$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: ECXXroNOMXRkrqv5yUDe3Xpp9FSAokpAU6V5zjeNDqE= Subject key identifier: 39:71:E6:A9:63:51:7C:DE:A4:39:D2:A2:3B:A3:7D:62:A4:B9:70:9B Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 01A0E889783407D9C847C552EB038BB3240D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1A90 Signing time: Mon 28 Sep 2026 15:01:58 +0000 Manifest this update: Mon 28 Sep 2026 15:01:58 +0000 Manifest next update: Tue 29 Sep 2026 15:01:58 +0000 Files and hashes: 1: 7MWrSKdEmt_KvsVn1wCa40GQvZo.roa (hash: GfjKe1qpCh2floSl6pe5xQjH6bPFI/79DRvpHWVwdEE=) 2: 9cNKQWK3wk1irmE7oa8T4PR8mc0.roa (hash: u5fJLnWvAGQzCGewqpUpjr9+ttOL7JnpgPLBPCMOWKk=) 3: GAkPYv8UHYs_EoZPb4jWXtDDAC0.roa (hash: lnLCFUL9tM4n3iWBg5iwZCi3PtIQMScXWDpeh/kO248=) 4: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 5: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: cOPe96VsVivyvTIO7CiNCsOzewS8iRvCDuSZ8xDSqbo=) 6: a1bVO0ckGyR5RAdUKb14doqmY1Y.roa (hash: DiKvMb/S5/tIEx2dVRhu5wKcRs0L0R0Ljnjm6cmc2r0=) 7: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 8: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 9: ijbiJD7TGtArmmQdogwgJNz_Iss.roa (hash: pWVbgHKQTvi3IHOIcmkXTEU92wiUS9n0t7V8IM2/M4U=) 10: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 11: nlzsv5_4ztHk87YIpIDNp8kA-LY.roa (hash: I+evjHY278SDlMs7AgnRI/W35THgRR/EtPMQ/T244gg=) 12: sZCbmYQyfGpH4iaOrLx2v2yCTAg.roa (hash: ZUhSIpiNJj1ft9rDQsYCHKV1UDkkyNZJvSyHieA9rEU=) 13: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 14: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 15: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 16: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 14:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e8:89:78:34:07:d9:c8:47:c5:52:eb:03:8b:b3:24:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Sep 28 15:01:58 2026 GMT Not After : Sep 29 15:01:58 2026 GMT Subject: CN=3971e6a963517cdea439d2a23ba37d62a4b9709b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d1:07:b2:e5:64:fd:86:f5:51:6c:12:88:72: f0:85:29:f4:99:0e:e3:03:42:c9:7d:0c:48:09:f3: 38:73:d6:1e:cb:db:d2:95:4e:59:4c:98:a4:07:7b: 01:76:92:8f:1e:02:84:5f:53:e4:56:02:34:81:b3: 6f:de:27:32:9f:69:eb:19:7b:b3:d8:b3:9d:b7:5a: de:5e:2b:f1:4f:6f:ea:75:01:c2:86:6f:03:cb:fe: 7f:31:ec:21:0d:7c:2f:11:e6:61:8e:cf:77:e5:6e: 6d:8d:24:3c:de:fa:eb:d9:34:f3:e7:8c:41:17:ff: bc:19:dd:d7:2a:c3:4e:e7:63:a3:76:5b:19:c0:f7: b5:5c:2d:54:66:83:a7:de:00:75:95:5b:2a:56:12: 28:91:93:ee:eb:23:fc:b8:e0:c6:4d:5a:9c:80:51: 86:23:c3:9f:50:22:f7:81:1a:78:52:dc:93:8c:b1: 24:86:22:2e:34:5c:f6:80:8b:89:45:71:e6:5c:17: a9:b8:44:ab:79:cc:63:35:51:8b:34:d5:5c:fa:9a: 88:30:92:53:d5:65:2d:c5:23:bb:6a:ba:3b:7c:3d: b4:ab:df:a0:98:ec:8c:53:c6:bf:98:cc:21:b4:5e: bd:79:6d:61:9d:bd:18:e0:ef:6a:2e:94:0e:4f:e7: bd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:71:E6:A9:63:51:7C:DE:A4:39:D2:A2:3B:A3:7D:62:A4:B9:70:9B X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:56:31:a0:aa:da:98:85:ea:97:c0:f7:1a:50:fc:da:2e:10: f8:1b:ad:c3:04:dd:64:a8:92:c6:6e:50:a3:f9:20:ea:3f:ce: 75:75:2e:ba:8b:87:f9:ce:cf:bc:e5:54:73:45:b9:2e:ae:76: 73:18:c5:98:50:4a:89:b3:af:46:1e:8a:2f:e0:ff:f9:45:99: c1:17:6a:6d:3d:4b:8e:f5:b5:e8:ff:da:29:e2:27:9b:d1:7b: 22:34:70:7f:2f:9c:f5:22:3e:3a:d3:95:dd:fb:fd:33:df:3b: 27:81:ca:1a:d6:d7:f9:03:97:69:5c:18:20:f1:48:2e:3c:4d: 69:ac:ce:c0:9f:e0:ea:8b:07:e7:06:bf:04:2f:bb:bd:dc:70: 2a:57:ab:87:2c:d9:df:78:5b:ed:e9:58:25:25:56:2d:b1:26: 42:b3:aa:b1:19:f7:bb:2f:d3:6e:2e:46:ff:1f:5b:65:42:1a: c7:94:94:ee:1a:07:3d:c6:cd:d3:97:15:61:61:92:9c:27:85: 5f:70:a0:c2:b9:07:68:af:ac:8b:a9:ca:d1:5a:8d:f0:13:58: 4c:e1:c0:30:5e:f8:4b:22:d8:78:3c:4a:d8:0f:62:98:6f:86: 47:6c:42:7b:8e:10:32:39:c9:0f:5c:a7:aa:70:0c:32:bb:c7: ef:fb:be:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDoiXg0B9nIR8VS6wOLsyQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwOTI4MTUwMTU4WhcNMjYwOTI5MTUwMTU4WjAzMTEwLwYDVQQD EygzOTcxZTZhOTYzNTE3Y2RlYTQzOWQyYTIzYmEzN2Q2MmE0Yjk3MDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9EHsuVk/Yb1UWwSiHLwhSn0mQ7j A0LJfQxICfM4c9Yey9vSlU5ZTJikB3sBdpKPHgKEX1PkVgI0gbNv3icyn2nrGXuz 2LOdt1reXivxT2/qdQHChm8Dy/5/MewhDXwvEeZhjs935W5tjSQ83vrr2TTz54xB F/+8Gd3XKsNO52OjdlsZwPe1XC1UZoOn3gB1lVsqVhIokZPu6yP8uODGTVqcgFGG I8OfUCL3gRp4UtyTjLEkhiIuNFz2gIuJRXHmXBepuESrecxjNVGLNNVc+pqIMJJT 1WUtxSO7aro7fD20q9+gmOyMU8a/mMwhtF69eW1hnb0Y4O9qLpQOT+e9YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlx5qljUXzepDnSojujfWKkuXCbMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolYxoKra mIXql8D3GlD82i4Q+ButwwTdZKiSxm5Qo/kg6j/OdXUuuouH+c7PvOVUc0W5Lq52 cxjFmFBKibOvRh6KL+D/+UWZwRdqbT1LjvW16P/aKeInm9F7IjRwfy+c9SI+OtOV 3fv9M987J4HKGtbX+QOXaVwYIPFILjxNaazOwJ/g6osH5wa/BC+7vdxwKlerhyzZ 33hb7elYJSVWLbEmQrOqsRn3uy/Tbi5G/x9bZUIax5SU7hoHPcbN05cVYWGSnCeF X3CgwrkHaK+si6nK0VqN8BNYTOHAMF74SyLYeDxK2A9imG+GR2xCe44QMjnJD1yn qnAMMrvH7/u+Mg== -----END CERTIFICATE-----Generated at Mon Sep 28 22:45:51 2026 by rpki-client