$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: gQl2/8khsBv1XcLz3+7OrWXszWX47tuoPAYAZoE9J9o= Subject key identifier: 97:B1:69:9C:5D:09:52:02:7E:4D:1B:7D:EB:87:25:CF:C3:A9:B3:E5 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019FA7BD1A68144B9C9C4479367859372EA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 0AD0 Signing time: Tue 28 Jul 2026 08:00:15 +0000 Manifest this update: Tue 28 Jul 2026 08:00:15 +0000 Manifest next update: Wed 29 Jul 2026 08:00:15 +0000 Files and hashes: 1: 0_vDnDRF9RJXjQRo2pH5Tit2G6k.roa (hash: IvBfnkpqBkHgNd2fPdtTwy3ZEe1XX9CROdeaKsRCiZg=) 2: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 3: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 4: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 5: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 6: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: VimtNOdnIMZiRbpDT+TKSL7+5xQ8bWJ5ZwNDUIxKEik=) 7: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 8: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 9: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 10: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 11: kveMMocsfLZh918Y0_FGgyBzNLM.roa (hash: vKnrq5ifdIB9dF0mtCayO5eOs+Yvg54hMTnFEcoDZaU=) 12: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 07:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:bd:1a:68:14:4b:9c:9c:44:79:36:78:59:37:2e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jul 28 08:00:15 2026 GMT Not After : Jul 29 08:00:15 2026 GMT Subject: CN=97b1699c5d0952027e4d1b7deb8725cfc3a9b3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ab:08:44:98:46:3e:1d:c6:e4:16:ea:80:32: 48:9a:00:95:f1:10:48:20:5c:02:d0:38:0e:15:53: 15:46:a6:8a:3b:92:15:23:b8:d6:d3:04:1c:88:03: d8:4e:3f:37:7e:f2:44:f7:84:6f:7e:62:02:3a:98: 3a:78:bf:df:98:e9:9c:c0:24:d2:da:49:0c:62:19: 49:ca:f7:e5:40:af:b5:cb:70:75:70:70:77:f5:5e: 9b:16:5b:24:72:14:a9:ce:26:51:e7:67:39:eb:fa: 41:9f:60:c4:a4:ac:4c:d7:98:77:4a:22:72:63:3d: 1a:14:cd:93:5c:5b:73:a0:99:f6:25:22:ee:06:9e: 2d:3b:b2:03:22:6c:93:af:44:91:77:f4:f6:53:ee: 8b:47:4c:d3:d3:72:d3:a2:57:77:2e:eb:dd:e9:60: 69:8c:48:ea:f8:41:6a:7f:2e:88:3b:73:3b:cc:78: a3:a4:5b:43:1a:4b:16:aa:2e:87:c0:ec:e7:6b:41: 88:11:33:1d:ae:c2:c1:a1:9b:1c:2f:cc:4a:a0:ca: 34:3a:bf:13:d6:fd:42:f5:5c:59:65:cc:84:43:ed: c6:f9:e6:4a:de:1e:69:1e:ec:87:43:9f:b9:a5:fb: c3:44:3c:a7:aa:64:d2:25:0e:af:d6:d0:a7:9d:1f: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B1:69:9C:5D:09:52:02:7E:4D:1B:7D:EB:87:25:CF:C3:A9:B3:E5 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a7:14:54:bb:16:23:d9:24:c3:17:75:10:ad:67:87:2e:f6: e2:aa:83:e9:9e:43:51:95:c1:99:5f:40:e1:46:42:66:7e:ed: 85:e4:21:c7:d3:74:46:ba:95:6c:07:a1:24:ed:27:9c:2e:92: 26:b2:f2:25:a0:a0:b3:74:34:92:db:74:e4:4a:3b:ff:4a:9f: 5c:c4:c4:b7:60:bf:0d:1f:34:6b:e1:1e:dc:4c:31:a3:f1:b5: 4c:0a:91:be:84:4a:7e:f4:8b:74:90:2d:ff:b4:fc:48:06:35: c9:16:0b:a3:98:32:47:cc:cc:0b:b6:71:b1:84:38:fc:10:cb: ef:d2:81:7c:e8:06:2f:5d:05:8d:24:56:1f:32:8c:20:4e:30: 87:d8:5d:7b:f0:47:44:51:ec:a7:94:0a:81:0c:1f:84:14:60: 07:fb:0b:dd:6c:b2:1d:ae:81:fa:44:5a:67:b0:d6:d2:d9:a9: 98:f7:b8:a4:2b:07:d0:e8:7d:0e:3e:75:c4:9a:1b:a9:c2:64: d4:e9:cc:ba:cf:9d:f6:00:59:0b:62:a9:9c:42:d6:b5:ad:b8: af:3f:e3:8f:80:2c:b1:22:72:63:17:24:8f:a1:4a:72:0e:6d: 11:c2:b7:39:a1:27:7f:2b:fd:5a:2d:f5:5b:ed:37:c4:e6:a9: eb:82:18:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+nvRpoFEucnER5NnhZNy6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwNzI4MDgwMDE1WhcNMjYwNzI5MDgwMDE1WjAzMTEwLwYDVQQD Eyg5N2IxNjk5YzVkMDk1MjAyN2U0ZDFiN2RlYjg3MjVjZmMzYTliM2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKsIRJhGPh3G5BbqgDJImgCV8RBI IFwC0DgOFVMVRqaKO5IVI7jW0wQciAPYTj83fvJE94RvfmICOpg6eL/fmOmcwCTS 2kkMYhlJyvflQK+1y3B1cHB39V6bFlskchSpziZR52c56/pBn2DEpKxM15h3SiJy Yz0aFM2TXFtzoJn2JSLuBp4tO7IDImyTr0SRd/T2U+6LR0zT03LTold3Luvd6WBp jEjq+EFqfy6IO3M7zHijpFtDGksWqi6HwOzna0GIETMdrsLBoZscL8xKoMo0Or8T 1v1C9VxZZcyEQ+3G+eZK3h5pHuyHQ5+5pfvDRDynqmTSJQ6v1tCnnR/HpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJexaZxdCVICfk0bfeuHJc/DqbPlMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKcUVLsW I9kkwxd1EK1nhy724qqD6Z5DUZXBmV9A4UZCZn7theQhx9N0RrqVbAehJO0nnC6S JrLyJaCgs3Q0ktt05Eo7/0qfXMTEt2C/DR80a+Ee3Ewxo/G1TAqRvoRKfvSLdJAt /7T8SAY1yRYLo5gyR8zMC7ZxsYQ4/BDL79KBfOgGL10FjSRWHzKMIE4wh9hde/BH RFHsp5QKgQwfhBRgB/sL3WyyHa6B+kRaZ7DW0tmpmPe4pCsH0Oh9Dj51xJobqcJk 1OnMus+d9gBZC2KpnELWta24rz/jj4AssSJyYxckj6FKcg5tEcK3OaEnfyv9Wi31 W+03xOap64IYZw== -----END CERTIFICATE-----Generated at Tue Jul 28 14:53:59 2026 by rpki-client