$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft File: QLl0BiRLQQcmJofbG5ZCw9no-EM.mft (raw, json) Hash identifier: g2rlkRen9IobwUyonAUZXRv0GiwpgfQn9FkoUKOX/dw= Subject key identifier: AE:E9:52:D8:EF:F5:EE:19:85:59:2D:BB:DE:F0:1E:2F:27:55:8A:D8 Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843 Certificate serial: 01A0C6A134B336C7A32B13ABCD8540207963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft Manifest number: 0254 Signing time: Tue 22 Sep 2026 01:00:48 +0000 Manifest this update: Tue 22 Sep 2026 01:00:48 +0000 Manifest next update: Wed 23 Sep 2026 01:00:48 +0000 Files and hashes: 1: 0HR7OlgVsN6el8WaHefZC1bVuuI.roa (hash: l1VbbEivm6yxThSTyk7Djf67KfprrRMIJL+aTYhbs+I=) 2: 8FJGaZ8MbZPDXJ8q8JZarY-F95A.roa (hash: tFsnUzuCOPHEkB4f570fqaA0O4nTZQAQw1SUPG3ufxw=) 3: 9ReecqYKZ8l0A89M1Yc5NtclYzQ.roa (hash: gmUV0Z8p6eaW6u9bMSNNxq/xKFhizs7ktPd6mWRC4Rs=) 4: OF0KfYMGxGaz-SUOj7rB0oXATdM.roa (hash: CAo9UtR7JTj2SOelEiYNWlJF8pjNdWWHM3G2TfLb0p8=) 5: QLl0BiRLQQcmJofbG5ZCw9no-EM.crl (hash: DijGxs0vSiLtwmj6BylRnMp84HGP5JKkC7gRN4l+K/8=) 6: YWfuggorcd1NM3cGc0ChXxoZNEw.roa (hash: VkuuURovRA8v+JjZIy/jQlWWecLETcf1ZXLwTZUlHvU=) 7: dXo62BJE8_TWzGjB924mtQGI6t0.roa (hash: ZKPOUpy2R7pDezGYw/+HyyJ3LtSfZmM+0w9aYkO7UaE=) 8: gvtwt4XkAQ7Z0R2_oweZhYn7SCE.roa (hash: awPr3bW3s/h+nd/17YaFTV6WgEVXFckOiQCqub9w4h0=) 9: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (hash: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=) 10: ie67OR2yo5azvU54c3v4lv6RpSA.roa (hash: dLMrGnnfDPcjGqurVoVCUolQCVPAwVOwL/z3dpyr5Fk=) 11: u1KOR6Ev1eXNRu72T6geLVczjNY.roa (hash: Cdpt6dAlSWI61+bZpjlmoyuOjvDfy3KfoRUsH8wyb6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c6:a1:34:b3:36:c7:a3:2b:13:ab:cd:85:40:20:79:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843 Validity Not Before: Sep 22 01:00:48 2026 GMT Not After : Sep 23 01:00:48 2026 GMT Subject: CN=aee952d8eff5ee1985592dbbdef01e2f27558ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:47:e3:1e:e4:3c:bb:93:3f:f4:8a:36:e1: f6:b7:72:31:c6:38:9a:48:d9:46:cc:38:75:59:8a: 20:ba:13:d3:ad:db:7b:26:a6:d8:94:23:8d:d1:9c: 13:2f:dc:0c:b8:5f:3b:26:00:81:18:1a:07:b3:b1: d3:a3:5a:19:13:2b:7f:8a:d5:22:f1:f4:f2:b1:6e: 54:bc:c1:6a:bd:af:2d:f5:b1:63:3c:fd:ce:2b:e7: c9:5c:3b:7a:64:19:42:da:59:b0:46:61:bb:d3:4b: ab:b8:39:fd:3a:60:12:e6:a0:10:e8:a9:7c:47:6b: 95:21:92:96:77:15:e9:a5:0e:70:c8:f4:62:ba:19: 9c:c9:3b:82:46:74:73:9b:36:d5:2f:34:00:19:cd: 57:67:5e:04:6a:1a:4c:88:6f:52:97:c8:6b:37:04: f9:19:d7:29:0e:6a:29:5f:7a:31:1f:98:21:bd:03: 73:cf:ac:58:8f:e5:f2:cc:bb:bf:5d:8f:a2:25:bf: e6:f8:a6:08:9d:48:80:55:d8:10:7a:3e:a9:8e:bc: cb:7d:3e:04:ea:ff:3a:d7:41:cf:76:7c:86:f3:19: 51:87:a5:05:5c:48:a8:9d:90:e4:71:b7:03:1c:e4: f7:0b:5e:59:bf:db:de:d0:6d:11:f5:bb:ac:3c:b3: 99:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E9:52:D8:EF:F5:EE:19:85:59:2D:BB:DE:F0:1E:2F:27:55:8A:D8 X509v3 Authority Key Identifier: keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a3:96:9e:49:d1:a6:3f:7f:14:07:9f:2f:9c:e7:e4:bd:37: 7d:71:82:2f:49:4d:d9:ef:7e:5c:33:73:5e:bc:3a:b5:89:01: fc:dd:5b:25:cb:00:fd:13:9a:de:40:84:f6:12:1c:4d:2d:3f: 5d:77:64:b2:70:ac:d1:a6:68:99:69:7a:e7:0e:44:22:78:e9: 25:c8:4a:18:ab:ab:88:53:ac:32:f3:c0:1e:01:14:27:8e:ad: 0a:32:12:33:4a:17:a1:06:cd:f2:25:b8:f1:03:27:58:5b:64: 20:91:f9:8c:b3:4a:74:b2:ff:97:65:3f:c1:44:7a:b9:75:d1: 44:21:58:65:64:ce:54:e5:ae:1a:ba:93:49:d2:97:f6:a6:70: 11:6c:5e:bd:34:7d:9e:6e:43:6c:a5:da:5c:9f:49:60:3b:4c: 7c:45:00:e3:0b:6e:5b:ce:8a:e8:f8:fd:7d:c1:ff:f0:c2:bd: ca:18:d4:5b:64:02:6e:a9:a2:b0:57:d1:5f:b0:16:84:f6:80: 92:5a:ae:15:fe:d3:df:ae:fe:47:01:e4:8d:e5:2e:0b:7c:32: a7:ac:15:53:f5:9e:12:cb:a9:f0:9b:e6:cf:77:f7:4d:ba:97: af:96:e6:e8:87:52:08:de:bb:ce:ca:07:bb:fc:86:08:77:fc: 7c:3c:cc:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDGoTSzNsejKxOrzYVAIHljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYjk3NDA2MjQ0YjQxMDcyNjI2ODdkYjFiOTY0MmMzZDll OGY4NDMwHhcNMjYwOTIyMDEwMDQ4WhcNMjYwOTIzMDEwMDQ4WjAzMTEwLwYDVQQD EyhhZWU5NTJkOGVmZjVlZTE5ODU1OTJkYmJkZWYwMWUyZjI3NTU4YWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOlH4x7kPLuTP/SKNuH2t3Ixxjia SNlGzDh1WYoguhPTrdt7JqbYlCON0ZwTL9wMuF87JgCBGBoHs7HTo1oZEyt/itUi 8fTysW5UvMFqva8t9bFjPP3OK+fJXDt6ZBlC2lmwRmG700uruDn9OmAS5qAQ6Kl8 R2uVIZKWdxXppQ5wyPRiuhmcyTuCRnRzmzbVLzQAGc1XZ14EahpMiG9Sl8hrNwT5 GdcpDmopX3oxH5ghvQNzz6xYj+XyzLu/XY+iJb/m+KYInUiAVdgQej6pjrzLfT4E 6v8610HPdnyG8xlRh6UFXEionZDkcbcDHOT3C15Zv9ve0G0R9busPLOZLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7pUtjv9e4ZhVktu97wHi8nVYrYMB8GA1UdIwQY MBaAFEC5dAYkS0EHJiaH2xuWQsPZ6PhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTct YjE4ZDY3NTgzOTk0LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wYjMyMWUtNzRlYS00MGIzLTg4YTctYjE4ZDY3NTgzOTk0 LzEvUUxsMEJpUkxRUWNtSm9mYkc1WkN3OW5vLUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKOWnknR pj9/FAefL5zn5L03fXGCL0lN2e9+XDNzXrw6tYkB/N1bJcsA/ROa3kCE9hIcTS0/ XXdksnCs0aZomWl65w5EInjpJchKGKuriFOsMvPAHgEUJ46tCjISM0oXoQbN8iW4 8QMnWFtkIJH5jLNKdLL/l2U/wUR6uXXRRCFYZWTOVOWuGrqTSdKX9qZwEWxevTR9 nm5DbKXaXJ9JYDtMfEUA4wtuW86K6Pj9fcH/8MK9yhjUW2QCbqmisFfRX7AWhPaA klquFf7T367+RwHkjeUuC3wyp6wVU/WeEsup8Jvmz3f3TbqXr5bm6IdSCN67zsoH u/yGCHf8fDzM4g== -----END CERTIFICATE-----Generated at Tue Sep 22 06:52:58 2026 by rpki-client