$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: uviBT/l5M5tLi+4mBD9bYB4ZQ5ptm851n2K/cLWXoik= Subject key identifier: 87:CD:A7:76:CA:F4:6B:20:89:19:5D:1A:73:47:5C:E2:31:70:43:62 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019D9C2D414CEAAD5FD7A8D7361AB1C8E026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 18CF Signing time: Fri 17 Apr 2026 16:01:44 +0000 Manifest this update: Fri 17 Apr 2026 16:01:44 +0000 Manifest next update: Sat 18 Apr 2026 16:01:44 +0000 Files and hashes: 1: McQ1AOjlDwgZAqlNis7OMo30suU.roa (hash: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE=) 2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: qJNfvWz66cRP6QQPRbepwssPtJN/Z0ZSXVdMXfi7/Qo=) 4: SPId_SWHbv84MaBpzxcBFitrFiA.roa (hash: fkjaLtVx/IVOE485FOawltfAwHKBTGzzIXUgCRCBDeg=) 5: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 6: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 7: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 8: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (hash: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY=) 9: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (hash: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0=) 10: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 11: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 12: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 13: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9c:2d:41:4c:ea:ad:5f:d7:a8:d7:36:1a:b1:c8:e0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Apr 17 16:01:44 2026 GMT Not After : Apr 18 16:01:44 2026 GMT Subject: CN=87cda776caf46b2089195d1a73475ce231704362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:82:2d:f4:70:17:46:98:39:29:f6:4a:01:a0: 85:f0:17:36:6e:e8:7d:aa:81:f2:98:15:bb:be:e5: 60:7a:bf:df:17:c6:46:78:54:bb:e4:1b:1e:11:29: 86:09:e2:58:41:9c:ff:40:c8:c7:d9:9a:af:e7:30: d7:5a:8b:b3:62:9c:f2:9e:b8:81:63:f0:59:1e:43: e8:7a:1f:ad:84:74:0a:b7:5b:f0:2d:66:37:4a:8c: 13:1e:88:4e:e4:ea:65:79:02:53:41:c7:d6:56:c4: b2:67:78:b2:75:00:83:6d:5e:b2:a5:13:d7:6c:b2: 9a:27:8c:22:04:23:a8:7a:c2:97:84:b1:11:5a:0a: 98:69:1f:3b:75:5d:4e:46:04:5e:cb:c7:58:e2:14: 87:9d:a4:77:13:44:c5:c5:07:0c:2a:6e:d5:36:80: 09:f5:ec:2c:aa:b1:be:66:93:34:ac:cc:45:60:26: a6:14:50:1f:9e:c0:c2:d2:77:10:ce:12:59:6c:d0: 48:c2:1e:24:e6:74:eb:74:2c:43:34:78:ee:f1:d4: 67:6b:8d:1f:27:d9:6a:f5:6f:71:1d:6b:ef:cb:21: fe:5f:86:48:59:32:dc:dd:d9:f7:03:a3:53:a0:d3: 88:56:d3:0d:8e:a3:3d:35:1b:56:a1:fd:9d:8d:8b: 68:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:A7:76:CA:F4:6B:20:89:19:5D:1A:73:47:5C:E2:31:70:43:62 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:eb:49:93:c7:0f:e5:2e:29:87:40:aa:fa:0c:77:1e:2e:fa: 4b:cf:8c:d1:30:c9:f8:0b:75:22:88:3d:eb:16:aa:71:f1:4c: 09:68:be:22:a5:ad:2e:e0:4a:e7:16:49:30:ff:fb:b0:31:e5: 98:0b:a0:60:41:11:53:aa:2a:01:60:a1:c7:f0:8b:17:67:cb: 25:3f:ed:84:28:18:be:08:0a:a2:51:6c:8b:7e:39:c4:7f:d0: e6:ba:82:eb:f0:dc:ba:34:1a:08:2f:2d:cd:40:70:e6:e0:7c: 84:64:cf:c1:8c:6a:20:7e:8e:6e:b4:0c:31:ef:3a:85:9f:06: 00:e8:b4:75:36:89:9b:d4:63:f1:64:55:e4:5a:f4:09:60:f8: c4:31:f2:4f:5c:aa:df:e6:a5:07:f5:88:7a:8a:76:77:87:39: 3e:0c:19:d6:26:a4:c0:2e:08:3e:ee:1a:42:b8:91:bb:4f:fd: 33:63:4a:1c:e0:65:cf:85:8d:75:09:42:a1:c4:66:12:e3:74: 96:e5:39:c4:8c:bd:95:af:b5:00:31:f5:c1:25:72:52:9b:42: b4:17:b8:8e:a7:e4:5e:03:4d:f4:a8:88:25:db:50:2c:a4:e8: a3:03:7d:0b:a7:e8:ad:90:d2:1d:b0:eb:84:0d:56:dd:29:e6: fe:4a:0a:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2cLUFM6q1f16jXNhqxyOAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwNDE3MTYwMTQ0WhcNMjYwNDE4MTYwMTQ0WjAzMTEwLwYDVQQD Eyg4N2NkYTc3NmNhZjQ2YjIwODkxOTVkMWE3MzQ3NWNlMjMxNzA0MzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoIt9HAXRpg5KfZKAaCF8Bc2buh9 qoHymBW7vuVger/fF8ZGeFS75BseESmGCeJYQZz/QMjH2Zqv5zDXWouzYpzynriB Y/BZHkPoeh+thHQKt1vwLWY3SowTHohO5OpleQJTQcfWVsSyZ3iydQCDbV6ypRPX bLKaJ4wiBCOoesKXhLERWgqYaR87dV1ORgRey8dY4hSHnaR3E0TFxQcMKm7VNoAJ 9ewsqrG+ZpM0rMxFYCamFFAfnsDC0ncQzhJZbNBIwh4k5nTrdCxDNHju8dRna40f J9lq9W9xHWvvyyH+X4ZIWTLc3dn3A6NToNOIVtMNjqM9NRtWof2djYtoXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfNp3bK9GsgiRldGnNHXOIxcENiMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOtJk8cP 5S4ph0Cq+gx3Hi76S8+M0TDJ+At1Iog96xaqcfFMCWi+IqWtLuBK5xZJMP/7sDHl mAugYEERU6oqAWChx/CLF2fLJT/thCgYvggKolFsi345xH/Q5rqC6/DcujQaCC8t zUBw5uB8hGTPwYxqIH6ObrQMMe86hZ8GAOi0dTaJm9Rj8WRV5Fr0CWD4xDHyT1yq 3+alB/WIeop2d4c5PgwZ1iakwC4IPu4aQriRu0/9M2NKHOBlz4WNdQlCocRmEuN0 luU5xIy9la+1ADH1wSVyUptCtBe4jqfkXgNN9KiIJdtQLKToowN9C6forZDSHbDr hA1W3Snm/koKvg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:43:44 2026 by rpki-client