$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: dy9fczyRPuUEbnQOdKAJWDZ/ubl8wIsDKFl5YxEBhFc= Subject key identifier: CA:79:3E:AE:18:9A:88:E3:24:F0:8B:6B:C5:0E:94:B7:18:C7:8F:FC Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019CAA591507EEF9B17C0A7869DEC637AEDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0EF1 Signing time: Sun 01 Mar 2026 17:01:30 +0000 Manifest this update: Sun 01 Mar 2026 17:01:30 +0000 Manifest next update: Mon 02 Mar 2026 17:01:30 +0000 Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=) 2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=) 3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=) 4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: vETiLysWXRCtt5ugFfEnCqzfdw8iOaGq8eAhBVJpNv4=) 6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=) 7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=) 8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=) 9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=) 10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=) 11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=) 12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 17:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:59:15:07:ee:f9:b1:7c:0a:78:69:de:c6:37:ae:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Mar 1 17:01:30 2026 GMT Not After : Mar 2 17:01:30 2026 GMT Subject: CN=ca793eae189a88e324f08b6bc50e94b718c78ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:4c:eb:a3:d1:6b:39:b9:81:2e:11:d1:e8: 1e:fb:2c:ce:78:74:84:a3:c5:58:4c:02:df:5b:fc: 5c:23:e1:cf:1e:15:30:9d:bc:7e:35:aa:e6:d0:19: ae:61:29:5c:c8:c4:c8:68:c5:d8:fb:ee:5c:11:97: 3d:72:f6:49:74:c8:d1:2b:76:db:ac:2b:20:5d:75: d8:94:fe:49:c0:2d:8f:c2:bb:39:25:9e:85:aa:2f: bd:79:f5:84:31:f4:1f:53:cd:e9:94:10:a2:07:63: 7c:98:f3:4e:82:32:0c:90:3f:b4:18:a7:d5:1b:7b: 23:78:c2:fc:b6:7e:88:96:11:69:47:26:6c:1b:54: 5d:29:8f:a3:c7:18:44:39:94:cd:df:4a:0e:95:93: 6a:01:80:bd:f8:49:fd:d2:91:ec:74:34:25:68:20: fc:b9:ab:e4:10:21:4f:ac:30:32:54:3d:2a:2e:50: bf:e8:57:49:20:1c:77:54:bf:a6:90:7c:81:09:be: 23:d5:e9:8b:a4:cd:b5:27:b0:10:e3:06:9e:fe:3a: 09:62:dd:7e:5b:80:dc:a7:04:47:f4:3d:e0:32:22: 6a:ed:5b:be:ab:1c:44:96:f3:db:9d:2e:98:c6:65: 32:90:48:24:1b:5e:1a:57:d3:64:b9:45:f1:69:4b: bd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:79:3E:AE:18:9A:88:E3:24:F0:8B:6B:C5:0E:94:B7:18:C7:8F:FC X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:0c:7c:67:bd:c8:be:04:40:54:1c:d4:5e:95:c2:35:a2:7a: 9b:44:47:bc:7f:0f:9a:02:47:bd:27:a1:cf:54:2e:27:19:f6: 5b:20:c6:6b:cb:40:5f:cb:00:5e:3d:96:9d:bc:c7:51:91:c6: 4a:76:66:56:38:c1:bf:76:80:48:10:3d:44:38:8b:45:7d:37: f6:47:ab:2c:35:54:20:05:3c:94:7a:f5:0f:75:fb:a1:d2:f8: 89:cb:90:72:b4:e8:9b:7e:17:74:ee:7a:2e:be:15:4c:2c:79: 40:96:77:05:c5:4a:67:c6:cd:dc:29:f1:b4:ec:b0:59:16:33: b7:94:4b:85:8e:26:c2:6a:1b:d4:99:a8:28:9d:c2:4e:f7:de: 34:e9:68:7c:01:b9:f9:dc:ae:e2:32:c4:60:27:8f:2c:37:32: 72:ea:fc:ee:71:90:ef:62:d4:0c:d4:03:7c:c2:0a:6c:13:c7: 28:9a:b2:75:67:0d:d7:c0:58:fa:73:13:80:c4:7e:95:90:8d: b8:42:91:90:12:3a:f3:fc:f9:75:fb:95:73:de:8c:41:54:a6: e0:b9:6c:4a:c8:91:16:e8:40:55:77:b6:88:a3:4f:e2:9c:72: cb:8b:18:0d:98:6e:7a:d5:30:e5:2a:e9:08:16:e4:ec:16:cd: 81:22:5d:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqWRUH7vmxfAp4ad7GN67aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwMzAxMTcwMTMwWhcNMjYwMzAyMTcwMTMwWjAzMTEwLwYDVQQD EyhjYTc5M2VhZTE4OWE4OGUzMjRmMDhiNmJjNTBlOTRiNzE4Yzc4ZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMxM66PRazm5gS4R0ege+yzOeHSE o8VYTALfW/xcI+HPHhUwnbx+Narm0BmuYSlcyMTIaMXY++5cEZc9cvZJdMjRK3bb rCsgXXXYlP5JwC2Pwrs5JZ6Fqi+9efWEMfQfU83plBCiB2N8mPNOgjIMkD+0GKfV G3sjeML8tn6IlhFpRyZsG1RdKY+jxxhEOZTN30oOlZNqAYC9+En90pHsdDQlaCD8 uavkECFPrDAyVD0qLlC/6FdJIBx3VL+mkHyBCb4j1emLpM21J7AQ4wae/joJYt1+ W4DcpwRH9D3gMiJq7Vu+qxxElvPbnS6YxmUykEgkG14aV9NkuUXxaUu96wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMp5Pq4YmojjJPCLa8UOlLcYx4/8MB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAx8Z73I vgRAVBzUXpXCNaJ6m0RHvH8PmgJHvSehz1QuJxn2WyDGa8tAX8sAXj2WnbzHUZHG SnZmVjjBv3aASBA9RDiLRX039kerLDVUIAU8lHr1D3X7odL4icuQcrTom34XdO56 Lr4VTCx5QJZ3BcVKZ8bN3CnxtOywWRYzt5RLhY4mwmob1JmoKJ3CTvfeNOlofAG5 +dyu4jLEYCePLDcycur87nGQ72LUDNQDfMIKbBPHKJqydWcN18BY+nMTgMR+lZCN uEKRkBI68/z5dfuVc96MQVSm4LlsSsiRFuhAVXe2iKNP4pxyy4sYDZhuetUw5Srp CBbk7BbNgSJdUg== -----END CERTIFICATE-----Generated at Mon Mar 2 03:28:38 2026 by rpki-client