$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json) Hash identifier: ap9/LgiCQt/XKHaLANrCLHPLlOPhVTJQ5rJK382UWGY= Subject key identifier: F1:08:2B:21:06:CF:17:12:CD:87:A3:52:62:CD:BA:28:E3:94:24:07 Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 01A0BDD4EBEE522A5969BF1112D9AEDBA9CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft Manifest number: 1A70 Signing time: Sun 20 Sep 2026 08:00:42 +0000 Manifest this update: Sun 20 Sep 2026 08:00:42 +0000 Manifest next update: Mon 21 Sep 2026 08:00:42 +0000 Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=) 2: EKWjQGsxTdGvNeyrv25RW0gIu5c.asa (hash: YC8zzw/fjJ0HVykD+J7LUGmnQfgoDVj+KXw7tcLJDTo=) 3: NL0Mp2ak4kIOVa-mI-T_3-kFvlE.roa (hash: 8D7MsuGjI7HsrBxlKjaEVJ+I36rJeX9th0UxwcPUwQs=) 4: RWCxKzMoRgWDToOVJIjXxUmCrZ8.asa (hash: gleP71b91vUaLqtTDIk1TgzOth5ivl/5vI1ZJtFTRBI=) 5: UII5oPagDAy9HZxXmqfjHdfeTQ4.asa (hash: qnhOqF8IHvEYtAkSuCtgU3CO9PyBhYK4n3SAcIy+GiQ=) 6: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=) 7: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=) 8: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=) 9: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=) 10: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: Yh8FnnkBCAJ0KBvh3Az3bp4l3ARzKe3ThYPUqD/mI7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bd:d4:eb:ee:52:2a:59:69:bf:11:12:d9:ae:db:a9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Sep 20 08:00:42 2026 GMT Not After : Sep 21 08:00:42 2026 GMT Subject: CN=f1082b2106cf1712cd87a35262cdba28e3942407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d7:b3:cd:b9:c2:db:30:57:b4:18:48:50:47: fc:83:1d:14:ee:7a:55:4b:ae:cf:95:1a:bd:8d:49: 86:cd:f8:6b:16:80:88:b7:6f:7b:64:3b:cd:25:1b: 75:c9:8e:41:48:db:36:55:68:8b:fb:8f:8d:3a:a7: 1b:aa:c9:08:25:3d:b7:b0:23:49:79:90:32:49:2a: f2:2e:c2:5d:b1:6b:31:24:7b:5c:f1:0f:8e:ab:65: 83:55:ed:03:90:e3:f0:c7:2b:2f:1a:8e:46:ab:40: 03:3a:0d:7e:26:1c:67:27:04:84:9f:87:ad:8b:87: 8a:5d:56:70:98:5a:ff:59:a7:3b:37:36:40:e4:70: 7a:33:1a:39:7c:f4:ea:e1:d2:de:cb:9e:96:e0:8b: f7:d3:35:de:0c:d8:24:cb:e3:c3:c3:22:3a:1a:ea: 25:3b:c2:26:a1:9f:48:44:c1:48:b4:8d:65:43:ea: cd:8f:c3:c1:9e:0e:c4:db:2d:8f:0b:88:8e:46:70: 3a:1c:43:bd:44:b9:8b:76:96:fe:66:20:a2:da:53: 28:5f:f9:9e:8e:cb:a1:4e:97:63:bc:78:78:50:29: 40:e7:8d:e7:9b:b5:dd:10:b4:ce:b1:1f:81:86:4c: 31:b8:ba:a7:40:35:bf:0f:50:92:b3:24:66:e7:54: fd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:08:2B:21:06:CF:17:12:CD:87:A3:52:62:CD:BA:28:E3:94:24:07 X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f4:d6:6d:37:06:59:26:d3:8f:ae:f8:6f:41:c4:1d:00:9b: e5:ef:26:4b:7f:ed:79:7e:a7:20:c0:c0:df:df:21:7e:5c:0a: 9e:86:67:3a:71:f4:4c:c8:48:9a:d1:e2:a1:a9:a6:8b:cd:59: 4d:1c:35:18:52:c4:cd:cf:34:90:c8:08:70:ea:8e:d3:d1:b5: c0:77:6e:d9:b0:3f:c5:dd:08:01:57:30:7b:ed:c3:ac:d5:b7: ac:bc:87:59:fe:57:34:d4:a3:e2:36:33:67:b4:61:42:bb:83: 17:34:af:6e:d5:77:af:87:1b:a9:06:87:4a:9b:5d:a4:c3:b0: b6:d8:6e:b9:34:ad:09:0e:df:f4:87:36:56:2c:5f:de:fa:2c: 58:84:c9:69:7f:1a:64:76:ed:a1:40:4d:e0:0c:ca:81:43:73: 74:27:58:25:13:9d:31:57:db:1a:fb:e8:6f:5a:22:67:42:a8: 4c:5d:ab:ec:ba:76:ab:bb:0e:fb:19:13:d5:b5:8f:26:90:31: a8:5f:95:9a:94:aa:b1:0e:95:14:c3:4c:8a:4d:bf:9e:09:a4: 15:90:dd:f4:b3:a8:d2:d1:1a:df:6a:22:48:fb:db:57:5a:ef: 0b:b0:c8:46:26:0d:a1:a6:71:c9:de:27:7b:e3:37:e8:c1:cc: d2:68:bc:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC91OvuUipZab8REtmu26nKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYwOTIwMDgwMDQyWhcNMjYwOTIxMDgwMDQyWjAzMTEwLwYDVQQD EyhmMTA4MmIyMTA2Y2YxNzEyY2Q4N2EzNTI2MmNkYmEyOGUzOTQyNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tezzbnC2zBXtBhIUEf8gx0U7npV S67PlRq9jUmGzfhrFoCIt297ZDvNJRt1yY5BSNs2VWiL+4+NOqcbqskIJT23sCNJ eZAySSryLsJdsWsxJHtc8Q+Oq2WDVe0DkOPwxysvGo5Gq0ADOg1+JhxnJwSEn4et i4eKXVZwmFr/Wac7NzZA5HB6Mxo5fPTq4dLey56W4Iv30zXeDNgky+PDwyI6Guol O8ImoZ9IRMFItI1lQ+rNj8PBng7E2y2PC4iORnA6HEO9RLmLdpb+ZiCi2lMoX/me jsuhTpdjvHh4UClA543nm7XdELTOsR+BhkwxuLqnQDW/D1CSsyRm51T9cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEIKyEGzxcSzYejUmLNuijjlCQHMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfTWbTcG WSbTj674b0HEHQCb5e8mS3/teX6nIMDA398hflwKnoZnOnH0TMhImtHioammi81Z TRw1GFLEzc80kMgIcOqO09G1wHdu2bA/xd0IAVcwe+3DrNW3rLyHWf5XNNSj4jYz Z7RhQruDFzSvbtV3r4cbqQaHSptdpMOwtthuuTStCQ7f9Ic2Vixf3vosWITJaX8a ZHbtoUBN4AzKgUNzdCdYJROdMVfbGvvob1oiZ0KoTF2r7Lp2q7sO+xkT1bWPJpAx qF+VmpSqsQ6VFMNMik2/ngmkFZDd9LOo0tEa32oiSPvbV1rvC7DIRiYNoaZxyd4n e+M36MHM0mi8UA== -----END CERTIFICATE-----Generated at Sun Sep 20 13:44:45 2026 by rpki-client