$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json) Hash identifier: JXy+mj8BZcswWshbfCjbvYRVnIT8PIilWHMYgXOJSVQ= Subject key identifier: 14:C2:BB:ED:55:F4:A1:F6:29:BD:1E:18:10:BA:CE:E2:7A:7A:25:33 Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 01A0BE79C11A6FAE4919280EC98FE9FD8760 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft Manifest number: 175E Signing time: Sun 20 Sep 2026 11:00:45 +0000 Manifest this update: Sun 20 Sep 2026 11:00:45 +0000 Manifest next update: Mon 21 Sep 2026 11:00:45 +0000 Files and hashes: 1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=) 2: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=) 3: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=) 4: GXWJE-8eL7U4sVeXlOtFxZ7vcr8.roa (hash: HYQsYXLOcua0ABFdCgere8a70Mi6wAtAionAH1YPaTE=) 5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: 5kuzErTwWIMvBPw9jfiB4aGxqik8ilfaJOOaRRMrRDA=) 6: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=) 7: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=) 8: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=) 9: sQplr-AwbR_8RYI_FgYOZ178ZrI.roa (hash: qt7B9tBIkTrdehiRfoggQYOaAs6JsLoSpAJd9A7A7Xg=) 10: tVRKIzEi3C5oivV0NSF6cpvQXxw.roa (hash: DCE8qPP2+ixczk2thpFiZupianuMg94BL32mNt6WYVg=) 11: woAOb4AN3cSy4oY_QAjYETncO0E.roa (hash: nKozfVGE5cnQbfzUetkE8F54sr9HFGBho4qeVuXBxKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:79:c1:1a:6f:ae:49:19:28:0e:c9:8f:e9:fd:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Sep 20 11:00:45 2026 GMT Not After : Sep 21 11:00:45 2026 GMT Subject: CN=14c2bbed55f4a1f629bd1e1810bacee27a7a2533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d6:3b:40:00:33:34:9d:65:48:3d:e3:7f:bf: 60:6e:f2:99:73:d5:19:85:ff:6a:80:5e:86:6c:76: 42:b1:0c:4e:d2:90:a0:5b:51:65:17:8e:60:d8:1e: 62:f4:49:90:06:86:f6:f0:25:60:fb:7d:01:44:a2: 5a:31:06:c5:09:2a:f4:89:cb:57:65:23:e2:4c:ca: 22:8b:45:28:ac:d9:3a:9b:26:38:81:01:03:ea:1e: 1a:b4:45:1d:04:cb:e9:02:66:22:24:81:4f:fb:6d: a5:e8:27:c3:0e:bc:45:a2:c4:14:e3:0d:c9:df:2f: 5a:f2:74:07:9a:4a:8e:36:55:c7:3d:c3:3f:b8:3d: 3b:a3:4b:ba:a6:08:32:a8:e9:81:c1:80:18:bf:56: 93:35:84:6c:e7:c2:db:a4:f6:f2:87:aa:e5:72:84: 94:2f:f4:a4:07:68:18:75:c0:50:da:d5:a9:b0:21: ec:85:d7:06:66:a5:64:93:fc:85:22:d2:73:af:63: 14:80:e1:59:33:92:3f:4c:0d:f1:c5:9d:8d:6c:5d: 55:51:12:42:91:58:cb:c3:c0:30:cc:c1:3d:b6:d8: 08:ee:12:d3:7b:e9:d9:9a:24:09:e4:32:ca:93:4d: d4:49:63:61:e5:f3:25:97:94:05:17:f8:42:b6:e2: 7b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C2:BB:ED:55:F4:A1:F6:29:BD:1E:18:10:BA:CE:E2:7A:7A:25:33 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8f:54:32:65:21:00:23:d7:7a:28:ad:09:3e:a5:ad:7b:48: c2:a5:19:96:67:ed:dc:cf:07:80:9e:2f:5f:f6:dd:75:90:94: ff:dd:ba:c0:62:a0:79:63:2a:b7:af:b0:31:c7:8a:d4:af:20: 99:c0:7c:b7:3d:d5:d6:fd:6f:2b:ec:44:9b:8a:56:f2:2d:ca: 0a:9c:89:79:d9:f1:dd:c4:d5:a4:25:68:60:3e:8a:9d:ca:cc: 57:6b:f5:95:2f:75:01:b0:23:50:ca:7e:37:63:0e:e7:03:26: 19:1f:8d:07:77:c8:7f:58:9a:00:1e:ec:aa:13:f5:27:6f:28: e2:19:df:60:97:c4:3b:5d:43:df:d4:01:06:40:a3:d7:15:53: 41:30:f3:18:77:c5:6e:7f:00:5d:fa:1d:af:c5:53:8d:25:70: b4:ca:32:c1:7d:e4:00:49:05:24:b5:fc:86:aa:0c:1d:35:a6: 1a:13:f4:80:e2:44:58:63:3d:fb:96:5b:9e:d3:62:b7:2c:af: f1:13:8c:d9:7f:4d:3a:da:da:49:62:7a:79:b9:a8:00:89:be: 4d:d2:ab:86:71:d3:10:99:40:5e:28:16:f7:73:81:14:5f:a6: 83:85:ae:d2:d4:52:a1:91:86:4c:79:4e:86:36:08:28:f8:62: 57:46:0a:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+ecEab65JGSgOyY/p/YdgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjYwOTIwMTEwMDQ1WhcNMjYwOTIxMTEwMDQ1WjAzMTEwLwYDVQQD EygxNGMyYmJlZDU1ZjRhMWY2MjliZDFlMTgxMGJhY2VlMjdhN2EyNTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtY7QAAzNJ1lSD3jf79gbvKZc9UZ hf9qgF6GbHZCsQxO0pCgW1FlF45g2B5i9EmQBob28CVg+30BRKJaMQbFCSr0ictX ZSPiTMoii0UorNk6myY4gQED6h4atEUdBMvpAmYiJIFP+22l6CfDDrxFosQU4w3J 3y9a8nQHmkqONlXHPcM/uD07o0u6pggyqOmBwYAYv1aTNYRs58LbpPbyh6rlcoSU L/SkB2gYdcBQ2tWpsCHshdcGZqVkk/yFItJzr2MUgOFZM5I/TA3xxZ2NbF1VURJC kVjLw8AwzME9ttgI7hLTe+nZmiQJ5DLKk03USWNh5fMll5QFF/hCtuJ7rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTCu+1V9KH2Kb0eGBC6zuJ6eiUzMB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeo9UMmUh ACPXeiitCT6lrXtIwqUZlmft3M8HgJ4vX/bddZCU/926wGKgeWMqt6+wMceK1K8g mcB8tz3V1v1vK+xEm4pW8i3KCpyJednx3cTVpCVoYD6KncrMV2v1lS91AbAjUMp+ N2MO5wMmGR+NB3fIf1iaAB7sqhP1J28o4hnfYJfEO11D39QBBkCj1xVTQTDzGHfF bn8AXfodr8VTjSVwtMoywX3kAEkFJLX8hqoMHTWmGhP0gOJEWGM9+5ZbntNityyv 8ROM2X9NOtraSWJ6ebmoAIm+TdKrhnHTEJlAXigW93OBFF+mg4Wu0tRSoZGGTHlO hjYIKPhiV0YKUw== -----END CERTIFICATE-----Generated at Sun Sep 20 12:54:09 2026 by rpki-client