$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft File: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json) Hash identifier: cGnK/2cXv61W5oEsUEtQwX1QuNW2nCrHmeFE1Ow5O1I= Subject key identifier: 06:C8:17:E8:FA:EE:57:2A:6D:45:1B:2A:1A:C1:EB:99:05:1F:0B:08 Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Certificate serial: 019FAABF1BABF952B3A3ADDC29523DB37675 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft Manifest number: 19F5 Signing time: Tue 28 Jul 2026 22:01:18 +0000 Manifest this update: Tue 28 Jul 2026 22:01:18 +0000 Manifest next update: Wed 29 Jul 2026 22:01:18 +0000 Files and hashes: 1: 1Xksz4pAytZHMrrT7gOuFdy8S2Y.roa (hash: HuNf5dwLg/DJcTEcYtbO8BEopfRLLX+209pk2+0+87w=) 2: 2fC7vMQsiVrreKahYpbYQeGBdlA.roa (hash: ryehnZ2Vw9hgtgH92x3ZW5v3KScwTU3lwsfzQRH2orI=) 3: 3aV4uR6YCpNCMqEmRj5_444Decg.roa (hash: xsNIDZCx48PVAmUl5doiKpgYGjB7eG/SLI/mAjLaIh8=) 4: 3uaiubVaYwEf-0pq3jOcgWmJ5CE.roa (hash: +/DqQfsYBGZvH5gjSmEEf+nK4crysz9SgEpPppJMqlo=) 5: I08p1jkDdJlEDsjwq053srkjN2k.roa (hash: La1YGwc3oCLT3rS+rl/RN0PZ9UFeOvqPsj5JGqvzCv8=) 6: KbtlTKcgt-X8HNV4rKo5uZlq6R8.roa (hash: 70QTuQkF5890Kc+PvR2XYv1coLUM/SKD0ZPfp0La8K4=) 7: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: h+JMEbA634m8QnXG4NTcnJgUKpRGdOg9doDKHVijTnc=) 8: aFH3yZOCBvv0pwITn-ojOO9u5_Y.roa (hash: R+3z3be5a6cpJXKXgxNcsq7jkEToT3RKyUkCWxn8eBI=) 9: cbkmSv4A8E7qdpGnIA9EV1uMTfI.roa (hash: Etb18uo7Rn29ZvaJx07byCrsL8cUj5zuO8qDMwtLZ0E=) 10: g8lpKS3Uw8kC5lMG62drJ46w5hs.roa (hash: 83NMQZQtm0Gu60VzRcxhZibSAqmZFrS/fqUqV713Mcs=) 11: zQaBu8xvqsgQldV2qdnBjEZymN8.roa (hash: gNV6m/aR4O8Blczk03nyUg7ckGuOlJt+WZprd2w5EI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:bf:1b:ab:f9:52:b3:a3:ad:dc:29:52:3d:b3:76:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Validity Not Before: Jul 28 22:01:18 2026 GMT Not After : Jul 29 22:01:18 2026 GMT Subject: CN=06c817e8faee572a6d451b2a1ac1eb99051f0b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fc:1c:56:3e:17:6f:65:34:f1:29:58:38:73: 19:fb:c7:ad:24:e7:22:2e:4b:5d:bf:69:f3:9c:51: 2c:c1:89:03:f7:f5:59:97:b7:97:29:a6:5c:e5:6c: 4f:1f:e9:4d:5a:db:c4:1b:86:27:85:e2:93:8c:10: b7:71:d4:fd:e4:93:f6:23:8d:3d:d5:5a:cf:ae:70: 6a:a3:e6:59:a0:cf:24:30:96:9a:04:c1:8a:66:40: ce:9d:a9:a6:6e:75:c8:04:a9:17:75:49:41:2e:b1: 83:a8:7c:45:c7:e2:ab:a2:b2:34:12:b7:d3:a8:f7: 29:c0:59:22:95:8c:6e:0c:6d:94:c0:82:c4:1a:bf: 20:7d:a9:4d:00:68:00:47:a8:da:48:b7:c9:fe:2c: ad:e6:d9:e2:de:f2:6b:ca:f6:1c:9a:d7:66:c2:61: ff:8c:c1:a3:6a:dc:0b:43:7f:1f:76:22:82:8e:84: 8e:c2:be:e0:be:e3:3c:25:a5:31:d8:51:67:d2:0a: 44:04:e0:33:75:46:94:0e:ba:ec:8f:32:53:94:f1: d3:62:3f:e2:5c:24:ae:07:3d:25:64:85:37:c0:05: bb:f5:95:5f:ab:92:2f:9f:06:20:a3:11:50:6a:cd: 28:50:a8:85:63:de:5d:6c:07:4b:21:a5:a6:5f:a2: 00:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C8:17:E8:FA:EE:57:2A:6D:45:1B:2A:1A:C1:EB:99:05:1F:0B:08 X509v3 Authority Key Identifier: keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:8e:81:e5:12:12:90:ab:44:92:be:62:d6:3d:e1:44:c3:15: 0f:88:5f:fa:3b:91:5b:1f:d5:ae:7f:a2:4c:e5:c1:5f:6b:f4: 24:bb:c9:42:e9:2c:81:73:7c:87:ad:6e:16:ac:4d:6d:24:d0: 81:ec:1d:74:9f:5a:8f:79:22:1d:42:e7:81:3e:15:b8:ce:50: 71:e8:ef:41:de:7e:76:e2:f4:fe:9d:cd:45:10:70:7e:e3:d1: 04:d7:35:e6:1c:38:47:4f:80:3c:27:47:55:7f:fa:8f:22:61: 07:a7:6c:51:ef:54:21:00:9a:45:8c:5a:ae:e8:20:32:be:4a: 8d:d1:59:9a:ef:05:e4:db:da:1d:27:53:60:da:75:7c:b4:a7: ca:96:0b:1f:4d:43:7e:35:2d:97:49:fa:d6:cc:0b:2d:c9:cd: 84:d7:74:39:bc:91:6c:79:ab:3d:46:7c:fe:ff:79:8a:cf:5e: 9e:f1:5e:5d:37:b0:95:ed:89:d9:14:cb:22:ef:96:fe:a5:21: f7:31:f6:5e:f1:0a:60:5f:d1:62:f6:61:5b:0d:33:f3:1a:cc: 54:a6:f2:56:7f:79:2e:a6:9f:c8:d9:cd:87:85:4b:04:c7:ed: a1:77:fa:2b:1a:88:7f:78:0c:b7:55:f6:e8:cc:d5:80:e6:06: e8:e4:f9:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qvxur+VKzo63cKVI9s3Z1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi YTg4NDkwHhcNMjYwNzI4MjIwMTE4WhcNMjYwNzI5MjIwMTE4WjAzMTEwLwYDVQQD EygwNmM4MTdlOGZhZWU1NzJhNmQ0NTFiMmExYWMxZWI5OTA1MWYwYjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PwcVj4Xb2U08SlYOHMZ+8etJOci Lktdv2nznFEswYkD9/VZl7eXKaZc5WxPH+lNWtvEG4YnheKTjBC3cdT95JP2I409 1VrPrnBqo+ZZoM8kMJaaBMGKZkDOnammbnXIBKkXdUlBLrGDqHxFx+KrorI0ErfT qPcpwFkilYxuDG2UwILEGr8gfalNAGgAR6jaSLfJ/iyt5tni3vJryvYcmtdmwmH/ jMGjatwLQ38fdiKCjoSOwr7gvuM8JaUx2FFn0gpEBOAzdUaUDrrsjzJTlPHTYj/i XCSuBz0lZIU3wAW79ZVfq5IvnwYgoxFQas0oUKiFY95dbAdLIaWmX6IACQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbIF+j67lcqbUUbKhrB65kFHwsIMB8GA1UdIwQY MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt ZTEzZTU1NzljNWRjLzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsI6B5RIS kKtEkr5i1j3hRMMVD4hf+juRWx/Vrn+iTOXBX2v0JLvJQuksgXN8h61uFqxNbSTQ gewddJ9aj3kiHULngT4VuM5QcejvQd5+duL0/p3NRRBwfuPRBNc15hw4R0+APCdH VX/6jyJhB6dsUe9UIQCaRYxaruggMr5KjdFZmu8F5NvaHSdTYNp1fLSnypYLH01D fjUtl0n61swLLcnNhNd0ObyRbHmrPUZ8/v95is9envFeXTewle2J2RTLIu+W/qUh 9zH2XvEKYF/RYvZhWw0z8xrMVKbyVn95LqafyNnNh4VLBMftoXf6KxqIf3gMt1X2 6MzVgOYG6OT5cQ== -----END CERTIFICATE-----Generated at Wed Jul 29 02:06:17 2026 by rpki-client