$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: KRIZa76G6MFhxQENA107PIiFpFrnZxPB1yvZnfij62E= Subject key identifier: 09:D4:DC:0D:15:5D:8C:04:10:4D:1A:4A:DE:06:96:31:77:66:34:36 Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 019CAC0FA052FACDAF21C816D92407600436 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: 34 Signing time: Mon 02 Mar 2026 01:00:30 +0000 Manifest this update: Mon 02 Mar 2026 01:00:30 +0000 Manifest next update: Tue 03 Mar 2026 01:00:30 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: 7oC4aKXD0EwjrLnLuRb1FtrXhitaEmARMWDdEN0xBCQ=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:0f:a0:52:fa:cd:af:21:c8:16:d9:24:07:60:04:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: Mar 2 01:00:30 2026 GMT Not After : Mar 3 01:00:30 2026 GMT Subject: CN=09d4dc0d155d8c04104d1a4ade06963177663436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:cb:58:6d:93:b0:66:64:a7:c9:27:1d:1e: a4:c7:a0:41:8f:67:5f:e1:03:f8:a9:00:76:e4:a2: 25:89:96:87:5f:38:d0:b9:90:d9:a3:da:b8:ae:dd: f2:83:47:d3:f1:e8:06:55:f8:b2:f9:6c:ea:60:e1: e2:39:27:32:a0:24:02:f0:d3:cd:3f:1f:ce:0d:2a: 74:76:37:89:93:10:49:b3:52:9a:14:11:14:13:a6: 69:04:e5:85:bc:ea:5f:78:03:d2:28:4c:d5:c5:6a: d0:83:11:97:22:7b:79:8a:31:7f:88:0a:9b:7a:4e: 37:8c:d1:88:44:b9:08:b3:4c:04:f6:8a:6b:02:87: 99:55:8a:ad:44:9a:bd:cb:c8:32:b9:c9:86:68:df: f5:fc:87:63:a7:52:0b:ee:ce:34:da:7e:6a:9e:0e: 9c:86:22:8e:a7:69:2b:7e:94:84:ec:ef:dd:be:e3: 5d:6c:20:79:18:34:fe:e5:f7:c0:60:bd:c2:82:81: 5e:b7:d6:26:c5:c8:da:e7:42:4d:a8:e2:3c:67:9e: 7b:0e:1c:b5:c3:cf:7a:41:23:d4:9f:11:12:91:34: 69:04:56:24:c5:e6:df:59:cf:0e:a4:fd:61:62:61: 17:57:c3:73:24:ab:7f:7d:0c:28:c5:28:d3:e4:d7: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D4:DC:0D:15:5D:8C:04:10:4D:1A:4A:DE:06:96:31:77:66:34:36 X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:23:db:ce:4a:c7:05:70:b3:f4:b3:bc:16:87:c8:1b:02:74: 49:87:33:a2:18:3d:df:e1:82:b5:b1:5d:bc:1d:c2:01:fd:84: 48:ed:e8:b9:43:08:e6:68:33:04:fc:a1:1a:6c:29:9c:84:57: c4:bb:28:61:46:d1:c3:3f:21:8e:46:35:78:5b:f4:91:b6:b4: 88:52:92:95:1b:09:58:60:a4:4b:0e:74:1e:f4:3c:79:0c:ab: ed:c6:41:51:5c:bf:ca:e6:60:a8:58:ef:5d:2e:cf:99:a0:ed: d4:28:7c:14:b9:d8:55:4d:78:a1:34:3b:16:94:86:7d:52:68: 05:5a:78:21:ce:00:49:73:a1:14:9d:31:48:26:a3:f9:fc:1b: fc:be:d9:36:3d:a3:0b:c4:f7:e2:6c:ae:16:78:77:15:cd:31: 70:d1:96:aa:7b:30:16:28:8e:93:24:ba:0b:eb:33:74:49:63: 63:69:6d:80:83:3a:1d:99:d2:51:29:5a:4a:cb:bf:b0:11:a0: fc:6e:a5:f2:e6:5a:6a:05:b8:5c:c6:ff:90:85:4e:ec:5a:86: 2d:19:7b:e4:55:42:0f:ef:a5:59:0a:2c:6a:de:47:de:37:99: 0a:df:ad:77:6d:38:b6:bb:e3:f5:33:7e:eb:ab:58:cd:53:07: 52:74:1c:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysD6BS+s2vIcgW2SQHYAQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYwMzAyMDEwMDMwWhcNMjYwMzAzMDEwMDMwWjAzMTEwLwYDVQQD EygwOWQ0ZGMwZDE1NWQ4YzA0MTA0ZDFhNGFkZTA2OTYzMTc3NjYzNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT7LWG2TsGZkp8knHR6kx6BBj2df 4QP4qQB25KIliZaHXzjQuZDZo9q4rt3yg0fT8egGVfiy+WzqYOHiOScyoCQC8NPN Px/ODSp0djeJkxBJs1KaFBEUE6ZpBOWFvOpfeAPSKEzVxWrQgxGXInt5ijF/iAqb ek43jNGIRLkIs0wE9oprAoeZVYqtRJq9y8gyucmGaN/1/Idjp1IL7s402n5qng6c hiKOp2krfpSE7O/dvuNdbCB5GDT+5ffAYL3CgoFet9Ymxcja50JNqOI8Z557Dhy1 w896QSPUnxESkTRpBFYkxebfWc8OpP1hYmEXV8NzJKt/fQwoxSjT5NfZVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnU3A0VXYwEEE0aSt4GljF3ZjQ2MB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSPbzkrH BXCz9LO8FofIGwJ0SYczohg93+GCtbFdvB3CAf2ESO3ouUMI5mgzBPyhGmwpnIRX xLsoYUbRwz8hjkY1eFv0kba0iFKSlRsJWGCkSw50HvQ8eQyr7cZBUVy/yuZgqFjv XS7PmaDt1Ch8FLnYVU14oTQ7FpSGfVJoBVp4Ic4ASXOhFJ0xSCaj+fwb/L7ZNj2j C8T34myuFnh3Fc0xcNGWqnswFiiOkyS6C+szdEljY2ltgIM6HZnSUSlaSsu/sBGg /G6l8uZaagW4XMb/kIVO7FqGLRl75FVCD++lWQosat5H3jeZCt+td204trvj9TN+ 66tYzVMHUnQcRQ== -----END CERTIFICATE-----Generated at Mon Mar 2 06:08:18 2026 by rpki-client