$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: H0H6XTyILsQ6w3GdBKDzyCD71DtKKj2itemMhhAfnD0= Subject key identifier: 34:27:E2:83:31:86:09:23:93:BE:0F:C1:FE:CB:54:77:C3:81:75:3D Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019D9B879C9FDC30A126DEA319A33C6D2022 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 09C0 Signing time: Fri 17 Apr 2026 13:00:48 +0000 Manifest this update: Fri 17 Apr 2026 13:00:48 +0000 Manifest next update: Sat 18 Apr 2026 13:00:48 +0000 Files and hashes: 1: 0_vDnDRF9RJXjQRo2pH5Tit2G6k.roa (hash: IvBfnkpqBkHgNd2fPdtTwy3ZEe1XX9CROdeaKsRCiZg=) 2: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 3: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 4: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 5: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 6: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: 7LzNjSnLPmmL+f6TCYjdsyz2WHOvJpJduVpykarVcQ0=) 7: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 8: YRLmUoiyriHbBZz8cKLyi9qEJ78.roa (hash: 2dbD8JRE13NWzX1L2KBuix9ycJyQxpH9mx7PA8Rx7lQ=) 9: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 10: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 11: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 12: kveMMocsfLZh918Y0_FGgyBzNLM.roa (hash: vKnrq5ifdIB9dF0mtCayO5eOs+Yvg54hMTnFEcoDZaU=) 13: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:9b:87:9c:9f:dc:30:a1:26:de:a3:19:a3:3c:6d:20:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Apr 17 13:00:48 2026 GMT Not After : Apr 18 13:00:48 2026 GMT Subject: CN=3427e2833186092393be0fc1fecb5477c381753d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:0e:37:b7:66:6a:8a:97:b6:c0:ac:c1:8d: bb:65:7d:ad:41:52:76:bb:37:39:60:1a:69:5b:a6: b8:32:6e:53:09:f3:81:5c:c4:02:cc:e1:42:03:70: 24:cf:ec:59:0c:d7:c4:7d:d4:6b:1e:52:b1:f1:b6: f4:05:10:fb:fb:96:9b:3c:df:10:68:e3:c8:43:b7: b0:7b:e9:06:69:77:7e:eb:4a:33:7c:82:25:34:a5: a8:52:dd:c2:de:08:0c:b7:cd:bb:4c:c4:46:d7:b2: 02:28:3e:dd:99:e6:7d:e7:35:bd:23:1f:76:91:a7: 30:df:d8:1c:cd:e5:d1:54:e7:92:1a:dd:03:da:17: 36:d0:6b:a9:02:99:b1:4a:ef:81:dc:89:37:ce:62: f7:2d:83:fb:e8:2f:ee:33:43:b6:52:a0:4f:85:eb: 31:8b:27:b9:3b:76:9e:fc:08:6e:eb:f1:bf:56:61: 70:9c:78:69:a4:03:36:bd:1e:f3:0f:77:33:b2:14: d9:16:cd:ab:41:00:70:47:03:57:0e:5c:1a:c1:32: 80:76:8e:70:4e:2a:ac:a1:20:97:6a:1e:49:14:cc: c1:a2:e8:c0:5f:72:7c:56:09:ab:50:a4:35:b0:01: 86:28:52:57:ff:dc:40:d7:02:17:40:61:4d:ea:83: 94:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:27:E2:83:31:86:09:23:93:BE:0F:C1:FE:CB:54:77:C3:81:75:3D X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:06:9f:1b:b8:82:9a:3e:1b:2c:39:69:7d:d0:f4:b9:41:e6: 63:f0:dc:7e:16:1f:33:3c:df:1e:a6:4e:cf:1e:c3:af:e8:88: c0:93:4a:31:43:2a:cf:0b:e5:6c:31:94:6e:6b:16:b5:04:e5: 9e:f6:0b:99:90:f3:f9:64:86:6e:66:27:a2:d8:0d:6b:3d:55: 2a:e9:9c:15:a5:e3:87:94:f4:80:68:ca:e8:b1:b4:ae:b0:7e: 5e:ee:75:30:32:a0:f5:6b:75:74:ae:47:c9:55:06:3a:5f:c1: 29:43:22:76:15:4b:da:75:c9:c0:75:27:31:ad:fe:bc:88:80: 78:d7:d5:48:30:64:24:d1:b5:a2:33:dc:1b:d1:4c:e1:24:14: 4f:d9:d4:71:b7:35:67:c5:dd:11:6c:bb:44:0d:c9:bc:cb:05: 31:cf:ae:ac:fc:6e:fe:9f:4e:0b:2d:cb:8a:91:c6:07:bd:d1: 1f:86:e9:e0:ac:ac:4d:7a:e7:d0:fa:56:b2:50:c6:90:a4:06: 5d:96:4d:9d:93:5a:7a:ba:68:e5:8c:98:12:03:39:47:2c:d4: 01:af:59:20:e3:1a:18:0b:fc:f2:32:5f:ef:a1:fe:7b:26:ef: d7:11:b5:98:61:8e:2b:56:a4:50:c9:75:9f:0f:d9:e8:b7:eb: 1b:db:5b:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2bh5yf3DChJt6jGaM8bSAiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwNDE3MTMwMDQ4WhcNMjYwNDE4MTMwMDQ4WjAzMTEwLwYDVQQD EygzNDI3ZTI4MzMxODYwOTIzOTNiZTBmYzFmZWNiNTQ3N2MzODE3NTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucAON7dmaoqXtsCswY27ZX2tQVJ2 uzc5YBppW6a4Mm5TCfOBXMQCzOFCA3Akz+xZDNfEfdRrHlKx8bb0BRD7+5abPN8Q aOPIQ7ewe+kGaXd+60ozfIIlNKWoUt3C3ggMt827TMRG17ICKD7dmeZ95zW9Ix92 kacw39gczeXRVOeSGt0D2hc20GupApmxSu+B3Ik3zmL3LYP76C/uM0O2UqBPhesx iye5O3ae/Ahu6/G/VmFwnHhppAM2vR7zD3czshTZFs2rQQBwRwNXDlwawTKAdo5w TiqsoSCXah5JFMzBoujAX3J8VgmrUKQ1sAGGKFJX/9xA1wIXQGFN6oOUmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQn4oMxhgkjk74Pwf7LVHfDgXU9MB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQafG7iC mj4bLDlpfdD0uUHmY/DcfhYfMzzfHqZOzx7Dr+iIwJNKMUMqzwvlbDGUbmsWtQTl nvYLmZDz+WSGbmYnotgNaz1VKumcFaXjh5T0gGjK6LG0rrB+Xu51MDKg9Wt1dK5H yVUGOl/BKUMidhVL2nXJwHUnMa3+vIiAeNfVSDBkJNG1ojPcG9FM4SQUT9nUcbc1 Z8XdEWy7RA3JvMsFMc+urPxu/p9OCy3LipHGB73RH4bp4KysTXrn0PpWslDGkKQG XZZNnZNaerpo5YyYEgM5RyzUAa9ZIOMaGAv88jJf76H+eybv1xG1mGGOK1akUMl1 nw/Z6LfrG9tbVQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:42:05 2026 by rpki-client