$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: 878AVd7tdSGj866p4v7wYNTSI0L+qFmAF2TM8S0q4Z0= Subject key identifier: B5:6F:D3:ED:9F:6C:8F:04:BE:E2:B8:F5:B0:61:81:C9:ED:96:7E:3B Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019CACB570243B89D31932EA9F9CEB80D497 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1853 Signing time: Mon 02 Mar 2026 04:01:37 +0000 Manifest this update: Mon 02 Mar 2026 04:01:37 +0000 Manifest next update: Tue 03 Mar 2026 04:01:37 +0000 Files and hashes: 1: McQ1AOjlDwgZAqlNis7OMo30suU.roa (hash: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE=) 2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: fjrlW7lfNZQIlEE2Xz/f/Ux1albLAZKeVPfCrdIc8wY=) 4: SPId_SWHbv84MaBpzxcBFitrFiA.roa (hash: fkjaLtVx/IVOE485FOawltfAwHKBTGzzIXUgCRCBDeg=) 5: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 6: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 7: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 8: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (hash: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY=) 9: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (hash: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0=) 10: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 11: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 12: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 13: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:b5:70:24:3b:89:d3:19:32:ea:9f:9c:eb:80:d4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Mar 2 04:01:37 2026 GMT Not After : Mar 3 04:01:37 2026 GMT Subject: CN=b56fd3ed9f6c8f04bee2b8f5b06181c9ed967e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:99:42:eb:cd:32:57:24:b4:b5:18:a7:f3:a3: b8:6d:4e:e4:39:55:a4:6b:45:08:09:6c:53:d9:be: 57:f7:3a:05:4c:0f:6f:d4:c8:e1:70:01:29:d1:88: 4b:a4:e4:56:ed:2a:36:06:0d:2e:93:d1:bb:4a:bb: 21:3f:75:bc:39:5b:5b:fb:89:4d:1a:5e:eb:c6:38: bf:0f:e0:0e:2e:9b:12:74:7d:3c:c6:b1:d2:f2:ba: 7b:5b:30:82:5c:5e:1e:e5:65:11:e5:8b:7e:bb:60: 18:e9:a9:7a:8a:fd:34:5a:14:65:0c:41:2f:b6:36: 79:d1:0a:3d:72:4d:0d:23:c3:de:b8:41:90:3a:09: 49:b2:5a:27:39:af:a8:f7:78:3d:af:25:87:ed:d7: e0:64:57:61:07:38:9d:a7:38:1c:77:4f:e1:98:30: be:d3:49:4e:53:2c:32:98:ab:ff:80:61:61:6f:ec: 3d:c7:7c:da:70:4f:e2:7d:87:0b:0c:58:7d:b9:02: c5:88:0f:0b:cb:b5:02:dd:9f:59:da:e9:96:bc:96: 9b:78:18:14:3a:93:83:58:41:da:7c:91:66:ed:e9: fb:84:66:3f:6f:69:95:c2:4e:9e:be:2e:f1:4b:47: ff:e4:79:20:7c:67:06:15:bb:c8:a2:f5:cb:3e:27: 29:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6F:D3:ED:9F:6C:8F:04:BE:E2:B8:F5:B0:61:81:C9:ED:96:7E:3B X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:28:b8:d6:7f:cb:61:a0:e7:f6:1d:55:b3:52:a2:17:ba:4f: 12:17:5e:0e:b8:4d:22:4c:24:dd:6f:89:20:d6:34:41:a5:6a: c5:ad:67:a2:b3:ab:d2:c3:a8:c8:b3:af:c9:ad:7f:ad:d8:ec: 95:d0:ef:f9:4b:b5:e1:c2:8b:7d:d1:ad:56:1b:85:82:77:3b: 80:7b:b7:05:4e:86:97:9f:26:ca:0b:a0:1b:bf:aa:76:a1:c3: 7f:98:07:06:ba:16:05:69:42:03:be:99:66:4e:78:d2:73:64: 84:aa:72:68:d2:fc:2e:17:e9:1d:47:c0:c2:b1:8e:28:23:fd: 51:ca:fc:67:ef:a7:df:f1:21:84:dc:58:fb:4e:ac:1a:87:a5: 73:7b:31:00:47:35:d3:1b:73:d3:d8:cf:72:41:9d:3f:6f:41: bc:ee:c7:e8:71:de:22:6e:ed:06:14:e0:06:03:e6:b3:6c:ff: b9:64:bd:0c:d6:71:77:9a:e2:d1:fe:6d:af:35:2f:8a:58:20: 12:6e:75:8f:ef:15:20:f0:de:77:81:ea:ff:0b:87:5d:3e:01: 58:74:86:a1:06:e1:02:41:a6:4f:3c:98:1b:2b:d1:51:09:61: d8:f9:51:29:28:0f:b3:17:7c:a1:41:9e:8f:1e:3e:33:fe:f4: 9e:e2:b0:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZystXAkO4nTGTLqn5zrgNSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwMzAyMDQwMTM3WhcNMjYwMzAzMDQwMTM3WjAzMTEwLwYDVQQD EyhiNTZmZDNlZDlmNmM4ZjA0YmVlMmI4ZjViMDYxODFjOWVkOTY3ZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75lC680yVyS0tRin86O4bU7kOVWk a0UICWxT2b5X9zoFTA9v1MjhcAEp0YhLpORW7So2Bg0uk9G7SrshP3W8OVtb+4lN Gl7rxji/D+AOLpsSdH08xrHS8rp7WzCCXF4e5WUR5Yt+u2AY6al6iv00WhRlDEEv tjZ50Qo9ck0NI8PeuEGQOglJslonOa+o93g9ryWH7dfgZFdhBzidpzgcd0/hmDC+ 00lOUywymKv/gGFhb+w9x3zacE/ifYcLDFh9uQLFiA8Ly7UC3Z9Z2umWvJabeBgU OpODWEHafJFm7en7hGY/b2mVwk6evi7xS0f/5HkgfGcGFbvIovXLPicpLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVv0+2fbI8EvuK49bBhgcntln47MB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCi41n/L YaDn9h1Vs1KiF7pPEhdeDrhNIkwk3W+JINY0QaVqxa1norOr0sOoyLOvya1/rdjs ldDv+Uu14cKLfdGtVhuFgnc7gHu3BU6Gl58mygugG7+qdqHDf5gHBroWBWlCA76Z Zk540nNkhKpyaNL8LhfpHUfAwrGOKCP9Ucr8Z++n3/EhhNxY+06sGoelc3sxAEc1 0xtz09jPckGdP29BvO7H6HHeIm7tBhTgBgPms2z/uWS9DNZxd5ri0f5trzUvilgg Em51j+8VIPDed4Hq/wuHXT4BWHSGoQbhAkGmTzyYGyvRUQlh2PlRKSgPsxd8oUGe jx4+M/70nuKwug== -----END CERTIFICATE-----Generated at Mon Mar 2 09:31:22 2026 by rpki-client