a:72:88:e3:ab:9d:56:e6:b5:8d:87:4f: 52:d8:10:ca:65:88:76:44:2b:b0:4e:6f:c3:b8:59: 2d:df:80:07:a3:bd:83:0c:99:da:ec:4f:2a:df:f5: 6f:cc:a9:2a:5c:05:ea:4a:5d:b9:1c:b1:b6:aa:c1: 74:56:8e:4c:ce:66:bd:6a:30:8a:bc:36:69:2b:e2: a1:cd:51:df:55:31:6e:18:19:ab:21:14:d0:35:36: b7:5c:68:ce:6d:87:88:48:75:02:18:27:20:ad:d6: 0e:dc:68:2d:b4:6e:16:96:3f:af:85:fb:fb:00:4f: f9:2c:e6:95:7f:74:99:bf:53:2e:f0:f4:cc:15:c3: 3a:42:cf:00:60:3d:11:9a:14:f5:7c:d3:bf:d8:95: b3:1b:0a:1a:98:be:24:10:09:86:ce:5a:27:d8:3a: 57:1a:c3:28:36:b4:f9:9e:99:26:ac:ac:7b:f7:6a: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:91:74:1C:FB:6A:4B:73:95:32:CE:3B:47:9C:C2:BA:EB:09:6D:4E X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:9d:45:04:51:55:a1:22:c6:11:2c:4f:94:a7:10:a7:67:32: 64:43:ab:8b:d5:00:9b:9f:bb:5d:66:3b:5c:e2:75:64:8e:91: 68:43:fc:5f:39:81:17:ab:db:79:95:90:68:e3:e6:48:08:f0: 88:cb:8a:83:97:cb:03:ad:ab:07:71:6b:51:e0:21:3a:5e:85: 1e:fc:1e:94:f7:d9:dd:af:98:a4:50:31:73:ca:7b:94:88:10: 00:8b:6e:3c:c1:30:88:b8:b5:0a:20:3f:8f:2e:9a:90:09:be: a1:b5:55:0b:af:08:7a:c9:bb:a9:42:26:34:00:f3:94:6b:ed: 2b:61:e1:8c:e3:78:39:df:3f:5f:37:20:b4:e2:46:b3:da:bc: 90:9b:3c:d4:b1:d7:b3:76:77:b8:fc:ca:d7:13:5a:4f:f1:f6: 88:8e:7c:83:f5:e8:2f:31:9e:d3:a4:80:8a:c2:e5:3e:3d:bc: 3a:72:91:d5:b6:c8:e6:c6:6a:ac:f0:94:8f:44:12:64:ec:48: 24:64:05:8f:3a:a3:b0:10:90:e0:ea:d6:ba:69:c1:07:ca:e9: d4:a1:e4:72:ee:a4:f3:eb:cf:8e:ad:29:a5:6a:d6:a0:00:c2: 4f:93:44:c9:9e:28:08:59:a9:40:7a:de:57:8c:13:7d:fa:f1: ab:b1:aa:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyuo9iyBuDJU+uFVUSWqcoHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwMzAyMTMwMTM5WhcNMjYwMzAzMTMwMTM5WjAzMTEwLwYDVQQD Eyg5MzkxNzQxY2ZiNmE0YjczOTUzMmNlM2I0NzljYzJiYWViMDk2ZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PWHghalfZnjHWXN0xFfVuTR1fIX rfreL32EKhFEOdvnAA7suts8A6A2QEjCJWLTyLjrwyFPDs/EXf5AcyvQa1ihcoSA Ob5EgKvZESEqcojjq51W5rWNh09S2BDKZYh2RCuwTm/DuFkt34AHo72DDJna7E8q 3/VvzKkqXAXqSl25HLG2qsF0Vo5Mzma9ajCKvDZpK+KhzVHfVTFuGBmrIRTQNTa3 XGjObYeISHUCGCcgrdYO3GgttG4Wlj+vhfv7AE/5LOaVf3SZv1Mu8PTMFcM6Qs8A YD0RmhT1fNO/2JWzGwoamL4kEAmGzlon2DpXGsMoNrT5npkmrKx792rvYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJORdBz7aktzlTLOO0ecwrrrCW1OMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApp1FBFFV oSLGESxPlKcQp2cyZEOri9UAm5+7XWY7XOJ1ZI6RaEP8XzmBF6vbeZWQaOPmSAjw iMuKg5fLA62rB3FrUeAhOl6FHvwelPfZ3a+YpFAxc8p7lIgQAItuPMEwiLi1CiA/ jy6akAm+obVVC68Iesm7qUImNADzlGvtK2HhjON4Od8/XzcgtOJGs9q8kJs81LHX s3Z3uPzK1xNaT/H2iI58g/XoLzGe06SAisLlPj28OnKR1bbI5sZqrPCUj0QSZOxI JGQFjzqjsBCQ4OrWumnBB8rp1KHkcu6k8+vPjq0ppWrWoADCT5NEyZ4oCFmpQHre V4wTffrxq7Gqww== -----END CERTIFICATE-----Generated at Mon Mar 2 17:45:09 2026 by rpki-client