$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: CgnmwIDCgAGQkCEnXLd9/pcsMZwj6ey7meRFiyELXj8= Subject key identifier: A9:9E:32:6A:29:1F:BE:32:66:27:E8:BA:65:B4:AD:41:0B:F2:C8:78 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019EC1B6DB5D7B69AA6AE5E52F37F2A18364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1967 Signing time: Sat 13 Jun 2026 16:00:46 +0000 Manifest this update: Sat 13 Jun 2026 16:00:46 +0000 Manifest next update: Sun 14 Jun 2026 16:00:46 +0000 Files and hashes: 1: McQ1AOjlDwgZAqlNis7OMo30suU.roa (hash: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE=) 2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: gc7Ft0ru4MNhSLBTRlBRs10H6PvRLcE0Sp3MUhwO/tk=) 4: SPId_SWHbv84MaBpzxcBFitrFiA.roa (hash: fkjaLtVx/IVOE485FOawltfAwHKBTGzzIXUgCRCBDeg=) 5: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 6: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 7: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 8: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (hash: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY=) 9: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (hash: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0=) 10: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 11: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 12: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 13: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 10:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c1:b6:db:5d:7b:69:aa:6a:e5:e5:2f:37:f2:a1:83:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jun 13 16:00:46 2026 GMT Not After : Jun 14 16:00:46 2026 GMT Subject: CN=a99e326a291fbe326627e8ba65b4ad410bf2c878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8d:29:1a:c1:9e:49:fa:81:d8:69:ed:7b:b5: 32:44:32:9d:12:fb:38:80:4a:9f:05:57:73:e1:b9: 72:7f:12:44:70:a4:c1:f2:e7:81:c6:75:49:9d:99: 87:f6:12:ae:18:98:3d:66:1f:53:71:d0:98:37:22: 40:17:18:eb:a5:94:34:5f:13:e5:c5:13:3d:81:db: 77:c1:57:ec:16:42:26:14:10:27:23:7f:ed:bc:ea: e0:79:96:d7:37:35:0a:fa:57:3e:d5:65:6b:19:b5: 5e:00:72:ff:14:67:89:b0:97:92:b0:42:cc:6d:93: cd:ec:e8:49:72:46:2e:b9:7b:90:f5:da:bb:40:12: 60:51:2e:b8:f7:48:22:70:18:49:2d:00:23:17:2f: 83:09:bd:f1:42:88:d8:16:5b:cb:18:58:98:19:cc: 8c:94:77:c1:4c:df:d0:09:92:1d:93:7a:52:e0:d8: 3d:83:23:70:36:78:a1:c6:5c:51:fc:bc:08:52:22: ce:c7:86:0b:36:70:c8:e0:72:2f:9d:01:30:e3:ee: a9:53:17:14:b9:df:71:c0:4b:a0:87:2e:dc:03:d1: 65:7b:cc:20:45:24:d5:de:c3:1e:6c:7b:61:e0:37: 78:3d:88:29:46:1f:ac:6f:08:57:10:40:6c:6d:24: f6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9E:32:6A:29:1F:BE:32:66:27:E8:BA:65:B4:AD:41:0B:F2:C8:78 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0d:6d:80:59:5e:3d:ed:7d:6d:55:06:f8:fd:82:28:8c:37: 40:00:d8:0f:8d:da:8b:f6:35:54:76:13:1c:a5:43:12:9e:bb: 06:e3:97:0e:a7:f7:75:2f:5f:32:d7:74:df:da:c5:84:b3:46: 2d:ca:f0:fd:9b:48:19:e1:ca:ce:b0:be:64:33:8e:ed:61:5c: 61:2d:38:e6:32:00:48:79:b1:9c:2f:75:00:a1:bf:77:dc:39: c8:60:7a:32:4d:29:4d:41:39:48:10:3f:de:10:cd:bd:d3:c7: e0:97:8e:60:5a:bb:66:63:9a:f4:5d:39:fc:05:89:e1:c4:03: 43:b9:96:dc:c0:86:89:3b:39:be:9e:11:06:e4:f5:26:47:2d: 65:6d:9e:c6:80:3c:53:f7:1c:cc:a8:d8:bb:ad:7f:db:8c:f8: 77:28:d3:64:74:db:d3:fe:cc:82:11:6a:46:56:1c:95:c8:7f: 54:d8:b9:64:0f:65:1f:59:3b:6d:3c:ea:04:67:e1:5f:f5:44: 4c:f9:2e:5d:31:53:a7:8e:21:9e:d8:38:59:28:62:fd:4f:83: d5:d1:92:6c:cf:9a:b5:4c:05:84:49:be:98:ee:04:fe:be:ab: c1:c5:49:76:87:f6:9f:a3:5d:79:b5:bc:de:33:d6:8c:e3:c7: 0f:6a:4b:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7Btttde2mqauXlLzfyoYNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwNjEzMTYwMDQ2WhcNMjYwNjE0MTYwMDQ2WjAzMTEwLwYDVQQD EyhhOTllMzI2YTI5MWZiZTMyNjYyN2U4YmE2NWI0YWQ0MTBiZjJjODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA540pGsGeSfqB2Gnte7UyRDKdEvs4 gEqfBVdz4blyfxJEcKTB8ueBxnVJnZmH9hKuGJg9Zh9TcdCYNyJAFxjrpZQ0XxPl xRM9gdt3wVfsFkImFBAnI3/tvOrgeZbXNzUK+lc+1WVrGbVeAHL/FGeJsJeSsELM bZPN7OhJckYuuXuQ9dq7QBJgUS6490gicBhJLQAjFy+DCb3xQojYFlvLGFiYGcyM lHfBTN/QCZIdk3pS4Ng9gyNwNnihxlxR/LwIUiLOx4YLNnDI4HIvnQEw4+6pUxcU ud9xwEughy7cA9Fle8wgRSTV3sMebHth4Dd4PYgpRh+sbwhXEEBsbST2gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmeMmopH74yZifoumW0rUEL8sh4MB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAew1tgFle Pe19bVUG+P2CKIw3QADYD43ai/Y1VHYTHKVDEp67BuOXDqf3dS9fMtd039rFhLNG Lcrw/ZtIGeHKzrC+ZDOO7WFcYS045jIASHmxnC91AKG/d9w5yGB6Mk0pTUE5SBA/ 3hDNvdPH4JeOYFq7ZmOa9F05/AWJ4cQDQ7mW3MCGiTs5vp4RBuT1JkctZW2exoA8 U/cczKjYu61/24z4dyjTZHTb0/7MghFqRlYclch/VNi5ZA9lH1k7bTzqBGfhX/VE TPkuXTFTp44hntg4WShi/U+D1dGSbM+atUwFhEm+mO4E/r6rwcVJdof2n6NdebW8 3jPWjOPHD2pLbg== -----END CERTIFICATE-----Generated at Sat Jun 13 21:03:58 2026 by rpki-client