$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: l/8dM/Z/gbhoWgySL8UOEjk6wM3+EuX0vQClcmjp6SE= Subject key identifier: 83:A1:EE:9F:98:7D:27:5A:F3:30:C5:7F:13:F9:BE:93:C8:4B:53:DA Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 01A0C10CFCCFB42E5438BEF4DC264C2403B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 110F Signing time: Sun 20 Sep 2026 23:00:48 +0000 Manifest this update: Sun 20 Sep 2026 23:00:48 +0000 Manifest next update: Mon 21 Sep 2026 23:00:48 +0000 Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=) 2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=) 3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=) 4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: WYzwmJpL4sMuGe9NemHCNY6eiZFX+LGctQqNiX9usZ0=) 6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=) 7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=) 8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=) 9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=) 10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=) 11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=) 12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c1:0c:fc:cf:b4:2e:54:38:be:f4:dc:26:4c:24:03:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Sep 20 23:00:48 2026 GMT Not After : Sep 21 23:00:48 2026 GMT Subject: CN=83a1ee9f987d275af330c57f13f9be93c84b53da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:37:47:8c:85:68:0d:f5:9f:40:3a:0d:98: 5d:b0:3d:4f:e4:f1:a1:30:29:55:c6:b5:49:02:b5: 7f:27:a7:2b:7b:24:6f:db:1b:33:a9:0a:ca:c6:b9: 84:1f:9a:76:8f:9e:dc:6e:55:57:59:0e:31:00:70: 73:e5:6e:b7:af:ce:8b:54:51:f0:c5:c6:65:41:09: e5:40:9a:dc:5e:77:25:07:1b:1e:d0:a7:d4:9f:08: 49:24:f7:00:c3:75:64:36:9e:96:3f:06:a9:1b:38: 03:10:97:39:1c:3e:bc:16:8d:be:2f:0f:fd:c2:75: 6e:29:ce:a8:83:de:e6:63:aa:04:01:36:83:c4:14: 35:c5:6b:bb:12:09:87:64:64:06:27:2f:4f:7a:a9: fd:2a:d7:a9:bf:fb:3f:b5:c7:49:3d:06:9f:5f:95: a4:8b:e8:a7:94:6a:98:52:2f:8a:96:be:2c:84:11: fc:a4:67:e1:21:3f:84:c2:87:72:38:e0:3c:54:ee: ad:05:e6:79:53:c5:4b:a4:5c:05:33:44:c0:35:a0: 49:3f:e2:f0:8d:7b:85:35:24:79:72:42:80:56:02: dc:41:2a:15:71:d4:73:c7:c9:22:7b:f1:e2:a3:5c: 80:e7:74:79:f6:f5:e2:06:9d:44:fa:ff:f1:a4:f3: 72:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A1:EE:9F:98:7D:27:5A:F3:30:C5:7F:13:F9:BE:93:C8:4B:53:DA X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:40:b4:0d:59:db:85:70:ab:f6:da:2e:3a:fb:e7:90:a7:05: c9:78:26:0a:e2:47:ce:57:13:ef:be:3e:58:aa:da:19:0c:67: 27:f2:a3:c7:83:e3:03:20:71:51:8c:b2:f4:4b:94:6a:fe:45: 99:fd:f1:84:82:ba:7a:f7:f8:8f:ca:75:5e:42:da:fb:c7:bd: b8:15:65:4a:d6:a3:e4:1c:b6:11:98:31:17:c7:1b:16:e4:d9: a5:04:28:32:96:24:a5:58:31:4f:dc:41:3c:8e:34:fb:68:f5: 6a:3f:c5:97:72:99:47:9d:23:8d:c6:25:78:20:bb:d6:cc:8f: fd:3e:84:50:e0:6c:f2:f5:c5:38:63:0a:8d:1d:2a:a1:ab:70: c2:e2:16:b2:bd:41:81:7d:36:6a:70:4e:15:01:4d:cf:15:62: fb:a2:91:50:e4:b5:36:49:a1:5b:51:61:f3:42:76:75:7e:9f: f3:2a:03:0a:4c:7d:d4:86:47:e4:84:47:9e:97:76:c3:23:f3: a3:e1:d4:fa:7b:65:08:9f:22:20:48:b5:af:00:5e:ab:e2:2f: 00:9c:e9:ea:74:fb:7f:d7:f6:12:71:b0:73:53:c1:d1:0a:d4: 2f:73:1b:81:c1:9c:6e:96:8b:99:fc:8b:98:ab:72:48:5f:26: 8f:6e:2f:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDBDPzPtC5UOL703CZMJAOyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwOTIwMjMwMDQ4WhcNMjYwOTIxMjMwMDQ4WjAzMTEwLwYDVQQD Eyg4M2ExZWU5Zjk4N2QyNzVhZjMzMGM1N2YxM2Y5YmU5M2M4NGI1M2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8s3R4yFaA31n0A6DZhdsD1P5PGh MClVxrVJArV/J6creyRv2xszqQrKxrmEH5p2j57cblVXWQ4xAHBz5W63r86LVFHw xcZlQQnlQJrcXnclBxse0KfUnwhJJPcAw3VkNp6WPwapGzgDEJc5HD68Fo2+Lw/9 wnVuKc6og97mY6oEATaDxBQ1xWu7EgmHZGQGJy9Peqn9Ktepv/s/tcdJPQafX5Wk i+inlGqYUi+Klr4shBH8pGfhIT+EwodyOOA8VO6tBeZ5U8VLpFwFM0TANaBJP+Lw jXuFNSR5ckKAVgLcQSoVcdRzx8kie/Hio1yA53R59vXiBp1E+v/xpPNyxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOh7p+YfSda8zDFfxP5vpPIS1PaMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEC0DVnb hXCr9touOvvnkKcFyXgmCuJHzlcT774+WKraGQxnJ/Kjx4PjAyBxUYyy9EuUav5F mf3xhIK6evf4j8p1XkLa+8e9uBVlStaj5By2EZgxF8cbFuTZpQQoMpYkpVgxT9xB PI40+2j1aj/Fl3KZR50jjcYleCC71syP/T6EUOBs8vXFOGMKjR0qoatwwuIWsr1B gX02anBOFQFNzxVi+6KRUOS1NkmhW1Fh80J2dX6f8yoDCkx91IZH5IRHnpd2wyPz o+HU+ntlCJ8iIEi1rwBeq+IvAJzp6nT7f9f2EnGwc1PB0QrUL3MbgcGcbpaLmfyL mKtySF8mj24vGw== -----END CERTIFICATE-----Generated at Mon Sep 21 04:52:26 2026 by rpki-client