$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: n2YNxveVfSZfNeHRL8C3jYg4LCt5gx+KywqPJlWOIE0= Subject key identifier: 65:21:90:15:EB:44:EC:3F:98:67:07:CD:FC:E7:16:70:17:27:F7:44 Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 019D9998FA455EF49CAFF3E5A856E421D785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: AF Signing time: Fri 17 Apr 2026 04:00:32 +0000 Manifest this update: Fri 17 Apr 2026 04:00:32 +0000 Manifest next update: Sat 18 Apr 2026 04:00:32 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: QKxawA6LkkoCOW6H1toQPAiTID2Ld8xj2qpGxnDK2TU=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 04:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:99:98:fa:45:5e:f4:9c:af:f3:e5:a8:56:e4:21:d7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: Apr 17 04:00:32 2026 GMT Not After : Apr 18 04:00:32 2026 GMT Subject: CN=65219015eb44ec3f986707cdfce716701727f744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:de:18:2e:d5:92:85:3b:0a:08:d2:5b:b0:06: 7e:b2:7c:62:1c:09:04:34:bd:66:be:85:e9:7a:a0: 23:42:4f:e1:b8:21:9c:4b:ae:ab:a6:20:08:f9:f9: be:1a:2f:62:fb:32:e7:96:52:b7:c1:76:16:71:bd: 57:98:98:fa:dd:34:8c:22:c9:8e:5a:7f:d5:6f:c4: d7:2b:68:cc:fe:dc:b2:be:ec:75:42:30:05:ec:87: 1f:61:01:78:4a:54:f2:a8:3e:52:2d:8d:7b:7d:15: 4c:f3:77:90:37:10:da:90:fd:2d:a1:06:c6:3f:0c: 62:65:67:5c:df:da:71:48:3f:1d:1e:15:28:65:62: 4f:12:91:7c:ed:51:8f:1d:af:71:78:a6:24:a5:b8: 06:ea:d8:01:aa:ee:16:96:4b:24:3c:24:b6:4e:75: 70:3b:eb:e9:ca:9a:5a:c3:a6:5b:d3:41:cc:5b:d1: b6:19:16:5c:2f:8d:fd:7a:c5:1a:2e:b2:ca:1e:2b: b0:d9:71:fc:34:ab:fe:a8:f5:e5:cc:1f:e7:cc:30: 3e:20:ab:cd:19:b2:fe:b3:fb:90:30:08:f7:9f:02: 89:2e:13:67:0d:99:17:af:28:9d:d7:c7:46:fd:e6: a7:11:4e:a9:8a:18:50:e2:fa:b7:f1:fb:78:51:37: ea:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:21:90:15:EB:44:EC:3F:98:67:07:CD:FC:E7:16:70:17:27:F7:44 X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e3:e1:51:5a:c3:a4:76:e1:2f:3e:d1:b3:50:cc:2e:1b:d7: 41:85:f5:b6:dd:23:af:75:57:e7:63:c0:f0:71:c1:f0:68:37: 1d:71:ea:8e:b1:7a:e1:e0:cf:fa:e2:83:0a:be:50:07:f1:fc: 38:b3:0c:a8:31:c3:9a:da:0b:4e:15:eb:77:26:ad:11:28:79: 4d:dd:d9:ec:ab:af:46:cc:25:5a:8d:7f:9a:39:20:65:dc:f5: 4e:7e:42:e5:cb:22:8b:b8:9f:b9:4a:37:5b:4b:78:08:54:b7: 4b:97:e3:a2:67:a3:96:de:1a:9a:2b:0a:8f:8d:3e:14:57:46: f9:34:e8:d8:f6:64:87:29:d4:69:12:a0:6d:fb:3d:b6:c4:50: d6:e8:a8:4c:a6:a3:38:ec:f4:e4:ed:5e:96:60:23:fc:34:ae: 1e:d9:8e:83:12:2e:52:3f:96:3e:3c:0c:0c:b4:97:6b:10:ba: 08:41:0f:e5:31:c6:4e:61:2b:38:c9:53:eb:70:ec:e7:2b:82: ba:95:4a:4c:53:9e:5d:12:14:e6:db:81:23:35:fb:c7:43:da: 62:86:7e:8d:9a:40:de:22:c1:fb:c1:97:71:e7:c6:39:0c:f1: 1a:a5:72:95:b7:01:08:0e:ab:ca:66:22:6d:4d:15:21:d9:ae: d5:c9:bb:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2ZmPpFXvScr/PlqFbkIdeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYwNDE3MDQwMDMyWhcNMjYwNDE4MDQwMDMyWjAzMTEwLwYDVQQD Eyg2NTIxOTAxNWViNDRlYzNmOTg2NzA3Y2RmY2U3MTY3MDE3MjdmNzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N4YLtWShTsKCNJbsAZ+snxiHAkE NL1mvoXpeqAjQk/huCGcS66rpiAI+fm+Gi9i+zLnllK3wXYWcb1XmJj63TSMIsmO Wn/Vb8TXK2jM/tyyvux1QjAF7IcfYQF4SlTyqD5SLY17fRVM83eQNxDakP0toQbG PwxiZWdc39pxSD8dHhUoZWJPEpF87VGPHa9xeKYkpbgG6tgBqu4WlkskPCS2TnVw O+vpyppaw6Zb00HMW9G2GRZcL439esUaLrLKHiuw2XH8NKv+qPXlzB/nzDA+IKvN GbL+s/uQMAj3nwKJLhNnDZkXryid18dG/eanEU6pihhQ4vq38ft4UTfqRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUhkBXrROw/mGcHzfznFnAXJ/dEMB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOPhUVrD pHbhLz7Rs1DMLhvXQYX1tt0jr3VX52PA8HHB8Gg3HXHqjrF64eDP+uKDCr5QB/H8 OLMMqDHDmtoLThXrdyatESh5Td3Z7KuvRswlWo1/mjkgZdz1Tn5C5csii7ifuUo3 W0t4CFS3S5fjomejlt4amisKj40+FFdG+TTo2PZkhynUaRKgbfs9tsRQ1uioTKaj OOz05O1elmAj/DSuHtmOgxIuUj+WPjwMDLSXaxC6CEEP5THGTmErOMlT63Ds5yuC upVKTFOeXRIU5tuBIzX7x0PaYoZ+jZpA3iLB+8GXcefGOQzxGqVylbcBCA6rymYi bU0VIdmu1cm7qQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:05:09 2026 by rpki-client