$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft File: QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft (raw, json) Hash identifier: Zbd3tnKG14Lk0wCNA+qMxwIT/rwMgUkwiO4CHcdXEuo= Subject key identifier: 69:8A:B4:94:FF:0E:72:86:4B:D1:3D:ED:52:B1:DF:AF:A3:0B:CB:BE Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01 Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601 Certificate serial: 01A0BF33069AE704E38130EDB0669B58A1EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft Manifest number: 0136 Signing time: Sun 20 Sep 2026 14:23:07 +0000 Manifest this update: Sun 20 Sep 2026 14:23:07 +0000 Manifest next update: Mon 21 Sep 2026 14:23:07 +0000 Files and hashes: 1: 4EEj2r6-0zg77-9LmRLFaGfhLMY.roa (hash: 5E2E41KFCJgyXV96c5tUCWpJksDB+SLI1u4sOWUbURU=) 2: 4auopH8HYhskCZ6Wma5Rxt0YU-c.roa (hash: PJOlExW0qpZ4oBm20Y7+5eFA9pSEzceKHwaf65CO2fk=) 3: 6dRsLJ5J69_rsQXIRHXOC2z_5dE.roa (hash: 0D/9pUz1X/JKKYGr6Ne59g8RhrUlGqsuwmmjDLCy+xw=) 4: 6vCqSCljarDUm6oxxIQ3pb1kZFw.roa (hash: FMFFPXye46qkgvJliwSmSLxawUDf9GZDVDx3/Z/BmJg=) 5: 9yQGkkXLY2SjMk3ofHN9n9AOjAw.roa (hash: 6v5FooBFPlNcj3CIoSY6V5TUldi3HdcfQsKbbuK5ckw=) 6: Ae9NgFUrZ24-MFo9mbb0PNVhf0o.roa (hash: nzXxYj43d9I7O16caiUA6up/fb49HJG+wWUtle/NK7s=) 7: C8GLItBTc7LeEh4YEv8MJPqqn-A.roa (hash: l23szhZCC7lohODost6cu88YHLhEqP3V82zlkvFSQlM=) 8: PJ_jioxmLxcDnha-FB_7Vus0t90.roa (hash: usfBZ7XbPR3qgBCcWBidJH7g+h7DoTle8N8w4lI8oi8=) 9: PVCcQmI2SgCfbrBKYY0xG8ceVoM.roa (hash: pkuMcdQl6fAIHotWZ6+CDU0TIlFjqMVbIxB1y/FPDPk=) 10: PimXOa23JEXWIAp_qIZHDoaVePw.roa (hash: SmAfl/7LGpnryLs06E4qciizdQdOw5QFfSrY4VJRxWo=) 11: QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl (hash: 6PdvU6VB0YXQCl46TkLk0EkrGhYCP7k0tj42U1yIpcY=) 12: TsvYXD64dnH0sE6kMCm6u7cclx8.roa (hash: k/aKyVRivoatxUr6MSWr9sKRY6Rc9FVbIl/mMzO6j58=) 13: ZI1C6kpl1fygAOupoQLDpI2qIHk.roa (hash: 2rDkKTdgpnSAscOgBKZLbFYT0EC5MtpFd3ePaAsy4fA=) 14: hLjzhC6zlW-8JNijhQDWdHUx0bs.roa (hash: 2UJC5xVp6d8lEhQO2ClkfoFryaKXGhRJ5WI4vM07GO8=) 15: kcePCKzvaynPMcOcncgWdRTciAw.roa (hash: VoyMtWcSClIGZJ+3GqazzBfLJsmwXioFS3B12uTWD1k=) 16: mXzkFe9bauTYIaTDwOKdOJ0yfAU.roa (hash: l98XRtS1wgtlcBD6oEDM0WuwXV7XXU7PGiNFDVtdljc=) 17: pjUS_mOdAQkT8Mwp33PthGs91rk.roa (hash: 6c7v04wHaxp7RBDGOaNgM78OexORbvTnr1auoKcKJB8=) 18: rf6iE9bL_Jc3yUEk2yU5-ovRnRw.roa (hash: 91pPyyuYw+iWn/WwlKICOrKpos1He+0f6hjKAqBSgW8=) 19: sCEAxknZqHojuPgI-hamnESni0Q.roa (hash: +6bM4LTd2rktWJg2HPrxf5zyLZEKCJSlzH9OXq9Pipc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:33:06:9a:e7:04:e3:81:30:ed:b0:66:9b:58:a1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42239fb9af128428f84fed9f358686717ed97601 Validity Not Before: Sep 20 14:23:07 2026 GMT Not After : Sep 21 14:23:07 2026 GMT Subject: CN=698ab494ff0e72864bd13ded52b1dfafa30bcbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:00:ad:b7:e0:61:16:22:51:1d:c7:d4:7a:bb: 91:5d:91:cd:c2:f5:4e:09:16:e3:08:cb:d8:6e:91: 59:9d:87:9a:fd:98:93:f1:1d:c5:05:5e:40:97:0a: ab:bc:96:0d:16:78:e8:f2:1a:4c:62:51:80:45:2f: 82:d0:a7:47:af:89:32:f3:8f:4a:12:04:28:d4:33: 3c:de:a7:62:f8:88:99:2e:fa:8f:9c:3f:4f:6f:08: 3e:8e:45:a8:0a:a1:e0:0d:15:d1:6a:6a:87:2b:99: 99:c2:85:22:23:e0:aa:c3:d6:20:a8:f2:8e:74:98: 80:9c:b4:17:1e:73:87:cf:bf:85:6a:81:60:94:5a: 0f:4a:26:f4:8a:a8:fc:86:73:4f:a2:98:20:f4:91: 0f:aa:f9:af:15:3f:18:37:67:08:5e:9f:f5:46:c0: 94:8e:c7:a2:f9:3d:0f:96:ce:fb:d9:b8:51:82:dd: 7d:68:64:ac:6f:6d:43:7d:59:a6:8b:1a:0b:74:d8: ea:d9:be:d6:05:81:d0:2f:4e:b6:83:5a:6b:c6:ba: 81:6f:56:38:9e:86:b2:aa:c8:ea:a3:15:72:30:cf: 81:70:8d:66:e7:fc:f6:0f:90:4b:df:ba:59:c7:9b: 2d:aa:8e:09:9f:3a:60:59:aa:d3:33:69:1c:a8:3f: 6c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8A:B4:94:FF:0E:72:86:4B:D1:3D:ED:52:B1:DF:AF:A3:0B:CB:BE X509v3 Authority Key Identifier: keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d2:f5:48:51:d1:28:3a:6d:29:89:53:58:4a:cd:5c:db:a7: d9:95:7b:c3:67:86:89:f3:39:7a:ed:cf:77:87:73:1a:de:dd: 4c:14:65:92:9c:8f:70:72:62:eb:c0:bf:b1:66:c1:27:ae:fd: 93:e3:4a:97:e6:b2:2c:6a:74:7c:06:9f:7f:48:4c:1f:8b:c6: 0b:f7:f8:f5:a9:f1:6a:6d:57:35:b0:4f:7d:a8:86:8d:be:d9: 08:fc:ec:21:c2:5a:44:e5:6f:98:90:b4:6e:94:12:60:32:00: 97:a8:d5:35:34:25:31:92:b7:c5:aa:6f:b5:d3:52:17:c6:c5: 16:d9:e6:3a:c5:d8:28:b4:b1:3d:e7:26:2f:f9:d5:9e:98:e4: 6d:98:a5:dd:63:bb:55:35:0b:66:4b:97:f9:26:8d:d7:dd:67: 0a:2f:c5:0d:95:12:94:f8:9c:ac:0b:94:ab:a5:f2:bf:0d:81: 0b:af:ac:d3:26:b0:52:d3:ff:5c:ed:de:48:c0:7f:bf:4d:9b: 15:dd:6b:1d:91:5a:cc:e6:ad:1d:92:f9:f8:4e:a2:63:6d:2a: 96:1d:39:d5:4e:2a:85:77:c4:89:fe:06:9b:36:a0:b9:0c:bd: ad:d9:f2:e4:e3:41:70:2c:58:21:28:79:8c:1d:2b:c9:ff:01: fb:e5:04:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/Mwaa5wTjgTDtsGabWKHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk OTc2MDEwHhcNMjYwOTIwMTQyMzA3WhcNMjYwOTIxMTQyMzA3WjAzMTEwLwYDVQQD Eyg2OThhYjQ5NGZmMGU3Mjg2NGJkMTNkZWQ1MmIxZGZhZmEzMGJjYmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QCtt+BhFiJRHcfUeruRXZHNwvVO CRbjCMvYbpFZnYea/ZiT8R3FBV5AlwqrvJYNFnjo8hpMYlGARS+C0KdHr4ky849K EgQo1DM83qdi+IiZLvqPnD9Pbwg+jkWoCqHgDRXRamqHK5mZwoUiI+Cqw9YgqPKO dJiAnLQXHnOHz7+FaoFglFoPSib0iqj8hnNPopgg9JEPqvmvFT8YN2cIXp/1RsCU jsei+T0Pls772bhRgt19aGSsb21DfVmmixoLdNjq2b7WBYHQL062g1prxrqBb1Y4 noayqsjqoxVyMM+BcI1m5/z2D5BL37pZx5stqo4JnzpgWarTM2kcqD9s/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmKtJT/DnKGS9E97VKx36+jC8u+MB8GA1UdIwQY MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt YmM1NDAzYWMyYTk1LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1 LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNL1SFHR KDptKYlTWErNXNun2ZV7w2eGifM5eu3Pd4dzGt7dTBRlkpyPcHJi68C/sWbBJ679 k+NKl+ayLGp0fAaff0hMH4vGC/f49anxam1XNbBPfaiGjb7ZCPzsIcJaROVvmJC0 bpQSYDIAl6jVNTQlMZK3xapvtdNSF8bFFtnmOsXYKLSxPecmL/nVnpjkbZil3WO7 VTULZkuX+SaN191nCi/FDZUSlPicrAuUq6Xyvw2BC6+s0yawUtP/XO3eSMB/v02b Fd1rHZFazOatHZL5+E6iY20qlh051U4qhXfEif4GmzaguQy9rdny5ONBcCxYISh5 jB0ryf8B++UEuw== -----END CERTIFICATE-----Generated at Sun Sep 20 21:30:55 2026 by rpki-client