$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json) Hash identifier: pRHWYBCdXGeXxRxwUn0n+Uj6Q7m0Z524Vt5ACY6GLG8= Subject key identifier: 3C:D3:C6:BC:33:14:94:72:A8:05:C8:96:1C:D7:F1:AA:9B:8B:81:71 Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 019FA7BD76724BE307A1CD9AD26F65D53BAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft Manifest number: 19E0 Signing time: Tue 28 Jul 2026 08:00:39 +0000 Manifest this update: Tue 28 Jul 2026 08:00:39 +0000 Manifest next update: Wed 29 Jul 2026 08:00:39 +0000 Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=) 2: EKWjQGsxTdGvNeyrv25RW0gIu5c.asa (hash: YC8zzw/fjJ0HVykD+J7LUGmnQfgoDVj+KXw7tcLJDTo=) 3: NL0Mp2ak4kIOVa-mI-T_3-kFvlE.roa (hash: 8D7MsuGjI7HsrBxlKjaEVJ+I36rJeX9th0UxwcPUwQs=) 4: RWCxKzMoRgWDToOVJIjXxUmCrZ8.asa (hash: gleP71b91vUaLqtTDIk1TgzOth5ivl/5vI1ZJtFTRBI=) 5: UII5oPagDAy9HZxXmqfjHdfeTQ4.asa (hash: qnhOqF8IHvEYtAkSuCtgU3CO9PyBhYK4n3SAcIy+GiQ=) 6: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=) 7: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=) 8: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=) 9: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=) 10: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: zUAwkgKM37z8nATreckxtCU/vaVGngGITz+AqMed5nQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 07:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:bd:76:72:4b:e3:07:a1:cd:9a:d2:6f:65:d5:3b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Jul 28 08:00:39 2026 GMT Not After : Jul 29 08:00:39 2026 GMT Subject: CN=3cd3c6bc33149472a805c8961cd7f1aa9b8b8171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:16:67:89:a1:ba:3f:6a:b0:77:09:38:8d:af: 1b:b9:b1:21:12:9a:5d:19:e9:20:53:43:54:c0:42: 60:69:1d:ef:3e:78:92:6c:27:24:31:a8:dd:d5:5f: e9:0f:37:7a:e5:f7:9a:6b:a9:d1:33:4d:ed:16:69: 83:5f:20:2a:e9:0f:2d:d7:7e:ba:ea:a9:e0:49:66: 80:2c:e0:a5:d3:65:71:ba:7b:20:3f:ba:67:c6:d8: a5:8f:42:4e:b2:3f:22:e1:9e:8e:64:18:d6:62:9f: ea:84:32:1c:33:8f:ab:a1:11:95:ac:99:62:67:f8: 49:04:5d:76:43:16:71:0c:f3:e4:7b:80:19:bd:55: 94:ba:b6:18:ea:0f:43:bf:28:a6:15:99:d6:38:a2: 58:04:13:03:34:25:92:ee:c5:88:0a:47:c9:f9:1b: d2:85:c8:a7:68:b1:d0:91:60:18:e8:23:6c:8e:bf: fe:c3:b6:8c:f6:c3:1a:00:66:cb:3e:c9:81:bf:2a: 17:22:37:a2:27:d6:7d:f6:88:a4:a7:26:9c:01:13: 51:9e:30:8d:cc:37:19:9d:ce:9c:0b:e9:44:31:c0: 73:c4:72:31:a5:c4:5e:bb:ef:da:60:4d:b0:f9:62: 35:a2:c8:74:fe:58:82:9f:14:1f:59:5b:86:f9:3c: c9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D3:C6:BC:33:14:94:72:A8:05:C8:96:1C:D7:F1:AA:9B:8B:81:71 X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:74:bf:f2:f3:d4:1b:00:64:ea:9f:e6:fd:c2:21:d9:63:cd: df:4b:d9:9f:d5:2e:9d:73:d8:7e:59:7d:b1:46:64:ca:61:d5: b8:4a:02:b6:ce:3b:e5:fe:95:77:c8:f4:63:74:1c:84:ef:ca: e4:b9:e8:21:83:10:d9:5c:cb:43:53:15:4b:ef:9b:7e:7a:e8: bf:1d:97:7b:fb:90:e5:20:74:5a:a2:5a:e5:8e:44:3b:16:30: 10:e0:6d:9b:42:07:5f:74:ac:df:1f:f5:9b:ec:2a:d5:60:cb: 1c:ae:38:e1:c0:f6:79:b8:d2:cd:08:6a:fc:26:e6:99:b8:14: 76:0d:69:3e:52:4d:3c:a9:78:42:33:42:9f:d5:a7:fa:bd:07: 56:48:d0:fa:24:03:47:c2:de:7e:6c:19:9a:fa:8c:61:a2:93: 77:7b:bb:0a:7f:43:ee:18:98:3a:ef:bc:18:27:97:34:a2:0d: f6:04:08:94:19:36:cc:1c:b7:4c:39:e5:05:9c:d7:87:bb:54: d9:b5:81:40:ee:22:ce:89:d7:f8:8c:c7:05:47:d0:79:fe:c9: 04:32:22:ae:63:a0:cb:93:b2:c7:25:99:b1:5e:de:03:4e:9d: ec:05:d1:c3:e9:f0:5f:20:8a:00:2a:32:de:7f:c6:51:b9:70: e5:98:84:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+nvXZyS+MHoc2a0m9l1TuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYwNzI4MDgwMDM5WhcNMjYwNzI5MDgwMDM5WjAzMTEwLwYDVQQD EygzY2QzYzZiYzMzMTQ5NDcyYTgwNWM4OTYxY2Q3ZjFhYTliOGI4MTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hZniaG6P2qwdwk4ja8bubEhEppd GekgU0NUwEJgaR3vPniSbCckMajd1V/pDzd65feaa6nRM03tFmmDXyAq6Q8t1366 6qngSWaALOCl02VxunsgP7pnxtilj0JOsj8i4Z6OZBjWYp/qhDIcM4+roRGVrJli Z/hJBF12QxZxDPPke4AZvVWUurYY6g9DvyimFZnWOKJYBBMDNCWS7sWICkfJ+RvS hcinaLHQkWAY6CNsjr/+w7aM9sMaAGbLPsmBvyoXIjeiJ9Z99oikpyacARNRnjCN zDcZnc6cC+lEMcBzxHIxpcReu+/aYE2w+WI1osh0/liCnxQfWVuG+TzJ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzTxrwzFJRyqAXIlhzX8aqbi4FxMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXS/8vPU GwBk6p/m/cIh2WPN30vZn9UunXPYfll9sUZkymHVuEoCts475f6Vd8j0Y3QchO/K 5LnoIYMQ2VzLQ1MVS++bfnrovx2Xe/uQ5SB0WqJa5Y5EOxYwEOBtm0IHX3Ss3x/1 m+wq1WDLHK444cD2ebjSzQhq/CbmmbgUdg1pPlJNPKl4QjNCn9Wn+r0HVkjQ+iQD R8LefmwZmvqMYaKTd3u7Cn9D7hiYOu+8GCeXNKIN9gQIlBk2zBy3TDnlBZzXh7tU 2bWBQO4izonX+IzHBUfQef7JBDIirmOgy5OyxyWZsV7eA06d7AXRw+nwXyCKACoy 3n/GUblw5ZiE0A== -----END CERTIFICATE-----Generated at Tue Jul 28 13:37:29 2026 by rpki-client