$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json) Hash identifier: g2bwLJciKJB1K+RjctjYFyHY/qjda7pNIhOPhqkICcs= Subject key identifier: DF:DD:63:03:6C:D9:03:17:97:97:83:D9:67:2C:14:1E:1C:61:E2:BA Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 019FAA882B40107240A88F3C1C1652E26C1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft Manifest number: 16CD Signing time: Tue 28 Jul 2026 21:01:18 +0000 Manifest this update: Tue 28 Jul 2026 21:01:18 +0000 Manifest next update: Wed 29 Jul 2026 21:01:18 +0000 Files and hashes: 1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=) 2: 2ApePr27C2Mxz5cN7WWk4U2tDDk.roa (hash: CD0cmU5ZM9bBvaZuSvXRxXdU7JshBZqKvAkjtm5OfiY=) 3: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=) 4: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=) 5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: lpa6ATRHpIQ++2YQ5BXCWIfyftXTy9DZGvPuf1ZKcOU=) 6: _zP73NXlOD_8EgcbXNN-hPdzSQo.roa (hash: XVZFe/ZBZLQR/k8FwFmC9dpWix1IncPAmzb2M0KXlGk=) 7: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=) 8: h5uK1sxm-LA7F7RnXnRUsWfGsFc.roa (hash: kiAKvXhdtX2kzyGIv4FUOZn9GRgVG3rv957GsPh/b7w=) 9: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=) 10: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=) 11: tVRKIzEi3C5oivV0NSF6cpvQXxw.roa (hash: DCE8qPP2+ixczk2thpFiZupianuMg94BL32mNt6WYVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:88:2b:40:10:72:40:a8:8f:3c:1c:16:52:e2:6c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Jul 28 21:01:18 2026 GMT Not After : Jul 29 21:01:18 2026 GMT Subject: CN=dfdd63036cd90317979783d9672c141e1c61e2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:be:2d:4b:1f:08:cf:f9:67:0f:4d:13:41:12: 7f:29:60:77:40:1c:b1:93:f2:4c:45:19:90:b6:3c: 9e:ec:c5:d5:60:43:c0:0a:7c:45:94:4a:e4:30:b1: 2f:ec:3e:8d:7c:2f:d9:38:88:04:cd:db:bc:fb:6a: 37:2a:25:69:dc:09:2a:6e:a2:27:e4:e7:b2:a4:cc: 36:55:98:f7:be:52:1b:53:ab:55:9e:2b:a5:53:f5: 68:54:ad:56:fd:2b:67:1b:c9:ca:0a:d8:77:7e:08: fa:a4:44:2d:d4:87:96:10:e3:d9:8b:f8:b2:60:62: 18:b4:44:ac:d5:b3:12:fe:59:df:49:33:b0:21:36: 90:d5:37:fe:3c:4c:9d:c4:e0:50:9b:ff:59:35:a4: e1:92:5f:3f:b1:40:1c:16:6f:bc:ae:38:19:9c:af: 69:76:4d:ad:f9:71:7f:99:0a:8f:c3:35:bd:f0:25: f2:56:4c:54:af:b8:ba:ec:60:12:ea:f6:89:4d:85: 94:76:74:c2:87:b2:3e:cf:3f:56:7b:84:ae:86:71: dd:45:e5:90:bc:a1:04:43:29:3b:23:a2:73:f1:aa: 93:12:a5:a4:68:40:26:45:86:98:3b:9d:0b:3f:db: b9:44:b9:75:8b:65:45:79:fe:2e:3f:b1:8d:3b:a9: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DD:63:03:6C:D9:03:17:97:97:83:D9:67:2C:14:1E:1C:61:E2:BA X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:86:a3:47:a6:9e:7d:0c:e9:42:d4:49:2b:62:ff:c1:a8:6e: 06:e4:2b:7c:f7:96:af:51:85:0d:5e:03:f3:f8:33:b5:7d:5a: a9:de:b2:4d:db:37:97:52:da:9e:19:20:eb:0b:4e:54:48:aa: 13:08:2e:d9:02:f0:c3:4c:98:b6:96:c1:d4:a8:a9:84:c2:d9: 51:94:c2:e5:7b:73:69:4f:53:44:aa:79:9c:4e:a7:33:11:62: 08:27:68:23:f4:3b:8b:f6:de:66:73:d7:74:e9:77:18:99:0f: 8e:e5:63:6c:36:96:27:80:d9:c7:44:8c:63:2a:15:69:64:6e: 89:e8:47:99:57:29:71:0e:d8:1d:75:05:c9:9b:46:3c:af:30: fd:f6:1a:b2:fb:1d:fd:7a:3f:7c:63:27:01:02:1c:26:2b:3d: 6a:9e:b6:7d:66:dd:e6:6d:f6:79:0f:01:40:e5:f2:4b:44:46: ab:f9:34:f2:c4:d3:67:29:b3:0a:d4:1d:1f:02:d6:64:c9:17: 2c:79:b6:f4:35:d9:6f:3f:b4:67:be:4c:a2:62:37:7f:2d:33: be:09:42:29:78:3f:ab:84:58:fa:f0:d8:49:74:77:2c:02:b1: 17:8a:55:44:95:af:28:dc:1d:35:37:81:47:3a:a9:b4:58:69: 93:7f:64:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qiCtAEHJAqI88HBZS4mwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjYwNzI4MjEwMTE4WhcNMjYwNzI5MjEwMTE4WjAzMTEwLwYDVQQD EyhkZmRkNjMwMzZjZDkwMzE3OTc5NzgzZDk2NzJjMTQxZTFjNjFlMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm74tSx8Iz/lnD00TQRJ/KWB3QByx k/JMRRmQtjye7MXVYEPACnxFlErkMLEv7D6NfC/ZOIgEzdu8+2o3KiVp3AkqbqIn 5OeypMw2VZj3vlIbU6tVniulU/VoVK1W/StnG8nKCth3fgj6pEQt1IeWEOPZi/iy YGIYtESs1bMS/lnfSTOwITaQ1Tf+PEydxOBQm/9ZNaThkl8/sUAcFm+8rjgZnK9p dk2t+XF/mQqPwzW98CXyVkxUr7i67GAS6vaJTYWUdnTCh7I+zz9We4SuhnHdReWQ vKEEQyk7I6Jz8aqTEqWkaEAmRYaYO50LP9u5RLl1i2VFef4uP7GNO6mV7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/dYwNs2QMXl5eD2WcsFB4cYeK6MB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIajR6ae fQzpQtRJK2L/wahuBuQrfPeWr1GFDV4D8/gztX1aqd6yTds3l1Lanhkg6wtOVEiq Ewgu2QLww0yYtpbB1KiphMLZUZTC5XtzaU9TRKp5nE6nMxFiCCdoI/Q7i/beZnPX dOl3GJkPjuVjbDaWJ4DZx0SMYyoVaWRuiehHmVcpcQ7YHXUFyZtGPK8w/fYasvsd /Xo/fGMnAQIcJis9ap62fWbd5m32eQ8BQOXyS0RGq/k08sTTZymzCtQdHwLWZMkX LHm29DXZbz+0Z75MomI3fy0zvglCKXg/q4RY+vDYSXR3LAKxF4pVRJWvKNwdNTeB RzqptFhpk39kVw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:27:48 2026 by rpki-client