$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: jQ2ayELwtWzyDOk+XCM3J2262rLxi9Z7U9giIUsI8uY= Subject key identifier: 38:58:B5:8A:D4:EF:14:0D:39:57:BE:E7:1A:DA:8D:BD:60:83:28:4A Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 01A0C4B2DA58B86C61D5367C2451757BCCCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: 0253 Signing time: Mon 21 Sep 2026 16:00:50 +0000 Manifest this update: Mon 21 Sep 2026 16:00:50 +0000 Manifest next update: Tue 22 Sep 2026 16:00:50 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: J/oiLV35OiTyMqHstTLB4BrDvwHhzRYKxCyIcIQF9wY=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 16:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:b2:da:58:b8:6c:61:d5:36:7c:24:51:75:7b:cc:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: Sep 21 16:00:50 2026 GMT Not After : Sep 22 16:00:50 2026 GMT Subject: CN=3858b58ad4ef140d3957bee71ada8dbd6083284a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f3:1e:25:f0:a4:a3:39:6b:ed:1c:15:41:05: e6:f4:40:bd:54:11:a3:de:e0:cf:ed:81:e7:d3:53: 0f:58:cb:62:1d:8b:df:f2:b3:9e:08:fa:b9:fb:d1: cd:9b:ed:5a:46:62:c4:6a:73:ea:7a:bd:10:85:ab: 1e:bd:33:a5:aa:6f:3b:fc:ad:70:45:57:19:85:8a: 68:e4:ef:61:55:77:47:7f:e0:71:3b:b0:88:d2:7f: ab:5e:88:57:5a:00:0b:4d:59:20:d3:01:a6:bb:af: 45:bc:da:52:d9:92:ba:d6:de:19:98:0d:64:59:70: 69:c0:5e:60:13:72:7f:22:40:2f:81:da:39:53:34: 7b:17:7b:d6:c8:2d:bc:90:a0:8e:eb:34:bc:8b:57: 7a:29:b8:dd:43:74:2a:27:c5:13:6a:a1:f9:e3:6d: 7c:84:41:10:16:82:c9:e2:34:5a:1a:62:1e:3a:32: 7f:8a:fa:a5:92:36:ac:7b:cd:62:19:c6:5e:8b:e5: e0:75:f9:6a:e6:08:dd:d5:6e:6c:2a:0d:95:8d:e6: e6:74:3a:1c:62:29:65:f9:72:ed:a5:75:8f:be:5d: f2:02:0b:56:0d:90:6e:da:da:fa:28:52:ac:4a:72: de:14:f6:58:a1:67:7b:50:4a:42:7a:93:42:16:29: 27:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:58:B5:8A:D4:EF:14:0D:39:57:BE:E7:1A:DA:8D:BD:60:83:28:4A X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fa:3b:84:ba:80:66:1b:0c:33:77:b6:86:4e:c1:89:1f:22: be:16:3e:fa:d7:a8:1d:8b:50:6d:05:d4:4d:75:80:9d:1a:1a: d3:34:ed:4d:7e:74:ad:21:02:bb:25:87:f3:cd:0c:b0:b6:70: d7:f3:51:f9:b3:35:00:b1:5f:09:e0:5a:a7:8e:d2:5a:b8:f4: 08:1c:bf:8a:ec:38:1f:70:92:15:87:e2:03:95:14:3e:48:37: 7b:d8:16:84:af:58:c5:58:d8:a9:53:98:e5:82:32:0d:83:83: c4:6e:a0:fd:ad:25:43:91:c1:53:68:b6:c4:fe:70:e9:61:32: b5:9c:6a:bd:8a:af:eb:fa:cf:eb:c7:ca:8e:9b:70:12:52:35: 52:aa:b4:76:a7:9f:bf:62:f9:d0:14:e5:1a:29:7c:3e:66:c1: de:fc:44:7c:ad:98:fc:d6:64:46:02:26:61:52:f7:62:65:21: 2e:8e:ef:e6:d8:8e:07:bf:d1:cf:10:15:3f:a5:79:5f:ed:b4: 68:90:c3:b5:bd:51:65:45:78:df:e5:05:23:82:e1:2a:7e:89: 93:db:63:60:ca:8b:33:00:35:48:2d:5f:71:84:e5:07:7d:d0: cd:53:43:68:cc:4e:f2:f8:f3:ed:9a:23:03:ba:f5:5a:31:c8: ca:53:0b:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDEstpYuGxh1TZ8JFF1e8zOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYwOTIxMTYwMDUwWhcNMjYwOTIyMTYwMDUwWjAzMTEwLwYDVQQD EygzODU4YjU4YWQ0ZWYxNDBkMzk1N2JlZTcxYWRhOGRiZDYwODMyODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PMeJfCkozlr7RwVQQXm9EC9VBGj 3uDP7YHn01MPWMtiHYvf8rOeCPq5+9HNm+1aRmLEanPqer0QhasevTOlqm87/K1w RVcZhYpo5O9hVXdHf+BxO7CI0n+rXohXWgALTVkg0wGmu69FvNpS2ZK61t4ZmA1k WXBpwF5gE3J/IkAvgdo5UzR7F3vWyC28kKCO6zS8i1d6KbjdQ3QqJ8UTaqH54218 hEEQFoLJ4jRaGmIeOjJ/ivqlkjase81iGcZei+Xgdflq5gjd1W5sKg2VjebmdDoc Yill+XLtpXWPvl3yAgtWDZBu2tr6KFKsSnLeFPZYoWd7UEpCepNCFikn3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhYtYrU7xQNOVe+5xrajb1ggyhKMB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/o7hLqA ZhsMM3e2hk7BiR8ivhY++teoHYtQbQXUTXWAnRoa0zTtTX50rSECuyWH880MsLZw 1/NR+bM1ALFfCeBap47SWrj0CBy/iuw4H3CSFYfiA5UUPkg3e9gWhK9YxVjYqVOY 5YIyDYODxG6g/a0lQ5HBU2i2xP5w6WEytZxqvYqv6/rP68fKjptwElI1Uqq0dqef v2L50BTlGil8PmbB3vxEfK2Y/NZkRgImYVL3YmUhLo7v5tiOB7/RzxAVP6V5X+20 aJDDtb1RZUV43+UFI4LhKn6Jk9tjYMqLMwA1SC1fcYTlB33QzVNDaMxO8vjz7Zoj A7r1WjHIylMLgQ== -----END CERTIFICATE-----Generated at Tue Sep 22 03:19:35 2026 by rpki-client