$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json) Hash identifier: UWEQ6TkEuZS+ni1SY5w9yh2cus/Q3nTWYxTPenLnoDI= Subject key identifier: B7:86:80:8E:26:C0:0D:2A:8E:D1:2B:D7:74:5C:1B:19:EA:48:F3:6F Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 01A1AB5E9BA5485E31C1D67DE36C94D8B0DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft Manifest number: 1AEB Signing time: Thu 05 Nov 2026 11:01:06 +0000 Manifest this update: Thu 05 Nov 2026 11:01:06 +0000 Manifest next update: Fri 06 Nov 2026 11:01:06 +0000 Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=) 2: EKWjQGsxTdGvNeyrv25RW0gIu5c.asa (hash: YC8zzw/fjJ0HVykD+J7LUGmnQfgoDVj+KXw7tcLJDTo=) 3: NL0Mp2ak4kIOVa-mI-T_3-kFvlE.roa (hash: 8D7MsuGjI7HsrBxlKjaEVJ+I36rJeX9th0UxwcPUwQs=) 4: RWCxKzMoRgWDToOVJIjXxUmCrZ8.asa (hash: gleP71b91vUaLqtTDIk1TgzOth5ivl/5vI1ZJtFTRBI=) 5: UII5oPagDAy9HZxXmqfjHdfeTQ4.asa (hash: qnhOqF8IHvEYtAkSuCtgU3CO9PyBhYK4n3SAcIy+GiQ=) 6: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=) 7: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=) 8: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=) 9: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=) 10: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: DM+4K4Fnm55WhDeLc1x0TCQr1LkENH5d+uFbYuXDzYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:ab:5e:9b:a5:48:5e:31:c1:d6:7d:e3:6c:94:d8:b0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Nov 5 11:01:06 2026 GMT Not After : Nov 6 11:01:06 2026 GMT Subject: CN=b786808e26c00d2a8ed12bd7745c1b19ea48f36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d8:75:d6:be:bf:0e:3f:06:12:96:32:2f:67: 9e:08:a2:0d:8f:2d:49:ce:8b:54:9a:c6:b1:84:e7: cf:1d:6b:84:3a:34:9f:07:8c:0e:ac:a0:f0:57:af: f6:aa:a9:5e:94:a9:5b:1f:3e:fc:de:74:60:38:ec: f3:cf:40:4e:ea:eb:ec:d2:2e:d0:e1:fb:4e:e6:ff: 1e:88:f2:ca:ef:f4:79:36:93:95:c6:3e:7c:8c:07: ef:f1:c7:b0:78:2a:9b:6c:0a:74:7f:ce:46:30:ae: bf:73:c4:86:77:30:fc:75:3f:b9:da:6d:09:ad:a0: c4:75:ee:e7:8e:43:3c:39:0e:e3:ad:d5:ec:61:e6: f1:39:72:3f:5f:e8:e5:1f:cf:29:1e:54:38:f4:bd: 6e:ea:56:c9:78:3b:b4:1c:46:d9:49:fe:bd:83:58: 85:12:9d:75:11:f1:0d:4c:fd:d8:8f:00:1d:5c:0b: 6e:7c:63:b2:6c:65:4e:52:e4:0a:4d:70:2a:7a:01: c8:2a:cb:60:6c:1b:93:00:c6:fc:cf:01:18:94:30: cc:e3:03:a7:8c:32:ec:e6:de:7e:2f:ab:3e:2a:d8: 70:99:db:b6:17:e2:5a:bb:f2:0a:5f:d2:d7:2b:45: 58:b8:bc:c0:8e:86:21:84:7d:f5:fc:9f:e6:09:f1: 21:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:86:80:8E:26:C0:0D:2A:8E:D1:2B:D7:74:5C:1B:19:EA:48:F3:6F X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:01:be:0a:aa:e4:95:ad:a3:63:31:00:09:50:ba:5c:b0:91: 2c:ec:8c:0e:1e:50:b3:73:50:a5:13:45:86:8f:8d:d9:5d:06: 7f:7c:64:94:32:83:12:49:b7:f7:4b:0d:32:92:fa:90:08:9a: d9:1d:a2:ba:87:4f:8a:38:cb:5c:83:87:4a:38:a6:26:22:66: 1f:6a:41:2c:01:0c:35:57:16:21:6e:b7:d0:1e:79:dc:83:27: b1:6b:96:38:2a:b7:8a:44:ca:5c:b3:c9:7d:94:49:2b:d0:2d: 58:35:db:cb:e2:6d:66:71:4a:6c:a0:b8:c9:11:e7:cb:0a:c1: fc:fd:ca:0b:0f:85:9e:0b:68:2a:95:c8:42:c8:b5:bb:ef:37: 87:f3:79:9e:80:03:e9:98:0e:30:53:ec:64:84:f7:21:6e:77: 71:c1:92:48:66:e4:93:73:f6:73:91:09:09:c8:63:7e:c4:e2: b5:93:d8:b8:32:6a:f6:35:87:0b:f8:27:37:95:54:50:1d:b1: fa:34:1e:9a:0b:d8:ce:23:db:b5:dc:9f:73:3f:19:b9:80:54: 32:09:f0:33:96:4b:a0:ba:9f:b5:d4:1b:96:8b:7b:61:fb:5a: ad:4b:51:41:76:13:7d:f6:4f:1a:15:41:b1:94:3d:af:02:ac: 33:55:7a:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGrXpulSF4xwdZ942yU2LDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYxMTA1MTEwMTA2WhcNMjYxMTA2MTEwMTA2WjAzMTEwLwYDVQQD EyhiNzg2ODA4ZTI2YzAwZDJhOGVkMTJiZDc3NDVjMWIxOWVhNDhmMzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodh11r6/Dj8GEpYyL2eeCKINjy1J zotUmsaxhOfPHWuEOjSfB4wOrKDwV6/2qqlelKlbHz783nRgOOzzz0BO6uvs0i7Q 4ftO5v8eiPLK7/R5NpOVxj58jAfv8ceweCqbbAp0f85GMK6/c8SGdzD8dT+52m0J raDEde7njkM8OQ7jrdXsYebxOXI/X+jlH88pHlQ49L1u6lbJeDu0HEbZSf69g1iF Ep11EfENTP3YjwAdXAtufGOybGVOUuQKTXAqegHIKstgbBuTAMb8zwEYlDDM4wOn jDLs5t5+L6s+Kthwmdu2F+Jau/IKX9LXK0VYuLzAjoYhhH31/J/mCfEhywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLeGgI4mwA0qjtEr13RcGxnqSPNvMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAG+Cqrk la2jYzEACVC6XLCRLOyMDh5Qs3NQpRNFho+N2V0Gf3xklDKDEkm390sNMpL6kAia 2R2iuodPijjLXIOHSjimJiJmH2pBLAEMNVcWIW630B553IMnsWuWOCq3ikTKXLPJ fZRJK9AtWDXby+JtZnFKbKC4yRHnywrB/P3KCw+FngtoKpXIQsi1u+83h/N5noAD 6ZgOMFPsZIT3IW53ccGSSGbkk3P2c5EJCchjfsTitZPYuDJq9jWHC/gnN5VUUB2x +jQemgvYziPbtdyfcz8ZuYBUMgnwM5ZLoLqftdQblot7YftarUtRQXYTffZPGhVB sZQ9rwKsM1V6lg== -----END CERTIFICATE-----Generated at Thu Nov 5 14:32:25 2026 by rpki-client