$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft File: QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json) Hash identifier: QK6iRWAN68Mw7UsB8gFCizFde/dJoeXwH1eZ28lbMHo= Subject key identifier: 92:06:69:FC:76:49:00:41:02:A7:53:E9:DF:4F:CE:B3:F7:98:F2:D4 Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019D98BE0F5BD82B4087BFAE95A3094C37F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft Manifest number: 18DB Signing time: Fri 17 Apr 2026 00:01:25 +0000 Manifest this update: Fri 17 Apr 2026 00:01:25 +0000 Manifest next update: Sat 18 Apr 2026 00:01:25 +0000 Files and hashes: 1: 1-fuWQ0J7N3Mc1-LpV47OkEYJ6Pg.roa (hash: d64kZTOMQS3ywmOiCwM9goS+Zs55OgLIp48OWiE2tqI=) 2: 3qCviuOG-ueF_1VEjm9A7m4dsIk.roa (hash: sAL6XW3hWoRAGWp0+zVbTSYYIBh9Tr5DdziSNbosFMc=) 3: 4iREikE0FlzD4Lki3jJx6aaj7Ek.roa (hash: R85Lc2X5cjTiidE1qCVwRr469wMVOizgeXCdlpP24Do=) 4: 7F404ndf6WlAawVxH8uEqbUfNqg.roa (hash: 0vRuwJ86hGL2rgS3c27BsrNGgAqpwI3nuvZOYvEC2o8=) 5: 891fnCNTe0IKQYnO-ZqvxNgk-7k.roa (hash: VPRQl1y1jooeZjbup+JMP7DkoiYT1QAj+vISvPCzQ5U=) 6: Amhr13WKOrupDvbNhR-H8uA8vnQ.roa (hash: DunPwzqrWTpngKU5F7a27cbOD9P4pJ+IEPvx/MUiLIg=) 7: CRbc03vb_t7S-8OrjziURXlLPLs.roa (hash: AwT4/FD/dxBwMmMETo+hpYLUml8m4wGXejb2vnR3jvE=) 8: DmNgBVzwALAZpD0xt4gW0SabWP4.roa (hash: +HcyssYq+nPIZImlmBkQlaLU/HQWdmQa3/3LFcnfluc=) 9: Dq47WCi1_R3R9nKkOKnsCn37r54.roa (hash: 5JD7iNqs4qn/sy+bgp/hKnEbHR2EBc8c01xHZGOpYMA=) 10: EiEKEI95auMCB7NfQVwo9byU814.roa (hash: qJa+m44cB1n22XnwN3TBLrmdvt3RH9NDFwUuAESZSTE=) 11: JKDe6ScGUf5knBKSEZ3INxcpX_k.roa (hash: cP1FQRZP0bYy6TqBtYSmhv38p8stWSoSv7D1CesDGKo=) 12: N-ugS43QXCOLtMQg4hBDzZHSfs4.roa (hash: H5adi4ikfxvo36OYV+mOyefgvVd4tLYXrjrnT87kOLI=) 13: O3ilaHX6VJtoUZBeu1-BglPYb-I.roa (hash: PoRHXYKRSqCrsj4FltoRS6V1gs+nJ0Qsq87ffUhtPkI=) 14: PAfqhrbdkl_yRiUylPK1xIqq4lg.roa (hash: MoYNDn1wuFUbbeUFbkvj5yCW8TfAg9g5sltO0zCqY1Y=) 15: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: bCfPqA3vNoUD483Ag68TwmkT4rU4RqHX0Tnp09qqnhU=) 16: U7Tc0OMn99OVh4UaH8Gir63iiJs.roa (hash: VeiRvPbD+gYEQvLB86zuV+IwSFIqcHPYDQqYvNeKjps=) 17: Vr8UKQBR2K4aBwszRxtTMGpM3RU.roa (hash: pBwjHOXlk8Xh2v3/m1xk7uIqqtM9MysBJJTXP9nTkqk=) 18: aw7187ZOI0MpqazuRWsrcYgwwpQ.roa (hash: NIDCNaG3ouNUdnwxeJaCcGty477WEOLvnr2djhhc/90=) 19: bek0EGCQei4vOYeo1cw3OqhyNWo.roa (hash: m6rdcoyVs1N3a8H7buHnpBQjMeyGoW4VObVUZcGs+7M=) 20: cWtnPd8ZvgFa7GRaqMfs10BE4qc.roa (hash: jN/lGIzUOKHwZH6DyNIy+6o9b1TpGieuOJIXydb73lg=) 21: c_XVhcUysLwXAHApwazs-UkQkmQ.roa (hash: yDd1bLRr1tOEIQ6ft+0WAm2AEOFTsdq7bRYUYaVYKNA=) 22: hkSLq2UREFy1118xumuIZnvQ67Y.roa (hash: SOh35WJM4tvkJo/U2D6+8WiI7UsWl69I9bV1omMOiek=) 23: kqgMt21-DFLMw82FOeig-EaUgf0.roa (hash: IMAdg24Zv5aLWg8Ll0N/xPxQR4lu+BjbaXj/E4I85pM=) 24: n3D-Zk4G38G2tBgyUy3hXStCuWg.roa (hash: xWuIVNN480cZZue76BwJppWLzoJjQqcpD9fuq0+OWZ0=) 25: q1B4D6fhb1hsDMHl4DgqMg1LBS0.roa (hash: QyvrcsEDHcRC23C4LJneKzaSVc+UGnP9rW3V3L3o3QM=) 26: qtg18Q1n5Jfx1gK-KfQtl08To-k.roa (hash: oG53ITscWjNRdxBTzyirX6KiMhTU+HEToywwA4a+H6Q=) 27: rPUe_mYrLSmTmFv2LQZ8OTHJG9k.roa (hash: 5iRsBFsd3e5QtYFbDWJgyq4JRArcPXehU90Piw8H6Eo=) 28: sJ1sC2Tf4OlwBqYXFNFoZRduFG8.roa (hash: Lhps7HR/EcrDbFr4rG5Dh/G7U6wPLWZb+NnuBmiPIWs=) 29: sJZVmKX-G_XNNEcca8MTXPH-dbc.roa (hash: DQKLyMn35LbEuueIciMk2w6CESjK2ZNYZ5n5ZL//wOw=) 30: tWMyn7tpor7zLv8S77uSSoVBOzY.roa (hash: 9VLMYOGfLfqrY2pS0fnmG2KOSYmzAO47mTzvU9rKrJk=) 31: vgFc0Uh_MgrlizJZvhlwuychk-E.roa (hash: GdhoQmVw/bO3KTSgyH6uYKhysKhPclMR0dWBbW/oMfg=) 32: yfk1E30luISg0XzXUtlJ2MNM9eM.roa (hash: WxN+8AXOM93AE57ePd+WfH578Dm9CftwqJPfTKxDhLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:98:be:0f:5b:d8:2b:40:87:bf:ae:95:a3:09:4c:37:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Apr 17 00:01:25 2026 GMT Not After : Apr 18 00:01:25 2026 GMT Subject: CN=920669fc7649004102a753e9df4fceb3f798f2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:3d:27:f0:82:fc:7a:da:fb:55:87:39:10: e7:01:92:f4:6c:c3:d1:77:d6:83:bd:6c:b0:d9:60: 7b:19:f1:44:1e:39:ce:af:a9:4f:b2:b8:bd:85:23: a6:ab:9f:36:72:b9:ee:69:06:36:08:93:18:35:6b: 72:88:be:d7:54:95:cb:6a:83:73:d9:b1:78:b8:fa: d1:f3:91:29:60:be:da:96:fe:8f:a8:1c:5d:77:69: 7b:f1:51:e0:f7:62:8b:fa:96:21:25:b6:6d:ab:04: d8:bf:2f:59:e6:ae:76:69:a6:97:65:91:36:22:1b: 0c:0e:b8:76:e0:32:44:f1:02:1a:c2:ea:9d:8c:06: f9:41:c4:6c:55:ac:af:ac:8e:b1:c8:38:28:72:19: 7c:d0:f4:e8:dc:6d:98:b5:22:45:4e:7c:aa:c8:87: 43:da:df:8a:de:e5:a6:9f:20:f6:4d:ff:09:c4:c0: fb:e7:8b:d3:92:4f:3d:3a:99:3e:20:31:59:5d:4d: ed:5f:cf:77:ae:48:78:4c:14:35:91:45:fa:bd:a2: 43:03:4c:10:5c:53:f4:97:5a:72:3e:4f:08:b8:c3: 21:ce:28:cb:00:69:b5:7a:80:a9:05:1f:0d:65:5c: 26:a2:cd:13:09:a7:08:e8:a8:d8:d2:5a:83:10:2b: c9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:06:69:FC:76:49:00:41:02:A7:53:E9:DF:4F:CE:B3:F7:98:F2:D4 X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:d4:f0:59:e9:70:de:ee:2a:a2:63:f9:51:f0:17:1c:7f:d3: bf:57:3c:35:ec:fd:04:fb:ae:96:70:1a:7f:fb:28:b1:a6:e2: 95:ef:50:2c:74:9a:49:f9:13:f8:e9:51:1c:f5:3d:28:8c:f1: 68:5d:5e:8f:95:15:44:63:4d:63:20:83:f7:3b:87:35:9a:fb: 1d:13:08:a7:65:19:be:85:dd:e4:50:16:e8:32:1c:e4:14:5b: 2c:a2:b2:4e:50:89:69:15:b5:5f:a1:23:99:4f:9f:d6:37:64: 41:02:e6:25:cc:83:e6:2d:32:a0:8f:fe:0b:5c:d5:d4:c4:e5: 12:5a:67:cb:15:2a:d7:dd:e3:99:e5:02:e9:ac:d7:c5:3a:19: 12:03:07:24:c5:df:f2:50:ee:40:07:95:40:21:5f:53:25:68: fa:85:9f:b4:21:b3:f5:75:e2:85:b9:66:5f:66:7d:16:71:fd: 6a:f7:0e:eb:87:51:fd:97:39:5e:0c:69:fe:c8:91:6e:0f:bf: 88:5a:53:51:7b:59:1b:aa:85:04:a7:d4:20:e5:ba:23:81:f9: e2:08:33:c9:b0:59:e9:d7:43:1a:fe:86:f9:36:ff:8e:91:31: 9e:54:8c:9a:5a:c0:76:7e:27:d6:43:b6:93:16:60:53:1c:de: c9:f5:bb:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2Yvg9b2CtAh7+ulaMJTDf1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwNDE3MDAwMTI1WhcNMjYwNDE4MDAwMTI1WjAzMTEwLwYDVQQD Eyg5MjA2NjlmYzc2NDkwMDQxMDJhNzUzZTlkZjRmY2ViM2Y3OThmMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIk9J/CC/Hra+1WHORDnAZL0bMPR d9aDvWyw2WB7GfFEHjnOr6lPsri9hSOmq582crnuaQY2CJMYNWtyiL7XVJXLaoNz 2bF4uPrR85EpYL7alv6PqBxdd2l78VHg92KL+pYhJbZtqwTYvy9Z5q52aaaXZZE2 IhsMDrh24DJE8QIawuqdjAb5QcRsVayvrI6xyDgochl80PTo3G2YtSJFTnyqyIdD 2t+K3uWmnyD2Tf8JxMD754vTkk89Opk+IDFZXU3tX893rkh4TBQ1kUX6vaJDA0wQ XFP0l1pyPk8IuMMhzijLAGm1eoCpBR8NZVwmos0TCacI6KjY0lqDECvJ7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIGafx2SQBBAqdT6d9PzrP3mPLUMB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9TwWelw 3u4qomP5UfAXHH/Tv1c8Nez9BPuulnAaf/sosabile9QLHSaSfkT+OlRHPU9KIzx aF1ej5UVRGNNYyCD9zuHNZr7HRMIp2UZvoXd5FAW6DIc5BRbLKKyTlCJaRW1X6Ej mU+f1jdkQQLmJcyD5i0yoI/+C1zV1MTlElpnyxUq193jmeUC6azXxToZEgMHJMXf 8lDuQAeVQCFfUyVo+oWftCGz9XXihblmX2Z9FnH9avcO64dR/Zc5Xgxp/siRbg+/ iFpTUXtZG6qFBKfUIOW6I4H54ggzybBZ6ddDGv6G+Tb/jpExnlSMmlrAdn4n1kO2 kxZgUxzeyfW7Og== -----END CERTIFICATE-----Generated at Fri Apr 17 10:33:33 2026 by rpki-client