$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: uiohSOEPnRQsBVjhoBA1Kl114D45wq9g093dP6ni3FI= Subject key identifier: 2D:94:3E:04:44:8F:FA:13:8F:1E:12:A6:27:7B:7C:45:9A:40:63:2C Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019DA378BCBDFB50D2A95C1BABC311ED712C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0F72 Signing time: Sun 19 Apr 2026 02:01:31 +0000 Manifest this update: Sun 19 Apr 2026 02:01:31 +0000 Manifest next update: Mon 20 Apr 2026 02:01:31 +0000 Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=) 2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=) 3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=) 4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: g3/Zl3zgD7yUHRND/08Pm0SL4RdavUaW9CFeeVYXRvk=) 6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=) 7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=) 8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=) 9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=) 10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=) 11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=) 12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:78:bc:bd:fb:50:d2:a9:5c:1b:ab:c3:11:ed:71:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Apr 19 02:01:31 2026 GMT Not After : Apr 20 02:01:31 2026 GMT Subject: CN=2d943e04448ffa138f1e12a6277b7c459a40632c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:94:69:54:a8:00:a1:9b:bf:10:f7:79:28:6b: d0:65:75:63:80:48:06:a0:5f:b2:a2:fa:50:9c:e8: fd:37:5b:ea:67:34:38:d2:60:e8:cf:44:ae:23:eb: ff:ac:59:1f:e8:99:d4:a0:95:9c:1a:27:66:be:34: da:2a:5a:03:b9:67:ee:0c:81:0b:41:88:47:db:3d: 03:5f:cb:e1:18:b6:c8:f8:7a:49:94:ec:f5:60:4c: 5b:2b:c7:5c:f9:19:41:84:d4:77:48:29:56:d5:d5: b5:bc:26:bb:a7:73:4c:29:70:33:b3:fb:d1:8b:31: df:c8:29:d6:58:1c:72:98:bf:3b:e5:0c:e5:d0:43: 06:59:ca:c4:62:91:18:5a:f4:92:df:92:32:2d:de: c0:bb:ca:34:2a:c1:31:f2:63:d5:b1:82:f2:cb:dd: 3e:5a:19:d6:0a:51:b3:12:e9:de:2d:20:93:ef:a8: 3b:ff:bf:e4:26:a7:f6:8d:01:95:5f:26:50:9d:6b: 88:4e:e8:24:ab:9a:99:2c:7a:67:28:12:35:7f:23: c1:fd:21:90:ff:b0:68:6c:cf:ed:45:7d:b0:ab:84: 56:7a:bd:ae:04:03:99:41:e2:fc:ae:4b:8b:13:6e: 0f:88:80:8b:67:29:16:15:8b:37:6a:0a:10:a0:cc: 7a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:94:3E:04:44:8F:FA:13:8F:1E:12:A6:27:7B:7C:45:9A:40:63:2C X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:62:2c:71:04:dd:81:56:a9:60:72:60:3b:2a:e0:23:52:a6: 5d:70:66:91:19:ac:14:4e:8b:6c:b8:70:e9:f9:48:00:8c:88: 5a:1a:9b:d7:cf:d9:85:e4:11:2e:53:1a:49:82:6a:00:d9:15: 25:1b:a0:14:cd:0f:34:99:2f:e8:bf:77:52:70:48:61:dd:9b: f5:a6:9c:06:e6:ea:61:42:22:51:d4:9e:fb:30:09:d4:22:2c: 0e:04:b8:6d:b3:cf:bb:49:1b:16:e5:43:58:1a:97:6e:27:33: da:4b:ab:32:e4:09:1b:8d:01:07:0d:71:01:3b:bf:5d:76:31: 7e:d1:9f:98:85:9a:a8:a6:eb:2e:eb:fa:80:7d:ef:7c:94:ae: 3b:48:94:9b:88:86:b1:ad:16:12:13:85:bd:16:57:40:64:4e: f1:b7:a9:6d:e3:f1:c7:d2:d6:3c:3a:29:b5:e4:60:aa:4d:5c: da:8e:f2:93:0b:f3:08:e1:83:a4:e0:f7:8d:8d:e4:22:9b:b3: 23:eb:20:2c:c0:72:02:17:35:ca:18:f0:f7:9c:c1:75:f8:e4: c6:1f:2c:5b:03:62:b6:c0:ca:f0:8c:77:38:10:f5:6d:63:4c: 9f:c0:ec:65:4f:e6:e3:89:79:9c:80:bb:2e:e9:36:42:9f:4a: 11:85:9a:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jeLy9+1DSqVwbq8MR7XEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwNDE5MDIwMTMxWhcNMjYwNDIwMDIwMTMxWjAzMTEwLwYDVQQD EygyZDk0M2UwNDQ0OGZmYTEzOGYxZTEyYTYyNzdiN2M0NTlhNDA2MzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pRpVKgAoZu/EPd5KGvQZXVjgEgG oF+yovpQnOj9N1vqZzQ40mDoz0SuI+v/rFkf6JnUoJWcGidmvjTaKloDuWfuDIEL QYhH2z0DX8vhGLbI+HpJlOz1YExbK8dc+RlBhNR3SClW1dW1vCa7p3NMKXAzs/vR izHfyCnWWBxymL875Qzl0EMGWcrEYpEYWvSS35IyLd7Au8o0KsEx8mPVsYLyy90+ WhnWClGzEuneLSCT76g7/7/kJqf2jQGVXyZQnWuITugkq5qZLHpnKBI1fyPB/SGQ /7BobM/tRX2wq4RWer2uBAOZQeL8rkuLE24PiICLZykWFYs3agoQoMx68QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2UPgREj/oTjx4Spid7fEWaQGMsMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWIscQTd gVapYHJgOyrgI1KmXXBmkRmsFE6LbLhw6flIAIyIWhqb18/ZheQRLlMaSYJqANkV JRugFM0PNJkv6L93UnBIYd2b9aacBubqYUIiUdSe+zAJ1CIsDgS4bbPPu0kbFuVD WBqXbicz2kurMuQJG40BBw1xATu/XXYxftGfmIWaqKbrLuv6gH3vfJSuO0iUm4iG sa0WEhOFvRZXQGRO8bepbePxx9LWPDopteRgqk1c2o7ykwvzCOGDpOD3jY3kIpuz I+sgLMByAhc1yhjw95zBdfjkxh8sWwNitsDK8Ix3OBD1bWNMn8DsZU/m44l5nIC7 Luk2Qp9KEYWadg== -----END CERTIFICATE-----Generated at Sun Apr 19 09:43:06 2026 by rpki-client