$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json) Hash identifier: QV5LeTLyWnxHUz2vHpluxmQ/x6aHsJcjnOqkMNJ+n4g= Subject key identifier: 02:E9:48:1E:F3:5A:FC:D8:51:4C:11:AB:03:84:14:44:D0:55:6B:3C Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 019EBF91845FC1A4333F21A70ABF5F5EADEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft Manifest number: 1967 Signing time: Sat 13 Jun 2026 06:00:45 +0000 Manifest this update: Sat 13 Jun 2026 06:00:45 +0000 Manifest next update: Sun 14 Jun 2026 06:00:45 +0000 Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=) 2: 24lvsSxh7MUVQcE3eg7_Djq-Tso.asa (hash: Hjss/TGOcmwG6GtuhM5X9Ph0gtLBzHScnu3DTiqPa9c=) 3: 36K8uvuxLLbczf1YXC_ASJxPbng.asa (hash: 870+pBNRKYWmY6ePML/QQK6e/MrQo9VBr7qVr3BXzBw=) 4: FWYopd6TlSta9pASbYNvraqyvNM.asa (hash: I8ABTTre9KM0IJfOp7PT39kOwRj4TE5ZVbXeJW/G+gk=) 5: NL0Mp2ak4kIOVa-mI-T_3-kFvlE.roa (hash: 8D7MsuGjI7HsrBxlKjaEVJ+I36rJeX9th0UxwcPUwQs=) 6: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=) 7: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=) 8: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=) 9: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=) 10: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: BdK9sCLaFxrvpXopAvsHZDU1btppMIymgTdB6AJLvb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:91:84:5f:c1:a4:33:3f:21:a7:0a:bf:5f:5e:ad:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Jun 13 06:00:45 2026 GMT Not After : Jun 14 06:00:45 2026 GMT Subject: CN=02e9481ef35afcd8514c11ab03841444d0556b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3c:13:4a:4f:ed:f6:d0:22:f7:c8:95:c1:eb: da:53:19:71:de:bb:26:2e:d9:94:17:85:45:26:5b: 21:f6:b8:70:fd:9e:a0:07:9b:ed:61:d1:b9:4c:da: 5f:bf:79:9c:14:89:c1:9e:46:e3:d0:78:10:f1:3b: 1e:18:21:6d:00:d1:42:89:fc:60:9a:bc:1c:99:40: d1:73:ae:61:51:e8:6a:9a:8d:a6:cb:f7:c6:45:b7: 94:30:f7:a5:33:9a:b6:ee:33:86:1d:99:1f:af:a3: f3:ab:99:9c:1b:13:80:9d:85:01:3f:3b:a1:f4:97: 42:3e:47:7f:1f:05:95:fb:e9:ef:1f:3d:1c:60:d6: 8a:2f:2a:36:61:d2:91:0d:e3:f6:f6:57:dc:ba:9b: 46:a6:d4:ca:26:ae:83:99:a8:68:e7:ad:7f:67:35: 92:59:3f:40:e4:b0:fc:0d:f6:f8:03:f3:97:6e:1c: 30:e2:ed:1f:68:5e:32:e6:36:1f:df:2b:05:90:2c: 63:32:1c:dc:37:bd:65:0a:c4:e9:bb:31:d4:bc:6e: a6:39:e4:53:79:16:4d:79:a4:20:4e:64:bd:b3:ad: b5:d4:59:f6:0a:f5:13:09:99:6f:57:ea:ac:96:52: f3:c1:f4:4f:ef:c1:3a:26:39:86:6a:e0:30:94:96: d3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E9:48:1E:F3:5A:FC:D8:51:4C:11:AB:03:84:14:44:D0:55:6B:3C X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:da:64:da:80:51:dc:b5:ee:d3:14:bb:e0:72:c5:48:ad:3d: b4:39:43:6a:9b:a7:68:6e:89:c8:6b:f2:0a:b2:61:1d:2a:1c: 7a:59:a7:b1:1a:6d:a5:58:05:dd:55:4f:e3:81:b5:8b:f5:01: e4:95:09:ec:cd:33:5f:01:25:03:a9:e1:a2:14:5c:ba:78:a2: 02:a1:3c:d5:4b:03:84:94:f8:b6:39:c0:fa:02:c9:4d:f0:16: 84:5c:49:11:ae:bd:5c:c0:c0:93:ba:11:ea:10:b4:09:3f:63: ae:03:72:63:a5:37:55:1d:f4:b8:3b:d2:4b:0b:33:88:2f:c0: 6a:26:3e:d5:7b:e5:9c:b4:e2:3d:c6:35:fc:4d:38:3f:3e:36: 6f:dd:9e:3e:77:91:d1:2f:3c:9c:ef:67:c5:f8:2d:10:04:04: 97:92:6a:ef:76:4b:1c:e7:a2:79:36:ba:90:f4:04:26:39:ee: 43:fc:61:32:b2:a5:e1:c9:22:77:dc:6d:7c:3f:d8:25:b8:b1: b8:34:b9:40:8a:81:f6:9b:8b:65:4c:41:ec:ca:88:5b:53:e2: ef:cb:6a:ad:00:16:e5:eb:c0:e1:3a:55:07:f2:df:1d:a0:ee: 2b:87:4b:c7:93:a9:36:1a:b1:14:52:07:ca:47:3d:ba:b3:90: b7:42:c8:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/kYRfwaQzPyGnCr9fXq3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYwNjEzMDYwMDQ1WhcNMjYwNjE0MDYwMDQ1WjAzMTEwLwYDVQQD EygwMmU5NDgxZWYzNWFmY2Q4NTE0YzExYWIwMzg0MTQ0NGQwNTU2YjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojwTSk/t9tAi98iVwevaUxlx3rsm LtmUF4VFJlsh9rhw/Z6gB5vtYdG5TNpfv3mcFInBnkbj0HgQ8TseGCFtANFCifxg mrwcmUDRc65hUehqmo2my/fGRbeUMPelM5q27jOGHZkfr6Pzq5mcGxOAnYUBPzuh 9JdCPkd/HwWV++nvHz0cYNaKLyo2YdKRDeP29lfcuptGptTKJq6Dmaho561/ZzWS WT9A5LD8Dfb4A/OXbhww4u0faF4y5jYf3ysFkCxjMhzcN71lCsTpuzHUvG6mOeRT eRZNeaQgTmS9s6211Fn2CvUTCZlvV+qsllLzwfRP78E6JjmGauAwlJbTAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALpSB7zWvzYUUwRqwOEFETQVWs8MB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdpk2oBR 3LXu0xS74HLFSK09tDlDapunaG6JyGvyCrJhHSocelmnsRptpVgF3VVP44G1i/UB 5JUJ7M0zXwElA6nhohRcuniiAqE81UsDhJT4tjnA+gLJTfAWhFxJEa69XMDAk7oR 6hC0CT9jrgNyY6U3VR30uDvSSwsziC/AaiY+1XvlnLTiPcY1/E04Pz42b92ePneR 0S88nO9nxfgtEAQEl5Jq73ZLHOeieTa6kPQEJjnuQ/xhMrKl4ckid9xtfD/YJbix uDS5QIqB9puLZUxB7MqIW1Pi78tqrQAW5evA4TpVB/LfHaDuK4dLx5OpNhqxFFIH ykc9urOQt0LIcA== -----END CERTIFICATE-----Generated at Sat Jun 13 11:03:25 2026 by rpki-client